
$ rpki-client -vvf rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a653030303a3a2f33362d3336203d3e203633383632.roa
File: 323430313a663938303a653030303a3a2f33362d3336203d3e203633383632.roa (raw, json)
Hash identifier: 188nUZpWLjC5I5E2PwrEZNz+ZoqJ97KrIMhNsQpTeds=
Subject key identifier: 24:07:D8:BA:F5:34:5F:9F:18:48:DF:B4:40:02:05:69:BB:20:A3:7D
Certificate issuer: /CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E
Certificate serial: 0184CE42B54C7B799B736B49BCD14657F7DA1E58
Authority key identifier: F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a653030303a3a2f33362d3336203d3e203633383632.roa
Signing time: Sun 03 May 2026 02:48:48 +0000
ROA not before: Sun 03 May 2026 02:43:48 +0000
ROA not after: Sun 02 May 2027 02:48:48 +0000
asID: 63862
IP address blocks: 2401:f980:e000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl
rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:04:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ce:42:b5:4c:7b:79:9b:73:6b:49:bc:d1:46:57:f7:da:1e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E
Validity
Not Before: May 3 02:43:48 2026 GMT
Not After : May 2 02:48:48 2027 GMT
Subject: CN=2407D8BAF5345F9F1848DFB440020569BB20A37D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:48:1c:d8:7e:23:d3:c3:7f:b8:e5:ae:c9:6c:
bf:81:bc:60:ae:7e:c3:1f:7f:4c:7c:bd:05:c1:51:
18:35:81:0d:40:c5:45:99:fd:d9:fd:5a:04:84:94:
3d:e6:a4:b8:ba:4c:e5:50:31:f6:4e:7c:4c:02:1a:
ee:bd:8e:0c:85:b7:39:16:9b:03:50:0a:04:75:57:
1c:a8:7f:f4:cc:16:24:c1:21:71:11:ac:80:b9:7d:
56:95:d6:8a:80:86:4f:92:dd:2e:28:5e:e5:b2:d6:
a8:8f:f8:66:31:fa:07:87:b1:83:81:5d:39:a4:0e:
f7:dc:ef:ee:8f:b1:e8:67:1c:df:ab:bf:fa:70:3d:
fe:f1:b9:a1:e6:b9:33:4f:5f:23:8f:4c:b2:68:37:
e1:94:97:9e:13:06:b3:43:e5:d7:9f:df:9e:f4:92:
73:2d:e7:d7:51:db:c2:de:6c:4a:1b:2b:89:f7:97:
44:09:82:97:5e:28:d1:c3:46:bf:42:cd:66:7b:d9:
73:a8:e1:6b:ce:cf:9d:6b:b5:50:d9:80:00:e2:1b:
f5:35:39:cc:ec:01:40:6f:fe:8d:b3:d4:42:8d:50:
b6:7b:9c:f2:5f:5b:f5:6a:49:ac:da:db:8e:95:6f:
9a:9e:c8:d1:88:4a:84:a2:cb:42:3e:be:c0:72:c4:
81:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:07:D8:BA:F5:34:5F:9F:18:48:DF:B4:40:02:05:69:BB:20:A3:7D
X509v3 Authority Key Identifier:
keyid:F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a653030303a3a2f33362d3336203d3e203633383632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:f980:e000::/36
Signature Algorithm: sha256WithRSAEncryption
62:8b:7f:c8:cf:de:a1:86:48:e7:48:34:96:3b:b4:fc:8f:12:
07:d1:5d:3a:08:c5:77:9d:64:93:a0:63:25:37:e2:e6:95:a2:
6e:eb:09:04:8d:36:cf:09:b5:7e:2a:5f:c9:87:29:78:5f:a0:
cb:e4:e0:15:45:d4:fa:51:87:75:66:a0:75:8d:86:af:4c:f0:
13:1b:9d:64:5a:d8:ee:38:a9:6a:6a:cb:16:65:e3:5e:46:67:
4e:04:f0:c0:a4:30:41:c4:9a:cf:96:55:3d:e8:87:2a:49:d6:
b4:69:6d:48:33:02:e2:25:a2:4c:94:2f:62:73:a9:d1:9a:66:
25:6f:6b:f0:7d:a3:8a:92:00:75:10:cc:0d:7c:72:e3:cb:7a:
55:4f:88:15:86:1b:54:5f:af:13:0e:8b:0f:bc:de:36:df:66:
57:6a:15:73:57:b2:4b:c6:7f:89:90:48:fb:fd:9b:2e:09:81:
ca:bf:8e:eb:db:a8:54:89:ba:7d:ac:ea:c4:a0:b0:b6:6f:69:
3e:73:a7:97:f1:a5:91:3a:24:0b:c8:3c:9d:63:9d:1c:c3:08:
d6:32:eb:5c:17:b3:dc:2e:ca:32:f5:86:d4:27:02:42:4e:f3:
bf:9c:15:e9:d1:37:0b:01:5c:4f:2e:df:01:fe:dd:a4:c9:92:
d2:6e:b9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:11:32 2026 by rpki-client