
$ rpki-client -vvf rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/323430313a316430303a3a2f33322d3332203d3e203338353035.roa
File: 323430313a316430303a3a2f33322d3332203d3e203338353035.roa (raw, json)
Hash identifier: U8aX+Se6czCWSw8AT++C8Q2LboeUeYibiDJAjvnWwyg=
Subject key identifier: F1:B5:B2:00:82:68:CE:33:2C:7E:AC:44:D8:9D:42:0A:39:33:BB:C2
Certificate issuer: /CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993
Certificate serial: 469DCDAF39135222A8EA3AD17382A64A75333A80
Authority key identifier: 04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/323430313a316430303a3a2f33322d3332203d3e203338353035.roa
Signing time: Sun 03 May 2026 02:47:40 +0000
ROA not before: Sun 03 May 2026 02:42:40 +0000
ROA not after: Sun 02 May 2027 02:47:40 +0000
asID: 38505
IP address blocks: 2401:1d00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl
rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:9d:cd:af:39:13:52:22:a8:ea:3a:d1:73:82:a6:4a:75:33:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993
Validity
Not Before: May 3 02:42:40 2026 GMT
Not After : May 2 02:47:40 2027 GMT
Subject: CN=F1B5B2008268CE332C7EAC44D89D420A3933BBC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:58:75:cb:88:54:ce:33:5a:92:c2:ec:cc:08:
17:88:e4:cd:c1:67:b2:e2:c8:b3:b9:86:1e:c9:03:
06:2f:a0:4c:c0:58:99:8d:6c:38:1c:1c:7d:0c:05:
e8:0b:c3:67:3e:d7:84:d5:fd:0b:1a:87:81:27:da:
55:30:27:15:56:df:84:49:de:86:70:b7:f3:28:01:
8c:20:7e:17:dd:9d:39:17:bc:40:04:ce:9b:a2:4b:
81:37:d2:de:6a:53:5d:27:2b:21:c7:0a:c5:b4:07:
87:db:ba:72:a5:58:5b:56:dc:70:e1:e7:dc:ed:82:
7b:d4:db:02:65:f9:95:94:2b:39:b8:54:ee:05:e0:
3b:2c:72:0a:39:f0:c6:cf:27:b9:9f:30:e7:32:21:
15:20:de:ea:ef:56:d4:9e:99:c5:d8:65:23:71:ee:
f8:ea:81:41:74:4e:4c:02:1a:da:5b:d6:68:ef:ac:
65:3f:9b:61:2f:b5:f3:27:76:60:9e:ab:24:33:21:
1f:b6:ac:85:57:9a:d2:e4:42:0d:ed:15:81:1d:10:
5c:43:08:57:7b:27:5e:b6:3e:b0:09:72:ab:80:ce:
31:d5:70:93:2a:a6:02:76:98:ad:99:3a:c7:5d:df:
c4:b4:58:03:e6:87:16:36:49:75:95:db:f8:f1:1e:
fc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B5:B2:00:82:68:CE:33:2C:7E:AC:44:D8:9D:42:0A:39:33:BB:C2
X509v3 Authority Key Identifier:
keyid:04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/323430313a316430303a3a2f33322d3332203d3e203338353035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:1d00::/32
Signature Algorithm: sha256WithRSAEncryption
03:61:33:1c:34:51:52:6d:23:ad:8c:4c:da:e0:93:8e:c1:40:
3f:62:4c:c5:41:e2:4d:31:f7:cf:f6:37:7c:2c:51:4a:4f:4d:
c7:4b:31:c3:a1:15:0d:cd:43:86:f9:34:19:0c:27:be:15:00:
fe:d9:33:44:44:a5:18:10:54:19:fa:b2:06:9a:72:70:4d:02:
27:46:b9:23:b1:45:35:85:c4:c3:55:5d:d9:98:66:aa:d4:2c:
10:c1:5d:0a:ff:3b:43:7e:f0:f4:41:43:45:dc:d2:b5:9f:25:
9c:ce:42:6e:be:78:62:8e:d4:90:3f:6a:a6:9b:96:f5:54:22:
dc:66:e6:b3:90:25:fb:3b:18:0b:97:26:c5:86:f0:3e:b3:f2:
e8:ff:9a:67:7b:f6:fb:9b:d2:18:06:45:52:6c:24:d0:6e:4d:
7a:ce:24:51:3f:9c:a2:ab:6f:ca:b0:da:0a:5a:73:46:97:16:
92:c9:a9:78:f0:36:5c:23:37:63:9e:48:f7:c7:1a:bd:f2:73:
cb:03:6c:81:6f:89:61:70:7c:d0:be:f2:40:a4:09:61:c8:21:
06:b1:6d:2b:a9:f0:ad:e8:54:db:ad:fe:b5:9e:6d:7b:83:84:
7f:d9:0f:fc:00:b5:11:e6:af:67:15:37:b5:34:cf:06:ac:39:
ea:08:7f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:27:09 2026 by rpki-client