
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/323030313a6466303a323930303a3a2f34382d3438203d3e20313336303731.roa
File: 323030313a6466303a323930303a3a2f34382d3438203d3e20313336303731.roa (raw, json)
Hash identifier: 5L8OxoDBph/9fu+4CbtRAtlIzGmHICxIfDadaISFa44=
Subject key identifier: A0:5A:D1:CD:76:CB:AA:6A:93:8F:94:FA:FC:69:25:75:CC:DA:5B:5D
Certificate issuer: /CN=6F6EA0D16E8288D17A470BD51F92A349C0546C57
Certificate serial: 72FCA045F043ECDFD9E88DAC0AA9484E9647AEAE
Authority key identifier: 6F:6E:A0:D1:6E:82:88:D1:7A:47:0B:D5:1F:92:A3:49:C0:54:6C:57
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F6EA0D16E8288D17A470BD51F92A349C0546C57.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/323030313a6466303a323930303a3a2f34382d3438203d3e20313336303731.roa
Signing time: Sun 03 May 2026 02:43:32 +0000
ROA not before: Sun 03 May 2026 02:38:32 +0000
ROA not after: Sun 02 May 2027 02:43:32 +0000
asID: 136071
IP address blocks: 2001:df0:2900::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/6F6EA0D16E8288D17A470BD51F92A349C0546C57.crl
rsync://rpki-rsync.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/6F6EA0D16E8288D17A470BD51F92A349C0546C57.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F6EA0D16E8288D17A470BD51F92A349C0546C57.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:24:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:fc:a0:45:f0:43:ec:df:d9:e8:8d:ac:0a:a9:48:4e:96:47:ae:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F6EA0D16E8288D17A470BD51F92A349C0546C57
Validity
Not Before: May 3 02:38:32 2026 GMT
Not After : May 2 02:43:32 2027 GMT
Subject: CN=A05AD1CD76CBAA6A938F94FAFC692575CCDA5B5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6a:5e:41:bf:f3:bc:a5:4e:67:11:41:a8:54:
26:f5:46:37:68:ef:f5:81:ad:7b:18:58:c6:9b:81:
59:3a:56:8b:f0:78:2b:5e:04:70:6a:ec:56:57:da:
93:65:da:da:74:a4:bd:cd:f8:ba:89:b4:f2:f5:b0:
33:95:f8:25:78:0d:52:a0:27:92:40:10:20:3d:b1:
29:7e:1e:39:07:71:56:5d:ac:aa:32:39:01:4f:56:
f5:fb:c3:fd:6e:12:cb:f0:c3:68:af:d4:ac:83:32:
b4:52:76:88:86:62:fe:68:53:75:55:0d:49:8e:a0:
53:cd:a9:ea:c9:9b:f8:9d:db:af:a8:c8:0d:88:87:
2d:5f:c7:52:00:ed:56:9d:0f:83:2f:77:c2:16:24:
34:97:a9:cc:df:d4:c7:2f:71:06:15:33:42:a9:ee:
b9:50:a2:a9:36:3d:3e:e1:90:ef:d5:e3:bf:e6:60:
25:95:39:cd:6b:15:1d:37:26:4d:a3:bf:20:c1:7a:
47:ee:4d:aa:25:06:ea:0f:a6:4e:cf:36:c3:86:7d:
da:f8:03:74:86:fe:1d:31:0a:d6:60:08:f3:b2:6a:
31:66:6c:cc:d8:27:fb:a0:39:19:82:b2:b8:93:24:
1d:46:81:54:c4:bc:99:61:12:90:09:d7:61:7f:50:
6e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5A:D1:CD:76:CB:AA:6A:93:8F:94:FA:FC:69:25:75:CC:DA:5B:5D
X509v3 Authority Key Identifier:
keyid:6F:6E:A0:D1:6E:82:88:D1:7A:47:0B:D5:1F:92:A3:49:C0:54:6C:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/6F6EA0D16E8288D17A470BD51F92A349C0546C57.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F6EA0D16E8288D17A470BD51F92A349C0546C57.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/323030313a6466303a323930303a3a2f34382d3438203d3e20313336303731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:2900::/48
Signature Algorithm: sha256WithRSAEncryption
76:ed:b9:9e:b6:78:c5:43:dc:a1:92:fa:03:93:50:95:24:fb:
00:95:87:55:5f:02:97:3e:f4:7b:01:a1:ba:66:92:45:87:15:
37:82:a0:77:c8:c5:a9:db:7d:10:b6:46:64:b7:5c:77:21:3a:
ca:6e:16:e5:f1:3d:ba:c1:78:ae:9a:f2:8b:9c:3c:d0:94:dd:
f2:f5:70:a1:53:c3:30:44:32:dd:c3:cc:6b:03:cf:42:18:f7:
fe:75:28:8e:f9:1d:59:a7:f3:6c:da:54:cf:a0:15:cf:32:49:
bd:99:a0:2f:5e:2c:a1:b3:e5:ee:38:5c:97:b7:74:39:d1:e5:
69:ef:c6:67:29:da:f7:d7:91:b8:fe:fc:5d:75:79:aa:17:96:
b7:11:44:fb:79:ae:48:c9:8c:a8:9a:8f:1d:f9:41:f6:ba:1a:
c0:6b:29:83:ea:da:b8:df:17:31:6a:bd:26:fa:5e:e6:dc:41:
64:5b:20:1b:3e:e0:c0:cc:d7:eb:7b:00:a2:69:5a:8d:20:d1:
26:03:6e:c3:57:84:9b:06:2c:26:2f:62:9c:c2:02:2e:9e:7e:
10:7c:c9:a7:21:2c:cf:9c:68:6c:29:10:f5:f4:3a:d3:4e:18:
a9:15:b5:98:1f:1b:b4:b2:6a:73:5d:65:31:40:dc:df:a0:ee:
37:6f:28:70
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUcvygRfBD7N/Z6I2sCqlITpZHrq4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkY2RUEwRDE2RTgyODhEMTdBNDcwQkQ1MUY5MkEzNDlD
MDU0NkM1NzAeFw0yNjA1MDMwMjM4MzJaFw0yNzA1MDIwMjQzMzJaMDMxMTAvBgNV
BAMTKEEwNUFEMUNENzZDQkFBNkE5MzhGOTRGQUZDNjkyNTc1Q0NEQTVCNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPal5Bv/O8pU5nEUGoVCb1Rjdo
7/WBrXsYWMabgVk6VovweCteBHBq7FZX2pNl2tp0pL3N+LqJtPL1sDOV+CV4DVKg
J5JAECA9sSl+HjkHcVZdrKoyOQFPVvX7w/1uEsvww2iv1KyDMrRSdoiGYv5oU3VV
DUmOoFPNqerJm/id26+oyA2Ihy1fx1IA7VadD4Mvd8IWJDSXqczf1McvcQYVM0Kp
7rlQoqk2PT7hkO/V47/mYCWVOc1rFR03Jk2jvyDBekfuTaolBuoPpk7PNsOGfdr4
A3SG/h0xCtZgCPOyajFmbMzYJ/ugORmCsriTJB1GgVTEvJlhEpAJ12F/UG4zAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUoFrRzXbLqmqTj5T6/GkldczaW10wHwYDVR0j
BBgwFoAUb26g0W6CiNF6RwvVH5KjScBUbFcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzUxN2UyZmEtMmY2OC00NTJlLWE0MDQtOGU3Y2NiNjg3MjE1LzAvNkY2RUEwRDE2
RTgyODhEMTdBNDcwQkQ1MUY5MkEzNDlDMDU0NkM1Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82RjZFQTBEMTZFODI4OEQxN0E0NzBCRDUxRjkyQTM0OUMwNTQ2
QzU3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzc1MTdlMmZhLTJmNjgtNDUyZS1h
NDA0LThlN2NjYjY4NzIxNS8wLzMyMzAzMDMxM2E2NDY2MzAzYTMyMzkzMDMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzAzNzMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN
8CkAMA0GCSqGSIb3DQEBCwUAA4IBAQB27bmetnjFQ9yhkvoDk1CVJPsAlYdVXwKX
PvR7AaG6ZpJFhxU3gqB3yMWp230QtkZkt1x3ITrKbhbl8T26wXiumvKLnDzQlN3y
9XChU8MwRDLdw8xrA89CGPf+dSiO+R1Zp/Ns2lTPoBXPMkm9maAvXiyhs+XuOFyX
t3Q50eVp78ZnKdr315G4/vxddXmqF5a3EUT7ea5IyYyomo8d+UH2uhrAaymD6tq4
3xcxar0m+l7m3EFkWyAbPuDAzNfrewCiaVqNINEmA27DV4SbBiwmL2KcwgIunn4Q
fMmnISzPnGhsKRD19DrTThipFbWYHxu0smpzXWUxQNzfoO43byhw
-----END CERTIFICATE-----
Generated at Wed May 13 07:46:15 2026 by rpki-client