
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a353030303a3a2f33362d3336203d3e20313337333136.roa
File: 323430323a376163303a353030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier: o9yY+uZqgkv3Sqb81WO1heY9lf7s7tUc89wfOdr/ODE=
Subject key identifier: 72:8D:41:E0:58:BA:5B:EB:BE:DF:F5:8E:81:6F:72:66:F3:1F:40:DD
Certificate issuer: /CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
Certificate serial: 3633812353B320E73E4443E5F8A383D716FFF5DB
Authority key identifier: B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a353030303a3a2f33362d3336203d3e20313337333136.roa
Signing time: Sun 03 May 2026 02:41:19 +0000
ROA not before: Sun 03 May 2026 02:36:19 +0000
ROA not after: Sun 02 May 2027 02:41:19 +0000
asID: 137316
IP address blocks: 2402:7ac0:5000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl
rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:33:81:23:53:b3:20:e7:3e:44:43:e5:f8:a3:83:d7:16:ff:f5:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
Validity
Not Before: May 3 02:36:19 2026 GMT
Not After : May 2 02:41:19 2027 GMT
Subject: CN=728D41E058BA5BEBBEDFF58E816F7266F31F40DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a5:ee:8a:61:62:48:c8:02:40:e6:6c:f2:6e:
2f:28:ad:c9:6e:7d:dc:ba:9e:e1:7d:d6:ba:57:04:
a5:71:6e:a3:4a:25:25:8d:58:fd:42:74:52:79:8e:
7d:74:48:85:8f:c3:59:72:d6:2c:b4:48:1f:3d:2c:
3c:25:60:bb:b4:b3:62:92:54:db:49:5e:a0:a9:20:
5a:80:7a:84:b0:60:57:a2:23:bf:6f:03:84:a4:45:
e8:6d:b4:27:a0:e9:9e:45:eb:d6:d8:69:e5:5b:b4:
20:e8:f1:63:df:9a:84:23:8a:74:5f:a8:69:90:0e:
c3:2f:fc:6b:f5:a3:74:2c:33:bb:c5:09:08:24:4b:
22:1e:94:c0:4a:e0:b2:fb:70:b5:d5:ee:7b:4d:2f:
27:d1:e8:60:05:e1:18:cf:53:02:27:48:b6:ad:76:
be:ca:7a:14:b6:6b:f5:c5:db:0a:47:fa:97:76:e2:
bf:96:fe:6b:fd:88:99:d0:fe:7b:0b:5c:d1:93:0b:
c3:fc:d5:37:1e:ab:5e:65:10:1c:55:6f:45:7b:1e:
e5:d3:8d:02:f5:57:8c:27:33:20:03:0a:d1:30:2a:
c3:b2:fd:5f:74:aa:b3:d6:5a:ac:d2:a6:63:4b:de:
33:c6:e8:24:47:fc:bd:ff:c7:bf:4b:f5:85:45:5a:
77:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8D:41:E0:58:BA:5B:EB:BE:DF:F5:8E:81:6F:72:66:F3:1F:40:DD
X509v3 Authority Key Identifier:
keyid:B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a353030303a3a2f33362d3336203d3e20313337333136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:7ac0:5000::/36
Signature Algorithm: sha256WithRSAEncryption
6a:20:5a:16:1c:ef:f4:45:f5:4c:08:1f:c6:30:bd:53:3d:cf:
ed:a5:6f:25:49:2e:42:53:9f:7f:f8:55:f4:e7:0e:19:60:fd:
09:25:c1:45:9e:bc:18:a7:1b:dd:36:be:98:19:ca:43:26:e6:
77:6f:9b:6c:5b:4a:ef:39:c1:47:6d:12:a9:2c:8d:53:27:ab:
71:4a:96:c8:0c:64:e2:7f:35:8f:61:72:a4:95:cf:1f:71:f1:
ea:c6:f5:67:4a:b0:13:d0:4d:41:59:c0:f8:3d:ec:4c:68:bf:
a9:de:29:b7:80:cb:80:aa:89:9c:9f:b7:df:45:e6:9c:a4:78:
dd:63:89:e5:0a:d1:bc:69:70:db:ee:fa:c4:3f:0c:79:12:0f:
d7:94:b5:a5:13:2c:55:68:9e:c3:80:e7:d2:96:56:27:2e:f5:
92:e3:a3:02:1a:6c:90:e7:4b:d3:58:e4:9d:d2:bf:e3:65:44:
57:03:4d:b1:77:79:36:a2:7f:c1:0e:a9:74:7a:30:91:22:9d:
9f:74:e6:85:a5:34:80:3f:72:c0:b0:4b:a6:56:60:33:80:d4:
c2:ce:e8:6b:f4:f6:42:33:0f:24:d1:18:d4:5e:7d:72:2d:7f:
4c:c4:74:19:00:5e:ca:9d:91:ec:62:67:68:c1:61:70:f6:8b:
6e:6a:34:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:59:55 2026 by rpki-client