
$ rpki-client -vvf rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/323430353a636163303a3a2f33322d3332203d3e20313339393832.roa
File: 323430353a636163303a3a2f33322d3332203d3e20313339393832.roa (raw, json)
Hash identifier: HJdyg1CH1wYNkX3IJPS7n0ig1ABVkAurwagIizZ3YJY=
Subject key identifier: 2F:4A:41:5E:E6:F6:75:1C:EF:F0:C0:95:28:1B:EF:62:1A:CB:6B:3A
Certificate issuer: /CN=B82FDFC626E73CB2268F5B1EFEF576715FE5A570
Certificate serial: 1E9A43FFDDBCF73EF9544F706EF80102810BC62D
Authority key identifier: B8:2F:DF:C6:26:E7:3C:B2:26:8F:5B:1E:FE:F5:76:71:5F:E5:A5:70
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/323430353a636163303a3a2f33322d3332203d3e20313339393832.roa
Signing time: Sun 03 May 2026 02:49:15 +0000
ROA not before: Sun 03 May 2026 02:44:15 +0000
ROA not after: Sun 02 May 2027 02:49:15 +0000
asID: 139982
IP address blocks: 2405:cac0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.crl
rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:9a:43:ff:dd:bc:f7:3e:f9:54:4f:70:6e:f8:01:02:81:0b:c6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B82FDFC626E73CB2268F5B1EFEF576715FE5A570
Validity
Not Before: May 3 02:44:15 2026 GMT
Not After : May 2 02:49:15 2027 GMT
Subject: CN=2F4A415EE6F6751CEFF0C095281BEF621ACB6B3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:02:86:b8:ec:ca:06:3f:d8:02:ec:7b:d9:
ab:08:05:a7:76:a5:f3:81:18:29:c3:89:40:e4:01:
01:08:71:6f:a6:00:0b:a4:73:f8:46:8b:24:70:a5:
6e:d4:54:9b:0f:88:92:5b:67:4c:b3:19:aa:bd:02:
b1:2b:fe:3a:d5:0b:78:ba:4c:c2:23:3e:80:3d:3a:
a2:36:d2:8a:49:84:98:57:2f:d7:de:16:b1:fa:2a:
2f:ac:95:52:c7:4b:8f:19:f0:28:a8:71:f8:4c:e6:
35:ca:ff:e7:9f:0b:70:a9:32:f4:36:2c:8a:33:54:
17:17:7b:b5:5b:4d:99:79:66:a6:13:fb:5d:79:53:
d3:66:a2:c6:99:0f:58:8f:37:60:8e:ce:08:0d:bf:
16:3d:ec:65:a7:2a:06:c4:05:77:36:24:31:05:a8:
8f:be:f8:00:58:0a:ac:16:1d:4b:51:e2:4e:c3:a5:
28:ea:ea:54:5d:34:7b:c3:eb:15:d7:9d:34:74:d7:
d0:a8:b4:f5:d7:d4:e9:b5:cb:e7:81:4f:cc:73:8c:
1c:cb:0d:ea:c4:cb:60:e8:38:9d:47:d0:c7:a1:73:
dd:d7:1a:b9:89:d4:43:71:df:35:48:b9:94:52:8f:
cb:4a:4d:d5:14:c5:b2:f6:f1:73:f3:0c:e1:5d:f6:
99:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4A:41:5E:E6:F6:75:1C:EF:F0:C0:95:28:1B:EF:62:1A:CB:6B:3A
X509v3 Authority Key Identifier:
keyid:B8:2F:DF:C6:26:E7:3C:B2:26:8F:5B:1E:FE:F5:76:71:5F:E5:A5:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/323430353a636163303a3a2f33322d3332203d3e20313339393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:cac0::/32
Signature Algorithm: sha256WithRSAEncryption
32:ad:eb:8e:24:aa:f9:78:0d:8c:19:69:0d:44:d8:53:62:23:
8e:2c:b6:32:80:e6:46:0c:d1:90:1f:d6:96:fa:a3:f4:ef:55:
50:4b:e5:df:df:a5:e4:90:25:d9:f4:18:ba:ee:77:22:46:ca:
fe:05:99:c9:02:ec:7f:a4:81:60:fe:c4:14:26:a4:83:64:e0:
4a:1f:bc:0c:15:b1:3e:a9:98:cf:23:a0:6a:30:f6:a5:0d:16:
11:80:d2:10:d4:a4:47:0b:25:39:eb:4b:d0:bf:56:7e:6f:40:
80:89:b2:e2:de:1a:d7:6a:b7:e8:2e:57:e2:20:60:cd:62:6d:
b3:ac:55:d3:bc:4f:20:1e:5a:16:54:73:bf:0c:15:e5:3f:b4:
b3:10:80:38:3f:5d:30:7f:91:ca:1a:3e:89:99:b1:e4:8e:3e:
49:6b:a8:55:3e:23:ec:a0:43:45:6a:e9:6e:11:78:fe:19:7a:
31:5a:0c:a4:b0:60:5c:a9:2d:c6:d3:07:fe:bf:34:af:7a:07:
eb:d8:ec:75:a4:dd:1d:d8:ec:89:2a:02:ae:e9:69:4a:58:02:
26:f6:f9:2c:47:56:f2:b5:60:9a:b6:98:54:73:1d:3e:14:71:
37:f8:74:5d:8b:05:5b:1d:1d:fc:bd:6d:78:60:13:e9:a1:44:
17:eb:d6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:10:33 2026 by rpki-client