
$ rpki-client -vvf rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a363030303a3a2f33362d3336203d3e203633383632.roa
File: 323430313a663938303a363030303a3a2f33362d3336203d3e203633383632.roa (raw, json)
Hash identifier: FG4YqxC2Q73IfOAJ8VlqlbH+o++S2tHH9i7KG5m04js=
Subject key identifier: D6:66:F4:A9:A7:F6:EE:11:E7:94:65:FC:87:29:55:1C:B6:33:84:F9
Certificate issuer: /CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E
Certificate serial: 7171D533367C23C26CC3BD21A51DD3516D7628EA
Authority key identifier: F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a363030303a3a2f33362d3336203d3e203633383632.roa
Signing time: Sun 03 May 2026 02:48:45 +0000
ROA not before: Sun 03 May 2026 02:43:45 +0000
ROA not after: Sun 02 May 2027 02:48:45 +0000
asID: 63862
IP address blocks: 2401:f980:6000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl
rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:04:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:71:d5:33:36:7c:23:c2:6c:c3:bd:21:a5:1d:d3:51:6d:76:28:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E
Validity
Not Before: May 3 02:43:45 2026 GMT
Not After : May 2 02:48:45 2027 GMT
Subject: CN=D666F4A9A7F6EE11E79465FC8729551CB63384F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:97:d9:1d:0c:cb:64:1c:ca:11:f3:fe:60:21:
3f:d8:95:c3:02:3f:e4:d9:2f:d2:82:98:d3:4a:12:
c8:85:06:7a:b0:65:27:5c:c0:d4:24:fe:13:6c:c6:
b8:61:9d:db:b8:14:89:aa:8c:7e:2f:12:fe:68:2a:
3d:07:13:a9:3c:51:74:32:8b:1e:a0:37:47:de:9d:
11:45:4d:d1:ad:f5:9a:92:40:35:f9:e2:cd:59:94:
94:ef:09:c1:b1:56:ec:68:a6:57:af:f8:0a:1f:ff:
b5:73:53:0b:e1:1a:a5:5e:4c:bd:c4:35:df:49:a8:
72:bb:5b:ee:17:b3:c2:69:a0:cd:cf:83:4d:d1:d9:
50:03:55:cb:93:78:0b:7c:20:f1:3c:eb:b4:97:f3:
18:04:ae:1e:c9:f8:7f:bf:11:95:d7:5f:98:e3:0c:
14:0b:83:27:ce:00:a7:70:f8:c9:3f:b4:07:18:ea:
13:55:5f:5e:5e:de:72:63:85:77:2b:d8:c0:fa:e2:
50:3b:85:9e:bc:10:31:dd:e3:18:dd:cc:7f:ed:e2:
ba:b5:3c:df:27:21:18:9c:23:1a:2e:0a:7b:4a:d1:
af:3f:e3:7d:9c:66:0d:8b:86:26:14:5e:88:2e:18:
92:19:70:7e:3f:92:73:22:37:2f:ab:e0:30:b1:20:
80:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:66:F4:A9:A7:F6:EE:11:E7:94:65:FC:87:29:55:1C:B6:33:84:F9
X509v3 Authority Key Identifier:
keyid:F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a363030303a3a2f33362d3336203d3e203633383632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:f980:6000::/36
Signature Algorithm: sha256WithRSAEncryption
b7:45:28:84:cb:fe:13:e4:56:4d:05:ed:ba:39:e0:d8:eb:9e:
28:f2:11:6e:b9:5e:68:0b:77:76:eb:31:54:50:e9:79:66:55:
ef:a4:ec:cf:5e:52:cf:5b:04:64:09:8c:a8:f0:6b:d1:70:6d:
2b:8e:b3:3a:bf:20:fe:b0:92:04:c7:a1:85:86:eb:73:64:93:
d0:77:51:fa:50:22:2e:b5:5e:10:c9:60:3b:bf:67:f9:7f:6e:
24:04:37:5b:67:42:b8:34:1a:de:2c:59:bf:2e:ad:39:0e:f4:
db:d8:66:53:5b:db:ef:23:85:4b:b2:5b:1f:03:fd:25:3b:ba:
67:67:26:18:2d:40:f1:ad:28:31:57:d6:d0:00:95:a2:e7:ec:
c6:09:05:e3:33:60:fa:a8:5f:a4:b5:b8:64:03:b6:58:14:03:
ea:7d:87:f0:cf:5b:b1:e8:90:d5:f1:42:d7:95:d4:8e:64:ed:
88:3e:22:f9:c1:89:bf:02:a2:ff:c9:1d:81:bb:cd:1c:37:20:
e5:34:a2:d6:65:5f:f2:cf:d6:83:55:10:ab:96:dd:2a:70:12:
0b:b9:c9:5d:ef:0b:2a:d2:4b:5c:16:82:9f:9b:b1:5f:9c:74:
65:4f:af:37:ae:5f:40:f5:48:d7:6b:f6:cb:b4:82:19:5b:d1:
52:56:56:85
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcXHVMzZ8I8Jsw70hpR3TUW12KOowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJGNkIwNUE1RDlENTZDNDdEMTUwMzkxMUIyQ0MwRjA0
QUJGQTU1RTAeFw0yNjA1MDMwMjQzNDVaFw0yNzA1MDIwMjQ4NDVaMDMxMTAvBgNV
BAMTKEQ2NjZGNEE5QTdGNkVFMTFFNzk0NjVGQzg3Mjk1NTFDQjYzMzg0RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+l9kdDMtkHMoR8/5gIT/YlcMC
P+TZL9KCmNNKEsiFBnqwZSdcwNQk/hNsxrhhndu4FImqjH4vEv5oKj0HE6k8UXQy
ix6gN0fenRFFTdGt9ZqSQDX54s1ZlJTvCcGxVuxoplev+Aof/7VzUwvhGqVeTL3E
Nd9JqHK7W+4Xs8JpoM3Pg03R2VADVcuTeAt8IPE867SX8xgErh7J+H+/EZXXX5jj
DBQLgyfOAKdw+Mk/tAcY6hNVX15e3nJjhXcr2MD64lA7hZ68EDHd4xjdzH/t4rq1
PN8nIRicIxouCntK0a8/432cZg2LhiYUXoguGJIZcH4/knMiNy+r4DCxIIAjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU1mb0qaf27hHnlGX8hylVHLYzhPkwHwYDVR0j
BBgwFoAU8vawWl2dVsR9FQORGyzA8Eq/pV4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODdlODMwYzgtZDU1OS00NTZhLTg4MzUtNGY2ZWI1NTI3YWEyLzAvRjJGNkIwNUE1
RDlENTZDNDdEMTUwMzkxMUIyQ0MwRjA0QUJGQTU1RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GMkY2QjA1QTVEOUQ1NkM0N0QxNTAzOTExQjJDQzBGMDRBQkZB
NTVFLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg3ZTgzMGM4LWQ1NTktNDU2YS04
ODM1LTRmNmViNTUyN2FhMi8wLzMyMzQzMDMxM2E2NjM5MzgzMDNhMzYzMDMwMzAz
YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzNjMzMzgzNjMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJAH5
gGAwDQYJKoZIhvcNAQELBQADggEBALdFKITL/hPkVk0F7bo54NjrnijyEW65XmgL
d3brMVRQ6XlmVe+k7M9eUs9bBGQJjKjwa9FwbSuOszq/IP6wkgTHoYWG63Nkk9B3
UfpQIi61XhDJYDu/Z/l/biQEN1tnQrg0Gt4sWb8urTkO9NvYZlNb2+8jhUuyWx8D
/SU7umdnJhgtQPGtKDFX1tAAlaLn7MYJBeMzYPqoX6S1uGQDtlgUA+p9h/DPW7Ho
kNXxQteV1I5k7Yg+IvnBib8Cov/JHYG7zRw3IOU0otZlX/LP1oNVEKuW3SpwEgu5
yV3vCyrSS1wWgp+bsV+cdGVPrzeuX0D1SNdr9su0ghlb0VJWVoU=
-----END CERTIFICATE-----
Generated at Wed May 13 09:17:57 2026 by rpki-client