
$ rpki-client -vvf rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/323430353a636163303a313a3a2f34382d3438203d3e20313339393832.roa
File: 323430353a636163303a313a3a2f34382d3438203d3e20313339393832.roa (raw, json)
Hash identifier: TOnsrcvIXglIicbrrGOcttljfn+j8zuH56+Uevu2CiA=
Subject key identifier: 0A:65:B8:C1:BF:DF:CF:3F:7B:E0:4C:3F:E5:7F:70:03:F7:9D:C0:88
Certificate issuer: /CN=B82FDFC626E73CB2268F5B1EFEF576715FE5A570
Certificate serial: 62575049EBC359EE3BFD6C765EB3C3F43FF28AAB
Authority key identifier: B8:2F:DF:C6:26:E7:3C:B2:26:8F:5B:1E:FE:F5:76:71:5F:E5:A5:70
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/323430353a636163303a313a3a2f34382d3438203d3e20313339393832.roa
Signing time: Sun 03 May 2026 02:49:14 +0000
ROA not before: Sun 03 May 2026 02:44:14 +0000
ROA not after: Sun 02 May 2027 02:49:14 +0000
asID: 139982
IP address blocks: 2405:cac0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.crl
rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:57:50:49:eb:c3:59:ee:3b:fd:6c:76:5e:b3:c3:f4:3f:f2:8a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B82FDFC626E73CB2268F5B1EFEF576715FE5A570
Validity
Not Before: May 3 02:44:14 2026 GMT
Not After : May 2 02:49:14 2027 GMT
Subject: CN=0A65B8C1BFDFCF3F7BE04C3FE57F7003F79DC088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:80:d6:09:9e:44:42:80:dd:77:00:a4:a7:e9:
58:77:9e:eb:9f:8f:be:3b:b2:35:92:17:92:5a:a2:
83:90:1a:42:92:57:11:2a:22:4c:a6:6c:1b:52:96:
7a:40:f7:2d:91:db:ef:03:4e:3e:ce:f7:28:4d:26:
94:81:1b:9f:b2:ff:77:cf:a9:f2:57:08:92:92:88:
12:28:02:19:aa:1e:c3:dd:84:4b:1b:19:7f:72:1f:
25:bf:9a:61:0b:ba:a8:fe:ff:e2:47:9c:37:6c:c6:
55:58:19:e0:11:84:ad:a1:cf:20:bc:04:19:04:81:
f6:c8:73:38:5f:98:37:6a:33:05:5a:08:17:07:10:
7c:34:28:d8:1d:73:5d:ae:dd:2a:f4:ca:b5:68:58:
17:1d:a2:f0:58:a2:d7:f1:e8:39:0e:f1:6e:cf:7e:
c1:22:b1:7a:2b:81:74:41:7c:b6:83:4d:b0:ce:11:
f0:d8:76:62:5d:4b:1b:c6:63:b4:98:1d:2a:b3:8d:
0c:fa:1a:34:99:f6:36:3f:1a:72:c1:26:f6:84:cf:
f3:7f:75:ff:9e:45:fa:8d:13:f6:c1:0c:c5:b3:af:
41:38:f4:62:8c:b3:d4:a2:3e:71:9f:0c:26:95:28:
ef:be:c1:76:3a:c4:98:37:01:ce:47:0b:7c:cf:70:
02:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:65:B8:C1:BF:DF:CF:3F:7B:E0:4C:3F:E5:7F:70:03:F7:9D:C0:88
X509v3 Authority Key Identifier:
keyid:B8:2F:DF:C6:26:E7:3C:B2:26:8F:5B:1E:FE:F5:76:71:5F:E5:A5:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/323430353a636163303a313a3a2f34382d3438203d3e20313339393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:cac0:1::/48
Signature Algorithm: sha256WithRSAEncryption
73:5c:49:11:8f:94:56:52:8b:59:30:7a:94:d6:04:e1:95:5d:
00:40:0c:9d:1a:dc:69:2b:4c:c9:30:d2:a9:d7:b1:b2:55:b2:
ce:d9:45:0c:6d:f7:75:ea:19:40:00:1a:4e:7d:20:13:34:f4:
3f:86:0a:a8:ef:db:9f:a6:14:ae:c8:28:54:df:3c:f1:6b:ff:
f1:ed:ff:ff:5a:bb:97:2e:0c:56:ce:c6:e0:7d:e5:37:b6:46:
3e:15:44:28:c3:5a:76:3e:81:1b:3a:79:5e:ea:d0:d9:bd:fb:
09:95:81:be:fd:0f:7e:2e:be:5f:f4:4e:6e:9d:09:63:8f:de:
14:88:dc:20:9b:6b:92:cf:c0:64:7f:ec:31:05:eb:b7:28:e5:
f7:d0:a0:7f:08:c8:4c:d4:bc:e1:4a:12:05:0a:f1:87:ac:c8:
93:49:57:bb:8b:bb:36:81:da:fd:c6:9e:c9:58:9c:a7:f7:3f:
60:2e:be:25:9a:1c:dc:06:fc:ff:12:23:03:09:ff:ce:b5:97:
87:9f:8f:d9:86:9b:8d:1f:9d:a5:3f:af:7c:e2:56:43:16:41:
0a:b1:31:a0:b1:6d:26:8c:73:80:ff:f7:07:90:17:1c:5d:dc:
ad:69:fa:6c:73:11:4c:29:b5:76:96:47:72:51:0b:68:d6:b1:
f2:83:f1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:05:36 2026 by rpki-client