
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a31323a3a2f34382d3438203d3e20313431393638.roa
File: 323430373a366163303a31323a3a2f34382d3438203d3e20313431393638.roa (raw, json)
Hash identifier: wXdu5uchlM7aR4PAhUVPmODhH7DS4bnAhG9G5Y038v8=
Subject key identifier: BF:3C:44:53:41:02:61:5E:CD:44:4F:44:07:98:1A:79:62:8D:26:8B
Certificate issuer: /CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22
Certificate serial: 09588434B28AE7F813613E668A360C52ACDA1F7B
Authority key identifier: 54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a31323a3a2f34382d3438203d3e20313431393638.roa
Signing time: Sun 03 May 2026 02:56:20 +0000
ROA not before: Sun 03 May 2026 02:51:20 +0000
ROA not after: Sun 02 May 2027 02:56:20 +0000
asID: 141968
IP address blocks: 2407:6ac0:12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl
rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:19:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:58:84:34:b2:8a:e7:f8:13:61:3e:66:8a:36:0c:52:ac:da:1f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22
Validity
Not Before: May 3 02:51:20 2026 GMT
Not After : May 2 02:56:20 2027 GMT
Subject: CN=BF3C44534102615ECD444F4407981A79628D268B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f3:a5:72:be:de:b0:9b:22:bc:2f:6b:f7:e9:
49:7a:80:0e:c9:09:82:92:01:d4:1e:85:35:5a:e6:
0b:57:7e:0e:1a:cf:45:de:5c:5b:a3:e9:09:30:38:
69:22:3f:16:c1:e2:fb:f9:93:f9:54:6f:bb:b6:46:
7e:52:a6:14:b4:64:5e:0b:3f:82:d9:32:3b:9b:00:
18:ab:b0:19:1a:c5:46:f6:0a:06:f6:78:5c:66:d9:
f9:a0:7a:cb:2b:23:c9:11:5a:a1:be:5d:83:c8:4c:
fa:cf:0d:d9:e0:a3:37:2b:cd:2f:4e:52:f3:27:92:
18:19:05:3b:b5:d7:a7:21:f5:5b:7a:c4:5e:6b:93:
a4:c4:fa:48:f3:4e:3b:4b:59:ab:b5:a6:4e:dd:02:
79:e3:70:d7:ae:a6:c8:85:66:f1:7b:39:73:f3:2a:
74:3b:b6:48:f7:30:14:36:78:f8:f7:60:13:82:cd:
b1:6c:98:8f:b9:d1:6b:c4:8f:7e:30:9d:34:1a:f3:
30:47:81:23:d0:99:04:3b:da:42:14:f8:73:46:51:
91:d1:0e:42:a1:bb:23:87:65:78:44:ce:59:b2:04:
ba:e6:2f:a2:7f:fd:99:91:b7:fb:5d:92:95:13:43:
5e:bc:95:f6:a9:ae:47:7f:b3:fd:46:85:58:ba:5d:
fd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3C:44:53:41:02:61:5E:CD:44:4F:44:07:98:1A:79:62:8D:26:8B
X509v3 Authority Key Identifier:
keyid:54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a31323a3a2f34382d3438203d3e20313431393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2407:6ac0:12::/48
Signature Algorithm: sha256WithRSAEncryption
78:44:15:48:f5:a2:84:89:36:b9:b9:08:a1:eb:8a:ae:d3:32:
ea:62:7f:12:08:a1:96:96:23:fb:74:2b:fc:16:7b:25:42:15:
ac:65:68:5f:9b:68:fd:2d:1c:e6:e2:75:89:eb:b0:eb:ff:e7:
df:04:78:a1:e0:06:e4:48:f0:7f:47:7d:91:a1:ce:14:33:34:
dc:6c:03:ac:5f:20:0b:d1:d0:1e:93:05:53:b1:b1:c6:3e:57:
97:16:b3:f4:6b:ab:f8:52:9e:b9:45:1e:47:8b:f7:de:1e:1b:
83:37:1e:40:a8:63:90:2b:c1:f5:db:71:bc:51:73:0b:b9:9c:
83:e6:af:fa:e1:2a:2b:6a:dd:56:e6:14:a2:b9:55:b7:c4:7f:
ff:6f:f5:6e:dd:e9:b6:96:0f:c2:26:52:31:f0:60:d9:5a:b8:
d9:c3:36:ab:27:99:71:75:67:d1:bc:cb:77:2d:da:91:da:ca:
96:97:c1:49:f7:ad:d3:44:2e:85:10:27:68:ee:75:9a:25:4c:
37:54:13:1b:76:a5:04:7a:4b:d2:6e:da:95:90:13:be:ae:2d:
08:28:a6:18:ac:df:09:4e:f7:ee:13:ae:9d:77:70:eb:79:09:
75:af:d5:41:47:a5:71:98:b9:1c:42:a5:80:ce:bc:a6:1b:56:
47:c3:97:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:20 2026 by rpki-client