
$ rpki-client -vvf rpki-rsync.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/323030313a6466303a333330303a3a2f34382d3438203d3e20313333383339.roa
File: 323030313a6466303a333330303a3a2f34382d3438203d3e20313333383339.roa (raw, json)
Hash identifier: Wmh6qAqJ5qVV5gXIsFnyCjvNYlAqoPmzOMxkkZl30lo=
Subject key identifier: 00:3E:44:9C:BF:DE:CB:01:17:10:3D:F3:99:E1:C9:61:BA:DC:A9:EF
Certificate issuer: /CN=EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29
Certificate serial: 53FBBB4BB8173D26C74B7E0E492FA405440018E5
Authority key identifier: EA:4B:A5:6B:93:C3:D8:CB:6F:45:D2:8F:75:C6:C3:33:76:5D:8D:29
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/323030313a6466303a333330303a3a2f34382d3438203d3e20313333383339.roa
Signing time: Sun 03 May 2026 02:51:54 +0000
ROA not before: Sun 03 May 2026 02:46:54 +0000
ROA not after: Sun 02 May 2027 02:51:54 +0000
asID: 133839
IP address blocks: 2001:df0:3300::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.crl
rsync://rpki-rsync.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:24:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:fb:bb:4b:b8:17:3d:26:c7:4b:7e:0e:49:2f:a4:05:44:00:18:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29
Validity
Not Before: May 3 02:46:54 2026 GMT
Not After : May 2 02:51:54 2027 GMT
Subject: CN=003E449CBFDECB0117103DF399E1C961BADCA9EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:42:9e:fb:63:e8:9d:63:c6:29:16:66:2a:c1:
dd:06:3a:b2:ae:74:b5:d6:1b:c3:cf:29:42:5f:3a:
43:76:c2:4e:53:80:7c:09:b6:c0:16:12:87:a0:ba:
b6:84:2d:78:ba:59:a9:98:2a:27:ed:65:c9:c8:e5:
ee:ae:d3:94:f1:69:38:f1:ca:d9:59:15:e7:d5:c1:
dd:c3:a0:f7:79:a2:62:a6:6c:22:8a:65:90:80:e9:
8e:64:40:67:3a:eb:3a:b3:50:b8:62:23:77:0e:99:
09:d5:ce:45:68:26:26:20:12:00:06:6d:a2:08:d4:
c2:23:45:e3:72:ee:01:9d:bf:04:2f:be:b7:f1:58:
52:b8:a7:98:7a:95:0f:8f:12:d0:98:15:28:d0:22:
02:5e:5f:8b:96:57:1c:e5:39:1e:82:ee:b8:49:81:
4d:15:5c:d2:19:dc:17:b5:78:98:8d:8d:64:f0:4e:
cb:ca:30:7d:bf:b3:56:be:85:c2:14:8b:d9:54:a7:
57:2c:10:f4:3f:ef:ef:fe:55:96:87:bb:92:af:92:
81:3a:67:67:3a:e4:c9:49:44:0c:7d:62:9b:eb:3f:
ef:80:59:3a:c0:e1:23:b1:2c:d2:b0:d2:68:19:f1:
6d:c2:ff:62:8b:9e:b5:ae:aa:1c:a8:c6:36:e5:21:
84:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3E:44:9C:BF:DE:CB:01:17:10:3D:F3:99:E1:C9:61:BA:DC:A9:EF
X509v3 Authority Key Identifier:
keyid:EA:4B:A5:6B:93:C3:D8:CB:6F:45:D2:8F:75:C6:C3:33:76:5D:8D:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA4BA56B93C3D8CB6F45D28F75C6C333765D8D29.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/323030313a6466303a333330303a3a2f34382d3438203d3e20313333383339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:3300::/48
Signature Algorithm: sha256WithRSAEncryption
6c:65:ea:47:67:70:1e:f9:c7:a9:4e:81:4a:de:19:1f:d9:57:
32:f9:64:1e:e4:ca:e9:a0:cf:2c:7c:78:5e:0c:eb:21:c9:fa:
00:fe:41:c4:77:0b:dc:f1:da:ff:8a:b0:96:60:78:ee:e0:0e:
31:e2:0e:02:19:39:ac:05:ea:21:9e:a6:24:5a:ce:ba:ec:52:
9a:21:6a:10:f2:26:b7:cf:9a:5a:cd:93:60:93:bb:84:f5:63:
b8:58:0d:96:79:77:52:fa:b1:9a:11:33:82:5d:cb:9e:f5:ae:
9b:ac:7e:00:bb:20:70:6a:77:1f:b5:10:9a:df:cd:cd:d4:4f:
3b:e5:8f:2e:c5:3e:24:08:8e:8f:cb:a7:4e:b6:e6:23:e2:a1:
2e:2e:18:45:75:14:86:cf:62:f0:7e:29:4b:01:71:25:12:e2:
ab:13:06:6f:b3:2a:2c:cb:09:d0:08:c9:df:d8:27:ac:55:9b:
4a:f1:3b:b5:1d:f4:55:3a:0b:4c:a0:13:03:fe:0e:d7:a3:d7:
dd:95:03:01:9e:ef:27:8e:b3:74:1e:83:e3:0f:b2:20:0d:f4:
e2:b6:9f:2c:2a:99:0c:42:38:d1:51:eb:92:18:dd:7a:b9:f8:
46:8c:de:d2:c1:7a:27:00:15:ac:c7:32:f8:28:78:54:6c:1f:
ec:bd:37:85
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUU/u7S7gXPSbHS34OSS+kBUQAGOUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUE0QkE1NkI5M0MzRDhDQjZGNDVEMjhGNzVDNkMzMzM3
NjVEOEQyOTAeFw0yNjA1MDMwMjQ2NTRaFw0yNzA1MDIwMjUxNTRaMDMxMTAvBgNV
BAMTKDAwM0U0NDlDQkZERUNCMDExNzEwM0RGMzk5RTFDOTYxQkFEQ0E5RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZQp77Y+idY8YpFmYqwd0GOrKu
dLXWG8PPKUJfOkN2wk5TgHwJtsAWEoeguraELXi6WamYKiftZcnI5e6u05TxaTjx
ytlZFefVwd3DoPd5omKmbCKKZZCA6Y5kQGc66zqzULhiI3cOmQnVzkVoJiYgEgAG
baII1MIjReNy7gGdvwQvvrfxWFK4p5h6lQ+PEtCYFSjQIgJeX4uWVxzlOR6C7rhJ
gU0VXNIZ3Be1eJiNjWTwTsvKMH2/s1a+hcIUi9lUp1csEPQ/7+/+VZaHu5KvkoE6
Z2c65MlJRAx9YpvrP++AWTrA4SOxLNKw0mgZ8W3C/2KLnrWuqhyoxjblIYStAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUAD5EnL/eywEXED3zmeHJYbrcqe8wHwYDVR0j
BBgwFoAU6kula5PD2MtvRdKPdcbDM3ZdjSkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTE4YWQ3YTYtYzkwNy00MzU5LWFiYTUtZDU3NDhiYTE2MTc2LzAvRUE0QkE1NkI5
M0MzRDhDQjZGNDVEMjhGNzVDNkMzMzM3NjVEOEQyOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQTRCQTU2QjkzQzNEOENCNkY0NUQyOEY3NUM2QzMzMzc2NUQ4
RDI5LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkxOGFkN2E2LWM5MDctNDM1OS1h
YmE1LWQ1NzQ4YmExNjE3Ni8wLzMyMzAzMDMxM2E2NDY2MzAzYTMzMzMzMDMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzMzMzgzMzM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN
8DMAMA0GCSqGSIb3DQEBCwUAA4IBAQBsZepHZ3Ae+cepToFK3hkf2Vcy+WQe5Mrp
oM8sfHheDOshyfoA/kHEdwvc8dr/irCWYHju4A4x4g4CGTmsBeohnqYkWs667FKa
IWoQ8ia3z5pazZNgk7uE9WO4WA2WeXdS+rGaETOCXcue9a6brH4AuyBwancftRCa
383N1E875Y8uxT4kCI6Py6dOtuYj4qEuLhhFdRSGz2LwfilLAXElEuKrEwZvsyos
ywnQCMnf2CesVZtK8Tu1HfRVOgtMoBMD/g7Xo9fdlQMBnu8njrN0HoPjD7IgDfTi
tp8sKpkMQjjRUeuSGN16ufhGjN7SwXonABWsxzL4KHhUbB/svTeF
-----END CERTIFICATE-----
Generated at Wed May 13 17:45:01 2026 by rpki-client