
$ rpki-client -vvf rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/323430323a383263303a3a2f33322d3438203d3e203138303536.roa
File: 323430323a383263303a3a2f33322d3438203d3e203138303536.roa (raw, json)
Hash identifier: slMWOkKg1OA+OP/zcUxoXUDIah1vgvG+HFFav6ni4c4=
Subject key identifier: A4:FD:4B:98:60:FD:E8:4B:EC:C3:B9:65:10:CB:A8:63:8C:29:1D:11
Certificate issuer: /CN=7CA7C7E603DBE14E06E948C748A38543F5F5E726
Certificate serial: 53952A40F1B40C0CDF1C79850969984FD060EFC8
Authority key identifier: 7C:A7:C7:E6:03:DB:E1:4E:06:E9:48:C7:48:A3:85:43:F5:F5:E7:26
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA7C7E603DBE14E06E948C748A38543F5F5E726.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/323430323a383263303a3a2f33322d3438203d3e203138303536.roa
Signing time: Sun 03 May 2026 02:39:24 +0000
ROA not before: Sun 03 May 2026 02:34:24 +0000
ROA not after: Sun 02 May 2027 02:39:24 +0000
asID: 18056
IP address blocks: 2402:82c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.crl
rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA7C7E603DBE14E06E948C748A38543F5F5E726.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:54:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:95:2a:40:f1:b4:0c:0c:df:1c:79:85:09:69:98:4f:d0:60:ef:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CA7C7E603DBE14E06E948C748A38543F5F5E726
Validity
Not Before: May 3 02:34:24 2026 GMT
Not After : May 2 02:39:24 2027 GMT
Subject: CN=A4FD4B9860FDE84BECC3B96510CBA8638C291D11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:60:40:73:10:19:d6:aa:7c:03:ca:9a:aa:95:
e7:2a:dc:75:59:e8:5e:3e:69:48:ff:54:61:21:77:
09:5e:e0:27:1a:1c:9b:0a:ec:98:a1:c9:6b:91:8b:
d3:ae:29:b2:cb:ef:83:dd:6b:0a:f8:19:b2:0e:aa:
9e:0f:3a:30:fd:05:1e:a6:fb:ef:3c:a8:0c:7d:8e:
83:ea:a1:86:78:c0:ee:13:84:98:1b:f2:0f:11:ef:
72:89:3d:f5:56:b3:07:cb:bb:8c:f1:39:b1:fc:71:
c0:59:70:90:db:40:90:02:1a:c8:f3:85:7c:68:4d:
f4:eb:4a:ac:95:82:e1:96:b9:83:ef:9e:43:0f:74:
f0:e4:b7:61:48:77:70:c5:61:08:b9:41:fa:cd:4d:
d9:43:c3:e9:87:de:b0:60:fa:77:28:c4:12:03:06:
be:e9:ba:bd:43:66:44:c7:15:74:1d:dd:a5:69:87:
25:a8:ab:f9:cc:ed:bb:50:9d:fb:b0:1f:93:c9:3f:
1e:56:22:d8:84:5a:e8:bb:8b:cc:05:89:cd:7c:c2:
b5:04:72:c3:c6:9b:e8:bb:b8:61:51:6f:50:8b:88:
aa:b5:48:49:3f:bb:2a:1c:22:fc:e4:6a:4f:e3:74:
32:00:99:7c:c3:b8:81:f1:68:23:2c:e2:88:02:0e:
07:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FD:4B:98:60:FD:E8:4B:EC:C3:B9:65:10:CB:A8:63:8C:29:1D:11
X509v3 Authority Key Identifier:
keyid:7C:A7:C7:E6:03:DB:E1:4E:06:E9:48:C7:48:A3:85:43:F5:F5:E7:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/7CA7C7E603DBE14E06E948C748A38543F5F5E726.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CA7C7E603DBE14E06E948C748A38543F5F5E726.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/323430323a383263303a3a2f33322d3438203d3e203138303536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:82c0::/32
Signature Algorithm: sha256WithRSAEncryption
28:83:37:49:f0:a7:e3:2a:98:2b:7b:3e:e4:32:cf:f0:ec:12:
5c:e0:be:e6:fa:00:71:68:22:f2:98:ff:ff:42:29:2c:b3:ab:
c6:9b:38:d9:5b:15:49:50:e2:75:fb:39:5f:c0:45:35:25:48:
80:7c:e4:df:ba:f1:08:76:ff:88:55:32:b1:b3:41:e1:1b:5a:
b8:a2:db:2f:70:90:27:4e:09:60:a4:c6:83:44:f6:f5:5e:37:
7f:88:b2:ec:19:d6:20:0b:c8:4e:20:14:ce:03:e3:a6:d5:94:
22:a4:f6:82:5b:2a:50:d8:cf:48:fd:91:40:95:66:40:2f:07:
c7:6f:78:bd:5a:ab:b0:dd:e3:5f:38:93:da:47:82:29:dc:e2:
f3:ab:7e:b0:ec:e3:29:99:ce:cd:6c:82:2b:28:05:32:ea:54:
b6:0e:16:54:c6:08:07:e2:ff:4f:64:14:79:72:68:d6:41:58:
20:9a:71:37:d2:5f:b3:f2:f9:d4:3e:1b:69:15:7c:65:a0:59:
60:59:a5:28:58:62:58:fb:40:1a:19:c5:75:cd:d7:a9:7a:23:
c0:c0:ee:ed:b6:50:a3:66:96:a1:bf:d8:ba:2e:8b:31:5e:7d:
5f:21:10:5c:41:1a:be:e5:55:f8:ad:ba:ba:00:b6:70:bb:ae:
3a:33:f5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:27:44 2026 by rpki-client