
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a663030303a3a2f33362d3336203d3e20313337333136.roa
File: 323430323a376163303a663030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier: FzdHx/k6kmdgmxHrubWJtGpS0z3IkDjxY10obPpV8UY=
Subject key identifier: CA:21:08:6B:12:E2:4E:2E:75:00:71:39:E2:70:D4:9B:29:CC:8D:C8
Certificate issuer: /CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
Certificate serial: 51DA1B2ECC87DAD8872656BC991082495BB2310A
Authority key identifier: B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a663030303a3a2f33362d3336203d3e20313337333136.roa
Signing time: Sun 03 May 2026 02:41:21 +0000
ROA not before: Sun 03 May 2026 02:36:21 +0000
ROA not after: Sun 02 May 2027 02:41:21 +0000
asID: 137316
IP address blocks: 2402:7ac0:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl
rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:da:1b:2e:cc:87:da:d8:87:26:56:bc:99:10:82:49:5b:b2:31:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
Validity
Not Before: May 3 02:36:21 2026 GMT
Not After : May 2 02:41:21 2027 GMT
Subject: CN=CA21086B12E24E2E75007139E270D49B29CC8DC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cb:25:86:51:18:03:c6:86:08:ee:6c:ad:f8:
8d:74:cf:bd:18:87:eb:81:c9:29:06:54:70:d6:bb:
87:49:45:4c:1a:e6:a4:e1:60:32:c5:51:64:70:39:
f5:32:02:19:eb:cb:b0:2d:e9:56:65:28:0c:9c:62:
69:d3:2e:4f:a9:d9:0d:85:9e:6b:57:83:af:68:86:
da:28:50:f4:78:31:6e:73:69:6c:e9:7a:c6:e0:18:
b9:59:a8:da:6c:5c:db:93:1c:52:ad:b0:61:fa:5d:
17:9f:6b:6e:eb:36:c8:ea:52:62:97:d2:75:70:89:
6f:52:e9:ac:e3:b3:17:97:8c:bd:fd:69:cf:9b:a2:
db:0a:a8:4d:95:e8:7d:5b:8b:87:08:68:22:6a:68:
0b:86:09:67:7f:75:02:b7:16:11:69:ec:ae:9d:ae:
0b:5e:34:fc:1d:f0:aa:b0:05:de:5c:47:64:c6:77:
be:ca:62:6b:25:c9:3f:a8:42:70:a5:dd:18:4b:91:
1e:1a:85:f0:fb:85:be:2f:20:0d:57:3c:4a:bb:a5:
f0:bf:82:8d:1b:5b:8e:ac:38:d2:5c:a4:67:97:6e:
e5:11:b4:79:49:dd:ca:7e:98:f2:e0:4b:68:a3:b9:
fe:9f:d6:81:b2:48:79:f8:95:99:e7:76:1b:88:38:
96:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:21:08:6B:12:E2:4E:2E:75:00:71:39:E2:70:D4:9B:29:CC:8D:C8
X509v3 Authority Key Identifier:
keyid:B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a663030303a3a2f33362d3336203d3e20313337333136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:7ac0:f000::/36
Signature Algorithm: sha256WithRSAEncryption
0c:c8:c5:f2:2f:a8:07:a8:22:06:98:66:f5:f8:de:bf:29:dc:
52:1b:9e:93:e4:26:88:01:00:97:0f:d9:7f:d1:ff:61:65:47:
af:e5:c1:18:13:1e:b0:00:97:52:fa:73:df:45:7d:5e:15:0d:
85:e6:ed:e1:af:62:41:b0:6d:c0:8f:9a:ce:75:8a:3f:2a:86:
eb:44:ab:6f:c3:46:47:9b:55:12:80:61:6c:3d:2a:71:21:42:
c5:3d:05:52:21:89:90:42:4e:23:cc:17:49:b3:e9:69:c3:d8:
3b:d2:d5:1c:23:ae:e6:6d:94:91:84:f6:a6:e9:35:ea:20:30:
32:c3:2d:65:56:18:8d:6b:1e:f6:63:24:5f:be:1c:96:56:6b:
54:59:47:4c:bc:17:6a:19:7e:56:5d:87:79:87:27:ae:91:5c:
88:f6:c6:79:5b:a0:4f:ac:c6:bf:19:58:27:00:b7:8f:96:48:
9d:82:93:42:c4:1f:b5:0b:b3:fc:2c:ab:11:d1:c9:90:5b:f3:
b0:b0:e6:63:08:fe:74:59:55:04:0d:6e:38:60:00:a8:da:d1:
2f:ad:f0:f7:70:9e:2f:9e:1e:a7:84:29:5e:74:f9:ab:de:6c:
c0:24:cf:d5:06:74:d8:2d:c4:7c:aa:d4:78:c9:10:13:8c:35:
b5:44:4d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:46:40 2026 by rpki-client