
$ rpki-client -vvf rpki-rsync.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/323430323a386163303a3a2f33322d3438203d3e20313337333230.roa
File: 323430323a386163303a3a2f33322d3438203d3e20313337333230.roa (raw, json)
Hash identifier: roZTxY6zUAfeDTuWXo3yf76eU6YZOOXLfUlqD2CCnWI=
Subject key identifier: 7F:A7:A5:A8:EB:26:52:D8:F8:7B:5B:72:C6:F9:21:EF:B1:D6:E5:58
Certificate issuer: /CN=1F79347E34F3842F873687AE47DBBF7766D07A56
Certificate serial: 2EEB08F6DA530C595A1913AA9AD74C1DA08C14DC
Authority key identifier: 1F:79:34:7E:34:F3:84:2F:87:36:87:AE:47:DB:BF:77:66:D0:7A:56
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F79347E34F3842F873687AE47DBBF7766D07A56.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/323430323a386163303a3a2f33322d3438203d3e20313337333230.roa
Signing time: Sun 03 May 2026 02:43:15 +0000
ROA not before: Sun 03 May 2026 02:38:15 +0000
ROA not after: Sun 02 May 2027 02:43:15 +0000
asID: 137320
IP address blocks: 2402:8ac0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/1F79347E34F3842F873687AE47DBBF7766D07A56.crl
rsync://rpki-rsync.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/1F79347E34F3842F873687AE47DBBF7766D07A56.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F79347E34F3842F873687AE47DBBF7766D07A56.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:28:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:eb:08:f6:da:53:0c:59:5a:19:13:aa:9a:d7:4c:1d:a0:8c:14:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F79347E34F3842F873687AE47DBBF7766D07A56
Validity
Not Before: May 3 02:38:15 2026 GMT
Not After : May 2 02:43:15 2027 GMT
Subject: CN=7FA7A5A8EB2652D8F87B5B72C6F921EFB1D6E558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6a:b8:8f:20:67:8f:df:02:00:f4:ee:70:e4:
8e:0d:08:2f:2b:4b:bd:25:b5:ee:1a:a4:fd:ac:1a:
a8:27:a2:f0:0f:67:0a:cd:ce:3d:ac:4d:bb:08:2c:
d9:d5:45:8d:d5:51:45:1f:f2:d3:d4:83:f4:cd:23:
7f:23:57:85:d7:00:98:a4:66:18:b6:dc:f6:71:6b:
7c:70:77:54:09:20:2d:85:c0:c2:6d:77:5a:63:48:
39:7e:0c:e8:ae:05:53:1f:54:7a:cb:70:36:86:e6:
50:d4:8c:bc:90:b9:c1:b0:9a:1b:34:fc:0d:9b:ce:
ff:0f:9a:66:54:b7:1a:54:04:e0:b9:db:85:70:19:
a1:c4:6f:18:d4:dc:02:51:7c:7d:bf:80:2c:1d:4a:
e9:5a:00:b5:c1:de:30:08:c0:b4:cc:b6:53:08:dd:
e5:ee:d9:08:74:2a:d1:20:ac:fc:08:58:46:ed:89:
41:e6:46:71:b6:b7:16:a4:3e:7d:00:f0:d9:04:8c:
62:27:44:54:d6:8a:05:40:22:87:5b:93:60:7e:f6:
b8:26:0f:43:3d:12:da:7a:3c:19:31:77:21:14:47:
65:31:df:68:ef:92:42:36:63:40:6f:43:d6:32:0f:
0d:b4:51:7c:25:e8:82:9d:61:ba:65:e8:ea:a0:c1:
50:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A7:A5:A8:EB:26:52:D8:F8:7B:5B:72:C6:F9:21:EF:B1:D6:E5:58
X509v3 Authority Key Identifier:
keyid:1F:79:34:7E:34:F3:84:2F:87:36:87:AE:47:DB:BF:77:66:D0:7A:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/1F79347E34F3842F873687AE47DBBF7766D07A56.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F79347E34F3842F873687AE47DBBF7766D07A56.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/323430323a386163303a3a2f33322d3438203d3e20313337333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:8ac0::/32
Signature Algorithm: sha256WithRSAEncryption
13:1b:2d:a6:f6:1e:c1:64:7c:ee:18:f8:67:a4:aa:19:91:e7:
53:8e:18:f7:94:f2:55:cd:7e:7b:16:29:c0:5c:5c:99:6b:57:
9f:ad:ae:f4:62:9f:38:b2:2f:84:25:fe:dc:85:d9:71:0a:f5:
9b:e1:4a:24:63:aa:d6:88:09:ec:76:59:c2:e2:62:1e:31:24:
2d:d9:0b:63:6a:d3:32:f8:26:6d:83:f4:06:9a:70:6e:0d:4a:
c4:aa:5e:51:fe:15:21:c1:cc:c1:d1:fb:0f:0d:5a:76:df:68:
29:e7:aa:38:a9:eb:ab:66:b8:5f:a6:a9:ba:43:60:44:82:96:
87:c6:09:6b:9e:dc:28:b0:fa:40:81:60:c8:7c:08:a0:e7:68:
f8:28:b6:aa:3b:2d:26:b6:a4:c2:05:58:39:29:06:36:83:cb:
f4:07:24:05:9e:5f:f2:8a:d1:5d:de:3b:6d:51:42:07:c0:78:
09:ef:18:69:24:16:f6:39:ca:0d:5c:ca:2d:d6:f6:96:40:1c:
95:77:bb:28:40:26:06:82:5a:e1:e8:43:4b:9e:85:14:c3:a4:
95:24:66:56:b2:49:3b:59:b5:bd:fa:7a:31:22:b1:d9:8d:61:
e7:52:84:41:5c:53:ce:50:99:b1:d5:fd:19:6f:96:be:85:4b:
1d:de:ce:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:35:53 2026 by rpki-client