
$ rpki-client -vvf rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/323030313a6466333a313230303a3a2f34382d3438203d3e20313335343535.roa
File: 323030313a6466333a313230303a3a2f34382d3438203d3e20313335343535.roa (raw, json)
Hash identifier: R27uG9wLK3XnlCddZVxdbbwrtPpS8ZSeb7rGWZG6Ph4=
Subject key identifier: 27:18:70:E0:3E:7E:58:9C:A2:E6:32:7E:9C:AC:BB:51:E1:BD:96:15
Certificate issuer: /CN=E97D24062E3E8091388E0E26DFE825A3AE0F5EC1
Certificate serial: 4048B418528DC02E52C5016B271A0D0004E315EF
Authority key identifier: E9:7D:24:06:2E:3E:80:91:38:8E:0E:26:DF:E8:25:A3:AE:0F:5E:C1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/323030313a6466333a313230303a3a2f34382d3438203d3e20313335343535.roa
Signing time: Sun 03 May 2026 02:52:38 +0000
ROA not before: Sun 03 May 2026 02:47:38 +0000
ROA not after: Sun 02 May 2027 02:52:38 +0000
asID: 135455
IP address blocks: 2001:df3:1200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.crl
rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:39:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:48:b4:18:52:8d:c0:2e:52:c5:01:6b:27:1a:0d:00:04:e3:15:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E97D24062E3E8091388E0E26DFE825A3AE0F5EC1
Validity
Not Before: May 3 02:47:38 2026 GMT
Not After : May 2 02:52:38 2027 GMT
Subject: CN=271870E03E7E589CA2E6327E9CACBB51E1BD9615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cc:76:94:bd:55:18:61:75:18:e1:df:3e:82:
34:b6:7d:02:bf:a4:04:b6:38:d7:fe:9a:74:f9:02:
75:2b:9d:eb:9e:98:12:f0:33:8b:e9:41:1a:df:7e:
2b:bb:36:8b:2b:af:6d:af:1f:de:d7:ce:ec:d4:8e:
b3:41:53:04:ab:a4:20:82:c8:d0:27:b9:d5:80:c5:
73:fa:33:62:25:39:28:d8:90:d5:0a:c7:24:c1:69:
4e:51:0e:cf:d7:48:c2:4e:97:d3:a0:63:23:5b:03:
4f:15:43:e3:83:a6:69:6a:79:a5:79:ea:63:5e:35:
48:20:e5:b2:4b:9f:1e:d5:3e:9f:81:67:9c:aa:ca:
44:c3:fa:4a:91:2e:ff:1f:51:42:bc:05:30:f0:c0:
cd:51:6c:91:3f:74:09:92:9f:27:cd:64:e7:44:e8:
53:75:c1:22:6b:ea:95:31:4f:f8:6b:75:7b:c3:72:
e0:f9:d1:2b:89:66:8b:9c:0d:15:2f:8a:5b:8f:c7:
71:0d:75:3a:4a:43:cf:48:dd:09:07:36:e7:a1:df:
9e:b0:05:2c:e0:94:00:b6:6e:c3:45:6a:a3:44:d1:
46:bb:4b:6e:49:61:7d:6b:52:40:a5:af:06:00:ae:
42:08:dd:82:3e:29:ec:64:e3:06:42:fe:a0:0a:26:
c8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:18:70:E0:3E:7E:58:9C:A2:E6:32:7E:9C:AC:BB:51:E1:BD:96:15
X509v3 Authority Key Identifier:
keyid:E9:7D:24:06:2E:3E:80:91:38:8E:0E:26:DF:E8:25:A3:AE:0F:5E:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/323030313a6466333a313230303a3a2f34382d3438203d3e20313335343535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:1200::/48
Signature Algorithm: sha256WithRSAEncryption
c5:8e:79:df:40:c5:b5:20:1b:91:90:dc:e0:8c:93:98:aa:d8:
fc:22:c9:d0:d9:ce:b5:2f:91:c2:49:fb:44:32:5c:2a:96:0c:
4b:cf:e8:25:07:2e:5f:85:9a:1e:cc:e4:c0:b1:f2:5d:dd:c6:
06:f3:63:4e:22:a7:4c:ad:a2:5b:ff:11:01:4d:d5:8e:41:f8:
1b:52:fa:e2:9c:5b:27:f2:2e:37:6b:c5:61:51:44:85:b1:c2:
b7:69:1a:40:56:f7:99:d1:9a:05:4b:4b:2d:25:92:c6:9b:f6:
1b:68:97:bd:f6:46:8f:bd:87:8a:e3:08:f9:b6:bc:4d:e6:a2:
5b:d3:d5:13:f1:3e:7e:81:a9:42:b1:f8:91:64:c7:db:d5:de:
49:dc:dc:e5:c0:14:34:5c:e9:03:25:26:41:8a:8f:2b:41:67:
78:b5:bc:db:7a:21:a8:bc:e7:18:53:48:6f:3e:73:7a:1c:d7:
66:dd:c5:a5:a6:38:1e:09:4a:5c:9f:27:cb:ba:a0:e4:0f:be:
54:bc:47:c6:09:f6:80:c1:76:e6:ac:d9:c6:52:9c:92:c8:1b:
c5:02:71:22:d5:28:9e:8e:da:d5:d5:3e:b2:35:9d:cb:15:ca:
f3:9a:88:3c:ac:ef:14:99:7b:f4:49:ea:f8:92:7b:dc:b7:00:
fd:cc:78:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:46:03 2026 by rpki-client