
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a313030303a3a2f33362d3336203d3e20313337333136.roa
File: 323430323a376163303a313030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier: KRhJfJAXpsYzQcn0f30CHcV12xdV11IACsshlNpQGkA=
Subject key identifier: DA:4E:0B:7F:6D:43:9F:33:A5:FC:6B:34:CB:CE:01:68:D3:DD:8C:30
Certificate issuer: /CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
Certificate serial: 046192A8624E66120A7BDAF7ADA49203D2D77A62
Authority key identifier: B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a313030303a3a2f33362d3336203d3e20313337333136.roa
Signing time: Sun 03 May 2026 02:41:21 +0000
ROA not before: Sun 03 May 2026 02:36:21 +0000
ROA not after: Sun 02 May 2027 02:41:21 +0000
asID: 137316
IP address blocks: 2402:7ac0:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl
rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:61:92:a8:62:4e:66:12:0a:7b:da:f7:ad:a4:92:03:d2:d7:7a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
Validity
Not Before: May 3 02:36:21 2026 GMT
Not After : May 2 02:41:21 2027 GMT
Subject: CN=DA4E0B7F6D439F33A5FC6B34CBCE0168D3DD8C30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:87:50:b2:19:72:30:3d:f9:65:a5:fa:cb:bd:
01:14:93:1b:14:e2:63:7f:28:79:93:e7:2b:12:4d:
b0:ff:1c:fa:be:d7:58:bd:a8:94:a0:3b:ee:fb:ec:
47:23:9c:63:82:05:15:6b:7f:d3:f1:22:77:24:7f:
47:c9:58:84:09:a0:62:ed:80:48:81:7c:0b:85:58:
31:37:3a:fd:b4:32:35:82:4a:b0:65:e2:ef:71:69:
cc:b6:e1:44:3c:47:6f:1f:3b:11:0d:c2:0a:c9:1d:
25:43:51:11:9a:46:2b:d9:82:e3:ad:80:f5:cd:ee:
5d:87:ae:d5:f5:73:db:16:c8:6a:68:83:52:18:ab:
38:16:aa:7b:43:6e:59:43:5a:d7:96:33:54:8d:99:
7e:8b:91:fe:47:b8:c0:64:23:bb:df:75:59:5f:9a:
3d:16:03:c1:aa:7d:13:2a:6d:fd:60:09:c6:6a:c3:
31:2b:39:dc:4f:41:ed:75:c4:a4:74:29:4c:be:4a:
28:a0:2b:15:77:19:d5:0d:4b:08:95:c5:a5:f8:08:
c4:fa:86:06:b1:5d:2b:a8:11:1a:26:01:a4:1a:69:
02:0d:16:cf:7f:22:86:43:5e:a9:a4:48:f1:8c:dc:
b4:bf:ef:d8:2f:f3:2b:07:71:a0:56:47:54:9b:5c:
e2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4E:0B:7F:6D:43:9F:33:A5:FC:6B:34:CB:CE:01:68:D3:DD:8C:30
X509v3 Authority Key Identifier:
keyid:B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a313030303a3a2f33362d3336203d3e20313337333136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:7ac0:1000::/36
Signature Algorithm: sha256WithRSAEncryption
44:b5:70:bc:ee:4a:c2:ba:ca:06:e5:57:2a:eb:cf:a1:94:d8:
11:d6:d3:a5:79:4c:99:7d:0c:52:41:1c:6f:58:c8:2e:c7:3f:
12:69:3d:4a:66:a1:f9:92:81:c7:15:c3:e3:35:06:d1:4d:bc:
01:ef:0a:b4:15:9f:76:7d:76:38:82:21:8d:c9:21:ad:ae:41:
dc:a6:57:b2:ec:92:59:76:12:fa:25:35:2a:17:e3:a8:85:1e:
6b:03:56:bc:74:66:17:13:ca:2b:db:af:c4:89:24:09:e6:71:
00:76:ec:ad:bc:4f:ee:36:d1:fc:e1:99:69:01:03:a6:c8:68:
de:c2:6c:a5:bb:8d:9b:9a:79:06:d1:b2:e0:ad:fa:a9:1d:53:
b0:56:51:64:93:7c:15:9f:8d:97:4e:f6:36:af:c3:97:65:5a:
90:b4:b9:20:2f:5b:61:02:73:8d:13:31:b0:5c:84:45:da:9c:
3d:22:df:07:3f:d5:07:fa:51:95:58:bc:11:a1:2d:df:cf:97:
75:b8:81:cb:c7:40:48:d3:85:30:78:7f:0d:91:86:45:5c:57:
09:83:ff:4b:15:a1:c6:77:85:df:64:f3:70:67:7b:46:88:c1:
91:c7:ee:0f:27:cb:7d:22:ff:c3:3f:ea:97:bd:20:5a:0c:72:
fc:6f:5d:98
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUBGGSqGJOZhIKe9r3raSSA9LXemIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFDMDFDMkQzMTAwN0ZBOUY3Nzg1NzBBMzNBMEJCQjMy
MTUwOUU4QTAeFw0yNjA1MDMwMjM2MjFaFw0yNzA1MDIwMjQxMjFaMDMxMTAvBgNV
BAMTKERBNEUwQjdGNkQ0MzlGMzNBNUZDNkIzNENCQ0UwMTY4RDNERDhDMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbh1CyGXIwPfllpfrLvQEUkxsU
4mN/KHmT5ysSTbD/HPq+11i9qJSgO+777EcjnGOCBRVrf9PxInckf0fJWIQJoGLt
gEiBfAuFWDE3Ov20MjWCSrBl4u9xacy24UQ8R28fOxENwgrJHSVDURGaRivZguOt
gPXN7l2HrtX1c9sWyGpog1IYqzgWqntDbllDWteWM1SNmX6Lkf5HuMBkI7vfdVlf
mj0WA8GqfRMqbf1gCcZqwzErOdxPQe11xKR0KUy+SiigKxV3GdUNSwiVxaX4CMT6
hgaxXSuoERomAaQaaQINFs9/IoZDXqmkSPGM3LS/79gv8ysHcaBWR1SbXOIFAgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQU2k4Lf21DnzOl/Gs0y84BaNPdjDAwHwYDVR0j
BBgwFoAUscAcLTEAf6n3eFcKM6C7syFQnoowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmNjNDYyYTUtOGY3NC00MmFmLTg4M2ItNWU4OWVlNWYyZGYzLzAvQjFDMDFDMkQz
MTAwN0ZBOUY3Nzg1NzBBMzNBMEJCQjMyMTUwOUU4QS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CMUMwMUMyRDMxMDA3RkE5Rjc3ODU3MEEzM0EwQkJCMzIxNTA5
RThBLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZjYzQ2MmE1LThmNzQtNDJhZi04
ODNiLTVlODllZTVmMmRmMy8wLzMyMzQzMDMyM2EzNzYxNjMzMDNhMzEzMDMwMzAz
YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMTMzMzczMzMxMzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk
AnrAEDANBgkqhkiG9w0BAQsFAAOCAQEARLVwvO5KwrrKBuVXKuvPoZTYEdbTpXlM
mX0MUkEcb1jILsc/Emk9Smah+ZKBxxXD4zUG0U28Ae8KtBWfdn12OIIhjckhra5B
3KZXsuySWXYS+iU1KhfjqIUeawNWvHRmFxPKK9uvxIkkCeZxAHbsrbxP7jbR/OGZ
aQEDpsho3sJspbuNm5p5BtGy4K36qR1TsFZRZJN8FZ+Nl072Nq/Dl2VakLS5IC9b
YQJzjRMxsFyERdqcPSLfBz/VB/pRlVi8EaEt38+XdbiBy8dASNOFMHh/DZGGRVxX
CYP/SxWhxneF32TzcGd7RojBkcfuDyfLfSL/wz/ql70gWgxy/G9dmA==
-----END CERTIFICATE-----
Generated at Wed May 13 14:13:35 2026 by rpki-client