
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/323430343a356434303a343a3a2f34382d3438203d3e20313338353938.roa
File: 323430343a356434303a343a3a2f34382d3438203d3e20313338353938.roa (raw, json)
Hash identifier: CVM/cm+yAs6+jKMZ4MDt+luLWNfS5mv/4e/CjfklE7M=
Subject key identifier: FA:7E:22:19:F5:84:3A:FC:F7:4B:04:6B:18:09:5B:18:FC:47:4D:66
Certificate issuer: /CN=3F62814044EDF8B5E77D2B82095BF6627E136F4B
Certificate serial: 44627DD04DF401991E7F305BDEB6DF8D503C624E
Authority key identifier: 3F:62:81:40:44:ED:F8:B5:E7:7D:2B:82:09:5B:F6:62:7E:13:6F:4B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/323430343a356434303a343a3a2f34382d3438203d3e20313338353938.roa
Signing time: Sun 03 May 2026 02:54:39 +0000
ROA not before: Sun 03 May 2026 02:49:39 +0000
ROA not after: Sun 02 May 2027 02:54:39 +0000
asID: 138598
IP address blocks: 2404:5d40:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.crl
rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:62:7d:d0:4d:f4:01:99:1e:7f:30:5b:de:b6:df:8d:50:3c:62:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F62814044EDF8B5E77D2B82095BF6627E136F4B
Validity
Not Before: May 3 02:49:39 2026 GMT
Not After : May 2 02:54:39 2027 GMT
Subject: CN=FA7E2219F5843AFCF74B046B18095B18FC474D66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:20:f0:77:b0:fc:da:8b:95:0f:8a:76:39:
92:8b:eb:92:a3:80:d2:a3:e1:f0:e0:2a:3b:b4:a9:
be:fa:54:aa:53:23:c0:91:8e:a6:31:62:3e:42:a4:
f1:3f:98:fe:66:c7:c2:61:d4:83:ea:a2:a4:26:86:
de:ff:c2:6a:08:2a:b1:e8:be:a3:ef:c8:68:a4:e8:
58:bf:6c:6f:bd:fb:59:ff:c4:1a:af:fe:0a:82:8d:
d0:23:37:67:78:ec:1d:96:bb:e2:17:c4:94:da:67:
c1:e6:c6:aa:c2:7e:4c:33:10:8a:87:9c:cd:36:b0:
17:22:49:91:40:bd:67:e9:23:5b:aa:24:6e:35:c5:
6a:60:50:33:0e:65:5b:30:0e:7a:60:5c:df:ff:e5:
70:59:f4:f2:c3:73:75:11:5f:0e:53:85:ba:fa:bc:
0d:11:0b:24:cb:8e:ad:bd:59:dd:f0:0f:3d:8d:c3:
f7:0b:3a:dc:03:a5:9d:18:0a:05:45:c4:f9:e2:8e:
1b:c9:83:e8:37:45:1d:6d:5e:32:b9:d0:07:87:7a:
44:63:08:09:bc:ce:c5:1e:dd:47:a4:23:c0:c5:d4:
e2:d1:e1:98:4b:17:a0:08:d7:43:0b:23:01:2d:f3:
1c:9d:f5:c8:84:1c:75:a6:6e:1f:a5:4c:09:1c:a0:
8f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7E:22:19:F5:84:3A:FC:F7:4B:04:6B:18:09:5B:18:FC:47:4D:66
X509v3 Authority Key Identifier:
keyid:3F:62:81:40:44:ED:F8:B5:E7:7D:2B:82:09:5B:F6:62:7E:13:6F:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/323430343a356434303a343a3a2f34382d3438203d3e20313338353938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:5d40:4::/48
Signature Algorithm: sha256WithRSAEncryption
8d:7d:b1:00:ce:41:41:1c:6d:a5:7d:99:9c:7b:da:7b:03:db:
de:b0:27:77:6f:5d:3e:37:81:a3:27:fc:f2:17:bd:c6:ab:8b:
79:f0:70:31:f8:1b:a6:80:9a:7a:2c:ca:94:97:d8:fe:28:fb:
af:14:b9:1c:41:d4:bf:b2:d5:34:f6:42:d9:88:51:70:06:0d:
89:84:f4:b4:5b:87:72:98:71:a2:80:0f:b7:bd:c5:9c:ed:7f:
3d:4f:c2:4c:88:8d:b4:82:a8:e6:d0:54:32:73:ec:20:4e:c9:
3f:a5:40:d8:e7:f3:f0:1d:e3:55:6c:8c:81:cf:f4:21:a7:ee:
d7:2e:83:7d:fd:17:df:45:7f:d4:00:c5:c8:91:3d:30:b7:da:
90:dc:92:97:c5:e5:29:e5:9a:7a:7a:a0:87:2e:79:6a:33:65:
5b:e1:29:07:6b:6f:74:a1:df:5f:9d:13:5f:48:0c:d1:dc:38:
6e:ea:6f:00:6a:5d:55:96:79:62:54:97:83:77:c1:08:c5:d6:
80:ba:0b:8b:1c:f0:55:97:d6:a8:52:6f:7c:b3:4c:3f:90:33:
ef:32:19:ca:02:2c:55:fe:cd:a0:06:fe:a4:b8:e4:03:48:d6:
8b:54:bc:73:55:12:db:c8:91:4a:de:46:4c:47:19:e0:8c:4c:
fe:6d:75:71
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIURGJ90E30AZkefzBb3rbfjVA8Yk4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Y2MjgxNDA0NEVERjhCNUU3N0QyQjgyMDk1QkY2NjI3
RTEzNkY0QjAeFw0yNjA1MDMwMjQ5MzlaFw0yNzA1MDIwMjU0MzlaMDMxMTAvBgNV
BAMTKEZBN0UyMjE5RjU4NDNBRkNGNzRCMDQ2QjE4MDk1QjE4RkM0NzRENjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0GyDwd7D82ouVD4p2OZKL65Kj
gNKj4fDgKju0qb76VKpTI8CRjqYxYj5CpPE/mP5mx8Jh1IPqoqQmht7/wmoIKrHo
vqPvyGik6Fi/bG+9+1n/xBqv/gqCjdAjN2d47B2Wu+IXxJTaZ8HmxqrCfkwzEIqH
nM02sBciSZFAvWfpI1uqJG41xWpgUDMOZVswDnpgXN//5XBZ9PLDc3URXw5Thbr6
vA0RCyTLjq29Wd3wDz2Nw/cLOtwDpZ0YCgVFxPnijhvJg+g3RR1tXjK50AeHekRj
CAm8zsUe3UekI8DF1OLR4ZhLF6AI10MLIwEt8xyd9ciEHHWmbh+lTAkcoI+rAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQU+n4iGfWEOvz3SwRrGAlbGPxHTWYwHwYDVR0j
BBgwFoAUP2KBQETt+LXnfSuCCVv2Yn4Tb0swDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OWM4NWM2YjktMzRmOS00YTg1LTljZWEtYzE2ZTk4YThiNWUwLzAvM0Y2MjgxNDA0
NEVERjhCNUU3N0QyQjgyMDk1QkY2NjI3RTEzNkY0Qi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zRjYyODE0MDQ0RURGOEI1RTc3RDJCODIwOTVCRjY2MjdFMTM2
RjRCLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzljODVjNmI5LTM0ZjktNGE4NS05
Y2VhLWMxNmU5OGE4YjVlMC8wLzMyMzQzMDM0M2EzNTY0MzQzMDNhMzQzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzgzNTM5Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBF1AAAQw
DQYJKoZIhvcNAQELBQADggEBAI19sQDOQUEcbaV9mZx72nsD296wJ3dvXT43gaMn
/PIXvcari3nwcDH4G6aAmnosypSX2P4o+68UuRxB1L+y1TT2QtmIUXAGDYmE9LRb
h3KYcaKAD7e9xZztfz1PwkyIjbSCqObQVDJz7CBOyT+lQNjn8/Ad41VsjIHP9CGn
7tcug339F99Ff9QAxciRPTC32pDckpfF5Snlmnp6oIcueWozZVvhKQdrb3Sh31+d
E19IDNHcOG7qbwBqXVWWeWJUl4N3wQjF1oC6C4sc8FWX1qhSb3yzTD+QM+8yGcoC
LFX+zaAG/qS45ANI1otUvHNVEtvIkUreRkxHGeCMTP5tdXE=
-----END CERTIFICATE-----
Generated at Wed May 13 07:56:49 2026 by rpki-client