
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/323430323a616230303a3a2f33322d3332203d3e203234323036.roa
File: 323430323a616230303a3a2f33322d3332203d3e203234323036.roa (raw, json)
Hash identifier: hHOpQuaz1NpiD38wKgMW7/sVdao5mcNb1qjoiXtjt2M=
Subject key identifier: C7:72:25:10:AD:44:B9:AD:D5:95:2C:3B:04:82:1A:AF:05:48:E3:32
Certificate issuer: /CN=E6B678AE8DC843399DF534610764D871D4D698D8
Certificate serial: 5DB95460860481C2CDAA5D28DAE55BE22BBEEB61
Authority key identifier: E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/323430323a616230303a3a2f33322d3332203d3e203234323036.roa
Signing time: Sun 03 May 2026 02:57:32 +0000
ROA not before: Sun 03 May 2026 02:52:32 +0000
ROA not after: Sun 02 May 2027 02:57:32 +0000
asID: 24206
IP address blocks: 2402:ab00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl
rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 16:14:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:b9:54:60:86:04:81:c2:cd:aa:5d:28:da:e5:5b:e2:2b:be:eb:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E6B678AE8DC843399DF534610764D871D4D698D8
Validity
Not Before: May 3 02:52:32 2026 GMT
Not After : May 2 02:57:32 2027 GMT
Subject: CN=C7722510AD44B9ADD5952C3B04821AAF0548E332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ae:02:e6:29:ac:51:d4:d8:92:19:10:97:bb:
b1:e8:93:9e:75:d5:46:74:02:a4:2f:40:a9:41:a1:
08:c1:eb:e4:d1:10:05:5c:65:72:9a:cf:7c:63:53:
5e:07:ca:d1:90:5e:73:bd:1f:a2:5d:8c:c6:0a:0e:
8f:9a:52:16:4d:c0:3a:da:1e:c8:7f:7a:6c:e8:1e:
7b:9d:0e:62:22:60:aa:f2:63:8c:1d:1d:44:90:c6:
cc:cd:bd:da:07:77:c6:df:81:1a:06:2a:ed:e9:bb:
a3:91:42:e6:99:95:04:b3:e6:a6:de:ea:9b:12:fc:
2b:80:e6:71:8e:40:bc:b0:ab:19:cd:57:f7:85:09:
51:c1:1f:df:35:14:14:ea:00:f9:4c:1d:92:87:4f:
d1:6a:03:5e:43:bb:ff:13:f8:38:b7:09:3c:fb:7a:
7c:e6:a2:c0:1a:30:a0:28:90:2b:62:81:32:4b:e0:
77:74:57:4a:b8:e5:73:12:55:2e:a0:62:0e:4d:2b:
71:15:57:11:c2:f0:f6:8e:00:5b:69:37:9b:86:16:
51:e5:71:3f:99:85:a5:08:c7:22:06:19:3e:f4:86:
9c:f9:60:1b:59:2c:4e:f4:19:2f:d6:b0:37:2d:da:
25:60:94:7b:2d:9b:b6:7a:c9:9b:17:7b:b2:dc:e3:
d0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:72:25:10:AD:44:B9:AD:D5:95:2C:3B:04:82:1A:AF:05:48:E3:32
X509v3 Authority Key Identifier:
keyid:E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/323430323a616230303a3a2f33322d3332203d3e203234323036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:ab00::/32
Signature Algorithm: sha256WithRSAEncryption
26:f0:ab:f8:82:ca:e4:54:85:21:91:11:8e:e1:1f:7a:5b:e1:
d9:9b:17:fe:e5:84:73:50:7d:09:02:0b:95:48:ce:82:54:1e:
a0:05:d2:d8:53:54:ee:a9:b6:fa:1c:02:eb:be:3b:da:7e:73:
40:77:bc:a8:aa:a1:f5:a2:6c:6e:0a:9f:66:d7:e9:6e:4c:29:
f7:41:93:08:18:3e:7a:7a:69:9f:0d:0b:58:2f:fc:d8:fd:d6:
ba:a9:2b:19:99:d1:25:0b:9b:b3:05:cc:ce:64:dd:6e:31:fd:
ed:5f:dd:92:39:13:74:4c:98:11:cf:fd:e2:b5:9c:b7:98:ca:
53:5f:30:12:1e:c4:b3:b3:53:ee:67:fc:ff:40:b6:f2:57:76:
64:1d:1b:0d:41:3f:58:58:44:9a:6a:b6:72:cd:ed:dc:39:40:
0b:f3:3d:63:4a:da:95:3b:79:38:c2:d0:39:c0:1e:8f:7b:a3:
4a:e1:9c:4c:6b:4a:42:fe:1c:17:a1:29:9d:dd:c9:b4:81:ee:
a4:48:2d:48:91:8c:1e:8e:f2:50:41:46:91:f2:dd:a9:69:d6:
95:31:31:83:e4:b5:93:d6:80:af:0d:31:58:6d:2a:36:c9:82:
3a:c1:87:40:2a:fb:b7:1f:a6:1a:9a:ae:03:ea:93:d7:55:af:
3d:81:76:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:28:49 2026 by rpki-client