
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323430323a656538303a35363a3a2f34382d3438203d3e20313332363437.roa
File: 323430323a656538303a35363a3a2f34382d3438203d3e20313332363437.roa (raw, json)
Hash identifier: c/+B9i/CScu7h8jGuv1JRMe6ArsSJVjID5tIfBJTEZE=
Subject key identifier: 5E:5A:24:7D:4A:7B:AE:0E:71:1B:01:4B:9E:81:59:29:18:D5:E1:54
Certificate issuer: /CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
Certificate serial: FDE9AAEDD191C07728125E11F26C48D6D53D3E
Authority key identifier: BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323430323a656538303a35363a3a2f34382d3438203d3e20313332363437.roa
Signing time: Sun 03 May 2026 02:56:57 +0000
ROA not before: Sun 03 May 2026 02:51:57 +0000
ROA not after: Sun 02 May 2027 02:56:57 +0000
asID: 132647
IP address blocks: 2402:ee80:56::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl
rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:36:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
fd:e9:aa:ed:d1:91:c0:77:28:12:5e:11:f2:6c:48:d6:d5:3d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
Validity
Not Before: May 3 02:51:57 2026 GMT
Not After : May 2 02:56:57 2027 GMT
Subject: CN=5E5A247D4A7BAE0E711B014B9E81592918D5E154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2a:fa:90:c7:8d:a4:e5:29:86:77:8d:b3:0f:
64:cc:bb:3c:63:fa:c7:1b:fa:f6:4a:1d:b4:eb:5a:
94:2a:4c:2e:ed:a9:a6:94:08:5f:15:bc:bd:60:b1:
94:11:09:35:e1:97:ae:da:8a:a7:eb:a8:e5:8b:39:
47:c8:a5:74:35:89:68:6b:66:fc:cd:2c:63:da:36:
cd:bc:d3:6f:45:96:30:85:14:a9:28:b9:bb:d7:8b:
8c:24:23:32:2f:23:d1:68:55:85:42:53:68:2b:54:
67:3e:4b:eb:5b:4c:aa:d8:be:58:32:d8:d6:d1:3a:
bb:26:64:3a:e2:0f:45:69:00:27:59:60:ac:3f:b3:
83:55:09:19:ef:e4:98:f2:d5:85:d7:a4:57:93:4e:
7d:84:b4:df:a4:90:db:63:a5:b5:9d:63:87:10:a1:
cb:bd:6d:fa:52:37:c9:62:6c:ba:73:9c:03:d6:8e:
62:1b:de:37:9e:0c:47:4d:92:9a:25:61:d0:1a:9f:
d0:dc:17:0e:eb:8c:38:42:30:1b:f0:e7:0b:9f:73:
0c:a3:87:27:82:c6:39:c5:87:cc:2f:bd:ec:bf:cc:
d3:6e:f0:f3:8f:66:f5:05:d5:3a:5e:bb:dd:78:a8:
91:4d:3a:c5:b5:c1:c9:d0:05:f8:53:c9:43:c8:c7:
9d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5A:24:7D:4A:7B:AE:0E:71:1B:01:4B:9E:81:59:29:18:D5:E1:54
X509v3 Authority Key Identifier:
keyid:BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323430323a656538303a35363a3a2f34382d3438203d3e20313332363437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:ee80:56::/48
Signature Algorithm: sha256WithRSAEncryption
1e:d1:6f:f1:85:07:23:39:86:62:83:de:84:86:1d:ad:e0:44:
9e:46:85:20:6a:1f:c5:ab:79:a6:cd:19:19:2e:b4:74:eb:16:
ad:c4:41:bf:31:93:27:2a:dd:5e:f0:40:3b:ea:f3:e8:a9:99:
ec:24:19:90:4f:16:c3:77:b5:48:f1:5f:f8:05:0d:9e:18:f2:
11:7f:12:2c:2f:91:42:a0:7f:71:3b:b4:6e:93:3c:71:5b:d3:
0e:df:13:34:be:ec:98:5c:8d:2d:7a:a9:ef:4e:47:ab:2c:de:
6b:82:37:13:4e:55:17:48:ea:b2:d4:4f:43:7d:25:69:6e:d3:
b9:29:9d:ca:ca:64:bf:fb:8d:99:f5:70:7c:09:88:45:b6:ae:
06:2c:2f:1f:6d:35:bf:f7:a3:ca:66:f1:f5:4a:65:3d:51:e2:
ec:41:30:08:9d:4d:27:71:2c:c6:6d:7d:a1:2c:7f:e1:bf:94:
36:4c:69:1c:9c:ca:61:26:0c:c1:88:15:01:10:83:26:9b:fb:
bf:e2:b4:d0:da:5f:a9:e0:59:4b:a6:01:30:fc:e7:4b:5b:6a:
49:ca:12:4a:ea:79:67:24:33:1a:1f:d0:40:8b:37:5b:9d:ab:
e7:4c:7f:7e:e1:59:2c:b5:a7:6f:46:ef:f0:7b:8d:7d:54:f8:
7c:4e:23:a8
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUAP3pqu3RkcB3KBJeEfJsSNbVPT4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkI1NzY4MzVFRDhBNDZFMzBGQjhEREY1NjZBQkM0Nzc2
NTUzN0VCNjAeFw0yNjA1MDMwMjUxNTdaFw0yNzA1MDIwMjU2NTdaMDMxMTAvBgNV
BAMTKDVFNUEyNDdENEE3QkFFMEU3MTFCMDE0QjlFODE1OTI5MThENUUxNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxKvqQx42k5SmGd42zD2TMuzxj
+scb+vZKHbTrWpQqTC7tqaaUCF8VvL1gsZQRCTXhl67aiqfrqOWLOUfIpXQ1iWhr
ZvzNLGPaNs28029FljCFFKkoubvXi4wkIzIvI9FoVYVCU2grVGc+S+tbTKrYvlgy
2NbROrsmZDriD0VpACdZYKw/s4NVCRnv5Jjy1YXXpFeTTn2EtN+kkNtjpbWdY4cQ
ocu9bfpSN8libLpznAPWjmIb3jeeDEdNkpolYdAan9DcFw7rjDhCMBvw5wufcwyj
hyeCxjnFh8wvvey/zNNu8POPZvUF1Tpeu914qJFNOsW1wcnQBfhTyUPIx52XAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUXlokfUp7rg5xGwFLnoFZKRjV4VQwHwYDVR0j
BBgwFoAUu1doNe2KRuMPuN31ZqvEd2VTfrYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTY2MTdkOGMtZDE1NC00NjFlLWJjY2EtYjY2ZDI2N2NmZmM3LzAvQkI1NzY4MzVF
RDhBNDZFMzBGQjhEREY1NjZBQkM0Nzc2NTUzN0VCNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CQjU3NjgzNUVEOEE0NkUzMEZCOERERjU2NkFCQzQ3NzY1NTM3
RUI2LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E2NjE3ZDhjLWQxNTQtNDYxZS1i
Y2NhLWI2NmQyNjdjZmZjNy8wLzMyMzQzMDMyM2E2NTY1MzgzMDNhMzUzNjNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzMjM2MzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQC7oAA
VjANBgkqhkiG9w0BAQsFAAOCAQEAHtFv8YUHIzmGYoPehIYdreBEnkaFIGofxat5
ps0ZGS60dOsWrcRBvzGTJyrdXvBAO+rz6KmZ7CQZkE8Ww3e1SPFf+AUNnhjyEX8S
LC+RQqB/cTu0bpM8cVvTDt8TNL7smFyNLXqp705Hqyzea4I3E05VF0jqstRPQ30l
aW7TuSmdyspkv/uNmfVwfAmIRbauBiwvH201v/ejymbx9UplPVHi7EEwCJ1NJ3Es
xm19oSx/4b+UNkxpHJzKYSYMwYgVARCDJpv7v+K00NpfqeBZS6YBMPznS1tqScoS
Sup5ZyQzGh/QQIs3W52r50x/fuFZLLWnb0bv8HuNfVT4fE4jqA==
-----END CERTIFICATE-----
Generated at Wed May 13 06:26:29 2026 by rpki-client