
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a343a3a2f34382d3438203d3e20313431393638.roa
File: 323430373a366163303a343a3a2f34382d3438203d3e20313431393638.roa (raw, json)
Hash identifier: MT+AOCbI8EQY8s6DvYU6udC4xfhzZzx/R2M7EBN7Qko=
Subject key identifier: 3C:35:37:72:F6:53:53:35:B2:1C:C8:4C:B2:1C:0C:D1:C7:AB:16:0E
Certificate issuer: /CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22
Certificate serial: 3FB359F469968537E42B38FE6428043455F87444
Authority key identifier: 54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a343a3a2f34382d3438203d3e20313431393638.roa
Signing time: Sun 03 May 2026 02:56:19 +0000
ROA not before: Sun 03 May 2026 02:51:19 +0000
ROA not after: Sun 02 May 2027 02:56:19 +0000
asID: 141968
IP address blocks: 2407:6ac0:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl
rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:19:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:b3:59:f4:69:96:85:37:e4:2b:38:fe:64:28:04:34:55:f8:74:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22
Validity
Not Before: May 3 02:51:19 2026 GMT
Not After : May 2 02:56:19 2027 GMT
Subject: CN=3C353772F6535335B21CC84CB21C0CD1C7AB160E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e8:1d:8e:50:47:30:f9:fd:a6:91:26:68:1e:
1d:36:21:bb:ba:16:cd:4d:3c:4d:b5:b3:ef:9f:79:
bd:98:d2:d1:9f:f5:54:43:1a:d2:39:aa:5c:ad:08:
aa:45:39:cf:b5:53:88:b6:58:90:0a:d1:fc:ba:6c:
63:bc:cf:43:ca:f6:3e:56:bd:39:0a:bc:d5:b6:b5:
0f:29:da:51:c7:34:67:f4:06:f4:be:2f:1f:b6:14:
29:b5:26:57:f7:64:f2:6f:0b:60:4b:ab:05:57:79:
df:2a:52:c2:3d:17:aa:8a:ab:0b:c2:15:87:a8:d6:
08:b9:0f:e4:28:7a:de:d9:90:37:c2:12:17:b9:45:
94:bf:70:8a:62:62:30:1e:25:c1:64:20:b6:ab:33:
77:e0:1f:76:3a:f5:5b:71:d8:33:06:b1:45:27:6b:
ff:b1:3e:24:b9:34:0f:b5:df:2c:ae:2a:cc:95:23:
b4:73:85:75:59:2a:89:63:bf:1d:84:90:1b:0c:f1:
33:de:06:10:39:6c:32:b2:19:90:4f:73:24:e6:a8:
25:46:6d:07:a4:ca:be:cf:f7:85:55:5e:fd:f5:a2:
44:4f:48:8e:03:7e:45:43:5f:6d:a6:32:28:cc:f6:
69:3e:e2:1f:d3:43:62:0d:c2:f6:ef:11:21:8a:5e:
d3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:35:37:72:F6:53:53:35:B2:1C:C8:4C:B2:1C:0C:D1:C7:AB:16:0E
X509v3 Authority Key Identifier:
keyid:54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a343a3a2f34382d3438203d3e20313431393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2407:6ac0:4::/48
Signature Algorithm: sha256WithRSAEncryption
16:15:9b:90:45:32:19:d1:8f:ac:58:8e:4a:2e:67:43:1f:13:
75:67:4e:61:d2:09:f6:40:b5:40:f5:9d:43:ea:4b:23:cc:86:
ba:1b:d6:95:86:06:cd:3f:34:d8:34:52:e4:49:cf:93:7c:76:
0f:cb:ed:43:37:6f:19:e9:1c:b9:88:f6:e3:59:c9:16:68:67:
d5:f2:18:31:da:db:45:c6:01:7c:00:b5:e7:6f:1e:50:9c:e0:
96:af:9f:a0:7a:dd:9c:8f:ce:3a:14:4a:13:9f:fb:0c:b2:97:
11:16:9b:1b:99:25:e8:a6:15:5b:39:79:93:79:00:eb:38:0f:
2d:c6:a1:c2:ab:02:28:a4:b0:5f:49:17:17:f2:83:85:99:bd:
ec:13:59:4b:50:5f:76:cc:cd:0f:33:0b:5d:5f:db:b9:be:99:
36:b7:16:00:73:17:6c:21:94:f7:c5:8b:3d:d0:74:29:24:bc:
24:d1:bd:d0:6a:75:88:e8:d8:82:eb:2b:1f:c6:d0:54:26:6c:
4b:83:82:56:67:0d:a5:01:7d:2f:51:4e:21:4d:6e:61:5d:b5:
45:7d:fe:6d:38:eb:5b:91:4e:60:a7:63:10:8f:ef:4c:f7:73:
16:fa:01:81:ee:7e:86:2d:6e:a1:40:de:60:10:8c:97:a9:29:
06:e2:3a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:17:15 2026 by rpki-client