
$ rpki-client -vvf rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a313a3a2f34382d3438203d3e20313339393732.roa
File: 323430353a633434303a313a3a2f34382d3438203d3e20313339393732.roa (raw, json)
Hash identifier: +gpInYVfvDiUSg/ougsXZafgspK8aDfkWjNloNqtcJo=
Subject key identifier: 1A:92:A4:26:D1:20:3D:D4:FE:76:CA:A4:AA:55:8C:16:2D:E7:BD:7A
Certificate issuer: /CN=C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C
Certificate serial: 24693ABE2ACC4A9C3EC382E5073D9E64B661827D
Authority key identifier: C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a313a3a2f34382d3438203d3e20313339393732.roa
Signing time: Sun 03 May 2026 02:53:58 +0000
ROA not before: Sun 03 May 2026 02:48:58 +0000
ROA not after: Sun 02 May 2027 02:53:58 +0000
asID: 139972
IP address blocks: 2405:c440:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl
rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:69:3a:be:2a:cc:4a:9c:3e:c3:82:e5:07:3d:9e:64:b6:61:82:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C
Validity
Not Before: May 3 02:48:58 2026 GMT
Not After : May 2 02:53:58 2027 GMT
Subject: CN=1A92A426D1203DD4FE76CAA4AA558C162DE7BD7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7d:70:83:21:8b:4e:04:6e:8d:85:77:2c:69:
66:82:c2:f4:9c:b3:ae:ea:1d:1b:81:eb:e3:d6:0b:
80:dc:52:e2:ce:20:1c:e2:84:78:cf:b9:58:b1:af:
24:c0:0c:5a:76:8c:61:76:1a:c4:f7:ad:ed:a1:38:
95:8f:06:64:76:2f:16:3c:9a:05:df:d8:8b:f7:49:
cb:b8:51:80:c6:7b:69:06:87:08:b0:f0:68:45:e6:
27:d1:bb:1f:be:1e:e3:9c:5d:aa:56:c9:32:38:fe:
dc:69:61:83:b7:61:8e:3f:3a:41:da:ae:44:ae:0f:
4a:7d:ce:e3:6c:bf:28:68:33:1a:fa:5f:0a:58:25:
8c:09:b8:a3:32:f6:5f:31:34:8b:06:62:75:6e:40:
b2:3e:9b:c5:53:bf:d7:80:19:fd:b7:1c:6f:aa:3c:
ef:10:a4:aa:87:f9:38:40:f2:61:7a:6e:04:e9:36:
75:07:35:87:da:35:34:a6:1b:bb:b4:fa:ec:ae:0c:
a2:31:59:9f:3e:c5:9e:56:c2:59:b9:e2:ff:14:88:
30:d1:f0:93:2a:c9:3a:1a:75:eb:98:fc:f0:0c:62:
bd:b3:15:25:5f:59:03:df:69:24:bd:68:97:50:62:
2b:52:4c:78:6e:03:72:f6:15:15:c7:a6:9b:63:a8:
87:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:92:A4:26:D1:20:3D:D4:FE:76:CA:A4:AA:55:8C:16:2D:E7:BD:7A
X509v3 Authority Key Identifier:
keyid:C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a313a3a2f34382d3438203d3e20313339393732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:c440:1::/48
Signature Algorithm: sha256WithRSAEncryption
7f:b3:81:7f:da:63:1f:c0:b8:6f:bc:6c:67:6c:d8:88:ec:0a:
88:3b:67:8e:de:f0:08:f5:f8:0d:6c:b3:a2:89:4d:16:12:be:
2b:2f:f0:df:ca:74:3c:4f:87:29:ba:73:b2:7a:df:f3:f0:04:
80:1d:f9:72:46:3e:71:66:c0:63:2b:4c:84:f7:34:75:94:5b:
05:18:c1:1b:e6:fc:18:c7:a9:c9:2b:03:08:b1:f1:24:ad:b6:
72:fe:d2:c7:e2:f8:65:6c:17:ca:c6:35:56:d1:96:a1:7e:9d:
af:2a:80:12:ed:7e:7e:17:07:68:72:47:1e:15:64:f2:38:67:
d1:b0:8c:02:63:47:b1:f8:b2:82:87:ad:6d:99:67:71:f6:2c:
29:aa:7d:d5:a3:0e:81:29:df:3a:66:fd:69:55:9e:45:e3:44:
37:27:37:78:b5:d0:72:77:87:92:14:c2:9f:87:57:a7:fe:1a:
6e:cf:37:42:ee:f4:57:37:16:3b:73:f0:7f:a2:57:c3:45:5c:
5c:a1:2b:ff:02:fe:26:38:16:a9:91:da:36:f3:26:cd:32:a6:
02:b2:da:3b:8e:e9:a1:bf:33:92:91:0a:fa:e1:85:63:f7:3d:
fb:b1:2d:4d:7a:65:bd:f1:c5:90:c2:39:36:65:22:d2:4a:70:
9f:d6:8f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:20:40 2026 by rpki-client