
$ rpki-client -vvf rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a653a3a2f34382d3438203d3e20313339393732.roa
File: 323430353a633434303a653a3a2f34382d3438203d3e20313339393732.roa (raw, json)
Hash identifier: y68zFHghkSdjU7J3SSHx7a8FsoE9RE4A/YK0EM7QaeE=
Subject key identifier: 3E:A1:1B:E5:41:B7:AB:84:E4:E7:CA:6A:DE:FB:99:76:19:B1:1F:9F
Certificate issuer: /CN=C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C
Certificate serial: 5EA2ED2C6EA2BD25D5B48B6F9B85A4618CD493B3
Authority key identifier: C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a653a3a2f34382d3438203d3e20313339393732.roa
Signing time: Sun 03 May 2026 02:54:00 +0000
ROA not before: Sun 03 May 2026 02:49:00 +0000
ROA not after: Sun 02 May 2027 02:54:00 +0000
asID: 139972
IP address blocks: 2405:c440:e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl
rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:a2:ed:2c:6e:a2:bd:25:d5:b4:8b:6f:9b:85:a4:61:8c:d4:93:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C
Validity
Not Before: May 3 02:49:00 2026 GMT
Not After : May 2 02:54:00 2027 GMT
Subject: CN=3EA11BE541B7AB84E4E7CA6ADEFB997619B11F9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:96:9e:64:f2:fb:80:18:5b:a7:1d:ed:96:6e:
70:e0:1e:e4:88:f0:b6:01:f9:bd:bb:69:93:4b:d2:
d3:a8:71:25:a1:72:66:24:19:26:0e:cc:97:22:0e:
da:a8:1d:6f:96:31:75:cd:ce:a9:67:bc:e5:98:45:
1b:9e:80:0c:bc:b6:e0:78:f3:3e:d4:9a:7e:8d:1b:
e3:c2:fb:d5:35:50:e9:5d:c3:d1:75:a5:40:26:95:
98:ba:4a:32:7c:dc:4b:55:b2:ef:95:57:ba:7b:b7:
5f:82:c3:a9:f6:ea:08:7f:a4:d7:44:13:c4:e8:26:
56:ad:31:a6:25:10:42:85:5f:a1:27:42:54:22:e9:
35:96:32:a1:a4:32:04:10:65:ac:b2:11:46:8e:25:
37:46:09:fd:be:2d:4b:88:c3:e8:7c:2b:7e:76:84:
a2:2e:42:97:fd:45:63:8f:f8:3e:59:f7:7c:c0:f3:
68:96:10:9a:8c:91:34:ba:9d:e4:9b:c2:6e:7e:4c:
26:83:b7:b6:c3:b3:f7:a4:c9:a8:9d:b6:c2:56:b2:
92:b3:91:81:66:4b:f2:05:b7:34:d7:47:52:45:59:
b1:80:6a:52:f0:b7:59:c5:08:19:d4:67:38:6a:f5:
53:9d:da:3e:49:08:ed:da:d6:39:0e:6a:40:d9:49:
6f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A1:1B:E5:41:B7:AB:84:E4:E7:CA:6A:DE:FB:99:76:19:B1:1F:9F
X509v3 Authority Key Identifier:
keyid:C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a653a3a2f34382d3438203d3e20313339393732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:c440:e::/48
Signature Algorithm: sha256WithRSAEncryption
6f:6b:50:d2:a9:80:1c:31:23:a7:89:76:b9:1b:b7:91:0c:e8:
6e:11:ff:5f:7f:92:15:c3:0a:81:b9:ae:f4:60:73:03:7e:6d:
e6:04:9b:39:53:eb:8f:10:9e:0a:f2:a7:e2:19:f0:7f:a9:9d:
24:c6:ec:b8:59:aa:c4:f3:bd:1b:2e:5c:f4:30:00:62:8f:73:
0f:ac:f1:3d:38:cd:f6:75:a8:45:d6:5c:a2:63:7f:42:12:bf:
63:ea:19:97:c7:d3:78:75:2a:8c:33:19:c0:ea:74:ab:b5:15:
b5:f6:a6:5e:0e:3c:0b:8e:ba:b9:0d:b2:b2:a5:f1:b3:a1:49:
e0:17:87:4a:10:9c:e3:97:2f:9e:a6:b2:26:dc:1e:e4:3e:b9:
93:b8:da:01:e3:96:55:54:d3:b0:92:b5:fb:5e:c0:6b:ea:18:
f6:d8:1a:9b:70:81:93:55:76:6f:db:f6:09:51:dc:ff:08:3e:
1a:a2:88:2d:09:e1:17:10:72:81:4d:ac:8f:13:ad:b2:7b:d4:
75:ca:67:4d:df:03:24:43:89:f5:75:52:16:97:c5:51:52:b1:
77:43:ef:1f:9a:69:89:0c:39:97:3f:75:c4:d0:a0:3c:2d:01:
45:80:42:cc:b8:b5:f7:22:09:91:5a:99:3e:08:c7:ff:b0:49:
f6:88:f7:ba
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUXqLtLG6ivSXVtItvm4WkYYzUk7MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzFBNEFCNDA3MjZENENFREQ2NjNEMUMzNEVCQkU4MTdG
QTQ0QzQyQzAeFw0yNjA1MDMwMjQ5MDBaFw0yNzA1MDIwMjU0MDBaMDMxMTAvBgNV
BAMTKDNFQTExQkU1NDFCN0FCODRFNEU3Q0E2QURFRkI5OTc2MTlCMTFGOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwlp5k8vuAGFunHe2WbnDgHuSI
8LYB+b27aZNL0tOocSWhcmYkGSYOzJciDtqoHW+WMXXNzqlnvOWYRRuegAy8tuB4
8z7Umn6NG+PC+9U1UOldw9F1pUAmlZi6SjJ83EtVsu+VV7p7t1+Cw6n26gh/pNdE
E8ToJlatMaYlEEKFX6EnQlQi6TWWMqGkMgQQZayyEUaOJTdGCf2+LUuIw+h8K352
hKIuQpf9RWOP+D5Z93zA82iWEJqMkTS6neSbwm5+TCaDt7bDs/ekyaidtsJWspKz
kYFmS/IFtzTXR1JFWbGAalLwt1nFCBnUZzhq9VOd2j5JCO3a1jkOakDZSW/hAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUPqEb5UG3q4Tk58pq3vuZdhmxH58wHwYDVR0j
BBgwFoAUwaSrQHJtTO3WY9HDTrvoF/pExCwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTllZWJmN2MtZmUzOC00NmE5LTgzMTEtZTA1M2ZjYTUwZGZkLzAvQzFBNEFCNDA3
MjZENENFREQ2NjNEMUMzNEVCQkU4MTdGQTQ0QzQyQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DMUE0QUI0MDcyNkQ0Q0VERDY2M0QxQzM0RUJCRTgxN0ZBNDRD
NDJDLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzk5ZWViZjdjLWZlMzgtNDZhOS04
MzExLWUwNTNmY2E1MGRmZC8wLzMyMzQzMDM1M2E2MzM0MzQzMDNhNjUzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzkzOTM3MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBcRAAA4w
DQYJKoZIhvcNAQELBQADggEBAG9rUNKpgBwxI6eJdrkbt5EM6G4R/19/khXDCoG5
rvRgcwN+beYEmzlT648Qngryp+IZ8H+pnSTG7LhZqsTzvRsuXPQwAGKPcw+s8T04
zfZ1qEXWXKJjf0ISv2PqGZfH03h1KowzGcDqdKu1FbX2pl4OPAuOurkNsrKl8bOh
SeAXh0oQnOOXL56msibcHuQ+uZO42gHjllVU07CStftewGvqGPbYGptwgZNVdm/b
9glR3P8IPhqiiC0J4RcQcoFNrI8TrbJ71HXKZ03fAyRDifV1UhaXxVFSsXdD7x+a
aYkMOZc/dcTQoDwtAUWAQsy4tfciCZFamT4Ix/+wSfaI97o=
-----END CERTIFICATE-----
Generated at Wed May 13 00:13:53 2026 by rpki-client