
$ rpki-client -vvf rpki-rsync.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/323030313a6466323a353463303a3a2f34382d3438203d3e20313432333638.roa
File: 323030313a6466323a353463303a3a2f34382d3438203d3e20313432333638.roa (raw, json)
Hash identifier: rLDPQJO68wJrimu4TJs2pIl/cXWHfaWgrJapXpkI9R8=
Subject key identifier: 2B:1F:81:4C:0A:E7:11:A5:29:89:17:C9:42:80:99:DE:A5:5A:BA:D2
Certificate issuer: /CN=C1107160ED19380A2A35934230DDBD4EBFCD6BB6
Certificate serial: 67816823088527E857BE5E3B3AB33C3A6232325D
Authority key identifier: C1:10:71:60:ED:19:38:0A:2A:35:93:42:30:DD:BD:4E:BF:CD:6B:B6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/323030313a6466323a353463303a3a2f34382d3438203d3e20313432333638.roa
Signing time: Sun 03 May 2026 02:47:20 +0000
ROA not before: Sun 03 May 2026 02:42:20 +0000
ROA not after: Sun 02 May 2027 02:47:20 +0000
asID: 142368
IP address blocks: 2001:df2:54c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.crl
rsync://rpki-rsync.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:81:68:23:08:85:27:e8:57:be:5e:3b:3a:b3:3c:3a:62:32:32:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1107160ED19380A2A35934230DDBD4EBFCD6BB6
Validity
Not Before: May 3 02:42:20 2026 GMT
Not After : May 2 02:47:20 2027 GMT
Subject: CN=2B1F814C0AE711A5298917C9428099DEA55ABAD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:34:c3:cb:45:d7:65:61:a7:a9:31:3b:6f:fa:
9d:75:06:a3:b4:41:48:42:97:ef:26:4c:8b:6c:1e:
27:83:85:54:ce:93:b7:47:d7:77:9f:a2:34:3b:c8:
76:d9:5b:b2:bf:0a:c8:51:e5:f7:e1:b1:33:12:88:
ec:5a:b5:7f:f9:d9:bd:15:5a:9a:cb:2b:cf:58:07:
45:82:cd:67:5a:2f:fb:d4:9e:d7:c6:b6:7c:21:b5:
18:cb:b2:61:0f:c2:e9:93:a7:09:be:ed:82:13:a4:
31:3f:98:f5:ce:a4:0e:4c:b3:04:76:b0:06:f7:6a:
c2:fd:2f:5e:54:d5:15:bc:5b:6d:3f:fa:f9:fd:58:
d8:34:ab:f6:23:87:5d:18:1b:72:66:60:8b:f5:80:
18:61:e2:9e:77:8f:e4:e3:59:2c:6f:bd:7e:6a:61:
ea:74:77:06:20:9c:10:da:22:a0:66:6c:30:b2:a2:
ed:b3:4f:83:24:bb:47:98:2b:f5:3d:86:ce:fd:06:
72:a5:c9:85:27:b3:1b:90:90:0f:f1:73:c8:7e:21:
9f:b3:9e:6e:71:52:9c:72:a0:c1:8d:72:bc:49:da:
fd:52:35:ad:3b:6f:35:ce:04:63:37:6b:17:19:2e:
81:96:bc:3c:e1:e2:2d:6d:13:71:c4:da:8b:38:7e:
98:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1F:81:4C:0A:E7:11:A5:29:89:17:C9:42:80:99:DE:A5:5A:BA:D2
X509v3 Authority Key Identifier:
keyid:C1:10:71:60:ED:19:38:0A:2A:35:93:42:30:DD:BD:4E:BF:CD:6B:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/323030313a6466323a353463303a3a2f34382d3438203d3e20313432333638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:54c0::/48
Signature Algorithm: sha256WithRSAEncryption
a1:fb:5c:85:65:96:37:f6:b4:c3:18:be:4e:12:43:2e:aa:91:
c5:39:ba:9f:ea:74:6a:9f:10:bc:7b:37:fb:96:e0:30:04:ff:
bf:44:69:50:c4:1d:a6:9a:c6:fb:e3:7f:61:2c:91:01:80:01:
14:81:73:43:47:d6:00:d2:4c:16:2b:26:e6:65:35:9f:2d:06:
c8:4d:cf:09:4f:67:f1:d9:a7:e7:e0:05:55:b5:b6:a7:5a:8f:
f3:8a:ae:8d:e6:5a:7a:58:f4:79:8f:44:c0:26:13:26:9c:fb:
21:89:79:6f:fc:6e:49:cc:fa:1d:41:ab:58:08:d9:f7:11:c6:
b8:fb:36:c0:41:14:d4:14:8c:eb:0e:3b:c3:14:a4:b2:78:d5:
9c:42:8b:c6:bf:7d:d3:04:e1:0d:17:db:0d:ed:8b:fb:46:63:
ab:5f:64:d7:e0:34:5f:5d:7b:6c:5e:86:95:a4:be:06:2f:67:
4a:ea:ae:cd:5c:f4:ea:73:d1:68:27:fb:bb:2d:d9:b6:34:23:
97:5c:b6:20:0c:a4:3f:7d:1a:2f:44:f6:e5:d7:c8:11:72:5f:
f0:eb:27:21:9e:90:e6:80:e9:5a:90:13:cd:5a:d0:7d:18:f1:
89:dc:00:cf:bf:b2:9c:6c:dd:69:7a:0a:18:90:55:4c:aa:d3:
f5:a6:db:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:23:44 2026 by rpki-client