
$ rpki-client -vvf rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/323430353a3130303a3a2f33322d3438203d3e2039393035.roa
File: 323430353a3130303a3a2f33322d3438203d3e2039393035.roa (raw, json)
Hash identifier: Kthx67gHVNGYI0fzwSZ0fi+hJEWpAyGO/ZNZDQ2LEig=
Subject key identifier: 2E:60:E6:FB:19:4F:4F:4B:38:4F:C3:CF:9F:3A:F9:90:13:1A:C6:A4
Certificate issuer: /CN=38A016716413D0128BA473D046A93A222EF258E1
Certificate serial: 03ADA9C7049C4E867601E5D84688C3658A52EBBD
Authority key identifier: 38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/323430353a3130303a3a2f33322d3438203d3e2039393035.roa
Signing time: Sun 03 May 2026 02:44:32 +0000
ROA not before: Sun 03 May 2026 02:39:32 +0000
ROA not after: Sun 02 May 2027 02:44:32 +0000
asID: 9905
IP address blocks: 2405:100::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.crl
rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:ad:a9:c7:04:9c:4e:86:76:01:e5:d8:46:88:c3:65:8a:52:eb:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38A016716413D0128BA473D046A93A222EF258E1
Validity
Not Before: May 3 02:39:32 2026 GMT
Not After : May 2 02:44:32 2027 GMT
Subject: CN=2E60E6FB194F4F4B384FC3CF9F3AF990131AC6A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:f4:cd:61:78:da:4b:0e:28:04:e8:35:ee:
a3:43:a2:11:ab:23:28:43:31:fa:89:51:73:cb:00:
b5:4d:2d:47:b7:39:0e:98:21:4b:07:85:98:c9:55:
3d:d9:9d:4c:62:f2:b3:a0:cb:7e:e4:7d:32:ca:57:
7c:96:07:7a:77:e0:12:95:c2:5f:c1:60:b9:51:46:
29:55:b1:1d:ca:f2:22:a3:ec:e7:7b:2e:4e:78:a4:
74:37:3c:f2:f5:3b:44:24:ec:14:28:39:0c:f8:31:
65:24:11:82:76:b0:4b:8c:a1:af:11:52:94:ed:00:
51:52:d7:79:73:dc:e2:89:eb:78:18:d5:b0:1b:86:
64:51:b6:80:cf:d0:f6:ea:3b:4f:ca:7b:af:f4:5f:
8c:ef:8c:b5:5b:6d:b2:1a:38:45:79:10:28:54:f8:
0d:b0:7a:92:b0:97:45:30:38:2d:8b:28:48:cc:46:
ee:37:2e:58:b6:2e:56:ce:bf:f0:62:03:fa:23:52:
05:59:44:dc:42:cf:ab:6d:bc:5d:66:81:be:8a:c6:
b9:87:71:0d:5c:78:14:36:d6:03:4a:35:03:4c:7e:
22:7d:6f:b4:e4:38:80:d7:ca:74:8c:a2:69:cf:ff:
36:2b:a6:cd:6d:61:be:da:db:fd:47:9a:45:aa:64:
e3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:60:E6:FB:19:4F:4F:4B:38:4F:C3:CF:9F:3A:F9:90:13:1A:C6:A4
X509v3 Authority Key Identifier:
keyid:38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/323430353a3130303a3a2f33322d3438203d3e2039393035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:100::/32
Signature Algorithm: sha256WithRSAEncryption
15:e5:c5:53:c9:28:ae:d1:b0:5b:aa:d4:cb:92:d5:b3:70:93:
2d:ba:a1:98:5d:c7:e9:76:45:ae:6a:49:c8:05:67:68:63:0a:
aa:ef:6a:68:e8:ac:84:37:a4:94:64:75:86:43:c1:90:b8:ba:
5b:28:2f:8e:36:00:87:df:72:62:93:3d:20:7e:2f:64:78:ea:
5a:39:21:aa:a0:74:98:ee:1a:23:e3:8e:06:16:be:42:38:e6:
8b:85:39:dc:1c:1d:80:16:6a:54:9a:40:d7:75:a1:a1:cd:16:
ab:c0:57:df:a0:2f:02:88:e8:be:95:04:fc:72:38:6b:14:28:
39:2b:53:f4:0b:a9:54:96:e9:d0:6b:25:d3:dc:ac:de:08:b3:
dd:ac:72:88:1e:1c:64:6f:f7:c3:40:36:5d:11:9b:3d:05:92:
ec:d1:09:ba:fd:c5:b7:d7:02:7a:d4:44:be:81:3c:35:d1:a1:
b9:f4:09:99:ec:49:79:a5:eb:97:dd:2e:10:d2:b4:a4:76:86:
2c:89:86:3f:92:12:53:7c:1d:da:64:e0:cb:e9:ca:96:0a:ed:
40:dc:e8:41:2c:a4:ce:c5:6e:fd:d7:31:93:72:62:db:5b:7c:
d7:2a:cc:8e:7b:03:66:58:c9:8d:98:20:40:41:0a:0e:8d:80:
2d:d2:21:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:24 2026 by rpki-client