
$ rpki-client -vvf rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/323030313a6466333a636634303a3a2f34382d3438203d3e20313532373536.roa
File: 323030313a6466333a636634303a3a2f34382d3438203d3e20313532373536.roa (raw, json)
Hash identifier: jRiKTU/j+tIlx8UR6dB8nvnEvGokztihjDnumCFG4MY=
Subject key identifier: CD:D6:E9:17:D6:8D:57:CA:92:CF:27:4C:F7:FD:D3:F3:6B:F8:CF:9D
Certificate issuer: /CN=EB57B4A8B7DB581F45D8854952928F5926755B5D
Certificate serial: 2B4394A2FB4213FEBF70505DFE001B7008AA8DB7
Authority key identifier: EB:57:B4:A8:B7:DB:58:1F:45:D8:85:49:52:92:8F:59:26:75:5B:5D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/323030313a6466333a636634303a3a2f34382d3438203d3e20313532373536.roa
Signing time: Sun 03 May 2026 02:58:19 +0000
ROA not before: Sun 03 May 2026 02:53:19 +0000
ROA not after: Sun 02 May 2027 02:58:19 +0000
asID: 152756
IP address blocks: 2001:df3:cf40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.crl
rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 13:44:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:43:94:a2:fb:42:13:fe:bf:70:50:5d:fe:00:1b:70:08:aa:8d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB57B4A8B7DB581F45D8854952928F5926755B5D
Validity
Not Before: May 3 02:53:19 2026 GMT
Not After : May 2 02:58:19 2027 GMT
Subject: CN=CDD6E917D68D57CA92CF274CF7FDD3F36BF8CF9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b3:06:7e:b3:14:33:38:9f:13:7c:0f:b3:15:
f4:f5:fd:c0:cd:9d:3e:40:0c:50:3e:37:85:67:0d:
bc:ec:59:c3:53:10:74:48:32:f5:42:28:d9:c7:67:
8f:ce:98:24:8a:49:67:82:25:c1:30:5e:2e:6b:4f:
07:e0:80:2c:df:1c:de:2c:70:28:bd:e4:e0:3b:87:
e6:3d:ef:90:1e:6d:c1:81:0d:a4:84:5f:c2:f4:28:
ec:a9:26:fb:0a:73:78:2d:b7:de:ba:db:75:41:39:
72:ff:f0:7d:cb:87:bf:83:ef:c2:18:eb:8f:12:e0:
62:b6:b2:9c:4c:2e:c8:e6:a6:52:54:ae:35:3d:27:
33:ea:f6:9d:fa:ed:4e:e9:c2:64:cb:a6:07:96:7a:
c8:14:64:c8:59:27:6f:d8:96:47:6d:25:b3:d4:01:
d7:87:13:e3:6a:62:89:6b:eb:12:56:d6:cb:5d:e7:
0e:1b:34:60:dd:17:0e:9e:8b:03:50:e5:9e:00:90:
2e:80:4a:17:79:8e:f0:23:1a:0a:47:fd:9f:b9:d2:
ed:d8:be:f1:00:73:e3:bc:c8:81:00:ba:92:73:be:
c6:10:b7:d0:5e:4a:74:6f:b3:ae:e4:f2:ee:9d:f4:
68:e7:c3:8f:6d:a6:1c:d2:88:67:cc:cd:aa:7b:bc:
b5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D6:E9:17:D6:8D:57:CA:92:CF:27:4C:F7:FD:D3:F3:6B:F8:CF:9D
X509v3 Authority Key Identifier:
keyid:EB:57:B4:A8:B7:DB:58:1F:45:D8:85:49:52:92:8F:59:26:75:5B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/323030313a6466333a636634303a3a2f34382d3438203d3e20313532373536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:cf40::/48
Signature Algorithm: sha256WithRSAEncryption
5b:77:ed:45:ef:5c:e4:5d:3b:4a:c8:a6:b8:5b:16:09:75:50:
54:ca:c8:7c:60:a1:f9:dc:d8:76:c4:fd:8b:29:84:f6:2c:c3:
c8:38:1a:e0:ad:57:53:3d:1b:8d:5f:f8:9d:4f:c7:a5:5c:a6:
42:47:f8:99:20:d4:38:0b:4d:13:b8:61:60:f0:7b:74:da:7e:
82:64:5e:20:be:ca:fa:11:a2:51:ce:d6:4a:2e:08:70:91:6a:
71:2d:e5:ee:9a:e1:3a:7b:29:8c:9c:f2:33:3e:29:a4:c3:f0:
c0:96:c6:11:9e:33:3f:13:da:6f:19:e9:0a:39:a8:09:32:c0:
42:e8:f5:a6:c6:0d:19:92:7b:63:36:37:42:cf:c3:3f:42:1f:
34:2c:c4:35:15:2d:39:08:bb:4b:77:ab:41:bf:58:de:be:53:
41:72:3b:96:13:00:cb:df:35:24:cb:16:ee:6a:a3:af:7d:69:
0a:06:8b:e3:05:aa:8b:b5:7d:03:9c:3d:10:44:72:94:62:28:
8d:68:80:61:f5:03:f0:32:e4:a1:26:8e:23:93:05:02:6d:df:
f1:f8:1c:89:c8:2c:95:26:5f:5b:f9:56:16:14:57:a4:73:18:
f7:c0:eb:7a:9a:f3:95:fd:b3:42:b0:11:b8:7d:66:bc:2f:a7:
7e:2d:82:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:57:20 2026 by rpki-client