
$ rpki-client -vvf rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/323030313a6466343a386230303a3a2f34382d3438203d3e20313337333235.roa
File: 323030313a6466343a386230303a3a2f34382d3438203d3e20313337333235.roa (raw, json)
Hash identifier: rfjdhFUeqRzlpu/a6IIMJJdIbxMUcj3gavb0NZINzaQ=
Subject key identifier: 28:A6:23:40:63:7C:83:37:20:86:C3:54:2E:65:16:95:9E:4D:A4:60
Certificate issuer: /CN=D51AA8B3D72CDB71C90345B767919665E60A217F
Certificate serial: 6E92A7BD36B8CE68A24106F92EF4BF60FC1ED621
Authority key identifier: D5:1A:A8:B3:D7:2C:DB:71:C9:03:45:B7:67:91:96:65:E6:0A:21:7F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D51AA8B3D72CDB71C90345B767919665E60A217F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/323030313a6466343a386230303a3a2f34382d3438203d3e20313337333235.roa
Signing time: Sun 03 May 2026 02:51:32 +0000
ROA not before: Sun 03 May 2026 02:46:32 +0000
ROA not after: Sun 02 May 2027 02:51:32 +0000
asID: 137325
IP address blocks: 2001:df4:8b00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.crl
rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D51AA8B3D72CDB71C90345B767919665E60A217F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:92:a7:bd:36:b8:ce:68:a2:41:06:f9:2e:f4:bf:60:fc:1e:d6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D51AA8B3D72CDB71C90345B767919665E60A217F
Validity
Not Before: May 3 02:46:32 2026 GMT
Not After : May 2 02:51:32 2027 GMT
Subject: CN=28A62340637C83372086C3542E6516959E4DA460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f4:4e:be:94:8e:2f:ef:c8:0c:3b:57:04:17:
ae:f0:11:8c:1b:7f:40:8f:29:9a:21:1f:d4:86:bb:
5f:1b:bd:58:f6:50:3b:93:41:da:6a:80:d1:1a:f7:
4d:1f:ab:71:e9:4c:c0:57:ac:ec:4f:d1:86:dc:61:
52:b7:7d:ad:f1:90:89:c5:31:2c:af:2b:3a:52:38:
ff:30:1f:60:f8:8f:ab:04:60:7e:45:e1:25:31:63:
15:3f:ac:ba:db:e5:f6:bc:5a:19:c8:3b:f5:ff:e9:
30:69:3a:6b:78:14:12:7c:bc:77:b4:cb:29:c2:d4:
49:cb:4c:05:45:2f:a7:31:7d:14:2c:42:49:33:d0:
8a:a6:11:40:24:1d:92:5c:2b:a2:c3:cc:f0:7a:07:
8e:f4:e3:e2:60:d0:eb:56:6a:c9:26:4e:4f:fa:7f:
0f:d5:6a:a2:00:91:cb:24:90:9b:7e:3a:f7:5e:8a:
3b:2c:7d:4c:61:ba:9e:b7:77:5b:ab:27:0c:bb:d9:
6e:52:a3:04:c1:85:9e:3a:e7:c2:92:a6:1e:49:c1:
d3:f5:3e:4d:43:74:d6:af:e7:68:ec:67:0e:44:7e:
1a:96:10:bb:0f:f1:fc:66:54:d5:60:34:35:3b:d8:
27:03:42:8f:a5:81:ce:03:c9:54:ed:b9:fe:3d:85:
53:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A6:23:40:63:7C:83:37:20:86:C3:54:2E:65:16:95:9E:4D:A4:60
X509v3 Authority Key Identifier:
keyid:D5:1A:A8:B3:D7:2C:DB:71:C9:03:45:B7:67:91:96:65:E6:0A:21:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D51AA8B3D72CDB71C90345B767919665E60A217F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/323030313a6466343a386230303a3a2f34382d3438203d3e20313337333235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:8b00::/48
Signature Algorithm: sha256WithRSAEncryption
6b:37:a8:cd:6c:38:d2:a2:e1:79:fc:15:31:c5:a2:ba:bb:ce:
c1:56:8a:09:69:1b:90:fd:d6:0a:07:60:e1:85:55:cb:d7:1d:
25:3a:d5:65:52:58:46:9b:3c:d8:b8:d5:8b:19:4a:42:49:4f:
e7:d2:24:4f:0f:ad:bc:3a:30:a4:65:61:83:7d:61:64:f8:59:
54:52:2a:cc:8a:de:42:9d:9d:56:1f:a9:62:33:a5:d3:3c:fc:
a4:0d:5f:f6:66:f1:cd:e5:d0:53:35:d5:a6:0f:12:e6:2e:3d:
96:2d:6d:6f:1d:8b:d9:19:5f:d9:a0:7b:d3:b9:24:b4:64:f0:
45:3c:e8:aa:5d:40:04:6e:2d:4a:2e:c6:20:b7:c6:66:7b:da:
28:06:cc:f5:fc:b6:f8:52:2b:45:47:ce:85:12:cb:f9:c1:0f:
29:f0:de:94:57:e9:83:0e:77:42:81:96:41:30:29:0b:0b:a6:
12:9f:8c:da:0f:02:12:92:9d:88:95:d2:1b:62:e3:a1:67:ee:
87:ae:c5:a3:d7:b9:2a:0d:0e:1c:a8:70:57:1e:30:0f:50:a1:
14:66:0a:b3:53:5d:fb:e8:c8:52:b8:0e:e5:76:fb:e4:a2:79:
4e:8b:dc:4b:1a:1e:78:03:df:ae:90:de:44:41:f2:65:93:0c:
a8:77:76:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:24:51 2026 by rpki-client