
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a353431343a3a2f34382d3438203d3e203338353135.roa
File: 323430323a3630303a353431343a3a2f34382d3438203d3e203338353135.roa (raw, json)
Hash identifier: pbLRqvIGcFyn/7m6CqlnX9OGnnf//u2PTw4LD4ws3V0=
Subject key identifier: 24:18:BA:7E:06:C4:BA:04:3F:39:64:AD:E5:B1:87:8F:6D:EB:64:CC
Certificate issuer: /CN=67869B177D646DD081563D36E6E9775C31473EE2
Certificate serial: 1FABCB0EBB1D205D69C523CA37CF308C7EB7063F
Authority key identifier: 67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a353431343a3a2f34382d3438203d3e203338353135.roa
Signing time: Sun 03 May 2026 02:41:04 +0000
ROA not before: Sun 03 May 2026 02:36:04 +0000
ROA not after: Sun 02 May 2027 02:41:04 +0000
asID: 38515
IP address blocks: 2402:600:5414::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl
rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:ab:cb:0e:bb:1d:20:5d:69:c5:23:ca:37:cf:30:8c:7e:b7:06:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67869B177D646DD081563D36E6E9775C31473EE2
Validity
Not Before: May 3 02:36:04 2026 GMT
Not After : May 2 02:41:04 2027 GMT
Subject: CN=2418BA7E06C4BA043F3964ADE5B1878F6DEB64CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:ba:78:c1:4f:f3:83:47:ee:b1:1d:58:2d:
fa:65:17:ae:61:a8:15:8d:ca:94:5b:b5:36:33:6c:
c1:d6:78:ff:3e:98:38:07:98:4c:18:25:62:92:b5:
92:3c:08:07:4f:6c:b9:20:32:0f:53:f2:0b:3f:93:
d2:6c:dd:fe:22:3d:19:59:89:4c:ea:9e:71:7c:9f:
1e:3f:38:38:98:8d:2d:f0:d2:7c:41:6d:58:f0:c3:
38:64:b6:ba:03:a1:cf:5e:74:31:d5:5b:d8:fb:a7:
5e:aa:f0:92:f0:d2:c5:14:78:bd:a9:1a:eb:af:36:
44:7a:db:bb:c3:8a:4e:89:68:04:84:31:08:2c:35:
ec:4b:2e:d1:2c:89:c8:44:7f:b5:1f:85:63:37:e5:
3d:94:b5:27:68:35:a5:b0:c7:91:25:04:f8:5f:d4:
0e:ea:df:fc:3f:a2:e5:be:f3:21:12:c2:37:3b:99:
6b:ab:0c:64:dc:46:9c:ca:70:0a:48:ea:f9:39:0f:
f6:6f:4c:76:8e:68:13:4f:94:8e:e1:9a:3d:18:4a:
77:75:1b:3d:c2:da:df:30:6d:7d:c3:70:c7:91:46:
9e:c9:f5:b7:73:c9:c1:b2:bb:b4:3e:be:49:f1:ab:
50:eb:f1:3b:1d:92:d0:d8:e7:89:b3:cd:a1:d5:a8:
1a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:18:BA:7E:06:C4:BA:04:3F:39:64:AD:E5:B1:87:8F:6D:EB:64:CC
X509v3 Authority Key Identifier:
keyid:67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a353431343a3a2f34382d3438203d3e203338353135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:600:5414::/48
Signature Algorithm: sha256WithRSAEncryption
19:7d:f2:b2:6d:43:d2:bc:a2:3a:91:60:52:eb:7f:e6:69:e3:
26:88:02:b8:f2:c8:7c:58:22:30:69:c2:6f:bd:ea:9f:32:62:
14:85:bf:f5:36:a7:4a:d5:cb:7d:e2:d1:93:a6:8e:3f:b6:23:
97:22:44:a7:54:fb:c0:49:f7:09:82:02:46:70:f0:ec:8a:0b:
2c:c8:90:b0:ca:d3:ab:a2:1c:21:f1:68:9b:7f:78:3c:45:18:
9c:aa:9d:62:47:b7:df:5d:fa:dc:11:f5:91:1a:cb:11:68:18:
7c:d0:31:56:24:a4:97:de:f5:17:46:73:5e:84:6c:f6:76:45:
93:0e:9f:62:07:2c:f0:bf:32:98:4d:b5:93:1c:30:b6:4c:d1:
f9:26:eb:3a:4c:3d:5b:75:93:ac:05:3f:39:00:1c:a4:58:60:
27:07:30:87:10:d5:a8:6f:6d:59:9d:72:0a:0a:29:02:42:7c:
ad:27:e8:7b:8c:f2:21:71:bb:14:5a:7e:2a:3b:8e:3a:ca:7d:
80:68:19:eb:70:09:a4:72:66:91:e2:b2:65:f2:39:37:15:5c:
78:b4:c8:44:07:5e:4a:bc:f1:1c:7b:71:52:37:23:fa:e1:fb:
62:64:43:a6:e2:38:23:59:df:b4:88:2c:76:bd:f2:de:63:92:
9b:c1:ae:72
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUH6vLDrsdIF1pxSPKN88wjH63Bj8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc4NjlCMTc3RDY0NkREMDgxNTYzRDM2RTZFOTc3NUMz
MTQ3M0VFMjAeFw0yNjA1MDMwMjM2MDRaFw0yNzA1MDIwMjQxMDRaMDMxMTAvBgNV
BAMTKDI0MThCQTdFMDZDNEJBMDQzRjM5NjRBREU1QjE4NzhGNkRFQjY0Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC04rp4wU/zg0fusR1YLfplF65h
qBWNypRbtTYzbMHWeP8+mDgHmEwYJWKStZI8CAdPbLkgMg9T8gs/k9Js3f4iPRlZ
iUzqnnF8nx4/ODiYjS3w0nxBbVjwwzhktroDoc9edDHVW9j7p16q8JLw0sUUeL2p
GuuvNkR627vDik6JaASEMQgsNexLLtEsichEf7UfhWM35T2UtSdoNaWwx5ElBPhf
1A7q3/w/ouW+8yESwjc7mWurDGTcRpzKcApI6vk5D/ZvTHaOaBNPlI7hmj0YSnd1
Gz3C2t8wbX3DcMeRRp7J9bdzycGyu7Q+vknxq1Dr8TsdktDY54mzzaHVqBqDAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUJBi6fgbEugQ/OWSt5bGHj23rZMwwHwYDVR0j
BBgwFoAUZ4abF31kbdCBVj025ul3XDFHPuIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmM0YzY0YTktMzUzNy00YmM3LTg2MTMtOGU5ODE2MjllNGNhLzAvNjc4NjlCMTc3
RDY0NkREMDgxNTYzRDM2RTZFOTc3NUMzMTQ3M0VFMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82Nzg2OUIxNzdENjQ2REQwODE1NjNEMzZFNkU5Nzc1QzMxNDcz
RUUyLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZjNGM2NGE5LTM1MzctNGJjNy04
NjEzLThlOTgxNjI5ZTRjYS8wLzMyMzQzMDMyM2EzNjMwMzAzYTM1MzQzMTM0M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzMzODM1MzEzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQCBgBU
FDANBgkqhkiG9w0BAQsFAAOCAQEAGX3ysm1D0ryiOpFgUut/5mnjJogCuPLIfFgi
MGnCb73qnzJiFIW/9TanStXLfeLRk6aOP7YjlyJEp1T7wEn3CYICRnDw7IoLLMiQ
sMrTq6IcIfFom394PEUYnKqdYke331363BH1kRrLEWgYfNAxViSkl971F0ZzXoRs
9nZFkw6fYgcs8L8ymE21kxwwtkzR+SbrOkw9W3WTrAU/OQAcpFhgJwcwhxDVqG9t
WZ1yCgopAkJ8rSfoe4zyIXG7FFp+KjuOOsp9gGgZ63AJpHJmkeKyZfI5NxVceLTI
RAdeSrzxHHtxUjcj+uH7YmRDpuI4I1nftIgsdr3y3mOSm8Gucg==
-----END CERTIFICATE-----
Generated at Wed May 13 11:59:27 2026 by rpki-client