
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a353a3a2f34382d3438203d3e20313431393638.roa
File: 323430373a366163303a353a3a2f34382d3438203d3e20313431393638.roa (raw, json)
Hash identifier: OgMvJFpeHT/hH4IqJm59WR5oH0vQUNaIBbI9r2tk5VE=
Subject key identifier: A2:66:45:62:F6:53:CE:9D:96:C9:82:75:7D:9A:21:0B:A5:34:8B:11
Certificate issuer: /CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22
Certificate serial: 1949C2AB3033DBF09B33BADEA9A3C259A24162E2
Authority key identifier: 54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a353a3a2f34382d3438203d3e20313431393638.roa
Signing time: Sun 03 May 2026 02:56:17 +0000
ROA not before: Sun 03 May 2026 02:51:17 +0000
ROA not after: Sun 02 May 2027 02:56:17 +0000
asID: 141968
IP address blocks: 2407:6ac0:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl
rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:19:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:49:c2:ab:30:33:db:f0:9b:33:ba:de:a9:a3:c2:59:a2:41:62:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22
Validity
Not Before: May 3 02:51:17 2026 GMT
Not After : May 2 02:56:17 2027 GMT
Subject: CN=A2664562F653CE9D96C982757D9A210BA5348B11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ea:38:ba:88:b6:41:d3:ce:a1:f7:13:2c:e5:
cd:47:ab:96:d2:e8:ca:e7:43:82:26:c9:c9:51:8a:
b5:6d:42:e1:2d:94:a4:bc:2f:b0:00:ac:43:21:53:
6d:5a:f7:0e:df:e8:75:14:44:f9:f6:71:d3:40:48:
f7:a9:96:fd:9e:c4:de:11:f3:82:66:40:f9:83:98:
e9:90:88:97:95:de:c7:a8:78:4d:1e:e7:0a:d0:a0:
03:48:3f:e4:b1:2d:b4:bd:87:11:a1:20:7d:5e:96:
5a:0a:47:88:f1:3d:a8:3a:94:6a:3a:a3:25:55:e0:
73:4a:0b:a3:79:e6:58:90:d6:8b:5c:7d:1c:31:41:
0a:7a:8e:f6:2c:eb:de:08:87:45:15:53:5a:99:48:
01:e5:93:1b:c4:63:27:d1:e0:53:32:a9:42:90:05:
15:06:eb:f1:a2:cf:50:08:22:4a:ee:cf:94:8b:c4:
9f:2d:94:6b:6b:88:a2:ff:3b:d3:1e:25:db:aa:38:
79:fd:43:43:8d:ec:0d:20:66:df:d2:ff:b1:d3:a6:
e3:64:a4:ff:8f:25:d0:c9:07:67:02:9a:b4:d5:11:
87:59:f3:5b:97:79:e2:4a:9f:b1:de:51:18:6e:3e:
e5:c7:a5:f6:fc:44:4f:72:8d:aa:c9:ec:24:cc:c4:
8d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:66:45:62:F6:53:CE:9D:96:C9:82:75:7D:9A:21:0B:A5:34:8B:11
X509v3 Authority Key Identifier:
keyid:54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a353a3a2f34382d3438203d3e20313431393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2407:6ac0:5::/48
Signature Algorithm: sha256WithRSAEncryption
83:f4:39:07:fa:d1:a0:e5:c1:6f:6b:70:7c:f6:3e:69:11:3e:
04:89:07:5a:40:56:65:bf:2c:07:1b:84:c0:52:a6:4a:0a:7c:
dd:76:ca:43:88:ea:c9:1c:c4:4b:4f:be:cf:b5:6a:9d:c7:ea:
e9:32:d9:73:49:a3:8e:0c:a5:53:b2:9e:94:b0:47:31:d0:25:
1a:03:74:8c:92:c0:a8:d1:66:92:33:63:e3:f5:f5:c9:72:f7:
c6:15:72:14:27:b0:b6:07:8e:f2:33:b9:7d:b2:5b:29:6b:8e:
46:7b:2c:b9:27:8b:8b:c6:e5:3f:20:f7:bd:0d:6d:da:cf:45:
b3:c2:2b:07:5f:00:24:b4:6f:ff:1d:81:2c:50:ca:51:7b:44:
fb:34:60:6b:4c:63:38:44:3f:69:d6:42:74:4a:cd:86:ec:70:
b6:fc:99:95:5f:a9:67:7a:de:18:2a:b8:b7:7b:92:ea:5f:cc:
0f:fe:e2:e4:b7:0d:43:0c:40:ee:f4:71:81:2d:e9:ef:ca:8a:
07:4b:e8:59:54:97:45:e0:53:10:90:8b:dc:14:04:8c:47:fb:
e1:4e:4d:be:69:ad:da:e7:49:75:7d:98:91:7b:37:d2:40:ca:
b8:9d:30:bf:85:dd:5f:d8:53:ed:64:3a:eb:67:44:20:94:58:
c0:cf:f4:17
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUGUnCqzAz2/CbM7reqaPCWaJBYuIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRGN0EwMDhEOUJCRTlENUQ1MzkzMzY0MjVENEI4RkQz
NjhEQkIyMjAeFw0yNjA1MDMwMjUxMTdaFw0yNzA1MDIwMjU2MTdaMDMxMTAvBgNV
BAMTKEEyNjY0NTYyRjY1M0NFOUQ5NkM5ODI3NTdEOUEyMTBCQTUzNDhCMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy6ji6iLZB086h9xMs5c1Hq5bS
6MrnQ4ImyclRirVtQuEtlKS8L7AArEMhU21a9w7f6HUURPn2cdNASPeplv2exN4R
84JmQPmDmOmQiJeV3seoeE0e5wrQoANIP+SxLbS9hxGhIH1elloKR4jxPag6lGo6
oyVV4HNKC6N55liQ1otcfRwxQQp6jvYs694Ih0UVU1qZSAHlkxvEYyfR4FMyqUKQ
BRUG6/Giz1AIIkruz5SLxJ8tlGtriKL/O9MeJduqOHn9Q0ON7A0gZt/S/7HTpuNk
pP+PJdDJB2cCmrTVEYdZ81uXeeJKn7HeURhuPuXHpfb8RE9yjarJ7CTMxI0XAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUomZFYvZTzp2WyYJ1fZohC6U0ixEwHwYDVR0j
BBgwFoAUVPegCNm76dXVOTNkJdS4/TaNuyIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTM2YTIxNzEtMTJhMC00ZTAxLWJjYWItYmUzYjZiODM2ZjVkLzAvNTRGN0EwMDhE
OUJCRTlENUQ1MzkzMzY0MjVENEI4RkQzNjhEQkIyMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81NEY3QTAwOEQ5QkJFOUQ1RDUzOTMzNjQyNUQ0QjhGRDM2OERC
QjIyLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2EzNmEyMTcxLTEyYTAtNGUwMS1i
Y2FiLWJlM2I2YjgzNmY1ZC8wLzMyMzQzMDM3M2EzNjYxNjMzMDNhMzUzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzEzOTM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkB2rAAAUw
DQYJKoZIhvcNAQELBQADggEBAIP0OQf60aDlwW9rcHz2PmkRPgSJB1pAVmW/LAcb
hMBSpkoKfN12ykOI6skcxEtPvs+1ap3H6uky2XNJo44MpVOynpSwRzHQJRoDdIyS
wKjRZpIzY+P19cly98YVchQnsLYHjvIzuX2yWylrjkZ7LLkni4vG5T8g970NbdrP
RbPCKwdfACS0b/8dgSxQylF7RPs0YGtMYzhEP2nWQnRKzYbscLb8mZVfqWd63hgq
uLd7kupfzA/+4uS3DUMMQO70cYEt6e/KigdL6FlUl0XgUxCQi9wUBIxH++FOTb5p
rdrnSXV9mJF7N9JAyridML+F3V/YU+1kOutnRCCUWMDP9Bc=
-----END CERTIFICATE-----
Generated at Wed May 13 04:16:46 2026 by rpki-client