
$ rpki-client -vvf rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/323430313a666363303a3a2f33322d3332203d3e203535363939.roa
File: 323430313a666363303a3a2f33322d3332203d3e203535363939.roa (raw, json)
Hash identifier: T5iXYEZsEylyp3JdGzhmtU2Kjr1HhNQabu6sAc+svIA=
Subject key identifier: 8C:12:89:42:5E:E4:A5:5D:9D:0A:40:9F:7F:E9:21:82:F6:87:14:EC
Certificate issuer: /CN=C8D24ADF5C7432E5E3C1D5988774107A717F827B
Certificate serial: 6DE13A4AB76481F0FC32DF935BFC86B3CEB6F982
Authority key identifier: C8:D2:4A:DF:5C:74:32:E5:E3:C1:D5:98:87:74:10:7A:71:7F:82:7B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/323430313a666363303a3a2f33322d3332203d3e203535363939.roa
Signing time: Sun 03 May 2026 02:40:04 +0000
ROA not before: Sun 03 May 2026 02:35:04 +0000
ROA not after: Sun 02 May 2027 02:40:04 +0000
asID: 55699
IP address blocks: 2401:fcc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.crl
rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:e1:3a:4a:b7:64:81:f0:fc:32:df:93:5b:fc:86:b3:ce:b6:f9:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8D24ADF5C7432E5E3C1D5988774107A717F827B
Validity
Not Before: May 3 02:35:04 2026 GMT
Not After : May 2 02:40:04 2027 GMT
Subject: CN=8C1289425EE4A55D9D0A409F7FE92182F68714EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e5:e9:e0:d0:60:a3:26:19:7b:62:fe:56:5b:
ea:a8:c7:1e:f7:01:4e:81:62:9c:6c:e7:f0:df:2f:
48:1b:a3:0e:0e:01:a2:75:23:06:1b:7c:17:8b:32:
b3:e0:23:b3:e7:ea:9a:60:61:49:fa:fe:01:6c:52:
1b:b6:bb:51:55:6b:f8:33:a6:a8:fc:74:31:a5:40:
1e:2a:cd:21:06:4e:ed:00:94:4c:e8:48:73:20:b5:
44:68:30:58:3e:ec:56:51:54:e1:18:6a:0a:6c:62:
0e:82:f9:0a:1a:63:76:bb:93:f2:74:2a:12:a2:29:
2c:9f:4d:2b:91:2d:4b:86:e5:cb:d4:58:fc:24:d2:
9a:e4:0c:25:61:22:52:2c:0b:e7:8f:0e:70:16:7a:
18:70:a3:7e:b9:8f:3c:ca:53:6c:e5:fb:40:84:a7:
d3:0a:75:83:8c:29:1f:cf:1d:40:9e:77:13:3e:bf:
df:11:a2:73:a9:c5:1a:bb:3a:3f:67:89:a2:dd:b9:
fe:f4:a2:44:b3:2a:41:d4:37:9e:63:63:ce:48:f1:
d8:dd:ae:ed:b0:bc:15:dc:db:37:fc:97:71:7c:54:
8a:ee:fa:20:ff:bd:4e:b9:05:ff:8e:e3:f1:fc:d2:
f8:5d:4d:fc:d4:dd:da:cc:1c:81:ba:ec:5f:01:cc:
5b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:12:89:42:5E:E4:A5:5D:9D:0A:40:9F:7F:E9:21:82:F6:87:14:EC
X509v3 Authority Key Identifier:
keyid:C8:D2:4A:DF:5C:74:32:E5:E3:C1:D5:98:87:74:10:7A:71:7F:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/323430313a666363303a3a2f33322d3332203d3e203535363939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:fcc0::/32
Signature Algorithm: sha256WithRSAEncryption
8a:cc:3a:28:b5:36:72:a4:fe:f5:83:03:e5:19:39:76:fc:53:
7d:b7:56:ac:01:b4:c7:83:b5:e8:86:3f:73:9e:ac:a5:fb:58:
13:59:0a:a8:49:35:cf:84:50:63:94:95:21:d1:36:d8:a2:fe:
db:37:60:fc:fa:09:70:d2:86:d2:a6:03:1b:ab:c8:ce:a8:22:
39:f6:5f:12:04:58:b2:e1:a4:36:92:8f:3e:26:cd:95:90:42:
06:e3:26:84:0e:bf:56:b0:6d:9e:cc:ad:13:f6:2e:06:35:8d:
81:6e:da:53:29:dd:8c:14:ba:bf:f4:23:88:5f:13:4d:87:99:
d0:5e:92:f7:fe:30:12:d1:17:ca:e3:ae:fc:e3:8f:b4:b8:61:
33:54:68:bd:0c:77:00:60:10:c6:13:fb:3c:45:11:9d:14:b8:
2f:09:aa:d0:78:4f:3c:93:79:74:a2:f1:71:ff:c9:68:ac:f6:
6e:62:f9:d9:3a:a5:5a:dd:ee:3d:e4:5d:15:36:50:fe:02:be:
d6:16:9a:de:75:d6:70:4b:cc:ea:91:c6:8b:1b:d6:d9:0a:49:
c9:1c:a3:0b:c0:97:1a:cb:5d:44:da:e2:66:bc:a3:df:db:dd:
fc:e1:bf:b5:6c:77:fb:7d:6d:ac:86:56:dd:91:d7:08:17:61:
35:5e:7e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:27:00 2026 by rpki-client