
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/323430323a616230303a64663a3a2f34382d3438203d3e203234323036.roa
File: 323430323a616230303a64663a3a2f34382d3438203d3e203234323036.roa (raw, json)
Hash identifier: 4OT1Vj+gmmnFpwwDPh6x9/kISmTU11bxM2EYiVlOge0=
Subject key identifier: A3:81:05:35:E3:59:51:48:7C:29:50:49:99:1C:6A:39:38:54:6D:EE
Certificate issuer: /CN=E6B678AE8DC843399DF534610764D871D4D698D8
Certificate serial: 137A2D0C6B2D56F60E66BBB08F8D8CCD202F6B7F
Authority key identifier: E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/323430323a616230303a64663a3a2f34382d3438203d3e203234323036.roa
Signing time: Sun 03 May 2026 02:57:31 +0000
ROA not before: Sun 03 May 2026 02:52:31 +0000
ROA not after: Sun 02 May 2027 02:57:31 +0000
asID: 24206
IP address blocks: 2402:ab00:df::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl
rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 16:14:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:7a:2d:0c:6b:2d:56:f6:0e:66:bb:b0:8f:8d:8c:cd:20:2f:6b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E6B678AE8DC843399DF534610764D871D4D698D8
Validity
Not Before: May 3 02:52:31 2026 GMT
Not After : May 2 02:57:31 2027 GMT
Subject: CN=A3810535E35951487C295049991C6A3938546DEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:96:ac:ee:d9:57:4c:3e:ad:48:67:4c:61:2a:
60:d9:dc:30:71:54:b9:62:65:2e:4e:24:bc:39:71:
a1:b6:4d:0b:10:0c:d5:2d:da:7f:fe:26:72:19:5e:
4b:a5:95:85:93:8c:f5:34:34:af:b7:08:80:f4:cd:
f1:3a:54:3f:85:7c:c3:10:d0:78:37:35:cb:e1:ad:
b4:70:a5:c4:07:4c:67:4b:d0:5e:19:03:69:a3:9e:
82:7c:52:2b:4d:fa:1d:d5:1d:c6:b0:7b:62:7f:6d:
e0:6e:6e:20:de:75:23:2c:55:9f:4a:a9:85:c6:7c:
3e:b1:ce:0f:00:af:16:df:09:14:f2:d9:57:a0:8f:
27:a7:e1:c4:4a:b2:5a:e6:9c:2a:d9:dc:9d:8f:c1:
61:94:d1:93:da:b3:6b:38:6d:32:4f:75:d9:76:84:
00:a5:78:1d:64:c4:84:cb:4b:30:62:cf:0c:33:2d:
dc:d5:12:ab:39:71:d8:d2:3c:a3:05:2e:c5:df:eb:
59:46:ad:75:1a:e2:fb:ee:72:8a:47:ff:2b:1d:76:
ba:84:94:59:fc:61:03:e5:f8:f8:39:da:0d:29:7b:
ae:7c:11:35:f6:77:5d:cd:71:8a:f5:3f:c4:ad:95:
bc:54:c8:2b:a6:38:92:fa:6b:33:6d:7b:47:d2:c2:
9d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:81:05:35:E3:59:51:48:7C:29:50:49:99:1C:6A:39:38:54:6D:EE
X509v3 Authority Key Identifier:
keyid:E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/323430323a616230303a64663a3a2f34382d3438203d3e203234323036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:ab00:df::/48
Signature Algorithm: sha256WithRSAEncryption
81:80:f1:ac:d9:60:aa:f5:fc:ae:bf:bc:1d:3e:d5:cb:28:30:
75:3e:ad:a0:43:03:39:f1:43:19:5a:07:38:50:26:61:27:a4:
f2:c6:72:b7:8a:0c:70:3c:f2:1c:f2:bd:89:a1:ca:8f:1b:8b:
ec:60:dd:9c:8a:61:f6:aa:d1:01:8d:a4:47:b9:eb:03:40:2e:
68:dd:84:c7:94:9c:b3:f5:26:38:97:ce:2e:d9:7f:48:05:d4:
e1:8a:91:9f:d0:fa:dc:0c:4f:72:34:4f:c4:da:57:2c:9b:7b:
9b:94:96:82:7e:08:c3:c1:e9:7e:46:42:6c:17:c0:77:d5:94:
93:85:81:98:a7:cb:8f:bc:21:a3:12:d0:8b:b5:1e:c0:99:49:
06:19:40:ce:97:cd:41:ac:38:bf:4d:08:de:99:4f:bc:a7:44:
38:3a:c2:89:98:b3:22:fd:64:5c:89:52:39:68:cf:eb:dd:49:
02:e1:d6:5a:ca:d2:6d:7a:d7:b5:07:16:c2:b9:b1:6f:9a:84:
b5:b8:9c:90:e0:67:4c:5d:85:4e:8d:8a:41:cf:c2:67:74:c2:
13:56:ff:65:d2:32:77:f9:3f:35:be:2b:da:2f:9b:4a:c7:8f:
19:53:48:3a:b6:2a:45:d6:eb:ee:33:a7:31:c3:ba:c5:e5:d5:
d9:66:55:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:50:17 2026 by rpki-client