
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a643a3a2f34382d3438203d3e203338353135.roa
File: 323430323a3630303a643a3a2f34382d3438203d3e203338353135.roa (raw, json)
Hash identifier: OzZH/D6AOeSKi/B68s/JsfZKJ8q2Nf0IMX0MHCxOzJU=
Subject key identifier: 66:FD:36:93:6F:B5:99:CD:34:DA:3C:92:A4:B9:68:E8:55:2D:8B:ED
Certificate issuer: /CN=67869B177D646DD081563D36E6E9775C31473EE2
Certificate serial: 2AE6FCE8944F5232FE44FE3874596497681DD0F2
Authority key identifier: 67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a643a3a2f34382d3438203d3e203338353135.roa
Signing time: Sun 03 May 2026 02:41:07 +0000
ROA not before: Sun 03 May 2026 02:36:07 +0000
ROA not after: Sun 02 May 2027 02:41:07 +0000
asID: 38515
IP address blocks: 2402:600:d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl
rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:e6:fc:e8:94:4f:52:32:fe:44:fe:38:74:59:64:97:68:1d:d0:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67869B177D646DD081563D36E6E9775C31473EE2
Validity
Not Before: May 3 02:36:07 2026 GMT
Not After : May 2 02:41:07 2027 GMT
Subject: CN=66FD36936FB599CD34DA3C92A4B968E8552D8BED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f5:97:c1:d7:df:00:12:26:58:10:91:0f:bb:
bc:a8:2d:64:8e:52:04:df:40:88:22:13:c0:47:83:
a1:ad:4d:27:05:83:1c:a7:fc:c8:2a:61:8b:cd:38:
41:2a:f0:83:7c:17:fd:89:7d:26:68:2b:3d:a2:62:
83:be:be:ab:f1:9c:84:31:1c:c4:aa:12:0e:f2:1c:
1f:26:47:6e:05:12:ac:b8:97:09:3a:94:23:68:0d:
2a:ed:14:65:8d:9f:f1:97:28:f0:2f:bf:d3:4b:22:
9d:00:80:23:ef:0a:3a:c1:cd:df:09:85:8d:ec:bd:
39:9f:dd:60:41:34:57:4e:cb:93:1a:30:00:d7:77:
37:2b:c7:4b:d9:ec:fe:9f:47:6c:3a:a4:82:f6:5e:
56:a6:6f:12:75:e6:5f:e1:f9:5d:58:1c:eb:93:27:
50:85:4a:75:84:b6:aa:bf:3b:1e:ff:3d:f0:2d:08:
cb:4b:6f:df:c5:79:34:50:72:d1:0c:e9:af:37:ef:
69:ea:b5:a3:eb:25:43:d5:b8:1e:5e:ef:c2:21:1f:
bb:8a:67:38:d6:67:49:a1:ad:28:43:eb:93:51:bb:
79:cb:88:99:ab:3a:ef:3b:db:75:a3:f3:6d:df:c8:
7f:dd:af:80:16:37:c2:e2:57:96:85:04:20:88:1f:
8d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FD:36:93:6F:B5:99:CD:34:DA:3C:92:A4:B9:68:E8:55:2D:8B:ED
X509v3 Authority Key Identifier:
keyid:67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a643a3a2f34382d3438203d3e203338353135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:600:d::/48
Signature Algorithm: sha256WithRSAEncryption
23:53:e5:37:37:48:dc:19:94:1d:4b:d7:82:13:dd:20:3e:ba:
69:06:86:8c:af:f0:f0:5b:fc:50:5e:eb:27:d0:38:75:1d:ca:
7c:d4:4c:2f:1f:79:25:67:f8:01:da:db:53:b3:be:87:55:5b:
ac:93:f0:7c:ea:f1:9e:8b:f9:bc:74:14:03:03:a6:50:b9:d0:
47:f7:8b:0b:04:ac:a5:4b:7f:b2:d5:20:ea:f3:88:03:52:80:
8c:8c:63:f5:6c:ed:d7:2a:97:79:fb:f8:59:a8:69:4b:58:5b:
3b:6d:d6:05:e9:45:bf:ae:bd:ee:20:47:f0:6b:c3:d3:73:74:
0c:77:d8:59:e1:00:1d:8c:ca:08:ae:3a:67:db:2f:be:22:76:
06:66:ba:7e:f8:30:3b:95:e5:bc:cd:8d:b6:61:c2:0d:0e:74:
01:5d:08:60:da:c8:76:28:70:43:f4:4e:22:f6:50:68:5d:43:
7d:dd:02:07:bb:87:b4:6c:fd:37:15:86:7a:72:b6:f4:c6:3e:
17:46:00:5c:f8:94:36:dc:3f:62:a0:e7:2c:b5:e6:71:15:6f:
58:6c:1e:68:fc:82:5b:71:13:54:00:70:c5:db:59:b2:b3:8e:
7e:04:41:16:9b:b2:14:83:9e:30:07:14:c0:57:e3:7e:df:e9:
c2:6f:43:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:14:30 2026 by rpki-client