
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/323430323a616230303a61663a3a2f34382d3438203d3e203234323036.roa
File: 323430323a616230303a61663a3a2f34382d3438203d3e203234323036.roa (raw, json)
Hash identifier: 5O7GlJY194SnO8ciNiDYBvW3zLSQrHd5KYDUoQ4Khw0=
Subject key identifier: B0:12:1F:44:42:F6:76:15:E0:2A:79:4B:B3:B3:5C:C0:03:2F:DF:82
Certificate issuer: /CN=E6B678AE8DC843399DF534610764D871D4D698D8
Certificate serial: 29981BDAA7C3C525188B77CC7B10D58CD01D4EEA
Authority key identifier: E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/323430323a616230303a61663a3a2f34382d3438203d3e203234323036.roa
Signing time: Sun 03 May 2026 02:57:33 +0000
ROA not before: Sun 03 May 2026 02:52:33 +0000
ROA not after: Sun 02 May 2027 02:57:33 +0000
asID: 24206
IP address blocks: 2402:ab00:af::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl
rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 16:14:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:98:1b:da:a7:c3:c5:25:18:8b:77:cc:7b:10:d5:8c:d0:1d:4e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E6B678AE8DC843399DF534610764D871D4D698D8
Validity
Not Before: May 3 02:52:33 2026 GMT
Not After : May 2 02:57:33 2027 GMT
Subject: CN=B0121F4442F67615E02A794BB3B35CC0032FDF82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a6:c1:31:f6:76:34:15:1f:3a:56:ff:11:9b:
8e:d5:de:e2:01:14:50:85:0a:31:c6:8c:72:ef:20:
5c:0b:85:a2:85:99:88:a2:da:ca:f1:e5:ed:af:6e:
fd:9f:9a:27:ed:92:db:5f:08:bf:c3:5b:04:4c:4a:
ff:e3:0f:21:6a:5a:b5:52:01:f0:d9:12:77:2b:9d:
8e:79:ba:c0:2f:de:88:c5:ea:03:5b:c0:21:e2:65:
07:88:a9:ad:b6:a4:ee:4d:85:42:61:b0:c2:cd:74:
d5:46:7c:09:d3:5f:5b:70:b0:37:fc:0d:64:a4:bc:
c6:0e:b8:1a:7a:4d:f0:ce:b3:4f:fe:f0:75:b3:fa:
53:33:3c:e9:57:9f:52:32:bd:85:c0:0d:1a:73:50:
ea:6a:79:65:36:7d:c6:d0:47:04:53:0e:be:6d:ca:
b0:cb:ed:eb:f9:37:b3:f6:93:6d:24:46:7a:91:c8:
7b:36:3c:58:6a:3e:bf:25:89:54:dd:17:6e:25:46:
18:0f:f9:eb:d3:13:87:cc:a8:37:52:43:e8:2c:7a:
2a:ef:ca:b7:1b:ad:39:2e:dc:7c:e0:c0:9b:64:b5:
de:a8:44:e3:20:dd:c7:05:8f:04:67:72:fd:fe:e3:
80:64:a8:92:06:a5:fd:74:6d:98:76:f1:10:5a:8c:
a9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:12:1F:44:42:F6:76:15:E0:2A:79:4B:B3:B3:5C:C0:03:2F:DF:82
X509v3 Authority Key Identifier:
keyid:E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/323430323a616230303a61663a3a2f34382d3438203d3e203234323036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:ab00:af::/48
Signature Algorithm: sha256WithRSAEncryption
31:89:81:d0:56:0e:6d:63:c6:3c:99:b8:72:0e:40:30:64:e7:
11:48:39:a1:f7:c3:b8:e9:63:43:9b:6d:01:a3:1a:16:cd:38:
1c:cf:cb:fd:09:1d:47:f8:99:a7:01:76:3e:db:aa:9f:49:81:
8d:41:63:96:fc:10:e8:6c:96:3a:62:81:e9:6a:c2:3f:8a:8c:
90:91:42:8f:c0:3e:ff:e8:1e:6e:d6:77:05:f0:6c:3a:2e:61:
19:e2:1d:bf:a6:fd:b8:65:71:3f:3a:fe:91:b0:eb:8c:7e:83:
6f:0c:ba:d8:d4:b1:2d:4f:0f:07:ca:94:92:5c:8a:3e:4a:cf:
9e:0f:85:bf:b6:13:a3:47:da:7c:09:aa:3d:55:f8:f9:e9:50:
a8:be:b1:77:65:03:43:05:08:ae:fb:b2:4b:be:3d:2c:aa:d6:
de:37:c6:ed:da:5a:80:b2:94:b7:c6:58:8e:d7:2c:d8:5f:9d:
be:a3:f5:96:24:86:97:1f:f1:43:83:aa:00:4e:1d:48:4d:96:
6b:fb:32:86:1c:cf:4f:49:b6:4d:b3:c0:b8:d3:05:8a:88:5c:
bb:90:9b:32:b9:eb:e9:c4:21:9c:f3:47:2b:9e:9c:4b:c6:f2:
6d:d3:3c:e4:97:2a:b0:1b:5b:e5:d1:60:d5:73:f4:8d:44:b2:
86:bd:fe:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:01:16 2026 by rpki-client