
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a643030303a3a2f33362d3336203d3e20313337333136.roa
File: 323430323a376163303a643030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier: ZxVyXhnuV8KlUMQSAzHJI494PQ4CV7TDpZIzuQAdax0=
Subject key identifier: 39:89:05:89:E6:16:10:4B:B4:FC:B4:4A:F4:DF:AF:CB:25:A6:86:19
Certificate issuer: /CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
Certificate serial: 23F478931CE42423561F21F7007979E9D76B1EA3
Authority key identifier: B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a643030303a3a2f33362d3336203d3e20313337333136.roa
Signing time: Sun 03 May 2026 02:41:20 +0000
ROA not before: Sun 03 May 2026 02:36:20 +0000
ROA not after: Sun 02 May 2027 02:41:20 +0000
asID: 137316
IP address blocks: 2402:7ac0:d000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl
rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:f4:78:93:1c:e4:24:23:56:1f:21:f7:00:79:79:e9:d7:6b:1e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
Validity
Not Before: May 3 02:36:20 2026 GMT
Not After : May 2 02:41:20 2027 GMT
Subject: CN=39890589E616104BB4FCB44AF4DFAFCB25A68619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3e:bd:34:7f:47:83:cc:86:49:5a:0b:14:89:
36:2e:de:78:7f:c6:a1:ed:7a:8e:a6:a0:27:f3:9c:
25:37:11:87:8b:37:f9:e1:51:b4:2b:c7:f1:31:7d:
37:c4:e0:95:62:f4:53:3a:9f:bf:c7:25:53:8e:f1:
52:12:56:26:80:7d:62:a4:c9:23:cc:d3:5c:43:43:
be:a1:b0:5a:8e:c2:41:40:9a:51:ee:ab:0c:7b:92:
d7:20:cd:c9:87:e1:ac:1d:f4:89:50:f7:29:97:74:
eb:19:e5:84:f8:20:01:22:02:73:a0:9a:7e:73:84:
d0:99:c9:a4:b4:56:05:2f:6f:19:6f:fc:8d:d8:c0:
53:db:ee:3c:bb:05:aa:b0:c0:c0:e0:52:98:09:47:
b8:cc:62:d6:ed:e8:6a:bf:c7:8c:40:7e:30:ab:e8:
6a:19:63:4f:4d:f8:fa:5b:9e:69:aa:f1:fb:b9:85:
83:e0:d2:88:f6:09:6a:52:f8:b6:58:1c:83:ca:36:
41:4e:6d:96:c1:19:8d:b4:b7:07:4c:16:54:02:b3:
9b:22:05:b5:79:cb:d9:bb:17:3f:5d:60:3e:9b:f3:
81:4f:61:87:b4:bc:fc:4e:f7:e9:af:f3:d2:5f:d9:
bd:65:5c:e3:fc:a0:d5:d6:d9:88:77:b3:25:23:73:
ca:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:89:05:89:E6:16:10:4B:B4:FC:B4:4A:F4:DF:AF:CB:25:A6:86:19
X509v3 Authority Key Identifier:
keyid:B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a643030303a3a2f33362d3336203d3e20313337333136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:7ac0:d000::/36
Signature Algorithm: sha256WithRSAEncryption
90:30:13:86:a7:89:96:3a:b5:16:01:2e:4c:de:83:25:18:18:
59:13:f8:29:03:15:07:94:73:88:4c:c4:8d:ec:f1:30:98:bc:
2f:c5:45:be:93:ff:fb:cc:f7:d3:df:bb:3b:f7:93:4f:70:11:
a1:7b:35:99:be:c6:d4:28:15:84:03:6b:96:1b:5d:50:36:16:
08:df:23:ba:f6:a1:fe:88:38:76:be:33:95:a8:2a:f5:fc:76:
82:43:c8:58:7c:66:44:f7:33:d5:14:f2:02:09:90:22:fd:57:
5e:7e:92:1c:fa:09:19:1c:ac:08:20:1f:a0:0d:54:bf:c9:cf:
d5:92:25:f1:04:61:e3:d4:43:e8:a4:de:87:63:89:21:28:34:
2a:c6:65:5a:74:2b:61:e1:ed:4b:61:83:53:f9:29:d8:5a:32:
17:c3:57:4d:a0:77:f5:92:3e:1d:af:34:bf:e1:48:63:1c:59:
52:9f:ed:d7:01:6d:55:fa:89:a4:10:7f:cb:bf:b4:7d:49:b5:
27:a8:5c:3e:82:1f:25:42:d3:08:8d:55:b1:9a:82:45:c0:9b:
17:75:e0:11:47:b8:3e:5b:ea:d8:0d:87:4e:e3:e6:85:19:94:
38:9c:35:6f:6d:d4:88:23:cd:4d:d5:db:e5:26:6b:7f:2d:64:
1a:f5:a9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:57:17 2026 by rpki-client