
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a333a3a2f34382d3438203d3e20313431393638.roa
File: 323430373a366163303a333a3a2f34382d3438203d3e20313431393638.roa (raw, json)
Hash identifier: 9cJ++u24FggknXR65ZUDZ3U3axJ3PPfSK2AE5AdFGp4=
Subject key identifier: 51:CD:EC:48:D7:1A:2B:3A:EB:9E:55:35:A5:63:EB:05:C9:45:03:60
Certificate issuer: /CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22
Certificate serial: 576715D444E2274B6204EC0612986D980AA80EB8
Authority key identifier: 54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a333a3a2f34382d3438203d3e20313431393638.roa
Signing time: Sun 03 May 2026 02:56:14 +0000
ROA not before: Sun 03 May 2026 02:51:14 +0000
ROA not after: Sun 02 May 2027 02:56:14 +0000
asID: 141968
IP address blocks: 2407:6ac0:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl
rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:19:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:67:15:d4:44:e2:27:4b:62:04:ec:06:12:98:6d:98:0a:a8:0e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22
Validity
Not Before: May 3 02:51:14 2026 GMT
Not After : May 2 02:56:14 2027 GMT
Subject: CN=51CDEC48D71A2B3AEB9E5535A563EB05C9450360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8d:82:fe:61:ce:ce:1b:9d:50:39:01:84:b5:
13:e9:16:4e:b4:b2:78:b3:5c:bd:43:d6:fc:15:3f:
b9:74:7f:6e:35:48:59:10:67:fc:d3:ff:2a:cf:3e:
09:f5:98:05:d9:9c:fd:e7:6b:26:f5:30:05:4d:db:
2a:14:db:8a:20:3f:9e:4a:b4:8b:bf:3e:a3:48:69:
b1:18:99:a9:18:12:99:bf:7f:81:64:dc:0f:ab:4d:
43:36:cf:c1:ca:0b:c2:1f:9a:71:28:1d:fb:f0:b5:
80:87:f5:7f:ac:9b:c7:55:98:86:5c:41:89:71:76:
ba:60:99:ec:95:6d:03:af:ad:a4:0e:55:c2:8b:5d:
14:78:9f:79:2c:46:4a:99:17:5a:b6:1e:fb:a4:67:
ad:07:af:4c:4e:fa:d2:4f:22:40:a5:92:3f:b6:a4:
ab:60:87:b8:34:47:9e:8f:39:15:3e:c6:d2:70:94:
af:86:f0:49:8e:bd:cf:63:bb:67:d9:d4:d8:57:80:
f0:bc:bc:e4:97:33:f0:fb:f6:ad:92:29:f6:42:45:
7a:f5:fc:44:3e:00:7f:e4:95:0f:0c:79:eb:5d:dc:
f8:e0:0b:0e:98:9d:cf:31:6b:f3:36:2b:07:aa:7f:
9e:b4:88:50:8b:a8:92:ed:57:55:a7:6f:e1:32:04:
7b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CD:EC:48:D7:1A:2B:3A:EB:9E:55:35:A5:63:EB:05:C9:45:03:60
X509v3 Authority Key Identifier:
keyid:54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a333a3a2f34382d3438203d3e20313431393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2407:6ac0:3::/48
Signature Algorithm: sha256WithRSAEncryption
36:98:d8:b3:68:67:cb:49:2f:ce:02:e0:b5:0a:34:f1:83:37:
c1:53:3d:7e:6b:e2:df:66:d2:7e:d6:2c:a4:ed:44:63:5d:f0:
ea:67:27:73:c3:48:c4:43:c8:45:ca:f7:b9:b9:cc:c8:5b:07:
58:6e:2c:e2:16:c7:d9:57:ac:40:ba:19:ac:17:f6:e6:9c:ce:
a3:c0:8e:44:ad:cd:74:2d:2a:0c:18:cc:6f:68:11:ca:44:d2:
79:7e:4e:81:07:fa:7c:ae:6e:25:73:9e:2f:63:a0:3b:d1:30:
9b:9e:86:1e:70:0e:c0:a1:a4:55:f6:d7:2b:a1:01:7d:01:4f:
03:8c:6e:c3:22:1c:1e:d4:bd:9d:1c:a2:4c:1e:f8:b7:28:bc:
f2:33:6e:d5:79:b2:e8:b1:33:27:f2:65:a2:d0:2f:85:88:d7:
cc:cd:94:b0:6f:98:e9:e4:50:fd:d2:39:5f:b6:38:b3:df:a2:
30:90:9a:54:91:ca:2f:19:5d:1f:92:55:1a:2c:b2:81:db:73:
59:89:b3:d3:8e:ee:f6:2a:f9:7b:fd:8d:bd:f8:99:53:b4:53:
f2:41:cd:d2:36:13:20:5a:3f:b1:7c:87:9d:e4:c4:1a:6d:27:
f1:ec:a7:c4:bc:1c:57:c5:32:5c:72:15:ac:8b:11:c2:1f:fe:
43:f6:79:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:50:49 2026 by rpki-client