
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a383030303a3a2f33362d3336203d3e20313337333136.roa
File: 323430323a376163303a383030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier: vyL6RE5IS2eTojCod6HIWuFJVb6RuyBrsJ2XkKJVcYQ=
Subject key identifier: 05:32:41:1C:FA:E2:6C:99:64:FD:EA:DA:18:6D:87:86:27:1A:F2:71
Certificate issuer: /CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
Certificate serial: 7264B277277E9C7513F9192D3DA6AA3B97F60FE1
Authority key identifier: B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a383030303a3a2f33362d3336203d3e20313337333136.roa
Signing time: Sun 03 May 2026 02:41:21 +0000
ROA not before: Sun 03 May 2026 02:36:21 +0000
ROA not after: Sun 02 May 2027 02:41:21 +0000
asID: 137316
IP address blocks: 2402:7ac0:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl
rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:64:b2:77:27:7e:9c:75:13:f9:19:2d:3d:a6:aa:3b:97:f6:0f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
Validity
Not Before: May 3 02:36:21 2026 GMT
Not After : May 2 02:41:21 2027 GMT
Subject: CN=0532411CFAE26C9964FDEADA186D8786271AF271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ca:86:02:29:27:dd:9c:7a:8e:71:09:9b:4b:
29:70:dc:64:3c:dd:71:95:c1:b0:32:01:fd:24:a6:
b9:88:aa:84:81:50:24:6e:f8:5c:53:a0:46:60:1e:
39:ed:a7:ad:e1:0c:a4:22:29:bb:e6:4f:93:97:d3:
b5:67:ac:2c:e0:69:f2:c8:53:9c:5c:ec:d2:e6:69:
a2:dd:db:ff:77:2f:3d:22:e7:77:7c:56:99:2d:5c:
5b:40:1f:28:6a:0f:a5:4b:e7:be:cf:91:f8:1a:b3:
71:83:eb:0d:05:eb:0c:b3:e6:04:08:08:29:7c:ee:
56:fe:13:91:1d:c6:51:4a:1b:c0:ff:25:9d:4f:10:
4f:d2:d0:bf:6e:3d:39:16:a2:1d:a6:b7:21:22:ed:
79:89:f4:2f:2a:48:66:3f:cb:09:b1:e9:94:c4:81:
19:8a:fd:06:a2:ef:2a:88:56:40:ec:14:fe:c1:12:
4e:00:5a:92:24:9d:a0:21:f9:b6:16:ef:3c:41:e5:
d7:25:ef:d1:0c:fb:0a:6d:a2:e3:0c:21:bf:b7:04:
2c:34:17:1d:76:a4:e1:a2:b2:86:96:50:62:f2:18:
fa:0f:32:92:74:00:39:a0:35:ea:5d:f7:e3:2f:5c:
c3:46:fc:bb:ab:b4:56:d5:05:0a:ce:59:1e:4c:30:
8c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:32:41:1C:FA:E2:6C:99:64:FD:EA:DA:18:6D:87:86:27:1A:F2:71
X509v3 Authority Key Identifier:
keyid:B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a383030303a3a2f33362d3336203d3e20313337333136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:7ac0:8000::/36
Signature Algorithm: sha256WithRSAEncryption
8e:0e:1a:8f:18:ca:20:25:6f:94:47:cf:43:e2:66:98:e1:11:
a7:43:b0:1f:f2:d1:af:a4:a3:d2:d8:a0:aa:af:9b:83:93:53:
98:c5:90:46:bf:0b:88:8e:72:bc:c4:b3:71:fc:6d:05:23:bd:
46:22:82:d9:4c:1a:58:0c:3d:aa:b1:e4:a9:34:86:0e:c9:22:
99:15:1e:12:20:f0:28:9a:ca:de:15:54:21:f0:5c:44:c6:1d:
8f:b7:4e:c9:e2:0e:66:03:6a:30:4f:aa:6a:af:97:1d:28:13:
14:d3:5b:c6:c0:91:e7:09:3f:e1:8e:c8:c4:68:9e:30:55:05:
5c:a3:7b:ac:37:09:07:c0:0d:7f:68:34:dc:51:0a:02:b9:dd:
a9:ad:e8:36:60:d5:73:44:c7:dc:04:1a:10:de:fe:56:3c:9e:
0c:14:2b:8f:5e:fc:7f:ca:ec:d3:87:73:38:dd:9e:c9:c8:b6:
1a:18:74:1e:6c:9a:75:b5:b2:46:75:ce:e7:bc:c6:41:85:5f:
66:d8:6d:f4:95:7f:53:2f:6c:17:1a:8c:2d:9d:b2:e9:f2:07:
88:3e:b0:5f:d3:cf:a8:46:be:e6:32:74:db:1e:e7:ea:90:74:
9d:3d:30:ff:98:f8:05:ba:66:22:e1:01:d9:75:c4:3e:06:ee:
5a:c6:e3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:13:57 2026 by rpki-client