
$ rpki-client -vvf rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a383a3a2f34382d3438203d3e20313339393732.roa
File: 323430353a633434303a383a3a2f34382d3438203d3e20313339393732.roa (raw, json)
Hash identifier: XchOovNPvuofEcM3x4SJA/BJsOE2uDXK+i/n28/FDPQ=
Subject key identifier: 9C:DA:BB:6F:89:89:CB:39:E5:37:7C:75:29:83:5C:01:48:50:CD:EB
Certificate issuer: /CN=C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C
Certificate serial: 3EAF2D4C948FC3A06B29CE858D7FEFFED6CBCB6D
Authority key identifier: C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a383a3a2f34382d3438203d3e20313339393732.roa
Signing time: Sun 03 May 2026 02:54:01 +0000
ROA not before: Sun 03 May 2026 02:49:01 +0000
ROA not after: Sun 02 May 2027 02:54:01 +0000
asID: 139972
IP address blocks: 2405:c440:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl
rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:af:2d:4c:94:8f:c3:a0:6b:29:ce:85:8d:7f:ef:fe:d6:cb:cb:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C
Validity
Not Before: May 3 02:49:01 2026 GMT
Not After : May 2 02:54:01 2027 GMT
Subject: CN=9CDABB6F8989CB39E5377C7529835C014850CDEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:53:c0:9c:90:66:9f:6a:44:d1:ed:0e:ae:03:
44:3f:72:9a:fe:6c:af:b6:59:b2:83:25:d1:44:83:
27:a9:2f:cb:fa:42:1d:0d:1c:bf:60:ce:30:22:98:
35:2b:ac:12:74:04:90:68:99:92:f8:f3:2f:7f:26:
01:1d:0b:0f:36:ff:7e:9b:80:3c:81:33:7a:bb:5b:
6c:8c:e8:e8:a8:e3:c8:11:c6:75:29:78:3d:96:09:
a0:6d:37:21:b3:fb:b1:fd:a7:44:00:c3:6a:c4:4b:
19:c6:35:4b:73:b1:3e:bf:36:16:ea:99:5a:ed:09:
2a:90:c1:2f:95:2c:5d:4d:26:13:76:37:c7:78:5c:
cc:84:d9:6c:35:af:75:0d:6c:29:96:32:3e:e5:77:
89:ab:66:59:eb:66:1c:73:f5:df:17:b6:66:5e:18:
f6:0b:f5:d4:3f:6a:2f:2e:c0:7b:9a:6a:89:5e:56:
f4:ff:04:2f:29:b8:47:3b:8f:20:5a:40:e5:5b:7f:
37:5f:b5:2c:af:6b:63:15:9c:3f:0d:ae:b2:8c:62:
57:3b:6d:29:03:e9:cf:79:f8:0e:20:9a:13:a7:53:
71:60:cb:9f:22:d1:38:af:c7:59:5f:b7:51:3f:be:
97:0c:7f:28:3c:ec:c3:ed:fd:cb:1e:3e:b3:02:3b:
0f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DA:BB:6F:89:89:CB:39:E5:37:7C:75:29:83:5C:01:48:50:CD:EB
X509v3 Authority Key Identifier:
keyid:C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a383a3a2f34382d3438203d3e20313339393732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:c440:8::/48
Signature Algorithm: sha256WithRSAEncryption
2b:a1:e0:e5:2b:54:9e:70:fa:5b:71:c3:a2:dc:aa:2f:db:61:
ba:54:6b:52:b5:ff:76:8e:f8:ad:92:fd:37:dc:3b:a7:27:b8:
3d:4e:e6:6d:06:9e:aa:d0:e5:52:cc:98:dd:f4:1d:37:52:c0:
12:61:0f:72:77:63:fe:ad:67:75:52:cd:0c:a4:e9:7d:30:c0:
a4:98:4d:32:62:19:90:f0:db:96:16:08:21:49:d1:34:4c:c8:
83:df:68:dd:94:8e:17:8b:8a:ad:e8:ed:50:c6:a8:f6:65:e0:
88:59:ba:52:0b:d9:fa:4f:74:43:08:f7:f1:9c:d1:5d:01:f8:
9a:28:0c:3a:5c:72:48:34:33:cf:8f:9c:aa:30:e2:2f:7c:89:
f2:b7:79:af:08:b4:0c:a0:83:31:96:4d:4d:1b:a7:d9:cc:ef:
00:5f:22:c2:e5:49:e0:7b:16:70:d3:14:a9:ff:41:65:d6:10:
45:41:1e:fb:bf:1d:f5:a1:46:ab:81:62:8c:5a:9a:87:ad:79:
08:0f:bc:27:0c:11:03:74:3b:ab:36:2c:c6:23:2d:91:73:06:
c8:ef:2a:e2:50:25:d6:4c:37:81:82:86:9e:29:b9:71:9f:09:
04:13:52:6f:aa:6f:6c:ff:a1:12:f9:d6:3e:4a:e9:b5:b2:d2:
82:7e:70:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:41:17 2026 by rpki-client