
$ rpki-client -vvf rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/323430323a363938303a333030303a3a2f34382d3438203d3e203539323738.roa
File: 323430323a363938303a333030303a3a2f34382d3438203d3e203539323738.roa (raw, json)
Hash identifier: Yr07K6DWQdF2XKTnmuR+IZeyvkTjOYoZ4wAJOdd5cXc=
Subject key identifier: CB:76:B1:D3:CD:5C:59:09:97:D6:22:00:08:54:19:BE:05:E4:22:2E
Certificate issuer: /CN=7637E963EF709E2BBD39881202E68EA7BA09EB64
Certificate serial: 5B9853E4B03A49D7EEAFD4ACB1588DF12EDE1EED
Authority key identifier: 76:37:E9:63:EF:70:9E:2B:BD:39:88:12:02:E6:8E:A7:BA:09:EB:64
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/323430323a363938303a333030303a3a2f34382d3438203d3e203539323738.roa
Signing time: Sun 03 May 2026 02:59:42 +0000
ROA not before: Sun 03 May 2026 02:54:42 +0000
ROA not after: Sun 02 May 2027 02:59:42 +0000
asID: 59278
IP address blocks: 2402:6980:3000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.crl
rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:98:53:e4:b0:3a:49:d7:ee:af:d4:ac:b1:58:8d:f1:2e:de:1e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7637E963EF709E2BBD39881202E68EA7BA09EB64
Validity
Not Before: May 3 02:54:42 2026 GMT
Not After : May 2 02:59:42 2027 GMT
Subject: CN=CB76B1D3CD5C590997D62200085419BE05E4222E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5e:4e:77:45:51:fa:08:43:5e:59:03:28:19:
1d:4b:69:2f:3a:30:73:44:fc:d9:ff:cf:e3:17:95:
ec:89:a3:77:e6:98:46:a0:ba:71:40:88:f5:b6:62:
f0:14:f2:59:18:bc:93:68:20:03:12:86:92:6e:49:
ee:df:9e:48:08:5a:5a:51:0b:4f:3b:91:0c:bd:7a:
36:f8:ee:e1:e8:5e:7f:1a:9f:bd:43:45:21:4f:ad:
de:3d:08:e0:3a:83:a0:0c:12:b3:3d:cc:1a:bf:72:
36:e4:f8:b6:43:ae:08:7e:be:50:d1:f6:a1:45:af:
d2:cb:c3:87:63:ec:46:e9:c4:a0:c9:97:07:1d:57:
41:4a:ad:0e:78:40:5f:1a:3f:e0:28:0f:79:8e:d8:
e9:55:53:d0:5f:8d:39:84:4d:84:16:9b:c4:93:7a:
cc:ee:f7:87:3a:51:15:0c:77:59:af:6c:03:79:c3:
4a:af:37:d5:56:4f:4d:5e:af:f3:1d:08:f9:63:99:
cd:92:bb:f3:18:a9:68:58:e0:bc:5b:d6:b9:20:11:
0b:00:37:e1:89:64:c8:0e:e6:c2:0d:f0:85:0b:4c:
f7:2f:67:ba:00:7c:0f:d7:0a:7c:ca:9b:cf:92:27:
35:d8:df:e4:ee:6f:82:be:f6:31:61:0e:e7:d8:3f:
b7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:76:B1:D3:CD:5C:59:09:97:D6:22:00:08:54:19:BE:05:E4:22:2E
X509v3 Authority Key Identifier:
keyid:76:37:E9:63:EF:70:9E:2B:BD:39:88:12:02:E6:8E:A7:BA:09:EB:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/323430323a363938303a333030303a3a2f34382d3438203d3e203539323738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:6980:3000::/48
Signature Algorithm: sha256WithRSAEncryption
d0:64:a6:ec:b8:76:da:bf:b7:34:73:ed:ad:30:a0:7f:d5:f1:
0d:23:bc:ec:80:50:fa:07:19:ca:ea:3f:e6:b9:81:7f:35:f4:
b6:8a:14:2b:7f:ed:5f:8c:2e:82:70:8e:de:3e:0f:fd:6c:91:
11:0d:70:d2:49:c2:24:35:9c:f9:0d:79:98:aa:19:eb:a6:55:
5a:98:56:69:27:36:27:03:f3:0d:c5:1c:56:44:f2:ba:54:48:
d2:7e:ee:ed:dd:01:0e:83:7e:91:20:f1:ab:78:99:40:6d:5f:
2d:67:13:44:60:49:de:a7:b9:0a:6f:f0:a6:8a:cf:50:3c:e4:
a6:5a:05:53:21:cc:7e:d8:4d:c1:a6:16:b9:c7:fb:da:c6:06:
4c:66:31:ac:e5:e3:11:3f:ac:37:b5:0e:c0:9c:c7:c3:c2:ad:
a3:19:9b:38:fa:7d:6a:ff:5c:a0:19:56:cf:ed:15:de:6a:33:
26:fd:e1:1b:5b:f1:1b:d0:46:06:b4:d3:e5:9b:ef:b7:fa:93:
4d:b2:b8:0d:82:92:13:4b:f4:58:04:46:22:82:29:e9:70:c9:
73:6f:b7:4a:d5:f9:25:d6:61:74:94:a3:72:40:b4:22:fa:23:
f4:c7:00:26:72:17:62:99:cc:76:f1:99:ed:64:a3:44:13:5f:
27:1f:21:62
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUW5hT5LA6Sdfur9SssViN8S7eHu0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzYzN0U5NjNFRjcwOUUyQkJEMzk4ODEyMDJFNjhFQTdC
QTA5RUI2NDAeFw0yNjA1MDMwMjU0NDJaFw0yNzA1MDIwMjU5NDJaMDMxMTAvBgNV
BAMTKENCNzZCMUQzQ0Q1QzU5MDk5N0Q2MjIwMDA4NTQxOUJFMDVFNDIyMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFXk53RVH6CENeWQMoGR1LaS86
MHNE/Nn/z+MXleyJo3fmmEagunFAiPW2YvAU8lkYvJNoIAMShpJuSe7fnkgIWlpR
C087kQy9ejb47uHoXn8an71DRSFPrd49COA6g6AMErM9zBq/cjbk+LZDrgh+vlDR
9qFFr9LLw4dj7EbpxKDJlwcdV0FKrQ54QF8aP+AoD3mO2OlVU9BfjTmETYQWm8ST
eszu94c6URUMd1mvbAN5w0qvN9VWT01er/MdCPljmc2Su/MYqWhY4Lxb1rkgEQsA
N+GJZMgO5sIN8IULTPcvZ7oAfA/XCnzKm8+SJzXY3+Tub4K+9jFhDufYP7fVAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUy3ax081cWQmX1iIACFQZvgXkIi4wHwYDVR0j
BBgwFoAUdjfpY+9wniu9OYgSAuaOp7oJ62QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWYxYzc5ZjEtMjY0ZS00MjNmLTllMDgtMGIyOTAwZGE2OTQ5LzAvNzYzN0U5NjNF
RjcwOUUyQkJEMzk4ODEyMDJFNjhFQTdCQTA5RUI2NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83NjM3RTk2M0VGNzA5RTJCQkQzOTg4MTIwMkU2OEVBN0JBMDlF
QjY0LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FmMWM3OWYxLTI2NGUtNDIzZi05
ZTA4LTBiMjkwMGRhNjk0OS8wLzMyMzQzMDMyM2EzNjM5MzgzMDNhMzMzMDMwMzAz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTM5MzIzNzM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAJp
gDAAMA0GCSqGSIb3DQEBCwUAA4IBAQDQZKbsuHbav7c0c+2tMKB/1fENI7zsgFD6
BxnK6j/muYF/NfS2ihQrf+1fjC6CcI7ePg/9bJERDXDSScIkNZz5DXmYqhnrplVa
mFZpJzYnA/MNxRxWRPK6VEjSfu7t3QEOg36RIPGreJlAbV8tZxNEYEnep7kKb/Cm
is9QPOSmWgVTIcx+2E3Bpha5x/vaxgZMZjGs5eMRP6w3tQ7AnMfDwq2jGZs4+n1q
/1ygGVbP7RXeajMm/eEbW/Eb0EYGtNPlm++3+pNNsrgNgpITS/RYBEYiginpcMlz
b7dK1fkl1mF0lKNyQLQi+iP0xwAmchdimcx28ZntZKNEE18nHyFi
-----END CERTIFICATE-----
Generated at Wed May 13 12:41:02 2026 by rpki-client