
$ rpki-client -vvf rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/323030313a6466363a353330303a3a2f34382d3438203d3e20313439373130.roa
File: 323030313a6466363a353330303a3a2f34382d3438203d3e20313439373130.roa (raw, json)
Hash identifier: u8jjg+GiS9S6r5A4phLntvppacWIJllmMAB+9fmlXA0=
Subject key identifier: 8E:BA:5E:BA:B1:0C:30:A6:51:45:D6:0A:EF:4C:3B:F4:6A:F3:FA:A3
Certificate issuer: /CN=4BCE188DE42B539EBB860A376D13FE292B001147
Certificate serial: 21EA60582B99C9F902E254A345961380C8BDCD23
Authority key identifier: 4B:CE:18:8D:E4:2B:53:9E:BB:86:0A:37:6D:13:FE:29:2B:00:11:47
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/323030313a6466363a353330303a3a2f34382d3438203d3e20313439373130.roa
Signing time: Sun 03 May 2026 02:47:35 +0000
ROA not before: Sun 03 May 2026 02:42:35 +0000
ROA not after: Sun 02 May 2027 02:47:35 +0000
asID: 149710
IP address blocks: 2001:df6:5300::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.crl
rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ea:60:58:2b:99:c9:f9:02:e2:54:a3:45:96:13:80:c8:bd:cd:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BCE188DE42B539EBB860A376D13FE292B001147
Validity
Not Before: May 3 02:42:35 2026 GMT
Not After : May 2 02:47:35 2027 GMT
Subject: CN=8EBA5EBAB10C30A65145D60AEF4C3BF46AF3FAA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:0b:2b:55:df:e6:84:00:f8:71:cf:2a:06:
8b:25:8e:7e:01:c0:20:6f:d1:5f:1d:31:12:f2:a3:
78:f1:bf:32:85:a9:1a:9a:0f:03:29:88:11:0a:ff:
f6:75:a2:99:7e:3e:8c:b9:04:83:91:21:d0:11:14:
cb:5f:88:37:46:36:4d:9e:c2:56:b0:87:59:d0:e3:
ad:26:39:c6:c5:35:72:db:df:17:94:f3:35:25:3d:
5e:80:9f:e3:34:d9:94:49:6f:9f:16:08:23:66:7c:
62:56:15:2c:7a:ef:53:29:1d:95:05:12:f2:08:0d:
22:74:10:ad:92:5c:4e:80:e0:31:1c:cc:94:b2:b0:
e6:c2:f6:f8:c9:9a:cc:0a:d0:a1:75:60:d1:64:07:
75:48:da:4f:47:d2:a6:90:ad:82:45:bd:ba:ac:dd:
6a:7f:84:0e:22:9d:62:6a:5c:a0:9f:1d:e2:fd:c3:
3b:2a:1f:57:ef:38:a9:75:d6:5f:d5:dc:e2:8b:07:
0d:87:50:c5:f7:b7:0a:59:c3:28:86:f6:68:e3:26:
4d:9f:03:10:3b:cc:04:9c:4d:ee:25:f6:cf:0b:f3:
31:78:42:3a:be:bd:d6:a8:af:0a:83:6b:59:ec:0b:
67:1a:39:6a:0b:f6:b6:1e:e2:35:bd:e3:4d:e0:8a:
c6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BA:5E:BA:B1:0C:30:A6:51:45:D6:0A:EF:4C:3B:F4:6A:F3:FA:A3
X509v3 Authority Key Identifier:
keyid:4B:CE:18:8D:E4:2B:53:9E:BB:86:0A:37:6D:13:FE:29:2B:00:11:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/323030313a6466363a353330303a3a2f34382d3438203d3e20313439373130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:5300::/48
Signature Algorithm: sha256WithRSAEncryption
9b:54:54:4e:8d:02:7d:60:db:05:95:42:72:72:ce:ec:e6:ba:
7a:e9:7c:f5:4e:c2:f7:86:7d:e2:fc:f9:df:54:62:1f:ef:af:
09:21:62:70:05:50:f7:a3:4f:ad:22:5e:2a:fd:f9:db:71:07:
38:7c:f7:00:a0:d3:e7:88:8c:f3:8a:b4:33:3b:ba:bc:1a:b7:
51:22:f8:41:dd:78:e9:95:93:b6:c0:5e:91:0b:e8:78:39:5c:
b5:b8:e3:5e:d4:21:84:5b:d7:af:2c:6b:32:58:9a:6c:fd:a3:
2b:a4:d5:de:3d:dd:41:47:28:3d:a8:aa:da:3d:40:f5:bc:05:
46:48:66:44:13:7d:3c:e6:d0:c8:0d:21:1b:5b:2f:10:3a:04:
db:29:ef:03:72:52:54:4e:b1:24:dd:c1:58:26:43:85:4e:1b:
58:68:6f:23:d3:9b:42:73:f2:cd:89:8c:13:1c:8a:52:26:fe:
a8:f6:05:77:c0:61:de:03:b2:bf:05:15:96:3f:20:cb:9d:09:
c1:a1:58:30:51:fd:9a:be:af:d6:8e:6a:d0:bd:26:45:70:d8:
18:e7:6b:b1:fc:af:d1:46:94:6d:92:27:4a:41:23:58:f2:a4:
33:34:46:1b:2e:2d:75:91:be:92:a6:2f:b1:65:c5:b6:e8:29:
d1:17:7c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:00:25 2026 by rpki-client