
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a633a3a2f34382d3438203d3e203338353135.roa
File: 323430323a3630303a633a3a2f34382d3438203d3e203338353135.roa (raw, json)
Hash identifier: T1nc91DmBxWyircdZzFzbDxGxyovVe7DPHahSvPllcY=
Subject key identifier: 0D:39:8D:F4:FC:A0:2B:85:61:BD:50:E4:CE:2C:47:92:13:5C:1B:33
Certificate issuer: /CN=67869B177D646DD081563D36E6E9775C31473EE2
Certificate serial: 67B0BCE87781385ACB28ECB0928E0BE929FA0DDC
Authority key identifier: 67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a633a3a2f34382d3438203d3e203338353135.roa
Signing time: Sun 03 May 2026 02:41:09 +0000
ROA not before: Sun 03 May 2026 02:36:09 +0000
ROA not after: Sun 02 May 2027 02:41:09 +0000
asID: 38515
IP address blocks: 2402:600:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl
rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:b0:bc:e8:77:81:38:5a:cb:28:ec:b0:92:8e:0b:e9:29:fa:0d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67869B177D646DD081563D36E6E9775C31473EE2
Validity
Not Before: May 3 02:36:09 2026 GMT
Not After : May 2 02:41:09 2027 GMT
Subject: CN=0D398DF4FCA02B8561BD50E4CE2C4792135C1B33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fa:9b:d0:4f:6e:7e:e2:3d:81:15:c8:08:c3:
1c:d7:e5:62:60:9d:8f:b7:2d:bf:5f:0a:e6:2d:fa:
86:36:17:0a:8b:19:b6:8c:67:e6:41:3b:72:04:9a:
87:59:99:ba:eb:1e:08:51:4f:2b:ed:7c:a7:fd:60:
8c:9d:dc:3c:91:0b:09:83:4b:9f:69:1c:ac:c2:8b:
d4:7f:67:15:0e:88:4a:b4:a5:11:23:1e:9b:f3:f3:
ef:a5:a1:7c:9b:48:03:14:97:be:3f:f6:5e:7c:70:
4e:4b:48:84:5c:9b:e5:43:9a:d9:c5:e1:02:86:4e:
b1:62:c5:bb:d5:e8:ad:e5:52:a0:77:7a:3d:32:ca:
ff:ae:1c:a8:d9:df:29:60:8e:52:ee:3d:8f:b5:e4:
cc:a1:6f:bb:9d:a8:df:95:b2:0f:ab:bc:81:32:ca:
1f:4c:09:57:3b:7a:04:53:c8:ef:04:df:6d:0b:19:
15:96:f6:93:2c:61:bc:66:c3:49:57:21:80:1a:12:
2e:d5:6a:47:73:9e:b3:cb:83:d2:6d:70:f8:66:c1:
30:b8:c2:36:23:bf:b2:27:80:de:52:30:d1:43:76:
57:92:8b:d8:38:30:45:8f:0d:83:97:89:cf:f4:5e:
64:df:d1:94:6b:b3:8a:d5:a7:18:69:42:4b:80:77:
18:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:39:8D:F4:FC:A0:2B:85:61:BD:50:E4:CE:2C:47:92:13:5C:1B:33
X509v3 Authority Key Identifier:
keyid:67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a633a3a2f34382d3438203d3e203338353135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:600:c::/48
Signature Algorithm: sha256WithRSAEncryption
6c:ff:f7:bd:ac:cb:08:2e:99:d6:6b:5a:88:77:d6:b8:1f:86:
32:37:6f:a5:9f:71:f4:5d:f8:67:2c:5a:c1:1e:dd:66:aa:e0:
b4:ca:15:0b:37:4d:1f:ca:8b:8e:c7:e4:de:0b:a9:f7:07:8c:
ba:3b:88:69:3a:02:fb:52:3c:3d:d8:47:76:a9:fe:6a:68:37:
d9:77:77:e3:94:e8:7b:cc:79:63:0e:68:a1:fe:e4:b7:09:b6:
8a:f1:dc:e4:cb:2e:ee:4f:b8:90:5b:7c:1f:bc:d9:b1:40:8a:
eb:35:58:ff:7f:b6:1f:12:9d:f7:8c:8c:a3:89:9e:23:12:10:
70:99:fd:f9:71:ea:13:1e:f3:a9:88:fa:20:a0:8e:23:56:8e:
e5:cb:c7:a8:e4:ee:8f:3f:cb:86:21:dc:9f:fe:24:2f:6a:2a:
78:8d:94:05:8b:68:7f:01:3f:53:0c:ff:fc:11:a6:4f:f1:94:
2b:71:6d:13:6b:e4:e6:0f:47:0b:de:49:47:7e:12:e1:43:1f:
21:41:d4:fd:c3:65:be:b5:c1:3c:16:93:81:04:97:68:be:36:
63:54:4e:7d:b4:93:ea:b3:17:7d:1a:12:d0:0f:cd:bf:53:2d:
67:c5:58:a1:9a:9f:27:37:26:a9:99:59:49:eb:31:0a:23:0c:
74:41:ea:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:56:20 2026 by rpki-client