
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a3a2f33322d3332203d3e203338353234.roa
File: 323430313a646538303a3a2f33322d3332203d3e203338353234.roa (raw, json)
Hash identifier: /+AV32qPV8MACDHJgW77LAGGVS4Uow1Wk7ehK668SIk=
Subject key identifier: 4B:62:E9:A1:35:4C:5D:DA:44:4E:61:69:39:25:9C:A2:1A:FD:C2:D8
Certificate issuer: /CN=9436E607F375F72BBD96588FBB7CE6D5B628FF86
Certificate serial: 11BCAC28D95562228219EF19FAD963F755E6208F
Authority key identifier: 94:36:E6:07:F3:75:F7:2B:BD:96:58:8F:BB:7C:E6:D5:B6:28:FF:86
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a3a2f33322d3332203d3e203338353234.roa
Signing time: Sun 03 May 2026 02:46:23 +0000
ROA not before: Sun 03 May 2026 02:41:23 +0000
ROA not after: Sun 02 May 2027 02:46:23 +0000
asID: 38524
IP address blocks: 2401:de80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.crl
rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:bc:ac:28:d9:55:62:22:82:19:ef:19:fa:d9:63:f7:55:e6:20:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9436E607F375F72BBD96588FBB7CE6D5B628FF86
Validity
Not Before: May 3 02:41:23 2026 GMT
Not After : May 2 02:46:23 2027 GMT
Subject: CN=4B62E9A1354C5DDA444E616939259CA21AFDC2D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:28:ca:54:86:49:68:14:aa:82:b0:15:3c:23:
ba:38:89:75:e6:59:ad:ff:f1:57:84:b5:f1:62:cc:
f2:30:fe:87:ec:00:92:09:55:9e:49:8b:28:b8:58:
b9:26:5d:26:a3:83:77:c7:36:6a:d1:3c:ad:2d:2f:
48:86:76:70:de:b7:e8:9d:1a:0c:54:fa:ab:9a:fe:
15:88:f3:59:60:2b:c1:11:9a:2a:f8:8f:6e:38:c1:
86:5f:c7:cf:0f:33:6c:28:02:1a:30:56:10:1c:2a:
49:56:b7:e4:ab:3d:0f:c0:3c:5e:ea:ed:a7:1f:0c:
0a:55:b9:4b:61:11:b9:58:fe:90:ce:f8:d6:3c:05:
1e:5f:4c:7d:54:22:a2:99:d5:5b:7f:9a:1e:9b:56:
1f:d8:5b:eb:1c:a3:b8:6d:e8:b7:16:7d:49:83:0b:
74:d1:7b:eb:86:b2:22:4e:14:b6:d8:e8:f0:da:f9:
2a:8a:6c:55:dc:56:b0:be:d9:50:d2:f6:fc:4f:3a:
44:2e:55:7c:b5:48:87:be:73:c7:56:7e:f9:53:0f:
e3:ee:f6:23:32:c4:ea:8c:b6:59:cb:33:48:b2:b0:
22:74:09:a5:6d:cf:41:e5:c0:22:3c:53:63:9d:e3:
32:7b:5f:4b:80:4f:48:9f:38:36:e0:a6:c8:6e:b3:
5b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:62:E9:A1:35:4C:5D:DA:44:4E:61:69:39:25:9C:A2:1A:FD:C2:D8
X509v3 Authority Key Identifier:
keyid:94:36:E6:07:F3:75:F7:2B:BD:96:58:8F:BB:7C:E6:D5:B6:28:FF:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a3a2f33322d3332203d3e203338353234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:de80::/32
Signature Algorithm: sha256WithRSAEncryption
9d:48:ef:e3:b8:88:e6:f9:bb:99:38:d8:d5:3b:0f:01:06:49:
78:ac:8d:b4:cf:77:20:66:32:52:66:68:93:4a:92:f8:de:c3:
54:89:aa:c5:60:bd:74:7f:50:ce:64:63:68:88:1e:6d:5c:3d:
43:03:7a:68:5f:69:f5:30:25:03:74:1c:7f:64:a9:28:54:3a:
6e:d6:f6:6f:89:51:1a:b5:de:15:eb:39:a7:6d:8d:f8:ce:98:
3a:2c:4a:03:e9:35:99:21:97:58:1a:c5:11:e7:b7:e4:c1:96:
5e:37:fc:94:08:fe:0e:76:17:64:fd:70:64:4e:b7:a2:01:f8:
cc:51:8b:d4:59:64:f8:52:0d:ea:9b:2a:88:96:d7:7f:15:a3:
d9:23:a7:72:f3:46:89:b6:d8:10:80:c2:8f:c2:04:88:8d:c6:
b2:ac:81:87:60:99:a5:13:1a:e3:be:a2:39:c6:c4:c0:e9:4f:
fb:43:41:35:e9:e3:79:4d:8a:6b:ad:5e:78:e3:d9:fa:5a:9d:
be:ff:17:a4:aa:d5:54:d7:f7:bf:e0:5a:40:0d:c0:e0:22:a0:
ce:96:95:83:6a:2b:fb:db:9e:3f:8d:74:3c:23:12:8b:fc:62:
db:fc:74:05:03:d3:f1:31:03:44:79:32:21:bc:44:11:eb:0b:
5e:50:ee:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:23:06 2026 by rpki-client