
$ rpki-client -vvf rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a663030303a3a2f33362d3336203d3e203633383632.roa
File: 323430313a663938303a663030303a3a2f33362d3336203d3e203633383632.roa (raw, json)
Hash identifier: e4DmCvjrwHyT7r3+k79q2aF3Szs2g3FJzTfH2C7ERr0=
Subject key identifier: 24:B4:4A:07:58:52:07:0F:FF:71:47:A3:8B:EF:13:DD:80:42:85:57
Certificate issuer: /CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E
Certificate serial: 1E10F0278AAE30287D339FB95F5E6B38473D7D81
Authority key identifier: F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a663030303a3a2f33362d3336203d3e203633383632.roa
Signing time: Sun 03 May 2026 02:48:46 +0000
ROA not before: Sun 03 May 2026 02:43:46 +0000
ROA not after: Sun 02 May 2027 02:48:46 +0000
asID: 63862
IP address blocks: 2401:f980:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl
rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:04:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:10:f0:27:8a:ae:30:28:7d:33:9f:b9:5f:5e:6b:38:47:3d:7d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E
Validity
Not Before: May 3 02:43:46 2026 GMT
Not After : May 2 02:48:46 2027 GMT
Subject: CN=24B44A075852070FFF7147A38BEF13DD80428557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8f:ce:a8:18:19:b3:bd:a7:c9:85:29:14:2d:
d5:ae:36:a7:46:ae:3b:de:be:47:a8:73:6b:27:ee:
0e:8b:c4:38:97:2f:02:4a:63:d2:d7:db:b8:a7:4f:
51:aa:5e:14:1c:46:9b:82:c2:fb:a4:9b:1d:fc:b4:
bb:cd:96:c2:8f:66:1d:f7:43:14:e3:c9:95:cf:6f:
1f:e0:39:11:0f:ae:51:40:54:09:eb:b3:2b:d1:7d:
fc:92:c4:b4:7d:7a:db:7b:a6:78:a6:95:6c:48:cf:
95:85:6f:1c:3d:96:12:17:c7:1b:41:10:74:58:99:
39:1f:b0:e2:35:e2:98:82:05:2f:ee:32:fc:0a:14:
7e:86:09:8e:ca:73:ae:05:42:d9:9e:e3:c8:61:25:
5d:1c:d2:63:bc:d2:a8:21:84:4c:d9:f2:a1:28:86:
60:0f:eb:77:1b:7c:79:3a:1c:e6:de:29:cf:c2:8b:
9b:b1:d8:f9:ea:f5:85:c9:12:8b:b9:01:d0:ce:ad:
b0:1b:e1:1d:e8:a8:20:33:50:43:24:bd:44:78:13:
fe:ff:8b:24:8d:3e:ba:35:ff:02:36:d9:0e:ac:1e:
43:82:f1:52:42:ea:56:39:0b:f0:ec:4c:1f:26:1c:
6a:02:ce:47:73:63:c9:66:15:3d:17:06:82:95:c8:
52:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B4:4A:07:58:52:07:0F:FF:71:47:A3:8B:EF:13:DD:80:42:85:57
X509v3 Authority Key Identifier:
keyid:F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a663030303a3a2f33362d3336203d3e203633383632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:f980:f000::/36
Signature Algorithm: sha256WithRSAEncryption
54:53:42:6e:3d:76:cf:eb:86:ad:f3:9c:47:90:b3:ee:b6:32:
a7:c3:5a:db:64:99:2c:71:dc:86:e5:3b:1e:95:50:bd:3e:15:
84:fd:44:96:77:04:66:ea:e1:e0:5d:d3:ba:6c:82:75:9c:32:
b0:35:1b:d0:f6:3f:09:cc:bb:60:b4:46:b9:8a:a9:1e:ce:e8:
30:e6:96:fe:db:ec:20:22:28:08:ee:a7:60:b8:6b:1b:f6:04:
9f:f2:e5:3d:74:61:97:22:38:e9:55:c7:53:f7:2d:a7:80:2b:
a6:b9:6b:82:78:35:c4:64:c7:d3:f6:ab:4f:f2:9e:30:38:c7:
e3:7d:eb:75:9c:1f:be:4b:bd:e5:91:ca:d0:71:cf:e6:93:c0:
ff:0c:41:d4:b3:18:27:44:cf:d6:db:17:c9:1b:5c:e7:77:3b:
e6:74:bd:67:85:77:7f:be:3d:d4:76:64:b0:9b:dd:d1:d4:af:
15:7b:41:99:bc:b6:e8:9a:0b:d4:06:0e:e8:0c:49:f0:fb:46:
72:68:85:b2:df:84:d7:7c:37:41:4a:1e:6e:98:e3:2b:0b:fd:
45:25:55:50:a9:0c:d9:3f:d5:95:d4:4f:0a:07:b4:fc:19:82:
19:ea:ac:46:bc:fd:85:80:5f:75:6e:da:5c:d9:5b:21:c6:fa:
0e:17:e8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:20:38 2026 by rpki-client