
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a633162313a3a2f34382d3438203d3e203338353135.roa
File: 323430323a3630303a633162313a3a2f34382d3438203d3e203338353135.roa (raw, json)
Hash identifier: 5J1J4PqLlG84JUqFzehXqUJSzaizav7T3dZxgUAafu4=
Subject key identifier: 0F:B3:B2:01:1C:86:53:14:42:00:B6:12:CC:6F:97:8D:35:D9:60:D7
Certificate issuer: /CN=67869B177D646DD081563D36E6E9775C31473EE2
Certificate serial: 0C71F006603727064D1AACF94B0CBC11A89D37B4
Authority key identifier: 67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a633162313a3a2f34382d3438203d3e203338353135.roa
Signing time: Sun 03 May 2026 02:41:09 +0000
ROA not before: Sun 03 May 2026 02:36:09 +0000
ROA not after: Sun 02 May 2027 02:41:09 +0000
asID: 38515
IP address blocks: 2402:600:c1b1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl
rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:71:f0:06:60:37:27:06:4d:1a:ac:f9:4b:0c:bc:11:a8:9d:37:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67869B177D646DD081563D36E6E9775C31473EE2
Validity
Not Before: May 3 02:36:09 2026 GMT
Not After : May 2 02:41:09 2027 GMT
Subject: CN=0FB3B2011C8653144200B612CC6F978D35D960D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:89:70:2c:80:10:6f:aa:10:20:97:6a:fd:cc:
76:51:c1:fd:1f:eb:cb:79:32:9a:09:5b:01:cd:74:
e3:af:71:5a:89:24:ac:3d:ba:61:2f:4e:87:99:a3:
cd:f0:ff:f6:e8:b4:22:cd:22:ca:b6:0c:ef:b0:0c:
60:31:64:b7:48:e9:8c:a9:f2:cf:34:54:c1:16:fc:
b3:b7:ff:fe:97:90:02:75:ab:a4:cb:4b:46:83:92:
02:b0:e9:fd:45:d7:79:51:6c:e9:45:cd:21:5d:50:
fe:d4:36:bc:2e:06:5b:23:84:84:9c:85:3a:d7:2e:
1b:ea:26:62:30:8c:77:0f:9b:a9:b7:4c:d0:ac:ac:
49:e3:e8:a2:08:21:3c:fa:b2:7f:61:9e:43:30:3d:
01:91:c4:73:8a:c7:fe:98:2b:67:c3:22:5b:9e:11:
a7:62:d0:f2:db:84:e9:d9:d6:8e:83:84:81:57:4e:
e2:0b:57:4b:7a:d3:59:bc:24:72:72:78:66:96:ac:
cb:dd:ae:21:7d:f1:99:3d:0a:7c:70:74:54:a2:f1:
3b:75:d7:2c:47:cf:4c:b8:37:6d:ee:ff:81:da:13:
d5:8d:fd:2e:57:a9:cf:35:02:3c:63:14:7b:3c:a7:
e5:b8:91:c0:08:3d:8f:2f:ea:4e:b3:07:a9:39:16:
80:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B3:B2:01:1C:86:53:14:42:00:B6:12:CC:6F:97:8D:35:D9:60:D7
X509v3 Authority Key Identifier:
keyid:67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a633162313a3a2f34382d3438203d3e203338353135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:600:c1b1::/48
Signature Algorithm: sha256WithRSAEncryption
07:d8:48:66:ca:6c:13:95:4d:01:b4:fc:af:bb:a0:2d:43:e8:
14:11:76:9b:cc:49:cc:ab:01:87:d6:94:8e:77:a0:89:d2:d1:
07:0d:80:58:76:e0:95:51:e5:4e:08:e0:64:a7:97:11:46:a5:
d9:0a:d1:84:23:de:8a:6b:bf:de:a6:18:9e:78:38:f0:68:2a:
e2:7b:5f:64:fe:d3:4a:8f:87:dd:79:f4:70:0a:a0:8b:5b:a1:
bb:0d:52:a3:53:a7:86:58:ad:1d:b8:3b:cd:87:46:82:d0:80:
1c:84:b8:22:95:29:c6:88:57:42:2c:4f:55:d5:c0:5d:51:2a:
cf:b8:b8:96:29:15:53:c6:cf:d1:ab:f6:34:65:76:d7:3e:9a:
d8:af:ec:da:01:30:dc:5a:06:95:8c:1d:f9:09:1c:91:4c:ed:
98:d0:0a:b1:e3:9f:c2:a2:59:1b:3e:a7:eb:f1:10:c4:84:12:
69:04:30:d4:e4:fb:a7:e0:7d:1a:e8:22:92:fb:81:b0:09:33:
19:70:43:31:e1:8c:a5:ce:e8:3d:ba:32:d0:07:5f:67:d7:16:
ea:07:d8:f8:81:43:f0:b0:61:c3:ae:3c:7b:fb:dc:ec:4c:6a:
bd:d3:b8:a1:43:30:88:00:63:ec:f8:52:3d:9b:27:5c:70:38:
1c:fa:f9:56
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUDHHwBmA3JwZNGqz5Swy8EaidN7QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc4NjlCMTc3RDY0NkREMDgxNTYzRDM2RTZFOTc3NUMz
MTQ3M0VFMjAeFw0yNjA1MDMwMjM2MDlaFw0yNzA1MDIwMjQxMDlaMDMxMTAvBgNV
BAMTKDBGQjNCMjAxMUM4NjUzMTQ0MjAwQjYxMkNDNkY5NzhEMzVEOTYwRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSiXAsgBBvqhAgl2r9zHZRwf0f
68t5MpoJWwHNdOOvcVqJJKw9umEvToeZo83w//botCLNIsq2DO+wDGAxZLdI6Yyp
8s80VMEW/LO3//6XkAJ1q6TLS0aDkgKw6f1F13lRbOlFzSFdUP7UNrwuBlsjhISc
hTrXLhvqJmIwjHcPm6m3TNCsrEnj6KIIITz6sn9hnkMwPQGRxHOKx/6YK2fDIlue
Eadi0PLbhOnZ1o6DhIFXTuILV0t601m8JHJyeGaWrMvdriF98Zk9CnxwdFSi8Tt1
1yxHz0y4N23u/4HaE9WN/S5Xqc81AjxjFHs8p+W4kcAIPY8v6k6zB6k5FoDDAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUD7OyARyGUxRCALYSzG+XjTXZYNcwHwYDVR0j
BBgwFoAUZ4abF31kbdCBVj025ul3XDFHPuIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmM0YzY0YTktMzUzNy00YmM3LTg2MTMtOGU5ODE2MjllNGNhLzAvNjc4NjlCMTc3
RDY0NkREMDgxNTYzRDM2RTZFOTc3NUMzMTQ3M0VFMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82Nzg2OUIxNzdENjQ2REQwODE1NjNEMzZFNkU5Nzc1QzMxNDcz
RUUyLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZjNGM2NGE5LTM1MzctNGJjNy04
NjEzLThlOTgxNjI5ZTRjYS8wLzMyMzQzMDMyM2EzNjMwMzAzYTYzMzE2MjMxM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzMzODM1MzEzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQCBgDB
sTANBgkqhkiG9w0BAQsFAAOCAQEAB9hIZspsE5VNAbT8r7ugLUPoFBF2m8xJzKsB
h9aUjnegidLRBw2AWHbglVHlTgjgZKeXEUal2QrRhCPeimu/3qYYnng48Ggq4ntf
ZP7TSo+H3Xn0cAqgi1uhuw1So1OnhlitHbg7zYdGgtCAHIS4IpUpxohXQixPVdXA
XVEqz7i4likVU8bP0av2NGV21z6a2K/s2gEw3FoGlYwd+QkckUztmNAKseOfwqJZ
Gz6n6/EQxIQSaQQw1OT7p+B9GugikvuBsAkzGXBDMeGMpc7oPboy0AdfZ9cW6gfY
+IFD8LBhw648e/vc7ExqvdO4oUMwiABj7PhSPZsnXHA4HPr5Vg==
-----END CERTIFICATE-----
Generated at Wed May 13 13:00:24 2026 by rpki-client