
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/323030313a6466353a393630303a3a2f34382d3438203d3e20313335343830.roa
File: 323030313a6466353a393630303a3a2f34382d3438203d3e20313335343830.roa (raw, json)
Hash identifier: 0KpGk+Me0s5mBlSvDHCHu9w7qKthN0KZwNcXUygtBFI=
Subject key identifier: 78:6E:83:7A:31:29:BD:CA:4B:3F:99:CA:A9:1C:47:2E:E3:01:CD:41
Certificate issuer: /CN=B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5
Certificate serial: 691EEC500BC5F3091FE926ABFFE3C17387BAC9C0
Authority key identifier: B7:CB:2E:9F:65:13:B0:AB:D6:9C:D2:A2:CC:60:4D:61:C1:5D:AC:A5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/323030313a6466353a393630303a3a2f34382d3438203d3e20313335343830.roa
Signing time: Sun 03 May 2026 02:54:30 +0000
ROA not before: Sun 03 May 2026 02:49:30 +0000
ROA not after: Sun 02 May 2027 02:54:30 +0000
asID: 135480
IP address blocks: 2001:df5:9600::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.crl
rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:41:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:1e:ec:50:0b:c5:f3:09:1f:e9:26:ab:ff:e3:c1:73:87:ba:c9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5
Validity
Not Before: May 3 02:49:30 2026 GMT
Not After : May 2 02:54:30 2027 GMT
Subject: CN=786E837A3129BDCA4B3F99CAA91C472EE301CD41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ea:75:38:f7:48:19:01:87:2e:ee:58:4f:b6:
2a:df:97:86:03:51:b3:c6:15:19:4f:93:08:56:2e:
70:3f:73:68:2f:e9:60:52:17:7c:71:f6:69:dc:36:
a7:22:08:bc:fe:f0:fd:a3:ae:9e:f5:9f:56:4b:85:
50:7a:b3:ec:b6:b1:85:b3:6d:25:5c:16:da:3b:67:
49:df:fc:0e:37:30:ae:03:45:38:78:b0:74:3d:a4:
7c:05:fc:3c:94:29:ec:50:cc:d6:21:48:cb:3a:9b:
07:70:96:10:57:98:1a:51:77:6c:39:09:c5:d9:fa:
3e:78:a5:2f:5e:64:0f:90:da:d3:19:7e:ce:a4:18:
60:9c:88:01:a7:e3:44:cd:7e:1e:b9:70:57:fe:cd:
53:ae:d5:e5:63:94:85:95:30:4e:ec:c2:f7:16:64:
03:8b:f7:62:ea:fb:57:1e:bb:96:b8:c7:f2:9f:09:
62:12:c0:f8:b6:8d:d6:de:e1:83:b9:24:37:48:ad:
9c:43:2c:7c:45:2e:e1:24:95:23:66:4d:c8:72:7d:
65:9e:0c:b4:7d:86:16:df:0c:b1:5f:14:76:cb:4f:
3f:82:68:33:eb:54:93:ad:9a:59:65:1e:2f:46:45:
11:3d:26:91:72:0a:6a:7a:ce:98:b8:ce:eb:7e:54:
60:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6E:83:7A:31:29:BD:CA:4B:3F:99:CA:A9:1C:47:2E:E3:01:CD:41
X509v3 Authority Key Identifier:
keyid:B7:CB:2E:9F:65:13:B0:AB:D6:9C:D2:A2:CC:60:4D:61:C1:5D:AC:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/323030313a6466353a393630303a3a2f34382d3438203d3e20313335343830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:9600::/48
Signature Algorithm: sha256WithRSAEncryption
de:96:aa:ff:fe:23:0f:91:3b:68:35:9b:ef:ee:99:18:63:6a:
a1:77:f9:76:52:87:1d:f6:da:5c:4d:72:25:4b:c4:b6:59:0e:
a0:e9:57:57:50:11:5a:95:35:88:d8:70:4c:ea:1b:bd:fa:0e:
a5:86:3a:02:ea:b0:27:41:29:06:97:81:33:bd:0d:d3:88:a8:
0d:4b:9a:12:73:cc:7f:03:4b:13:d0:66:c3:da:db:04:86:d9:
74:31:4c:02:71:a1:39:d6:48:36:d7:ee:e0:a0:85:6d:df:5e:
b9:c0:a3:92:cd:d1:94:69:2d:2b:41:e2:34:a0:ce:1e:fe:36:
65:54:2b:1b:03:4d:54:f5:1a:bf:46:bb:95:43:56:25:9e:a4:
5c:88:1d:2a:64:74:e6:f2:35:d1:50:2d:55:d5:fc:5c:75:05:
c3:84:ee:39:46:48:00:95:5b:73:c5:9e:35:5d:a1:dd:91:de:
98:b8:c8:e4:58:c3:5e:e6:4b:98:ee:ad:35:42:63:74:2a:5a:
8f:91:73:f6:01:42:55:54:c3:e2:94:9a:fe:60:36:f4:33:1b:
6a:9c:42:65:a0:06:de:51:77:f3:59:61:0b:57:d3:62:8d:19:
0b:66:72:9b:98:a4:cf:fc:5b:4b:a6:5e:0d:43:56:d8:93:2f:
d3:7a:14:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:43:11 2026 by rpki-client