
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa
File: 323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa (raw, json)
Hash identifier: iEOirfkgczYrzGd99jmi+CiuNPWk8r0epFlglE1baOk=
Subject key identifier: F7:CC:6E:39:87:4B:CD:01:2C:EF:AC:B7:4C:AF:2C:5C:17:49:B4:A2
Certificate issuer: /CN=A756644413E3B0EEE4F12FAD5122BD7A104B029F
Certificate serial: 1E5F4F7ED2FDD284123AB3F73D8E0902064E84B9
Authority key identifier: A7:56:64:44:13:E3:B0:EE:E4:F1:2F:AD:51:22:BD:7A:10:4B:02:9F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A756644413E3B0EEE4F12FAD5122BD7A104B029F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa
Signing time: Sun 03 May 2026 02:45:56 +0000
ROA not before: Sun 03 May 2026 02:40:56 +0000
ROA not after: Sun 02 May 2027 02:45:56 +0000
asID: 131769
IP address blocks: 2001:df2:ef00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/A756644413E3B0EEE4F12FAD5122BD7A104B029F.crl
rsync://rpki-rsync.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/A756644413E3B0EEE4F12FAD5122BD7A104B029F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A756644413E3B0EEE4F12FAD5122BD7A104B029F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:09:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:5f:4f:7e:d2:fd:d2:84:12:3a:b3:f7:3d:8e:09:02:06:4e:84:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A756644413E3B0EEE4F12FAD5122BD7A104B029F
Validity
Not Before: May 3 02:40:56 2026 GMT
Not After : May 2 02:45:56 2027 GMT
Subject: CN=F7CC6E39874BCD012CEFACB74CAF2C5C1749B4A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:c7:1a:c0:1f:75:b7:4b:91:b5:b3:08:d9:
2e:67:f3:39:8f:21:90:ae:db:ec:46:d2:db:45:fc:
57:97:53:f2:8b:92:8f:3f:14:50:fb:66:0f:b4:74:
ab:d5:e2:32:39:1d:f7:3b:ee:b5:83:b3:3f:60:10:
dc:b1:6a:9f:3d:9e:56:e9:58:13:f0:43:02:74:dd:
a1:ea:f1:12:0e:3b:b5:eb:84:d5:43:1b:28:04:90:
f1:00:39:a9:6a:ab:e4:5e:6c:2b:b2:b7:8e:76:3f:
d1:9f:d6:d5:db:27:f2:0f:c4:1f:0d:08:f2:1a:ca:
7a:6d:b8:bc:6d:7d:c4:4c:97:29:7e:00:44:2d:b5:
95:f7:7a:a3:f3:69:fd:c8:40:62:0c:27:9a:af:54:
ca:39:60:8b:b7:c5:0b:3c:08:2b:4e:53:f9:e4:f3:
c6:68:0b:a2:50:c5:fa:a9:f0:89:2e:bf:40:d5:42:
82:6e:30:95:89:1b:0f:83:8a:fe:6b:9b:f9:15:e3:
de:36:eb:8a:b5:5b:3e:46:1f:ee:dc:26:83:6b:84:
d8:90:83:87:74:19:29:7d:cd:0e:3e:f7:fb:45:99:
88:65:10:af:49:41:90:ff:e7:06:a8:13:21:55:69:
19:8c:e3:9b:e5:60:08:4e:5f:8d:ad:53:34:d8:08:
4f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CC:6E:39:87:4B:CD:01:2C:EF:AC:B7:4C:AF:2C:5C:17:49:B4:A2
X509v3 Authority Key Identifier:
keyid:A7:56:64:44:13:E3:B0:EE:E4:F1:2F:AD:51:22:BD:7A:10:4B:02:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/A756644413E3B0EEE4F12FAD5122BD7A104B029F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A756644413E3B0EEE4F12FAD5122BD7A104B029F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:ef00::/48
Signature Algorithm: sha256WithRSAEncryption
34:5c:25:2e:2c:74:3a:a5:31:bb:15:44:aa:37:e3:0b:07:39:
fc:41:9d:fa:1c:ff:3e:2f:79:fc:bb:38:78:ab:98:43:73:1b:
4a:ee:8e:91:4d:69:ff:0a:a1:48:f2:a0:31:09:86:b5:5f:5b:
13:63:b6:bc:99:76:33:3b:84:21:d6:b6:64:53:35:06:1d:86:
71:84:12:8b:7a:69:51:92:34:8d:64:62:00:20:7f:e0:c4:ed:
59:c1:3c:25:f1:33:95:d1:d1:07:b9:93:fd:5f:80:a0:49:aa:
06:ea:f5:ab:e6:e4:8d:07:0f:e8:ee:bc:e0:9c:c1:b4:11:0f:
c1:9e:9f:32:af:24:30:36:ee:eb:03:30:6e:16:fb:8e:f9:ab:
66:84:a8:95:b5:d1:0f:95:9b:53:2d:ac:7e:77:4d:a2:e2:49:
c8:6b:3f:44:24:48:e9:04:e2:b0:c7:80:72:31:cf:3f:d1:fa:
e1:22:73:de:e6:d2:60:1b:8f:45:ec:6f:a1:f1:b6:57:8b:bd:
55:50:5d:98:36:9d:6c:a5:56:78:48:34:5a:9a:7c:42:65:7e:
f5:6d:01:fa:af:e0:07:ca:0e:1f:99:de:b9:52:47:78:fe:49:
5a:aa:42:9e:44:b4:4c:88:db:96:52:8a:de:87:69:2c:be:c1:
f6:45:49:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:51:56 2026 by rpki-client