
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/323030313a6466303a373530303a3a2f34382d3438203d3e20313336303835.roa
File: 323030313a6466303a373530303a3a2f34382d3438203d3e20313336303835.roa (raw, json)
Hash identifier: lSaknhLFqjOMQh5hKJz89kJXJK6lU8/KmLPb953U3wQ=
Subject key identifier: D7:B1:98:C8:C0:F0:08:F1:76:86:C2:58:43:F9:77:B8:6E:F9:CF:52
Certificate issuer: /CN=91DA5E3EAEC7825002C2B0B211691098E846E9FC
Certificate serial: 27782FFF5BAA476EA5A285C6B7D493765499CCA4
Authority key identifier: 91:DA:5E:3E:AE:C7:82:50:02:C2:B0:B2:11:69:10:98:E8:46:E9:FC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91DA5E3EAEC7825002C2B0B211691098E846E9FC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/323030313a6466303a373530303a3a2f34382d3438203d3e20313336303835.roa
Signing time: Sun 03 May 2026 02:49:50 +0000
ROA not before: Sun 03 May 2026 02:44:50 +0000
ROA not after: Sun 02 May 2027 02:49:50 +0000
asID: 136085
IP address blocks: 2001:df0:7500::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.crl
rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91DA5E3EAEC7825002C2B0B211691098E846E9FC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:47:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:78:2f:ff:5b:aa:47:6e:a5:a2:85:c6:b7:d4:93:76:54:99:cc:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91DA5E3EAEC7825002C2B0B211691098E846E9FC
Validity
Not Before: May 3 02:44:50 2026 GMT
Not After : May 2 02:49:50 2027 GMT
Subject: CN=D7B198C8C0F008F17686C25843F977B86EF9CF52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:40:37:76:58:f2:99:c1:4d:6f:02:e9:72:ac:
af:84:bf:e4:7f:99:14:43:28:e0:7f:f8:d9:97:b5:
d3:7d:c1:12:b5:84:36:6e:12:47:4d:54:cb:1e:fd:
5b:27:94:f7:4b:83:5a:1a:94:74:0b:fe:54:a2:df:
15:3f:90:03:c4:e3:1c:80:e0:b4:dd:4e:e6:62:9f:
61:b8:65:09:65:d0:c0:64:d9:ab:ba:10:3f:d9:9d:
9e:1b:bb:a4:de:26:40:2c:cb:ac:9c:a2:9d:3a:a5:
01:3f:1e:ab:59:54:4e:2a:7d:42:4b:0d:9e:0e:78:
a9:bb:21:5d:73:21:db:62:ba:34:f7:1b:a2:52:96:
04:32:e5:8a:5b:29:78:f1:16:db:a2:1e:c1:d4:24:
a6:2d:eb:31:d0:e5:6c:ab:9a:d7:d2:07:82:45:c2:
83:43:7c:c3:c5:d6:3b:03:0b:27:8c:50:25:dd:f4:
c8:f7:84:e3:26:32:5f:d2:9b:2c:c1:03:87:b1:82:
e6:69:a9:06:82:51:49:38:f8:8b:f4:81:29:a2:24:
fd:67:e7:ce:99:05:ab:56:04:2d:6f:f1:9f:d3:7b:
da:f6:fb:da:2e:90:a8:1b:82:ad:09:13:2c:76:a0:
b6:36:bd:f4:d8:d9:a7:8d:51:a7:7d:33:9e:4a:f5:
d4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B1:98:C8:C0:F0:08:F1:76:86:C2:58:43:F9:77:B8:6E:F9:CF:52
X509v3 Authority Key Identifier:
keyid:91:DA:5E:3E:AE:C7:82:50:02:C2:B0:B2:11:69:10:98:E8:46:E9:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91DA5E3EAEC7825002C2B0B211691098E846E9FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/323030313a6466303a373530303a3a2f34382d3438203d3e20313336303835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:7500::/48
Signature Algorithm: sha256WithRSAEncryption
49:18:ed:40:28:7d:69:a6:89:48:81:a2:62:84:7f:4e:68:1b:
2e:eb:ef:34:de:6a:43:c2:bc:d8:54:3a:32:1a:d5:09:87:00:
13:6b:28:79:c4:44:4e:ea:be:17:a3:51:88:fd:bd:b6:4e:a8:
b6:df:81:00:fd:d8:9a:53:fd:05:5f:51:fa:f7:c8:e5:dc:f9:
27:1f:fc:83:0f:51:d8:29:1f:06:59:bd:61:d8:f3:87:e9:ba:
85:61:16:76:cc:8a:51:22:62:e6:f5:20:f9:58:0c:65:42:c8:
8b:31:95:f5:ef:3f:e2:29:ac:11:fe:1a:ed:26:a6:86:a0:29:
7f:f5:44:0f:0f:3d:bf:c1:aa:50:30:53:8f:88:af:15:6e:fa:
06:a7:5c:8e:25:b0:d8:0f:cd:d8:e6:c8:69:57:48:6f:b0:aa:
a5:ee:09:4c:ea:d3:fa:72:56:f1:2b:c2:eb:d9:86:d9:8d:32:
2a:b1:a0:2e:3c:bb:b6:02:9e:00:16:4f:ea:85:e3:f5:4b:ad:
5e:c2:ae:00:25:8d:85:94:73:7d:d1:b6:98:67:7d:0b:5a:a9:
82:2e:35:9b:c6:86:53:c4:ab:f2:b4:74:39:f8:71:ad:fc:04:
30:44:c3:c8:62:a6:24:df:4f:ae:7e:53:16:65:c5:21:02:54:
a0:d1:d8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:03:07 2026 by rpki-client