
$ rpki-client -vvf rpki-rsync.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/323430343a343234303a3133383a3a2f34382d3438203d3e20313338313239.roa
File: 323430343a343234303a3133383a3a2f34382d3438203d3e20313338313239.roa (raw, json)
Hash identifier: TP8bfRKoUEkhoFngoaR+W26NiYu68l75OuPWjRZf9XM=
Subject key identifier: CB:7E:B4:27:1F:47:CC:CD:51:D5:31:97:84:6D:30:AE:05:0B:49:AE
Certificate issuer: /CN=182BF87982E8CCFFF878A12F60C3610A27EB6374
Certificate serial: C212A3D9CBDCEFED7653142CBD32C4DD0820B2
Authority key identifier: 18:2B:F8:79:82:E8:CC:FF:F8:78:A1:2F:60:C3:61:0A:27:EB:63:74
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/182BF87982E8CCFFF878A12F60C3610A27EB6374.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/323430343a343234303a3133383a3a2f34382d3438203d3e20313338313239.roa
Signing time: Sun 03 May 2026 02:52:44 +0000
ROA not before: Sun 03 May 2026 02:47:44 +0000
ROA not after: Sun 02 May 2027 02:52:44 +0000
asID: 138129
IP address blocks: 2404:4240:138::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/182BF87982E8CCFFF878A12F60C3610A27EB6374.crl
rsync://rpki-rsync.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/182BF87982E8CCFFF878A12F60C3610A27EB6374.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/182BF87982E8CCFFF878A12F60C3610A27EB6374.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
c2:12:a3:d9:cb:dc:ef:ed:76:53:14:2c:bd:32:c4:dd:08:20:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=182BF87982E8CCFFF878A12F60C3610A27EB6374
Validity
Not Before: May 3 02:47:44 2026 GMT
Not After : May 2 02:52:44 2027 GMT
Subject: CN=CB7EB4271F47CCCD51D53197846D30AE050B49AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:63:06:c0:7f:f8:c7:d0:2a:81:7d:37:75:96:
c1:38:d7:e4:b0:31:64:62:85:8b:ff:19:e7:0d:59:
ec:35:56:f5:a0:58:d5:6a:a9:c9:57:b6:d1:6c:0b:
d9:10:59:3e:5d:79:15:ef:3f:7f:94:f6:d4:06:e7:
a0:97:63:36:ce:af:d2:e3:4e:76:e4:28:a2:75:08:
a3:41:5c:8a:6b:f8:13:09:24:ee:50:e5:e3:03:62:
2f:29:f4:73:aa:fb:f1:9f:79:a8:55:eb:3b:28:1f:
a1:a4:06:6c:05:9e:7e:0a:c3:a8:3d:87:f1:c0:20:
53:86:b4:aa:15:a3:35:d8:9d:c7:c9:80:72:91:22:
71:8b:a0:8f:71:b6:69:ad:17:2c:10:17:70:34:6b:
4f:15:9b:53:72:f6:43:4f:d9:e9:70:c8:c3:61:72:
8b:cc:db:d7:dc:f4:8f:3e:d7:57:b5:cd:54:56:1d:
41:b8:f6:98:49:c8:cc:41:2a:a2:26:40:a7:5e:c3:
b7:b5:15:05:0a:3f:d8:47:7d:29:82:eb:75:28:87:
b2:80:c6:5d:81:2c:62:d2:0c:7c:b9:b2:bf:cc:c9:
d4:ee:91:4d:1b:76:17:3c:95:fe:0c:f5:b6:9f:40:
5a:a2:7e:1d:06:d1:35:8a:c2:1c:07:4a:1f:c3:67:
c0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7E:B4:27:1F:47:CC:CD:51:D5:31:97:84:6D:30:AE:05:0B:49:AE
X509v3 Authority Key Identifier:
keyid:18:2B:F8:79:82:E8:CC:FF:F8:78:A1:2F:60:C3:61:0A:27:EB:63:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/182BF87982E8CCFFF878A12F60C3610A27EB6374.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/182BF87982E8CCFFF878A12F60C3610A27EB6374.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/323430343a343234303a3133383a3a2f34382d3438203d3e20313338313239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:4240:138::/48
Signature Algorithm: sha256WithRSAEncryption
ae:d1:25:00:3d:f8:49:75:d3:d9:b7:14:14:4e:2e:bf:93:a0:
a2:80:49:5f:fb:9b:71:4b:3c:48:9d:fe:04:52:b5:8d:9e:48:
47:4b:64:66:c0:0c:4d:55:9e:57:65:ce:d8:66:f6:ba:1b:7a:
20:40:a9:03:b0:e8:ae:7e:28:cf:7d:8c:a2:9c:36:4b:28:d4:
b4:67:80:ce:86:af:e1:b8:18:b8:5a:c6:55:9b:a2:39:c4:92:
50:76:75:81:d7:30:52:4e:39:f8:58:ef:46:60:c7:28:57:83:
83:42:f5:cf:24:92:58:04:58:ab:34:f4:c9:43:a1:b5:97:1f:
d6:ac:cf:6a:36:16:b9:ee:e9:0b:ed:bc:32:63:84:11:c9:2a:
41:f6:71:52:5d:69:71:33:8e:b9:b7:e4:c1:81:b7:6e:65:8d:
c5:be:41:6d:58:4c:33:c8:0f:ce:73:66:97:5a:b0:d4:19:5f:
56:ff:c5:76:26:8a:d8:39:7a:1b:7c:b2:af:e2:ab:cf:60:14:
ee:77:91:c5:88:64:76:f1:4b:4f:da:ff:a9:45:c7:75:36:4f:
4c:ef:43:e9:47:db:16:79:32:bf:f0:50:cf:02:f9:e8:49:97:
b7:09:c6:69:e8:94:c8:83:87:67:15:be:f5:f3:7f:fe:9e:5e:
a7:1c:25:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:41:12 2026 by rpki-client