
$ rpki-client -vvf rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a373a3a2f34382d3438203d3e20313339393732.roa
File: 323430353a633434303a373a3a2f34382d3438203d3e20313339393732.roa (raw, json)
Hash identifier: MRewP/mtcTmJvmAEti0jSDsyTirqW1oh+hUXZAYwK5M=
Subject key identifier: 91:6A:D5:2C:05:14:10:6A:CE:8A:C5:E7:75:C5:B5:62:6D:DD:AD:96
Certificate issuer: /CN=C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C
Certificate serial: 305BE95E5235A961D6AB2EEC51E7CBDBB11E8CEF
Authority key identifier: C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a373a3a2f34382d3438203d3e20313339393732.roa
Signing time: Sun 03 May 2026 02:53:59 +0000
ROA not before: Sun 03 May 2026 02:48:59 +0000
ROA not after: Sun 02 May 2027 02:53:59 +0000
asID: 139972
IP address blocks: 2405:c440:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl
rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:5b:e9:5e:52:35:a9:61:d6:ab:2e:ec:51:e7:cb:db:b1:1e:8c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C
Validity
Not Before: May 3 02:48:59 2026 GMT
Not After : May 2 02:53:59 2027 GMT
Subject: CN=916AD52C0514106ACE8AC5E775C5B5626DDDAD96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:77:1d:43:10:96:cf:08:c1:64:2c:8d:5d:13:
63:5d:8f:7d:88:f5:f3:10:64:08:59:48:00:39:6d:
fc:e1:0d:ba:95:30:d2:65:26:ae:3f:71:e3:be:66:
d0:9d:bc:a0:1f:75:3f:f5:86:7c:c2:3d:e6:80:70:
37:c6:8b:fc:ac:33:ed:01:ba:e0:4d:11:56:5c:c4:
05:9e:20:1f:83:c1:fc:b4:69:ad:fe:37:0e:a8:c2:
d9:3c:76:e8:09:88:56:d3:fb:6f:9b:ce:dd:bf:3a:
40:1b:74:74:02:fc:47:4f:72:5f:2f:9f:ab:b3:4e:
6c:47:f0:19:78:eb:ca:e9:0c:7b:78:34:c8:a0:be:
0a:42:d2:bf:a3:47:8c:91:e9:30:bc:f7:5c:9c:02:
2d:72:4b:db:4f:3c:40:93:6a:84:3c:3d:42:17:9b:
10:92:7b:ac:b2:3f:04:fb:9c:07:e3:89:e8:eb:5d:
b3:04:5a:6c:a5:32:e0:ab:e1:8a:06:29:5e:64:75:
80:89:6a:0e:9f:e7:23:7a:c7:fb:17:f6:28:28:23:
f0:1f:fb:8f:82:01:89:c3:92:5e:ce:05:53:78:16:
ee:6e:ee:5c:d3:9e:ed:df:97:87:b6:d1:08:7a:33:
99:9b:e7:db:f0:aa:68:4c:8e:d8:49:e6:25:31:27:
1c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6A:D5:2C:05:14:10:6A:CE:8A:C5:E7:75:C5:B5:62:6D:DD:AD:96
X509v3 Authority Key Identifier:
keyid:C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a373a3a2f34382d3438203d3e20313339393732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:c440:7::/48
Signature Algorithm: sha256WithRSAEncryption
41:20:7a:ce:c9:6b:ac:83:a0:21:0e:c9:dd:c8:79:21:9d:c6:
48:1c:6d:91:3b:aa:ad:f4:4d:0d:96:75:4b:0c:9f:01:c4:e9:
5a:dc:72:e7:0e:7b:3b:7d:28:09:b0:d5:2d:d9:3a:a2:95:84:
3b:fc:b3:67:2a:38:b0:ce:02:9c:86:b0:99:15:97:ed:2e:5f:
72:6d:39:c0:b6:3b:9a:ba:bf:0b:99:04:77:db:76:11:fb:16:
84:b3:42:4d:52:90:0b:31:30:e3:cb:4e:6e:31:ea:bd:4e:a3:
09:e6:31:0b:41:da:35:57:45:42:3d:8d:4d:df:e5:6d:c8:09:
85:52:8f:28:3c:9f:66:a0:25:ac:f0:59:ed:21:c4:3e:7f:df:
f4:4b:54:0c:ac:1d:e0:47:63:9e:6d:69:86:84:84:32:62:ad:
2c:74:74:e5:2e:a8:79:4c:e9:64:89:ae:52:a9:88:7d:a6:48:
b6:a2:8a:28:c5:36:a8:38:9d:c7:2c:bd:e0:b4:3a:1e:89:71:
f0:a7:d1:9c:f7:00:98:b1:06:cf:70:5a:b0:4a:f5:34:ed:eb:
35:40:e0:21:21:58:15:0c:60:f8:af:a4:c3:12:ab:fe:4c:24:
30:84:3c:1d:75:d4:69:69:96:4e:4a:8f:17:4d:c5:29:65:97:
4f:7d:50:a6
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUMFvpXlI1qWHWqy7sUefL27EejO8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzFBNEFCNDA3MjZENENFREQ2NjNEMUMzNEVCQkU4MTdG
QTQ0QzQyQzAeFw0yNjA1MDMwMjQ4NTlaFw0yNzA1MDIwMjUzNTlaMDMxMTAvBgNV
BAMTKDkxNkFENTJDMDUxNDEwNkFDRThBQzVFNzc1QzVCNTYyNkREREFEOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBdx1DEJbPCMFkLI1dE2Ndj32I
9fMQZAhZSAA5bfzhDbqVMNJlJq4/ceO+ZtCdvKAfdT/1hnzCPeaAcDfGi/ysM+0B
uuBNEVZcxAWeIB+Dwfy0aa3+Nw6owtk8dugJiFbT+2+bzt2/OkAbdHQC/EdPcl8v
n6uzTmxH8Bl468rpDHt4NMigvgpC0r+jR4yR6TC891ycAi1yS9tPPECTaoQ8PUIX
mxCSe6yyPwT7nAfjiejrXbMEWmylMuCr4YoGKV5kdYCJag6f5yN6x/sX9igoI/Af
+4+CAYnDkl7OBVN4Fu5u7lzTnu3fl4e20Qh6M5mb59vwqmhMjthJ5iUxJxx7AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUkWrVLAUUEGrOisXndcW1Ym3drZYwHwYDVR0j
BBgwFoAUwaSrQHJtTO3WY9HDTrvoF/pExCwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTllZWJmN2MtZmUzOC00NmE5LTgzMTEtZTA1M2ZjYTUwZGZkLzAvQzFBNEFCNDA3
MjZENENFREQ2NjNEMUMzNEVCQkU4MTdGQTQ0QzQyQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DMUE0QUI0MDcyNkQ0Q0VERDY2M0QxQzM0RUJCRTgxN0ZBNDRD
NDJDLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzk5ZWViZjdjLWZlMzgtNDZhOS04
MzExLWUwNTNmY2E1MGRmZC8wLzMyMzQzMDM1M2E2MzM0MzQzMDNhMzczYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzkzOTM3MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBcRAAAcw
DQYJKoZIhvcNAQELBQADggEBAEEges7Ja6yDoCEOyd3IeSGdxkgcbZE7qq30TQ2W
dUsMnwHE6VrccucOezt9KAmw1S3ZOqKVhDv8s2cqOLDOApyGsJkVl+0uX3JtOcC2
O5q6vwuZBHfbdhH7FoSzQk1SkAsxMOPLTm4x6r1OownmMQtB2jVXRUI9jU3f5W3I
CYVSjyg8n2agJazwWe0hxD5/3/RLVAysHeBHY55taYaEhDJirSx0dOUuqHlM6WSJ
rlKpiH2mSLaiiijFNqg4nccsveC0Oh6JcfCn0Zz3AJixBs9wWrBK9TTt6zVA4CEh
WBUMYPivpMMSq/5MJDCEPB111Glplk5KjxdNxSlll099UKY=
-----END CERTIFICATE-----
Generated at Wed May 13 01:41:29 2026 by rpki-client