
$ rpki-client -vvf rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a313339393a3a2f34382d3438203d3e20313339393732.roa
File: 323430353a633434303a313339393a3a2f34382d3438203d3e20313339393732.roa (raw, json)
Hash identifier: 7M/FpUDv0etwwu7ylJGJwAxNu3aekwI0m/HD51uF5Dg=
Subject key identifier: 16:4A:B7:1F:40:C7:F4:4D:8C:1D:59:C4:07:90:7F:F8:A9:06:E8:14
Certificate issuer: /CN=C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C
Certificate serial: 1C19983CAA0914048CE66CB16E131D7AA90F0AA4
Authority key identifier: C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a313339393a3a2f34382d3438203d3e20313339393732.roa
Signing time: Sun 03 May 2026 02:53:57 +0000
ROA not before: Sun 03 May 2026 02:48:57 +0000
ROA not after: Sun 02 May 2027 02:53:57 +0000
asID: 139972
IP address blocks: 2405:c440:1399::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl
rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:19:98:3c:aa:09:14:04:8c:e6:6c:b1:6e:13:1d:7a:a9:0f:0a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C
Validity
Not Before: May 3 02:48:57 2026 GMT
Not After : May 2 02:53:57 2027 GMT
Subject: CN=164AB71F40C7F44D8C1D59C407907FF8A906E814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0b:3d:51:da:3e:5b:7b:42:fd:f9:cc:c1:a3:
b8:4f:cc:35:77:2a:e7:fc:eb:75:16:17:2e:9e:6a:
50:de:2e:ed:9c:0b:af:4d:13:ee:e8:82:5f:29:ad:
01:94:94:df:14:8e:3f:ac:3b:7c:46:10:29:73:bc:
07:59:f6:90:e2:8b:12:aa:0d:42:dd:23:c0:f4:9a:
2c:ea:9a:63:b2:7c:09:2e:0a:24:18:f4:50:46:8d:
60:53:6d:e1:78:f9:c4:bf:e6:94:1d:74:72:d7:74:
34:80:c6:2c:90:60:a2:a5:66:9a:bb:70:bb:f8:93:
3c:8b:ea:06:85:6f:56:a9:4b:2c:4c:98:34:ae:f6:
8e:65:d7:5f:55:0d:d5:aa:f1:a5:98:db:ea:43:ea:
bc:ae:06:11:22:4f:b6:c4:bf:91:53:37:b6:f6:79:
4b:97:a4:4b:d6:77:cf:58:c7:4a:69:53:98:8c:aa:
f1:e6:6a:e7:47:93:07:09:4d:b4:b6:97:91:4b:2f:
56:16:04:20:56:6a:07:9d:bf:53:a6:89:3f:f3:90:
35:1a:43:51:e5:32:97:13:d4:da:dd:9b:f2:fc:4f:
58:c6:fe:e4:18:10:34:fc:70:47:4b:ae:7c:3b:87:
99:7c:61:86:fb:bc:2e:7c:62:bf:6d:3b:27:f5:02:
12:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4A:B7:1F:40:C7:F4:4D:8C:1D:59:C4:07:90:7F:F8:A9:06:E8:14
X509v3 Authority Key Identifier:
keyid:C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a313339393a3a2f34382d3438203d3e20313339393732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:c440:1399::/48
Signature Algorithm: sha256WithRSAEncryption
12:18:9c:78:a7:14:51:2c:30:ea:df:16:6d:38:46:ee:55:fc:
7a:62:af:a2:fc:8d:ef:81:83:3d:44:47:9b:fb:56:22:6e:61:
75:b8:33:5d:33:3f:67:46:ad:67:4a:6f:05:be:39:18:40:56:
a9:f2:9d:fd:e9:bc:ac:65:75:cf:10:c4:4e:02:c3:29:27:56:
72:6e:0f:57:52:7c:15:03:6f:3f:2a:d3:df:65:da:dd:57:e2:
dd:46:7f:2c:99:d7:3b:fa:61:f3:af:f0:bf:97:8b:3f:f9:d1:
5d:3e:08:a0:9b:ec:1b:f7:12:27:2b:d7:20:cd:21:1f:94:47:
99:03:78:cc:4c:cf:04:28:4b:f6:4c:a3:02:5a:40:f9:92:5c:
dc:f3:c9:c1:6e:a3:e7:51:9d:7b:00:12:cd:49:de:7e:70:6c:
d0:99:70:2e:1e:08:b0:55:3b:9f:81:72:1f:24:e6:cc:86:b0:
6a:1a:b1:14:bb:be:5c:49:a5:f0:9e:5d:95:96:53:d0:44:bf:
6d:2c:2e:34:ba:76:35:98:59:f7:ff:89:f4:54:85:ce:27:1d:
37:53:ea:91:1c:87:83:7c:9c:cd:0d:3c:9d:e8:03:63:2b:82:
e3:96:04:e1:7b:16:b4:a0:3b:18:64:a5:01:da:c9:76:bd:56:
c8:f8:ad:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:11 2026 by rpki-client