
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323430323a656538303a3137363a3a2f34382d3438203d3e20313332363437.roa
File: 323430323a656538303a3137363a3a2f34382d3438203d3e20313332363437.roa (raw, json)
Hash identifier: /o29HECkwJutgVmG0I5lSxBVN20fSE9q8Dt9mr1Ct3U=
Subject key identifier: 0E:E0:19:7D:66:22:B1:D0:88:EC:95:20:20:D0:C9:2B:DC:B1:BA:81
Certificate issuer: /CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
Certificate serial: 7EF91077C10823823E6B292A965C2B36BF9FC33A
Authority key identifier: BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323430323a656538303a3137363a3a2f34382d3438203d3e20313332363437.roa
Signing time: Sun 03 May 2026 02:57:04 +0000
ROA not before: Sun 03 May 2026 02:52:04 +0000
ROA not after: Sun 02 May 2027 02:57:04 +0000
asID: 132647
IP address blocks: 2402:ee80:176::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl
rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:36:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:f9:10:77:c1:08:23:82:3e:6b:29:2a:96:5c:2b:36:bf:9f:c3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
Validity
Not Before: May 3 02:52:04 2026 GMT
Not After : May 2 02:57:04 2027 GMT
Subject: CN=0EE0197D6622B1D088EC952020D0C92BDCB1BA81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:3e:db:ba:08:13:a8:4d:29:a1:61:76:95:
5f:7c:a5:f1:ee:77:cf:c8:96:d4:1b:a1:fe:9d:80:
16:0b:71:3b:3b:42:4d:15:bd:3c:02:63:a7:f0:66:
8d:df:f5:02:ca:60:8f:a4:04:4f:09:d1:13:42:6a:
3d:b0:85:fe:c9:13:dd:36:89:9f:6d:f6:2f:13:c4:
b5:a9:14:ad:e6:8c:6c:2e:9d:d1:0f:76:ee:5c:a7:
bf:16:a0:73:d8:da:46:e2:c3:e7:38:55:4d:92:64:
f2:0a:de:cd:e6:71:d6:a7:d4:12:ed:76:b5:15:0c:
46:6a:80:0c:f4:3e:0d:5d:4a:6d:bc:bb:54:d5:83:
15:d6:69:0b:c5:28:7f:9d:bb:36:a9:a1:5e:d4:2c:
08:c6:e2:99:70:63:ab:21:06:c9:4c:23:c5:5a:ae:
bd:93:96:f4:4a:b8:40:3a:40:a2:a6:22:1e:69:69:
5b:3e:bb:1f:65:72:d0:e5:e7:93:9d:92:f4:4f:ca:
76:5f:c4:57:6b:a2:48:e7:de:8d:99:7c:71:dd:f5:
fa:4d:d4:82:e3:2c:19:36:1c:9c:57:ba:a7:c5:8a:
1d:46:ce:7b:db:8d:a5:91:79:72:b4:d0:3b:94:73:
e2:40:64:e8:ae:93:b6:d1:82:ba:88:37:66:fd:5a:
92:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E0:19:7D:66:22:B1:D0:88:EC:95:20:20:D0:C9:2B:DC:B1:BA:81
X509v3 Authority Key Identifier:
keyid:BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323430323a656538303a3137363a3a2f34382d3438203d3e20313332363437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:ee80:176::/48
Signature Algorithm: sha256WithRSAEncryption
50:81:69:b1:6e:d1:59:be:fc:f7:ac:11:c6:74:14:f4:f2:31:
09:2e:28:e9:ae:de:ad:49:2e:a0:22:25:c2:20:aa:95:6a:e3:
2f:a8:2d:7c:7b:fa:fa:38:3c:39:57:aa:33:0f:bb:b5:ed:55:
80:2e:78:e1:3f:9a:d3:42:e2:4a:bb:70:77:2f:93:f3:e5:03:
2b:c5:6e:b8:57:f9:75:3f:3f:16:f5:5c:43:da:b7:e1:52:2b:
80:b2:ed:58:76:fa:a4:d7:4d:cb:9f:2b:77:28:96:d8:ed:fa:
94:e7:0d:dc:96:1e:a9:4e:55:f9:bd:9a:ce:fc:94:cf:18:48:
f0:84:a9:d1:47:fc:d0:85:a8:60:91:68:2d:d5:24:23:78:32:
e0:ff:fc:61:9e:e4:ae:1f:b4:92:32:b6:43:ad:d6:9a:a6:83:
6e:36:b6:bc:c9:ff:cc:7b:e5:04:85:9d:8c:31:fb:48:65:7a:
55:1c:a7:2f:31:c5:e1:43:c5:71:18:d8:d7:10:0e:f5:c5:c8:
db:43:39:14:d1:c8:98:c3:a1:de:bd:c2:b4:5b:54:e4:d9:f0:
c6:a0:10:b0:2f:2b:6e:83:8a:de:3a:10:6c:80:c5:cc:57:27:
c0:0a:25:3c:ff:c9:97:14:3a:3e:aa:37:48:7e:52:ce:d8:a7:
84:24:00:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:27:45 2026 by rpki-client