
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/323030313a6436383a3a2f33322d3332203d3e203338373539.roa
File: 323030313a6436383a3a2f33322d3332203d3e203338373539.roa (raw, json)
Hash identifier: 8a+k6Urf56bW4XhUqBSneuIVBM3K/B21j/TAuqOETY4=
Subject key identifier: B5:52:FF:55:CD:A3:E1:E8:97:71:CB:87:69:FA:A4:94:B3:D3:41:D4
Certificate issuer: /CN=02062A0A8A708F654606A252EFBD31F81D738315
Certificate serial: 469E9F8BD7B46A90091DE8E086C7F739AF9779F8
Authority key identifier: 02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/323030313a6436383a3a2f33322d3332203d3e203338373539.roa
Signing time: Sun 03 May 2026 02:55:47 +0000
ROA not before: Sun 03 May 2026 02:50:47 +0000
ROA not after: Sun 02 May 2027 02:55:47 +0000
asID: 38759
IP address blocks: 2001:d68::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl
rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:9e:9f:8b:d7:b4:6a:90:09:1d:e8:e0:86:c7:f7:39:af:97:79:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02062A0A8A708F654606A252EFBD31F81D738315
Validity
Not Before: May 3 02:50:47 2026 GMT
Not After : May 2 02:55:47 2027 GMT
Subject: CN=B552FF55CDA3E1E89771CB8769FAA494B3D341D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:24:ef:4d:b8:74:9f:fa:94:c5:b4:3e:61:b3:
54:99:78:8b:c7:73:13:7c:48:77:b3:57:41:47:d3:
ad:23:60:26:11:12:4c:ee:71:f4:9d:b4:38:c1:4d:
c3:f5:cb:45:2f:43:bf:50:5c:6a:bb:e6:2f:fb:b4:
22:13:1d:bc:3c:b1:89:34:12:2c:38:62:34:eb:1e:
c1:3c:1f:cf:40:8a:6d:0d:d7:46:c2:de:36:28:74:
f0:c8:7b:11:fb:9a:39:c5:c7:17:7f:db:4a:de:0d:
b5:e6:3f:e2:f3:19:fe:db:56:c3:2a:0e:57:1f:bf:
69:80:db:18:23:0b:51:75:04:6c:a8:73:8b:0f:3a:
06:65:2a:d1:32:c8:09:b5:43:c1:e1:fd:05:c6:89:
f3:5a:d0:4b:c2:e2:09:f1:de:ff:31:62:00:04:ac:
e2:a9:d6:d1:95:5d:4d:b5:cf:f9:23:5e:0d:86:af:
22:7e:cc:47:66:5f:f6:b4:57:98:8e:6b:94:24:1d:
c9:74:59:82:69:4d:0a:84:08:1a:0d:5b:d8:31:b8:
da:87:e4:26:48:23:b6:b4:6e:71:94:41:01:14:b7:
9d:88:07:f2:79:a1:17:bd:38:5a:2f:5b:e2:ca:ad:
6a:0f:2d:a0:dd:c9:e6:c9:7b:45:1a:a7:8c:47:17:
6b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:52:FF:55:CD:A3:E1:E8:97:71:CB:87:69:FA:A4:94:B3:D3:41:D4
X509v3 Authority Key Identifier:
keyid:02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/323030313a6436383a3a2f33322d3332203d3e203338373539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:d68::/32
Signature Algorithm: sha256WithRSAEncryption
79:b1:d9:04:49:b5:89:7d:34:ef:66:4f:0c:00:00:35:a9:83:
ce:3f:4a:88:3b:2c:13:42:3b:bf:42:ef:37:d8:1b:62:8e:7d:
ec:b5:cb:88:2b:de:d2:9f:b8:c6:6c:61:48:c2:24:bc:cd:13:
e1:40:a1:a5:ea:80:25:cb:e5:7e:2e:6b:90:fb:41:28:5b:4e:
ed:f6:55:1e:2b:51:79:b9:ec:aa:a8:27:fe:35:d6:17:c8:48:
66:84:ea:3b:59:12:6c:5a:3b:db:a2:f1:bc:37:58:e7:44:10:
88:91:a2:cf:db:4b:b4:73:fc:65:d8:9e:7c:37:73:eb:c8:9d:
73:70:b7:69:8c:89:e6:d8:41:d7:3c:c0:50:9d:be:84:c1:ce:
1a:8c:2c:83:af:1f:30:d9:85:a6:6b:6d:87:da:22:b1:66:0f:
9c:0a:dc:98:7f:24:d8:3e:27:cd:eb:b9:f8:30:fe:45:81:5b:
fe:1a:3d:65:b5:39:ce:38:70:43:ac:de:b4:2a:ef:d0:85:3a:
ed:3e:63:1c:1a:16:75:d3:d0:49:a5:80:46:7f:2a:66:b6:8a:
af:0e:92:df:5a:39:ea:e4:35:12:f2:16:6b:a2:08:1d:f3:3d:
5f:52:68:e1:f1:9a:83:93:3b:d7:66:26:73:8c:d0:eb:6e:7b:
a7:dd:6e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:39:58 2026 by rpki-client