
$ rpki-client -vvf rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a343030303a3a2f33362d3336203d3e203633383632.roa
File: 323430313a663938303a343030303a3a2f33362d3336203d3e203633383632.roa (raw, json)
Hash identifier: FmE6EgtaiTdvHmSv4NYOkhmIVErFQ56Arw5rq6qu5sc=
Subject key identifier: FA:AE:6F:2B:C0:B6:66:C8:8E:C6:21:98:5F:D2:BC:A7:A0:CC:87:E4
Certificate issuer: /CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E
Certificate serial: 62E9F65EC74DD17C9A7A1937597DC806877BB000
Authority key identifier: F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a343030303a3a2f33362d3336203d3e203633383632.roa
Signing time: Sun 03 May 2026 02:48:42 +0000
ROA not before: Sun 03 May 2026 02:43:42 +0000
ROA not after: Sun 02 May 2027 02:48:42 +0000
asID: 63862
IP address blocks: 2401:f980:4000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl
rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:04:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:e9:f6:5e:c7:4d:d1:7c:9a:7a:19:37:59:7d:c8:06:87:7b:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E
Validity
Not Before: May 3 02:43:42 2026 GMT
Not After : May 2 02:48:42 2027 GMT
Subject: CN=FAAE6F2BC0B666C88EC621985FD2BCA7A0CC87E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3f:54:8f:ea:da:ff:02:3c:df:5a:59:93:c0:
96:bf:54:d7:54:0f:4b:41:6d:a5:c5:14:6c:7f:8e:
f9:64:67:f3:36:41:9b:cb:13:03:c0:78:cd:a8:ff:
ee:32:78:29:71:57:90:dd:ea:bb:68:d7:9a:ef:c2:
72:38:13:25:19:af:97:95:5d:ab:d0:42:7b:f4:10:
9f:45:57:e5:7d:37:26:e2:f6:ac:9b:c6:88:d3:c1:
9f:37:4a:53:c2:1b:f7:18:65:f9:09:67:21:26:18:
15:81:05:94:58:1b:b2:63:99:13:6d:02:b2:8f:87:
90:6c:9a:38:a4:00:10:1e:44:f5:52:65:02:18:78:
cc:95:1c:0a:22:13:b6:71:00:c1:99:4b:5d:e1:fa:
0b:6a:72:4e:73:1e:0e:ad:0b:14:3e:bb:4e:1b:fe:
77:7d:8b:18:d8:d3:6f:ba:63:43:3e:76:62:d6:b2:
ce:6b:fb:dc:45:fa:a2:50:0c:e3:9b:c0:61:8f:8c:
85:24:8d:59:c1:a3:1b:0d:c9:ed:67:19:65:bd:d0:
4a:15:f7:a8:6e:13:f6:87:28:c5:f1:7b:ae:e0:be:
22:68:a3:53:99:5b:dd:21:72:eb:10:3f:e3:91:8d:
5d:71:ef:50:01:3b:1a:a1:e0:33:71:8e:6e:34:2b:
13:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AE:6F:2B:C0:B6:66:C8:8E:C6:21:98:5F:D2:BC:A7:A0:CC:87:E4
X509v3 Authority Key Identifier:
keyid:F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a343030303a3a2f33362d3336203d3e203633383632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:f980:4000::/36
Signature Algorithm: sha256WithRSAEncryption
bb:50:b1:b4:27:dc:6e:d3:18:7c:6f:8a:ec:fc:da:c0:7b:3f:
3d:5b:ee:f8:43:a8:f5:34:3a:e4:35:0e:4a:3c:55:77:ce:35:
c2:0c:e9:b3:c8:08:ed:58:ab:98:ff:b0:21:fe:c6:fc:4b:a8:
96:e9:0b:7d:d2:ec:08:8f:0a:94:48:17:a9:d8:fd:b3:dc:38:
aa:43:99:10:4b:1d:f1:66:79:02:b7:ab:91:7f:bb:6d:09:72:
23:99:28:47:df:18:c1:bf:fe:60:b7:20:d5:a6:8b:4f:49:4d:
1c:3a:85:17:a6:fd:61:01:d4:94:c3:cd:fe:e4:ff:97:5c:e4:
40:3d:82:7d:d1:0c:63:eb:65:59:64:ef:78:5f:d4:f0:91:13:
98:1e:8b:2e:61:78:d9:da:ab:52:2a:9e:d6:98:aa:f3:04:ce:
4f:dc:67:56:0d:25:18:dc:82:7a:5e:6a:d2:0c:19:bc:fb:89:
14:d6:b6:15:55:62:b9:9b:98:2c:b0:19:8c:96:eb:f0:37:d3:
de:31:32:4e:0c:87:5c:5f:1a:59:08:6d:04:c0:7f:24:fb:62:
25:ef:27:f9:69:35:12:59:f1:30:b3:c3:6c:c5:9c:cd:11:cc:
7b:62:19:18:fd:4a:1a:eb:fe:47:fe:8e:1d:7c:1b:b1:3f:9c:
58:3e:02:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:54:22 2026 by rpki-client