
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/323430373a366634303a3a2f33322d3332203d3e203538383230.roa
File: 323430373a366634303a3a2f33322d3332203d3e203538383230.roa (raw, json)
Hash identifier: pbMg7J7P4kS8Sxdzt0uwVKMCDecvHVa7e/rU45LkW3I=
Subject key identifier: CB:5F:80:E9:D3:4F:4C:05:90:94:6C:C4:61:FF:48:C4:94:1F:6E:68
Certificate issuer: /CN=EFD42907B281E79D93B3A55BE77E6957B1B4BCA9
Certificate serial: 51D6098EBA82F0FFCF2EFDC8769B7880BBD5E8D0
Authority key identifier: EF:D4:29:07:B2:81:E7:9D:93:B3:A5:5B:E7:7E:69:57:B1:B4:BC:A9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/323430373a366634303a3a2f33322d3332203d3e203538383230.roa
Signing time: Sun 03 May 2026 02:41:52 +0000
ROA not before: Sun 03 May 2026 02:36:52 +0000
ROA not after: Sun 02 May 2027 02:41:52 +0000
asID: 58820
IP address blocks: 2407:6f40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.crl
rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:d6:09:8e:ba:82:f0:ff:cf:2e:fd:c8:76:9b:78:80:bb:d5:e8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFD42907B281E79D93B3A55BE77E6957B1B4BCA9
Validity
Not Before: May 3 02:36:52 2026 GMT
Not After : May 2 02:41:52 2027 GMT
Subject: CN=CB5F80E9D34F4C0590946CC461FF48C4941F6E68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c8:c0:5a:0f:e6:c3:f8:65:37:69:44:dc:d7:
28:3e:16:c5:73:33:c4:76:f1:27:52:5d:42:dc:69:
c7:7e:40:d9:9c:a3:99:cf:9d:fd:ab:a1:85:7d:14:
67:4a:cf:d8:80:ab:9e:81:1d:92:34:6a:fd:a1:46:
b0:7f:c9:cc:4f:df:01:87:a0:8e:a9:a0:67:bb:07:
20:36:cf:70:3f:48:ed:4f:e8:78:d5:e5:8f:64:ce:
97:4f:53:20:08:eb:ba:f6:4d:ac:02:2e:ce:f3:f3:
62:24:d7:ec:68:a0:5e:15:eb:01:ff:fb:99:4d:05:
72:b1:a4:e4:46:7b:4c:a9:4d:57:1f:67:fd:ac:33:
46:39:21:08:8c:14:16:a2:ab:f3:45:aa:d4:ec:d8:
15:07:ac:5f:3a:3e:e4:a3:ea:69:7d:9a:fc:78:07:
54:23:f7:49:8b:2d:9c:33:d8:e7:c2:49:56:67:33:
06:f6:a8:5f:36:ad:cb:b5:46:12:71:f7:cd:54:3c:
45:6a:61:f1:ed:40:d6:65:da:a9:19:c7:dd:c3:b1:
8b:63:39:06:0e:5b:63:d2:3a:fd:49:6a:b4:31:32:
5e:7b:08:20:b6:54:0e:3e:93:7d:89:73:74:55:7f:
3a:b8:e5:fb:2a:9b:ec:9a:a4:ef:2f:d9:e2:18:e6:
08:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5F:80:E9:D3:4F:4C:05:90:94:6C:C4:61:FF:48:C4:94:1F:6E:68
X509v3 Authority Key Identifier:
keyid:EF:D4:29:07:B2:81:E7:9D:93:B3:A5:5B:E7:7E:69:57:B1:B4:BC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/323430373a366634303a3a2f33322d3332203d3e203538383230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2407:6f40::/32
Signature Algorithm: sha256WithRSAEncryption
2e:53:26:2c:6e:f8:fc:63:07:42:52:ad:f0:e6:d4:d0:57:9d:
77:07:fb:75:2e:fd:b7:c5:03:fe:ec:97:25:b4:ea:a0:40:ba:
df:6d:e3:e9:01:5f:e4:b2:4e:d1:4c:ac:41:22:a7:70:50:23:
05:ab:ae:d4:8a:6d:8d:bc:43:df:cd:ba:2b:b3:c9:90:33:e7:
7b:fb:82:62:39:06:03:b8:3e:72:82:13:0d:2e:93:6b:05:f9:
77:4b:e2:5d:90:aa:3c:99:62:4c:e0:bd:9f:c2:51:29:b0:8f:
2d:27:00:39:17:1e:7b:10:6e:38:41:64:61:bd:2c:11:c8:f9:
cb:00:6d:1a:c5:f7:41:bc:2a:66:cd:ff:88:70:62:4a:df:41:
2e:a8:d0:d3:49:d1:a5:7d:f6:ab:c2:f6:58:29:38:63:45:2f:
66:42:04:bb:34:38:c5:5e:4a:44:b6:4d:71:e0:1d:e1:86:4c:
22:5e:e0:9d:df:7c:8f:b1:4d:a0:a7:12:3e:70:48:df:7f:c2:
dd:93:f3:6d:fe:0b:76:ab:72:97:10:06:a6:0b:49:65:aa:93:
e5:d3:88:3a:b4:7c:14:bf:91:f3:34:4c:c3:0c:12:7b:fe:66:
8b:ca:67:c1:7f:40:89:6c:9e:96:32:0f:74:52:5a:a4:a8:d4:
8f:fb:ef:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:57:14 2026 by rpki-client