
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/323030313a6466333a333438303a3a2f34382d3438203d3e20313430343433.roa
File: 323030313a6466333a333438303a3a2f34382d3438203d3e20313430343433.roa (raw, json)
Hash identifier: o4JOjbFiv+4qyKKMgo76HMlwWX3ya/KPCg6m6TUpetU=
Subject key identifier: AB:42:45:CD:01:B9:9F:63:69:BF:33:B2:6D:8D:19:7D:E0:BC:DB:3A
Certificate issuer: /CN=EE29DD3D4C17A8E871BACA69DF584CA52283E269
Certificate serial: 09BE8251932D3C25502B69F80E2E39B38F7940DC
Authority key identifier: EE:29:DD:3D:4C:17:A8:E8:71:BA:CA:69:DF:58:4C:A5:22:83:E2:69
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/323030313a6466333a333438303a3a2f34382d3438203d3e20313430343433.roa
Signing time: Sun 03 May 2026 02:49:26 +0000
ROA not before: Sun 03 May 2026 02:44:26 +0000
ROA not after: Sun 02 May 2027 02:49:26 +0000
asID: 140443
IP address blocks: 2001:df3:3480::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.crl
rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:05:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:be:82:51:93:2d:3c:25:50:2b:69:f8:0e:2e:39:b3:8f:79:40:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE29DD3D4C17A8E871BACA69DF584CA52283E269
Validity
Not Before: May 3 02:44:26 2026 GMT
Not After : May 2 02:49:26 2027 GMT
Subject: CN=AB4245CD01B99F6369BF33B26D8D197DE0BCDB3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:78:ea:6a:56:77:47:40:a2:33:c1:e8:59:1e:
5c:64:a4:eb:02:d7:50:6f:04:11:83:a1:ff:51:73:
a8:0f:2c:1e:73:82:be:94:3a:56:77:9d:a0:16:80:
2e:d4:68:71:9d:e9:02:e9:03:22:0a:64:49:43:bf:
3c:3e:34:d7:0e:70:d2:9a:0f:b4:c4:fc:a5:25:7f:
c0:e1:7e:6e:07:97:81:43:a8:d9:79:8e:7c:a0:9e:
68:73:e7:01:27:61:22:85:c1:fe:a9:ec:47:01:3f:
01:33:8b:ec:7e:f2:a7:6b:e8:42:77:a8:4f:35:07:
e8:62:69:6c:32:77:b7:0b:6c:82:26:27:c7:51:ae:
5e:f1:cd:a2:97:5c:db:c0:83:2b:e6:33:8a:3a:53:
dd:a1:9c:e0:05:75:2f:50:84:e9:28:0d:58:92:78:
07:c6:b7:a2:bc:4b:3a:4d:f2:1e:74:9e:40:80:f7:
90:6f:85:a3:41:b9:14:d1:bc:1e:3b:20:ef:ad:4b:
0f:62:26:1f:a4:22:7a:c1:67:6d:75:ec:8e:9a:01:
72:fc:ed:9b:f4:de:95:d1:ee:5b:34:21:e2:07:0e:
42:b4:7d:93:c1:4c:44:35:31:9c:c4:8b:73:94:67:
d2:09:6c:dd:e8:0f:55:c5:48:94:e7:fc:0a:72:9e:
c1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:42:45:CD:01:B9:9F:63:69:BF:33:B2:6D:8D:19:7D:E0:BC:DB:3A
X509v3 Authority Key Identifier:
keyid:EE:29:DD:3D:4C:17:A8:E8:71:BA:CA:69:DF:58:4C:A5:22:83:E2:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/323030313a6466333a333438303a3a2f34382d3438203d3e20313430343433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:3480::/48
Signature Algorithm: sha256WithRSAEncryption
02:bf:7f:b6:04:8d:3d:de:76:5c:dd:35:6c:1d:f4:94:ac:6f:
9f:64:36:70:20:16:03:3f:d9:bb:67:4e:22:f5:9f:9a:eb:af:
db:d4:e7:9f:2c:88:c7:63:cd:43:e7:ea:c9:5d:8b:45:a5:55:
5d:c9:25:95:fd:8e:65:15:7d:ad:cb:74:84:72:d1:76:d0:9c:
09:3b:78:64:ca:49:bf:72:a3:36:a7:5d:1e:57:d5:86:12:1d:
71:98:61:cc:ca:dd:0b:07:16:89:1f:d0:57:79:eb:43:26:31:
b6:3b:ef:c8:4a:99:b8:92:1d:89:e0:4b:e2:f9:92:07:9e:49:
a3:ac:2a:23:63:48:b9:bb:6d:8b:84:c6:cf:a5:bd:26:c0:0c:
f1:12:7a:aa:0d:dc:13:8b:ce:f3:5e:fd:86:9a:06:3a:b6:69:
0f:2a:69:6b:cf:4f:f8:3e:d7:93:25:a4:3f:94:08:9f:fc:02:
24:86:23:be:79:31:2f:2c:b5:06:9b:50:72:ff:dd:15:c3:46:
71:7e:59:90:51:4b:d2:23:10:cb:b2:38:12:8e:46:cc:3a:d6:
da:f0:3a:a0:80:76:6b:83:e4:04:50:54:80:12:5e:e8:74:11:
f4:55:2c:b1:4f:20:ff:90:19:43:04:a1:54:2b:eb:eb:70:ac:
18:a1:25:62
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUCb6CUZMtPCVQK2n4Di45s495QNwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUUyOUREM0Q0QzE3QThFODcxQkFDQTY5REY1ODRDQTUy
MjgzRTI2OTAeFw0yNjA1MDMwMjQ0MjZaFw0yNzA1MDIwMjQ5MjZaMDMxMTAvBgNV
BAMTKEFCNDI0NUNEMDFCOTlGNjM2OUJGMzNCMjZEOEQxOTdERTBCQ0RCM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzeOpqVndHQKIzwehZHlxkpOsC
11BvBBGDof9Rc6gPLB5zgr6UOlZ3naAWgC7UaHGd6QLpAyIKZElDvzw+NNcOcNKa
D7TE/KUlf8Dhfm4Hl4FDqNl5jnygnmhz5wEnYSKFwf6p7EcBPwEzi+x+8qdr6EJ3
qE81B+hiaWwyd7cLbIImJ8dRrl7xzaKXXNvAgyvmM4o6U92hnOAFdS9QhOkoDViS
eAfGt6K8SzpN8h50nkCA95BvhaNBuRTRvB47IO+tSw9iJh+kInrBZ2117I6aAXL8
7Zv03pXR7ls0IeIHDkK0fZPBTEQ1MZzEi3OUZ9IJbN3oD1XFSJTn/ApynsEvAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUq0JFzQG5n2NpvzOybY0ZfeC82zowHwYDVR0j
BBgwFoAU7indPUwXqOhxuspp31hMpSKD4mkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OGFlOGRiMzgtNjNhOC00MTNjLWE5ZjYtY2MyMjNhZmE0YTc1LzAvRUUyOUREM0Q0
QzE3QThFODcxQkFDQTY5REY1ODRDQTUyMjgzRTI2OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FRTI5REQzRDRDMTdBOEU4NzFCQUNBNjlERjU4NENBNTIyODNF
MjY5LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhhZThkYjM4LTYzYTgtNDEzYy1h
OWY2LWNjMjIzYWZhNGE3NS8wLzMyMzAzMDMxM2E2NDY2MzMzYTMzMzQzODMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMwMzQzNDMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN
8zSAMA0GCSqGSIb3DQEBCwUAA4IBAQACv3+2BI093nZc3TVsHfSUrG+fZDZwIBYD
P9m7Z04i9Z+a66/b1OefLIjHY81D5+rJXYtFpVVdySWV/Y5lFX2ty3SEctF20JwJ
O3hkykm/cqM2p10eV9WGEh1xmGHMyt0LBxaJH9BXeetDJjG2O+/ISpm4kh2J4Evi
+ZIHnkmjrCojY0i5u22LhMbPpb0mwAzxEnqqDdwTi87zXv2GmgY6tmkPKmlrz0/4
PteTJaQ/lAif/AIkhiO+eTEvLLUGm1By/90Vw0ZxflmQUUvSIxDLsjgSjkbMOtba
8DqggHZrg+QEUFSAEl7odBH0VSyxTyD/kBlDBKFUK+vrcKwYoSVi
-----END CERTIFICATE-----
Generated at Wed May 13 11:22:26 2026 by rpki-client