
$ rpki-client -vvf rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030323a3a2f34382d3438203d3e203535363835.roa
File: 323430343a653130303a333030323a3a2f34382d3438203d3e203535363835.roa (raw, json)
Hash identifier: GhWk8OpqwUpIBUXAgpGGL+KSvBEekP6n3orq3IOYLy0=
Subject key identifier: F0:3D:08:19:43:65:23:08:4F:68:C2:0D:00:B0:70:2E:26:E7:CA:A8
Certificate issuer: /CN=408DEB7465856EE053B64340FA814B862FA5ED30
Certificate serial: 70BFAD374D979D7EECBC751D8B8AC6A252A59731
Authority key identifier: 40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030323a3a2f34382d3438203d3e203535363835.roa
Signing time: Sun 03 May 2026 02:47:55 +0000
ROA not before: Sun 03 May 2026 02:42:55 +0000
ROA not after: Sun 02 May 2027 02:47:55 +0000
asID: 55685
IP address blocks: 2404:e100:3002::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl
rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:05:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:bf:ad:37:4d:97:9d:7e:ec:bc:75:1d:8b:8a:c6:a2:52:a5:97:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408DEB7465856EE053B64340FA814B862FA5ED30
Validity
Not Before: May 3 02:42:55 2026 GMT
Not After : May 2 02:47:55 2027 GMT
Subject: CN=F03D0819436523084F68C20D00B0702E26E7CAA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:80:9a:bb:d5:64:5e:50:cc:d4:96:07:e7:c3:
a0:88:3a:16:89:92:d0:c0:dc:97:31:db:33:cb:4a:
31:a3:1a:e2:e2:98:5b:37:fc:fd:97:0b:d7:5f:4e:
13:66:36:1a:22:c0:25:48:4f:7e:a8:4f:d5:ea:a6:
b6:3c:2c:e5:bd:a4:3a:7f:9f:25:5e:c5:62:6a:ad:
5b:f8:b0:71:f1:c2:2f:c1:6a:fe:f6:e3:3d:72:99:
5e:d5:a0:6f:c3:ca:37:06:3b:52:21:75:69:5d:38:
de:44:2e:2c:29:66:5a:a9:b0:b9:4d:f8:18:d9:e2:
a5:f1:7a:3e:25:65:12:27:80:68:b5:8e:35:e7:a5:
ff:c2:c3:14:ee:88:78:7f:a9:8d:9b:9b:85:27:49:
a6:b0:75:2d:a5:8a:5d:fe:ab:32:5d:92:57:cf:b6:
02:c4:f2:75:e7:18:b5:2b:42:2e:34:bd:65:43:8c:
9b:f5:35:02:4a:d0:d1:e8:3a:5f:be:3b:d6:f4:c9:
d5:08:22:00:25:69:07:c6:2f:3e:11:11:dc:3a:db:
dc:cf:92:41:b1:2f:c9:b4:76:c5:1b:76:51:6b:8c:
ff:65:5e:65:12:d1:c8:70:3c:50:ea:03:44:ab:35:
ff:e4:a7:90:b5:83:b2:b5:73:66:d6:e5:e6:0a:64:
a6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3D:08:19:43:65:23:08:4F:68:C2:0D:00:B0:70:2E:26:E7:CA:A8
X509v3 Authority Key Identifier:
keyid:40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030323a3a2f34382d3438203d3e203535363835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:e100:3002::/48
Signature Algorithm: sha256WithRSAEncryption
97:50:06:5f:d4:74:65:31:6d:46:ec:84:dc:fa:31:29:73:0f:
97:1f:71:3c:a7:a0:ef:fb:1c:67:7b:55:ec:8b:63:25:bf:c4:
0b:7f:8c:98:59:2d:f9:27:a9:90:50:94:00:61:c0:f5:df:ac:
40:de:0f:81:f2:2c:5d:df:da:a4:6a:dd:5c:8c:46:c2:b1:d0:
4f:68:26:fd:21:27:52:40:dc:0e:2d:52:af:7c:29:e9:f7:9c:
09:da:fb:ff:a0:b4:59:2c:e2:9d:76:3e:ce:b1:ee:33:c3:de:
5e:f6:16:d1:5f:4b:5b:0d:45:4e:d4:67:b3:67:c3:65:04:0d:
93:a3:36:9c:84:8b:4f:ea:da:c0:44:0b:54:fe:5a:4b:2c:31:
1f:0f:02:0c:c3:d8:a6:2c:c7:b8:35:7c:07:d7:9f:b1:15:f0:
54:88:87:3a:e3:62:b9:16:36:0a:92:7b:74:7c:59:67:69:bf:
9f:01:08:3f:cb:c6:f5:5b:23:3b:1e:51:db:01:7e:cc:ac:74:
e9:a6:35:ff:b4:73:98:53:8e:f6:42:ea:30:4e:38:60:bb:25:
18:30:d2:13:23:aa:74:f7:90:c8:cf:2b:79:1d:86:91:8e:84:
d8:d9:1a:52:ca:68:34:0c:5a:ff:5b:84:d1:3f:6c:cc:2c:fc:
c0:6d:9f:79
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUcL+tN02XnX7svHUdi4rGolKllzEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDA4REVCNzQ2NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYy
RkE1RUQzMDAeFw0yNjA1MDMwMjQyNTVaFw0yNzA1MDIwMjQ3NTVaMDMxMTAvBgNV
BAMTKEYwM0QwODE5NDM2NTIzMDg0RjY4QzIwRDAwQjA3MDJFMjZFN0NBQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCugJq71WReUMzUlgfnw6CIOhaJ
ktDA3Jcx2zPLSjGjGuLimFs3/P2XC9dfThNmNhoiwCVIT36oT9XqprY8LOW9pDp/
nyVexWJqrVv4sHHxwi/Bav724z1ymV7VoG/DyjcGO1IhdWldON5ELiwpZlqpsLlN
+BjZ4qXxej4lZRIngGi1jjXnpf/CwxTuiHh/qY2bm4UnSaawdS2lil3+qzJdklfP
tgLE8nXnGLUrQi40vWVDjJv1NQJK0NHoOl++O9b0ydUIIgAlaQfGLz4REdw629zP
kkGxL8m0dsUbdlFrjP9lXmUS0chwPFDqA0SrNf/kp5C1g7K1c2bW5eYKZKY3AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU8D0IGUNlIwhPaMINALBwLibnyqgwHwYDVR0j
BBgwFoAUQI3rdGWFbuBTtkNA+oFLhi+l7TAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODVkOGRhYjQtOGJiNi00ZWQwLThkYWItNWE0MDYxNjdiOTlkLzAvNDA4REVCNzQ2
NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYyRkE1RUQzMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80MDhERUI3NDY1ODU2RUUwNTNCNjQzNDBGQTgxNEI4NjJGQTVF
RDMwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04
ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMyMzQzMDM0M2E2NTMxMzAzMDNhMzMzMDMwMzIz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTM1MzYzODM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJATh
ADACMA0GCSqGSIb3DQEBCwUAA4IBAQCXUAZf1HRlMW1G7ITc+jEpcw+XH3E8p6Dv
+xxne1Xsi2Mlv8QLf4yYWS35J6mQUJQAYcD136xA3g+B8ixd39qkat1cjEbCsdBP
aCb9ISdSQNwOLVKvfCnp95wJ2vv/oLRZLOKddj7Ose4zw95e9hbRX0tbDUVO1Gez
Z8NlBA2TozachItP6trARAtU/lpLLDEfDwIMw9imLMe4NXwH15+xFfBUiIc642K5
FjYKknt0fFlnab+fAQg/y8b1WyM7HlHbAX7MrHTppjX/tHOYU472QuowTjhguyUY
MNITI6p095DIzyt5HYaRjoTY2RpSymg0DFr/W4TRP2zMLPzAbZ95
-----END CERTIFICATE-----
Generated at Wed May 13 05:35:58 2026 by rpki-client