
$ rpki-client -vvf rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/1/323030313a6466333a356263303a3a2f34382d3438203d3e20313532303832.roa
File: 323030313a6466333a356263303a3a2f34382d3438203d3e20313532303832.roa (raw, json)
Hash identifier: XBT7cz0ce26yLC9HXZSAXmBtqtJ1XBus4Ge+ZkO3aSE=
Subject key identifier: 3E:D8:14:71:40:68:9B:B8:9A:AE:D0:C9:87:13:1C:D9:93:AE:B6:57
Certificate issuer: /CN=80FDCC7C63A6A1F6F211D6008AE9775E4DCF7A7E
Certificate serial: 72EBE87B8AD707AFEF1B530A362718E0CA14F7A2
Authority key identifier: 80:FD:CC:7C:63:A6:A1:F6:F2:11:D6:00:8A:E9:77:5E:4D:CF:7A:7E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80FDCC7C63A6A1F6F211D6008AE9775E4DCF7A7E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/1/323030313a6466333a356263303a3a2f34382d3438203d3e20313532303832.roa
Signing time: Sun 03 May 2026 02:42:54 +0000
ROA not before: Sun 03 May 2026 02:37:54 +0000
ROA not after: Sun 02 May 2027 02:42:54 +0000
asID: 152082
IP address blocks: 2001:df3:5bc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/1/80FDCC7C63A6A1F6F211D6008AE9775E4DCF7A7E.crl
rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/1/80FDCC7C63A6A1F6F211D6008AE9775E4DCF7A7E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80FDCC7C63A6A1F6F211D6008AE9775E4DCF7A7E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:eb:e8:7b:8a:d7:07:af:ef:1b:53:0a:36:27:18:e0:ca:14:f7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80FDCC7C63A6A1F6F211D6008AE9775E4DCF7A7E
Validity
Not Before: May 3 02:37:54 2026 GMT
Not After : May 2 02:42:54 2027 GMT
Subject: CN=3ED8147140689BB89AAED0C987131CD993AEB657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0b:76:ca:6d:04:f3:d7:65:4a:0b:b4:3b:37:
fc:14:8f:df:79:cc:d5:4e:ad:a2:6c:fd:8e:49:3b:
fe:1d:76:10:73:d0:d7:c7:db:35:f2:a4:15:77:b0:
35:01:55:47:70:47:16:96:49:cc:fa:0a:79:56:86:
3b:09:e7:f0:5e:3d:8c:a0:65:5a:dd:95:37:2b:bb:
80:d5:4a:b8:a4:cf:13:e4:11:05:1a:6a:8d:10:e7:
19:31:87:f1:95:f4:13:53:fe:f7:d5:72:90:77:7f:
e5:94:90:a3:8b:b3:3a:ed:44:a9:cf:86:35:ce:99:
1c:e7:2d:7e:ab:58:2d:76:01:6b:62:f0:fe:78:fe:
27:5f:2c:1c:e7:cc:37:6b:6f:8d:26:43:83:49:ba:
64:c7:8b:04:f7:f1:fc:58:11:8b:6e:f5:89:e7:f6:
af:7b:41:0b:18:0d:80:77:8f:94:b8:d7:5e:fb:b6:
8e:e6:41:53:2a:78:03:55:a1:e5:8c:62:9b:5b:b2:
0b:a4:cb:40:81:03:57:b2:c6:01:89:c1:28:df:db:
52:f8:1f:5a:ea:3e:e8:2c:15:3b:0c:2f:24:20:bb:
e1:41:1c:a8:e1:6f:ad:87:d6:cc:f7:a8:83:76:15:
9c:e9:79:2d:0a:ed:a3:8b:cc:a2:1c:07:04:a7:a1:
92:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D8:14:71:40:68:9B:B8:9A:AE:D0:C9:87:13:1C:D9:93:AE:B6:57
X509v3 Authority Key Identifier:
keyid:80:FD:CC:7C:63:A6:A1:F6:F2:11:D6:00:8A:E9:77:5E:4D:CF:7A:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/1/80FDCC7C63A6A1F6F211D6008AE9775E4DCF7A7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80FDCC7C63A6A1F6F211D6008AE9775E4DCF7A7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/1/323030313a6466333a356263303a3a2f34382d3438203d3e20313532303832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:5bc0::/48
Signature Algorithm: sha256WithRSAEncryption
4b:b0:64:4d:63:81:ed:a3:db:94:c5:8f:79:52:f3:e9:f9:ee:
30:66:af:6d:ef:d3:31:30:dc:f4:93:f0:69:e3:be:60:0f:cc:
60:1e:a4:9f:96:5d:2c:a9:7a:32:be:16:f5:74:5f:66:1b:8d:
c6:60:46:3c:e8:ba:ba:9e:ba:5d:c3:31:ba:d1:4e:8f:24:ff:
07:74:38:2a:f6:64:98:73:34:8a:fe:c9:6d:f7:7b:bb:1e:73:
45:92:2a:82:63:a0:81:04:22:2d:e5:f0:bd:7f:6e:7b:c2:a3:
b4:27:18:ae:3c:d4:fc:47:d7:e2:83:ee:55:95:c1:cd:08:5f:
48:1e:8b:ff:9c:c5:42:00:c7:6b:5e:f2:10:68:a1:be:9d:c1:
66:7b:99:4d:57:b6:cd:cd:a9:57:69:0a:df:de:d0:e3:fb:3e:
ca:aa:13:f2:ed:f8:af:5e:ef:02:c9:a1:16:77:90:c1:bb:95:
57:e8:b1:5b:31:bb:d0:be:c0:2c:5b:3a:56:b6:d4:45:26:b2:
64:8d:85:09:65:3e:95:d9:14:e1:12:01:2d:e2:7b:6a:5e:63:
9e:03:20:ce:7c:4d:b9:b1:57:94:b4:90:b5:51:b7:b5:58:19:
2b:45:55:36:28:a6:62:bd:4d:76:9c:f6:7e:fe:ab:0e:b0:1e:
db:e2:ca:53
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUcuvoe4rXB6/vG1MKNicY4MoU96IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBGRENDN0M2M0E2QTFGNkYyMTFENjAwOEFFOTc3NUU0
RENGN0E3RTAeFw0yNjA1MDMwMjM3NTRaFw0yNzA1MDIwMjQyNTRaMDMxMTAvBgNV
BAMTKDNFRDgxNDcxNDA2ODlCQjg5QUFFRDBDOTg3MTMxQ0Q5OTNBRUI2NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpC3bKbQTz12VKC7Q7N/wUj995
zNVOraJs/Y5JO/4ddhBz0NfH2zXypBV3sDUBVUdwRxaWScz6CnlWhjsJ5/BePYyg
ZVrdlTcru4DVSrikzxPkEQUaao0Q5xkxh/GV9BNT/vfVcpB3f+WUkKOLszrtRKnP
hjXOmRznLX6rWC12AWti8P54/idfLBznzDdrb40mQ4NJumTHiwT38fxYEYtu9Ynn
9q97QQsYDYB3j5S41177to7mQVMqeANVoeWMYptbsguky0CBA1eyxgGJwSjf21L4
H1rqPugsFTsMLyQgu+FBHKjhb62H1sz3qIN2FZzpeS0K7aOLzKIcBwSnoZKhAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUPtgUcUBom7iartDJhxMc2ZOutlcwHwYDVR0j
BBgwFoAUgP3MfGOmofbyEdYAiul3Xk3Pen4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzMyZTRmODYtNDhlNy00OGM3LWJhOTEtZTI1OTY4Mzc4ZTk1LzEvODBGRENDN0M2
M0E2QTFGNkYyMTFENjAwOEFFOTc3NUU0RENGN0E3RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84MEZEQ0M3QzYzQTZBMUY2RjIxMUQ2MDA4QUU5Nzc1RTREQ0Y3
QTdFLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzczMmU0Zjg2LTQ4ZTctNDhjNy1i
YTkxLWUyNTk2ODM3OGU5NS8xLzMyMzAzMDMxM2E2NDY2MzMzYTM1NjI2MzMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMyMzAzODMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN
81vAMA0GCSqGSIb3DQEBCwUAA4IBAQBLsGRNY4Hto9uUxY95UvPp+e4wZq9t79Mx
MNz0k/Bp475gD8xgHqSfll0sqXoyvhb1dF9mG43GYEY86Lq6nrpdwzG60U6PJP8H
dDgq9mSYczSK/slt93u7HnNFkiqCY6CBBCIt5fC9f257wqO0JxiuPNT8R9fig+5V
lcHNCF9IHov/nMVCAMdrXvIQaKG+ncFme5lNV7bNzalXaQrf3tDj+z7KqhPy7fiv
Xu8CyaEWd5DBu5VX6LFbMbvQvsAsWzpWttRFJrJkjYUJZT6V2RThEgEt4ntqXmOe
AyDOfE25sVeUtJC1Ube1WBkrRVU2KKZivU12nPZ+/qsOsB7b4spT
-----END CERTIFICATE-----
Generated at Wed May 13 06:58:22 2026 by rpki-client