
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/323030313a6466303a376334303a3a2f34382d3438203d3e20313437313534.roa
File: 323030313a6466303a376334303a3a2f34382d3438203d3e20313437313534.roa (raw, json)
Hash identifier: DUNSj4kP6eOZRckNiWJJBeXQEQuZewuUxpFimv6tinc=
Subject key identifier: 5A:AD:78:0E:73:25:18:E6:D3:A0:B2:DB:E0:7F:6A:22:7B:8A:04:10
Certificate issuer: /CN=F440C463790421765C0B198FBF82B80F70529E23
Certificate serial: 374DE66621F8443B7FC98A8B5DB6F2AB575FE536
Authority key identifier: F4:40:C4:63:79:04:21:76:5C:0B:19:8F:BF:82:B8:0F:70:52:9E:23
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F440C463790421765C0B198FBF82B80F70529E23.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/323030313a6466303a376334303a3a2f34382d3438203d3e20313437313534.roa
Signing time: Sun 03 May 2026 02:40:49 +0000
ROA not before: Sun 03 May 2026 02:35:49 +0000
ROA not after: Sun 02 May 2027 02:40:49 +0000
asID: 147154
IP address blocks: 2001:df0:7c40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.crl
rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F440C463790421765C0B198FBF82B80F70529E23.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:16:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:4d:e6:66:21:f8:44:3b:7f:c9:8a:8b:5d:b6:f2:ab:57:5f:e5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F440C463790421765C0B198FBF82B80F70529E23
Validity
Not Before: May 3 02:35:49 2026 GMT
Not After : May 2 02:40:49 2027 GMT
Subject: CN=5AAD780E732518E6D3A0B2DBE07F6A227B8A0410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0a:2b:e2:d1:d4:f0:b7:cf:2e:e9:59:a3:79:
44:39:c2:41:e3:af:4f:67:26:f1:50:19:01:80:8a:
72:59:e5:2b:83:49:78:93:ea:1d:98:37:eb:13:d2:
85:5b:dd:76:c7:51:e2:85:0b:a0:4d:c3:f5:df:fb:
9d:23:97:4e:5c:55:27:03:c1:84:32:d4:80:f5:cc:
39:4e:32:e9:37:e2:ba:a4:c8:19:e9:c8:f4:b4:0d:
38:cc:9a:83:2c:d3:63:93:3b:6f:43:89:19:28:65:
d2:c4:e3:93:5b:d4:d3:2a:5e:61:f5:5e:4f:ed:65:
74:1f:84:49:2e:87:4f:71:6b:fa:03:c1:6f:b3:f1:
8f:2f:04:f8:c6:c4:85:10:cf:ab:22:b6:b5:e4:f3:
3f:7b:17:8b:78:62:ce:7e:7a:f2:ac:5a:11:57:e1:
86:aa:af:64:37:6b:6d:f4:d0:ab:14:11:fb:b8:df:
ac:06:3f:fc:63:8e:5f:06:3f:c2:56:72:63:92:c4:
9f:04:f7:35:48:e3:a0:a3:09:92:1f:fe:6b:e0:98:
02:bb:53:88:42:6a:3a:0b:ab:5b:78:62:8d:39:26:
a0:2d:65:bb:c3:51:4f:c3:19:66:80:1d:51:57:94:
ad:67:aa:07:26:6a:14:f4:30:15:82:fb:97:fa:28:
0c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AD:78:0E:73:25:18:E6:D3:A0:B2:DB:E0:7F:6A:22:7B:8A:04:10
X509v3 Authority Key Identifier:
keyid:F4:40:C4:63:79:04:21:76:5C:0B:19:8F:BF:82:B8:0F:70:52:9E:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F440C463790421765C0B198FBF82B80F70529E23.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/323030313a6466303a376334303a3a2f34382d3438203d3e20313437313534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:7c40::/48
Signature Algorithm: sha256WithRSAEncryption
56:56:0e:6e:6d:8e:63:1e:36:2b:f4:d2:1f:13:ad:6f:9a:f6:
eb:d8:e6:39:8a:e9:c1:66:cb:08:d9:8a:6d:2e:30:10:53:ac:
47:a5:b7:67:d2:93:d2:5c:28:6f:87:46:bd:dd:7a:93:a3:31:
9b:f3:32:68:03:a4:71:ab:b4:79:53:12:04:b6:b7:57:54:14:
8d:79:da:fd:69:ef:39:75:63:f9:db:f8:b4:d5:d7:9e:99:b7:
2b:ab:c6:5e:82:bb:c8:18:d7:10:be:78:ed:55:9e:d7:9f:f6:
86:2c:63:3d:9f:06:d5:a7:09:df:50:34:60:af:e3:76:39:80:
f9:ce:e1:83:4d:75:58:00:42:2d:e8:7b:98:c5:79:7d:e9:f8:
10:06:0a:3b:05:f1:3d:b7:02:dc:50:d1:77:07:a9:8e:2c:96:
45:7d:87:c8:89:bd:40:e1:cb:5c:c9:b7:41:24:bc:ff:e1:d8:
68:e7:8f:21:19:25:f0:56:93:dd:1a:a1:10:68:b6:54:ac:65:
45:63:2f:d2:8c:5e:74:37:5a:44:02:27:bc:fd:19:cd:74:3d:
35:f9:17:f3:e3:ac:e2:9c:cc:0e:94:9a:0f:2e:a9:f9:94:63:
87:e5:fa:47:47:6b:b9:1f:39:3b:8f:9f:fe:cf:51:29:92:64:
24:14:69:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:45:34 2026 by rpki-client