
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a653030303a3a2f33362d3336203d3e20313337333136.roa
File: 323430323a376163303a653030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier: +QYjkhsSbbtCKQMpsiFu/CVz29ksdJaA2gx5ZXUFCZw=
Subject key identifier: 61:84:44:7D:CA:2D:0E:91:02:29:21:F5:DA:95:5B:F6:E0:8E:88:7A
Certificate issuer: /CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
Certificate serial: 6F667A90E55AE718E42BEBBCBFF3D93F5F295730
Authority key identifier: B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a653030303a3a2f33362d3336203d3e20313337333136.roa
Signing time: Sun 03 May 2026 02:41:19 +0000
ROA not before: Sun 03 May 2026 02:36:19 +0000
ROA not after: Sun 02 May 2027 02:41:19 +0000
asID: 137316
IP address blocks: 2402:7ac0:e000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl
rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:66:7a:90:e5:5a:e7:18:e4:2b:eb:bc:bf:f3:d9:3f:5f:29:57:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
Validity
Not Before: May 3 02:36:19 2026 GMT
Not After : May 2 02:41:19 2027 GMT
Subject: CN=6184447DCA2D0E91022921F5DA955BF6E08E887A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:01:9c:a3:77:2b:6b:04:87:db:56:97:11:fd:
94:42:e0:45:5f:5b:48:6e:2d:2c:68:f0:4e:8e:aa:
97:86:75:0c:d8:3f:37:e5:91:d7:7a:75:2e:6f:f4:
ae:4c:f5:ef:ca:82:34:86:de:3a:f4:cf:fe:29:52:
47:fe:4b:7b:05:46:3f:19:c8:d4:b2:4f:6c:11:97:
55:57:d8:09:d3:dd:d0:52:22:e5:b9:9a:d3:35:b8:
77:62:7c:fa:fa:bb:ca:1b:16:99:3c:0a:18:65:17:
c6:73:46:cc:56:5f:4f:19:65:50:10:e3:31:51:85:
70:9b:e9:8a:f5:f8:80:f0:43:88:dc:f6:48:41:1f:
b1:77:c9:e2:fb:9f:b3:32:fd:9c:93:51:67:62:a5:
5c:91:ea:69:d0:5a:80:5a:11:25:3c:69:34:2b:c7:
5f:df:3b:28:ea:c6:d8:b9:6b:ff:e3:4d:a7:d8:b3:
ad:b6:ff:f1:47:f7:60:0c:61:66:3c:be:4d:6b:27:
28:6b:bf:25:f8:57:69:1e:69:84:f8:98:6d:92:ae:
d0:da:da:1b:e5:52:66:9f:0d:d1:5a:aa:db:eb:8d:
38:3e:9a:11:ea:40:70:1d:30:88:3a:41:16:6e:4e:
32:6d:b4:1a:06:d8:38:f6:9a:c0:da:f5:d3:c1:61:
29:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:84:44:7D:CA:2D:0E:91:02:29:21:F5:DA:95:5B:F6:E0:8E:88:7A
X509v3 Authority Key Identifier:
keyid:B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a653030303a3a2f33362d3336203d3e20313337333136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:7ac0:e000::/36
Signature Algorithm: sha256WithRSAEncryption
52:be:2f:49:0f:b5:1e:4d:50:d3:86:95:eb:7a:71:3a:22:6f:
d0:23:e9:24:53:c8:a2:06:c2:30:4f:d5:37:0d:85:73:19:64:
bc:09:6c:82:3a:c9:81:04:c8:56:02:c0:6c:82:72:f5:00:30:
26:a7:72:d4:d8:3a:50:9d:31:fc:5e:10:fa:fd:05:c6:4f:89:
ef:53:0a:a2:36:c9:e9:2b:a8:3b:1f:6d:b4:7d:0c:48:c8:09:
fa:0e:ac:45:ec:2e:d3:65:f3:08:86:e6:66:ec:90:e5:20:10:
ea:c2:fc:5e:44:c4:ab:cf:95:40:2a:fc:0b:30:de:91:ab:64:
6d:f6:92:fd:b4:34:49:1f:be:59:2c:bb:55:6f:5a:0e:08:0b:
ba:9b:df:52:4b:1d:27:76:47:87:88:88:8a:9f:a5:f2:7e:6f:
d8:78:f6:4d:16:32:e0:52:ce:f8:25:cf:e6:5a:3c:da:f1:11:
0f:b7:92:3b:39:9f:a9:fc:fc:35:5f:a3:c4:68:df:20:de:f6:
f2:99:00:d8:2f:f3:4c:c9:75:97:fe:de:69:9f:54:c5:0b:b6:
da:9a:4e:36:21:97:10:ae:ba:f3:e8:d9:d0:32:bb:d7:b7:57:
b9:47:8e:d9:62:d6:68:d0:49:92:ce:20:fc:0f:9c:e5:a2:1a:
a2:10:a0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:52:00 2026 by rpki-client