
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a633030303a3a2f33362d3336203d3e20313337333136.roa
File: 323430323a376163303a633030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier: 3oKwsKNRauR6/BU5w20pIBJTqFJMoSZtHH5sQdqVsA8=
Subject key identifier: 73:CC:2A:C7:FB:4C:46:81:44:3A:E6:0C:97:1C:34:15:82:9F:DF:48
Certificate issuer: /CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
Certificate serial: 5C31AEAC898894B534EC9AFBFF7A1EBDCDC52987
Authority key identifier: B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a633030303a3a2f33362d3336203d3e20313337333136.roa
Signing time: Sun 03 May 2026 02:41:22 +0000
ROA not before: Sun 03 May 2026 02:36:22 +0000
ROA not after: Sun 02 May 2027 02:41:22 +0000
asID: 137316
IP address blocks: 2402:7ac0:c000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl
rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:31:ae:ac:89:88:94:b5:34:ec:9a:fb:ff:7a:1e:bd:cd:c5:29:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
Validity
Not Before: May 3 02:36:22 2026 GMT
Not After : May 2 02:41:22 2027 GMT
Subject: CN=73CC2AC7FB4C4681443AE60C971C3415829FDF48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6d:3c:01:52:05:34:49:14:91:f4:35:94:79:
f3:ca:66:17:f7:c7:1f:92:f6:68:c0:a9:7d:73:ee:
da:b3:4a:9f:4c:7d:27:1b:81:bc:40:35:0f:3d:fe:
d6:cc:8d:39:38:e9:6b:63:b9:33:aa:e2:96:68:b0:
d2:ae:23:87:6f:ee:d6:42:b6:d4:6d:46:4c:52:4a:
72:e8:54:7a:7e:2f:3b:d3:4f:6e:f9:52:23:d1:78:
88:22:45:13:ee:fa:0f:8f:59:5d:35:7f:77:a9:ff:
2e:b4:71:6f:f1:d2:ff:55:ed:47:77:76:60:c0:95:
51:58:ee:6b:b3:f4:6a:e2:94:e1:e1:23:ff:9d:b0:
de:59:5c:21:4e:cb:73:1a:78:a3:40:ff:aa:5d:09:
3d:65:f7:ba:b2:6e:06:89:21:f9:47:96:d1:6b:4a:
b3:82:ce:15:36:b3:51:20:a2:5a:e7:35:cf:e1:03:
30:23:f1:43:03:3d:1d:bd:36:79:f8:f3:61:f9:e8:
73:be:0e:79:3e:fe:e4:da:e6:70:2e:7c:6f:9e:91:
d6:fe:8c:28:5d:92:0c:4f:19:fc:2b:11:93:8f:e7:
e2:74:51:ac:8a:46:ed:d7:3f:7c:77:dc:b6:25:15:
f3:0f:ef:5e:a3:75:9f:b1:f8:e2:d3:68:b8:e3:01:
b3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CC:2A:C7:FB:4C:46:81:44:3A:E6:0C:97:1C:34:15:82:9F:DF:48
X509v3 Authority Key Identifier:
keyid:B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a633030303a3a2f33362d3336203d3e20313337333136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:7ac0:c000::/36
Signature Algorithm: sha256WithRSAEncryption
78:13:27:0a:8c:1b:48:96:ae:9b:fe:24:2d:0d:95:88:37:d9:
5f:4a:0a:6f:8f:41:cb:61:74:1f:41:c3:b0:f1:0f:ff:df:bd:
84:b8:cd:0d:35:ac:46:0f:ce:00:c9:75:90:6b:21:06:1a:a0:
e3:1a:5c:2c:54:e8:e1:83:33:cc:6a:c7:0b:18:2b:dc:7a:24:
23:9d:88:78:44:1c:dc:23:6d:e7:b8:fa:6e:83:91:fa:e1:f0:
87:57:28:ce:bb:eb:39:98:45:8c:80:40:b0:6f:94:b0:7e:78:
2e:58:d4:73:e1:bc:9f:8a:b8:48:99:92:4e:1c:0e:54:92:db:
79:97:15:07:d3:c0:c4:5f:4b:20:e1:93:59:2a:62:33:09:86:
bc:0f:81:fa:6a:53:06:bb:e7:0c:cf:35:68:d5:fc:35:15:4b:
36:b6:fc:98:f4:66:8b:01:79:d7:0a:5d:c1:07:76:2f:7e:b0:
e2:67:a6:cd:69:a7:6a:30:60:88:ae:6a:5c:62:1a:0c:a0:1f:
62:0f:d6:3a:32:31:a7:65:aa:76:ec:67:61:06:97:4e:45:de:
de:29:3e:29:b3:0e:a4:56:9a:d3:21:4d:91:38:88:11:6b:07:
5b:e8:70:81:79:4d:91:dc:f7:3b:00:0e:c9:86:10:7c:27:dd:
7b:16:46:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:51:04 2026 by rpki-client