
$ rpki-client -vvf rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/323030313a6466373a326630303a3a2f34382d3438203d3e20313338313134.roa
File: 323030313a6466373a326630303a3a2f34382d3438203d3e20313338313134.roa (raw, json)
Hash identifier: BdIV5PbAUlJnh4RApHNLwZ1Ca32+bF84gt8/bqThZfc=
Subject key identifier: 2B:BB:2D:41:C4:0A:58:DE:72:94:B0:FE:35:06:92:52:CA:92:D2:B5
Certificate issuer: /CN=EEC8298F6351E0D1E9099D89D52C21BDF551073F
Certificate serial: 2ED90D5ACB7E1380880ADFA0F19A2AB5F3C45799
Authority key identifier: EE:C8:29:8F:63:51:E0:D1:E9:09:9D:89:D5:2C:21:BD:F5:51:07:3F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEC8298F6351E0D1E9099D89D52C21BDF551073F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/323030313a6466373a326630303a3a2f34382d3438203d3e20313338313134.roa
Signing time: Sun 03 May 2026 02:52:34 +0000
ROA not before: Sun 03 May 2026 02:47:34 +0000
ROA not after: Sun 02 May 2027 02:52:34 +0000
asID: 138114
IP address blocks: 2001:df7:2f00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.crl
rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEC8298F6351E0D1E9099D89D52C21BDF551073F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:d9:0d:5a:cb:7e:13:80:88:0a:df:a0:f1:9a:2a:b5:f3:c4:57:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEC8298F6351E0D1E9099D89D52C21BDF551073F
Validity
Not Before: May 3 02:47:34 2026 GMT
Not After : May 2 02:52:34 2027 GMT
Subject: CN=2BBB2D41C40A58DE7294B0FE35069252CA92D2B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:61:32:be:e8:af:a7:48:e7:ab:a8:16:e1:27:
65:9d:37:42:e3:e6:d7:3a:70:b4:c8:76:d8:9d:92:
df:40:b1:8a:35:8a:8c:ab:ee:aa:b2:a1:43:ca:e9:
00:41:ba:b5:42:cb:86:84:88:71:f5:fa:86:b8:e4:
81:84:67:fe:77:66:48:ce:ba:06:91:3b:c5:a0:0e:
41:8d:e8:2a:4a:b9:5e:b0:e1:cc:94:40:eb:0e:73:
2a:4e:54:76:89:d7:ac:4f:cb:21:0f:b0:4d:89:bf:
12:a1:8c:5d:3f:4f:71:7d:b9:c5:40:2a:7a:88:c6:
5f:fa:dd:d2:46:23:4e:7f:9e:6f:1c:e9:5a:34:67:
f1:e2:11:5c:b4:c4:7e:eb:69:90:f8:02:76:05:ce:
a8:91:98:16:e4:7f:00:40:83:39:4b:12:f2:0e:6b:
8a:26:49:18:75:36:05:ec:46:09:db:4f:1b:a3:26:
60:45:8d:07:88:8e:d4:f5:6d:86:4c:72:05:a3:95:
e1:e7:89:d0:33:15:43:04:42:b7:30:3b:17:b1:4e:
50:23:1f:28:96:47:2f:44:38:f4:1a:56:6e:f9:a4:
37:33:43:72:10:ac:d6:9d:38:5b:6a:28:5b:94:b5:
05:82:2a:c4:0a:22:2a:80:3b:7e:26:eb:22:ac:54:
73:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BB:2D:41:C4:0A:58:DE:72:94:B0:FE:35:06:92:52:CA:92:D2:B5
X509v3 Authority Key Identifier:
keyid:EE:C8:29:8F:63:51:E0:D1:E9:09:9D:89:D5:2C:21:BD:F5:51:07:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEC8298F6351E0D1E9099D89D52C21BDF551073F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/323030313a6466373a326630303a3a2f34382d3438203d3e20313338313134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:2f00::/48
Signature Algorithm: sha256WithRSAEncryption
2d:7b:90:23:47:9c:b3:89:df:ef:69:39:5d:04:22:d4:59:71:
52:ca:39:46:ed:e4:3a:f8:16:c4:a7:b5:4f:84:78:9a:e8:8c:
d5:97:d6:ef:5d:bb:56:6a:65:48:b6:8a:c6:8d:a8:cc:b7:30:
16:8d:b5:48:71:92:a9:09:9a:9f:6f:02:64:28:52:f4:4d:d0:
88:e0:78:0b:b7:b6:b5:53:90:8f:a5:fc:77:2c:23:6e:49:c8:
0d:85:b9:3a:2a:a4:33:37:bb:7a:88:1e:bd:a7:2c:7a:fd:88:
ad:ab:6d:eb:19:0c:15:26:e0:81:eb:71:62:b7:ce:15:41:b8:
9f:ed:f8:d0:5c:f9:77:ca:92:cd:a8:ef:0b:25:9a:69:17:0e:
eb:0d:89:c4:4f:4f:11:d3:06:d6:26:c7:1f:29:8c:3a:64:ad:
d7:a3:dd:76:51:0e:cf:71:b9:0b:94:bb:16:e3:49:be:12:0c:
65:bf:47:a4:96:21:ce:6b:e7:a7:e6:00:70:9f:18:c2:27:00:
73:97:81:a1:c5:82:a2:d2:ec:be:73:59:65:11:a3:31:54:9b:
b2:f1:e8:35:34:4e:35:f8:bb:94:c8:3e:78:ea:ab:3a:aa:08:
3c:64:c1:26:0f:eb:0b:94:d7:de:5b:ee:c5:47:e5:12:2a:fe:
b8:2f:91:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:26:05 2026 by rpki-client