
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a323030303a3a2f33362d3336203d3e20313337333136.roa
File: 323430323a376163303a323030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier: 51Yinj8C2sS4DSwjTYZsRI/AnAjwU9VsQNi5t7TzYqY=
Subject key identifier: FE:5D:01:78:B5:37:8E:81:C8:C6:BB:F6:25:50:08:DE:88:F9:06:D6
Certificate issuer: /CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
Certificate serial: 1CA717F0A1760BFD3883CB4A9D76B4EAB519E768
Authority key identifier: B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a323030303a3a2f33362d3336203d3e20313337333136.roa
Signing time: Sun 03 May 2026 02:41:21 +0000
ROA not before: Sun 03 May 2026 02:36:21 +0000
ROA not after: Sun 02 May 2027 02:41:21 +0000
asID: 137316
IP address blocks: 2402:7ac0:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl
rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:a7:17:f0:a1:76:0b:fd:38:83:cb:4a:9d:76:b4:ea:b5:19:e7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
Validity
Not Before: May 3 02:36:21 2026 GMT
Not After : May 2 02:41:21 2027 GMT
Subject: CN=FE5D0178B5378E81C8C6BBF6255008DE88F906D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:00:a6:d2:9c:08:0c:68:f5:78:93:e2:5b:6c:
81:03:85:42:de:a1:f9:c3:73:c9:19:66:fe:53:b5:
11:fd:a2:7c:c5:7b:2a:94:a1:11:05:83:a0:6e:24:
28:f7:38:1e:69:61:14:0b:3e:64:c6:71:65:68:6b:
ea:2d:a1:99:38:c3:8b:7d:e8:17:de:f1:28:67:70:
2c:00:3b:13:96:89:92:a1:80:8d:e9:c8:b3:48:41:
fe:42:3f:65:79:ac:e4:d4:90:5a:70:e6:5a:06:f8:
06:5d:6d:7c:f6:92:ca:90:a7:88:00:55:40:9a:0e:
a8:af:6a:80:64:d5:1b:72:14:76:f9:4d:8c:12:6d:
e1:c9:00:24:6a:4c:62:60:02:45:18:45:2b:78:d3:
d5:60:d5:5f:a7:a9:d1:f3:d6:86:1a:7f:ca:4d:29:
a6:f1:b7:4f:e1:95:3f:16:ed:c2:9f:b3:35:36:23:
02:96:16:97:16:68:b9:bd:77:5b:d4:fa:18:37:8f:
6e:54:21:b0:95:d1:a6:1f:59:37:83:65:8e:f9:ad:
a1:6b:ad:d1:a9:70:c7:bb:4f:9c:70:0f:f8:49:04:
73:74:e4:4d:bf:b6:5d:c6:27:06:43:e5:37:07:c3:
70:a3:01:41:05:78:a9:35:98:69:3f:cf:98:ae:03:
db:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5D:01:78:B5:37:8E:81:C8:C6:BB:F6:25:50:08:DE:88:F9:06:D6
X509v3 Authority Key Identifier:
keyid:B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a323030303a3a2f33362d3336203d3e20313337333136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:7ac0:2000::/36
Signature Algorithm: sha256WithRSAEncryption
30:a5:52:f2:c5:b0:f9:d1:ad:71:d6:9b:1a:43:c4:7b:63:b3:
a5:84:e6:42:b4:15:7e:9a:95:c2:79:62:c5:eb:ce:1e:29:6e:
ba:0a:8e:18:e4:46:4c:10:dd:65:6f:25:9d:91:80:e1:17:e7:
e3:29:e1:a9:7b:be:9d:e7:93:eb:b1:6c:84:36:1a:93:41:6f:
10:3a:f4:02:d2:e1:6e:40:4d:a8:76:4e:0c:39:ef:30:85:79:
84:28:06:f1:57:25:3e:2e:9f:e3:dd:75:60:52:a1:d4:3f:ec:
03:39:cc:19:fd:09:9a:07:da:b0:10:cc:ff:69:d7:12:90:5e:
ab:d4:33:4b:8f:97:e3:b7:3f:16:9e:42:54:67:90:1c:df:33:
2d:70:f0:e4:62:d7:ca:1d:cd:67:40:96:0e:09:df:b8:1c:42:
da:99:a4:19:8e:42:19:f3:a7:2e:eb:3b:95:1b:6b:5c:f9:a5:
64:d1:a9:57:77:ec:16:24:6f:2e:4f:2a:70:51:eb:d3:ae:83:
b3:e6:8e:b6:cf:22:de:df:48:78:4c:26:e8:18:91:27:ca:74:
32:ff:c7:ab:cf:5e:38:10:dc:6d:a5:43:0b:42:ba:c1:ad:49:
db:24:27:4e:9d:9d:a2:00:41:ae:cb:17:8c:5f:a0:ab:3c:e7:
04:3d:b5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:00:32 2026 by rpki-client