
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/323030313a6466313a666530303a3a2f34382d3438203d3e20313431313037.roa
File: 323030313a6466313a666530303a3a2f34382d3438203d3e20313431313037.roa (raw, json)
Hash identifier: dibahg/ZGqEkwi1huDaO1AQr5xbgMUcTUuKbdZGTir8=
Subject key identifier: 10:CD:04:44:53:48:80:86:BB:64:B9:F2:71:78:37:6A:19:B5:01:DE
Certificate issuer: /CN=ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4
Certificate serial: 6B34E2ECC35978A049BD1E110CB87CC703C43956
Authority key identifier: ED:7B:59:44:27:AC:B8:0A:1E:B2:E4:E9:2D:5E:6B:A6:86:3E:29:F4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/323030313a6466313a666530303a3a2f34382d3438203d3e20313431313037.roa
Signing time: Sun 03 May 2026 02:44:27 +0000
ROA not before: Sun 03 May 2026 02:39:27 +0000
ROA not after: Sun 02 May 2027 02:44:27 +0000
asID: 141107
IP address blocks: 2001:df1:fe00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.crl
rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:03:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:34:e2:ec:c3:59:78:a0:49:bd:1e:11:0c:b8:7c:c7:03:c4:39:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4
Validity
Not Before: May 3 02:39:27 2026 GMT
Not After : May 2 02:44:27 2027 GMT
Subject: CN=10CD044453488086BB64B9F27178376A19B501DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5f:f0:cb:c1:12:a1:82:3b:cb:20:be:11:fa:
c4:dc:aa:bc:ce:3f:f7:59:a8:d2:ec:80:96:6e:cc:
78:e3:65:74:7e:08:8b:8d:81:93:53:b7:6f:0f:64:
8e:cc:2b:d5:38:b8:08:04:bf:46:85:a4:04:3e:6f:
98:05:49:8b:20:fb:56:3d:9f:bc:c5:1a:a6:0a:a8:
4a:3a:78:42:4a:18:57:42:76:50:a3:ce:b7:e4:07:
b6:bf:ab:9f:88:41:e7:16:2b:1e:3a:a7:ac:99:fa:
fa:e7:dc:99:b0:6a:6d:89:1c:6b:ca:7b:29:ec:9c:
f5:13:28:59:c9:d0:e9:0a:ed:9b:42:c8:b0:7e:27:
bf:19:b0:c8:c9:0d:3f:6d:44:63:7b:e5:f0:26:5e:
fc:17:31:1f:b5:a3:81:88:f3:c7:1e:7d:10:65:d5:
ec:25:78:a8:07:f6:17:69:3e:11:23:bb:a5:23:98:
7e:3e:97:06:49:2c:15:6e:1a:5a:1f:e1:3a:f4:ee:
91:62:96:38:0d:97:a1:88:71:ed:45:9f:98:c0:c1:
25:a1:cf:a0:90:40:de:ec:4f:80:cc:95:23:3e:b0:
db:f4:d9:c8:ca:02:be:d3:83:35:55:bf:05:3f:a0:
6f:2c:e0:02:44:3c:e1:b3:40:a8:0b:42:36:ae:3c:
a4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CD:04:44:53:48:80:86:BB:64:B9:F2:71:78:37:6A:19:B5:01:DE
X509v3 Authority Key Identifier:
keyid:ED:7B:59:44:27:AC:B8:0A:1E:B2:E4:E9:2D:5E:6B:A6:86:3E:29:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/323030313a6466313a666530303a3a2f34382d3438203d3e20313431313037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df1:fe00::/48
Signature Algorithm: sha256WithRSAEncryption
02:e9:ce:1f:31:18:82:a7:44:7e:d9:86:20:b4:af:b7:51:f8:
d3:24:2f:28:8d:1c:d4:e0:cb:b5:c3:60:87:bd:c1:cd:2d:53:
26:0d:e3:ae:2a:60:6a:d6:e7:c1:bb:48:71:75:bd:e1:07:f6:
63:b0:e8:62:5e:50:49:91:f8:15:58:bc:61:89:98:e9:2e:5c:
ad:27:c3:b7:11:6f:70:a2:84:87:1a:03:92:e1:6b:35:02:3f:
03:be:9d:32:5c:f3:31:02:e0:21:86:94:10:5f:6c:9a:05:ec:
2e:4d:ca:dd:2b:68:98:a8:3f:00:60:f6:d4:da:f8:ca:ea:95:
5b:cb:2b:10:af:07:67:21:35:3b:2d:74:3c:64:96:a4:f4:b7:
fd:a7:b7:e2:83:f7:07:59:d5:21:7c:b5:f2:d2:d2:a4:d0:27:
91:e7:d0:25:6d:55:97:bc:1b:5a:32:5a:52:cd:f3:93:63:10:
62:1a:54:7e:37:0b:64:37:72:c3:36:7d:b2:90:15:f8:7e:a4:
5b:d7:ea:27:34:a0:38:3b:53:b4:09:88:24:48:06:9f:cd:ad:
89:96:f5:cc:b4:dc:b7:14:79:36:4e:c5:0a:fa:78:c7:77:ab:
e9:24:05:aa:cf:ec:cd:81:ff:ee:2d:5c:11:1c:f1:a0:0d:76:
ab:3a:fc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:08:40 2026 by rpki-client