
$ rpki-client -vvf rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/323430313a383434303a3233313a3a2f34382d3438203d3e20313336313331.roa
File: 323430313a383434303a3233313a3a2f34382d3438203d3e20313336313331.roa (raw, json)
Hash identifier: c0E9xb18G6dDWSOYbp1L8pfGiJXjXDV9gaUGsFzHbYc=
Subject key identifier: 7B:92:7E:47:51:B5:B4:37:FD:F5:5D:92:E6:AE:04:6F:1E:D6:68:B5
Certificate issuer: /CN=F07DE2A6041C4CCDF424D4FE299B586DABA22CAF
Certificate serial: 4D00B5EAFE6FA537091AC474EDFC2C55D07EB0C9
Authority key identifier: F0:7D:E2:A6:04:1C:4C:CD:F4:24:D4:FE:29:9B:58:6D:AB:A2:2C:AF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/323430313a383434303a3233313a3a2f34382d3438203d3e20313336313331.roa
Signing time: Sun 03 May 2026 02:52:56 +0000
ROA not before: Sun 03 May 2026 02:47:56 +0000
ROA not after: Sun 02 May 2027 02:52:56 +0000
asID: 136131
IP address blocks: 2401:8440:231::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.crl
rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:06:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:00:b5:ea:fe:6f:a5:37:09:1a:c4:74:ed:fc:2c:55:d0:7e:b0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F07DE2A6041C4CCDF424D4FE299B586DABA22CAF
Validity
Not Before: May 3 02:47:56 2026 GMT
Not After : May 2 02:52:56 2027 GMT
Subject: CN=7B927E4751B5B437FDF55D92E6AE046F1ED668B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fc:f4:79:85:93:6f:a7:68:7a:76:17:87:d3:
ad:5a:e7:61:d2:f1:38:36:5b:f3:f0:6a:b6:3e:93:
84:a4:87:4d:74:3f:7f:05:6a:b5:77:bf:e1:6b:86:
80:4c:6f:53:08:62:89:51:4d:08:ad:90:19:40:e7:
74:32:5a:e2:0b:8d:01:c4:e1:ab:98:c3:12:5a:c7:
0a:06:c0:24:d0:66:ed:be:be:53:92:a3:90:1a:c3:
ca:6c:03:83:e6:37:ee:14:d2:ce:82:03:ed:a1:75:
08:a5:56:e6:93:46:7f:08:95:63:bc:9c:2f:88:f5:
75:2f:78:52:55:5e:bd:cf:0c:79:35:b0:ed:0c:cb:
89:05:e3:72:40:39:f3:05:b8:f4:47:cb:7c:04:ac:
c4:53:19:3d:f0:c7:d8:f6:24:6a:12:9d:4e:9b:75:
12:31:d9:d1:ab:cf:79:f2:60:0b:4c:11:f5:1e:b2:
f9:21:41:86:c6:81:42:b2:51:a8:f6:b5:35:63:bf:
14:21:7e:14:f3:7e:aa:92:61:30:ee:64:bf:21:43:
ec:e4:77:0b:e3:53:07:28:58:3b:b3:90:e1:9c:ce:
c4:ac:e3:13:89:31:f0:7e:53:21:55:69:1e:af:22:
e3:94:d6:92:00:de:ba:f1:4a:5b:89:e9:ca:76:a0:
b4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:92:7E:47:51:B5:B4:37:FD:F5:5D:92:E6:AE:04:6F:1E:D6:68:B5
X509v3 Authority Key Identifier:
keyid:F0:7D:E2:A6:04:1C:4C:CD:F4:24:D4:FE:29:9B:58:6D:AB:A2:2C:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/323430313a383434303a3233313a3a2f34382d3438203d3e20313336313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:8440:231::/48
Signature Algorithm: sha256WithRSAEncryption
96:79:37:92:d2:43:34:97:4b:5b:0d:44:6a:f8:a0:97:4e:fb:
6c:e0:5e:c9:76:18:c4:ba:11:d4:66:2a:44:74:96:ae:fc:63:
ba:05:27:6e:5c:7f:cf:29:b1:45:f9:d7:05:71:2f:a7:46:a5:
19:af:ba:c3:24:ab:5b:03:3b:15:67:2f:94:f0:b8:25:1a:da:
ad:78:63:4c:d8:df:d9:11:55:d0:6d:c6:2f:a5:9f:c9:e9:0a:
83:bb:e5:00:9d:ff:d8:9f:aa:45:35:41:f9:b0:3f:c7:ff:b2:
80:c7:c8:84:c7:cf:a0:51:43:7a:0b:90:fc:a4:28:67:d7:59:
fa:3e:e9:b3:35:65:08:82:5b:f8:9f:6b:9c:72:a3:fd:91:dd:
73:a0:a2:54:c9:15:96:ae:5b:23:a8:bb:fe:99:ae:ad:83:0a:
51:e8:fe:56:44:cd:23:5f:09:1d:87:d8:16:47:a1:29:66:73:
dd:23:47:22:49:dc:37:12:23:51:1a:4e:c9:98:49:3b:9a:f8:
01:43:01:83:d5:7f:19:52:39:9d:58:d1:7e:b4:b9:88:1b:71:
db:97:9c:13:36:13:10:6b:b3:39:2a:9a:9e:89:6e:c3:b2:c3:
f4:8f:74:3f:e6:69:5c:a0:31:87:7b:e1:3a:fa:3e:43:a6:24:
84:21:7c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:48:21 2026 by rpki-client