
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a323a3a2f34382d3438203d3e203338353030.roa
File: 323430333a323730303a323a3a2f34382d3438203d3e203338353030.roa (raw, json)
Hash identifier: uR4VJSVzWhkUodD7HxUYAdIi7Q4UB2dVO832nDUE0Wk=
Subject key identifier: 79:B3:CD:EB:4C:5E:2F:91:ED:DD:4B:9E:26:1A:BE:EE:7C:4D:63:36
Certificate issuer: /CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Certificate serial: 2F0E7BABBCCFD793E412407CF38780DF22737564
Authority key identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a323a3a2f34382d3438203d3e203338353030.roa
Signing time: Sun 03 May 2026 02:59:59 +0000
ROA not before: Sun 03 May 2026 02:54:59 +0000
ROA not after: Sun 02 May 2027 02:59:59 +0000
asID: 38500
IP address blocks: 2403:2700:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:56:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:0e:7b:ab:bc:cf:d7:93:e4:12:40:7c:f3:87:80:df:22:73:75:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Validity
Not Before: May 3 02:54:59 2026 GMT
Not After : May 2 02:59:59 2027 GMT
Subject: CN=79B3CDEB4C5E2F91EDDD4B9E261ABEEE7C4D6336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ae:76:15:14:c9:db:2f:68:53:10:22:b7:78:
82:c7:e0:d8:f0:95:80:9a:c3:2c:c8:4c:a1:9e:bc:
fa:0b:04:49:79:94:7b:f0:eb:24:92:dc:5d:fa:2b:
ce:61:bd:4c:0e:ea:d3:bf:76:11:38:79:33:5b:90:
af:f4:9a:6b:32:6a:f3:c7:76:85:79:68:71:5d:af:
4f:f0:ae:83:6b:30:cb:77:96:08:df:26:ed:85:56:
71:04:16:8a:f7:14:5a:9c:c6:61:b9:ce:a1:b9:ab:
e7:c8:2f:eb:be:12:a9:ce:a6:8a:1c:24:15:37:40:
3b:e4:c4:00:f5:65:03:d2:9e:09:6c:cf:14:c8:a0:
b8:40:c1:76:2e:c7:e1:97:f8:41:a0:f8:18:cb:1b:
e4:90:b5:5c:ac:e0:9e:87:72:1e:c6:f2:7e:70:94:
db:17:48:a5:e2:18:5c:5a:54:6c:21:52:a8:cb:4f:
69:72:e2:3d:ae:38:65:f1:c0:17:b4:ee:fd:92:50:
b3:cd:40:ab:60:c4:60:7d:e2:ac:b6:cf:34:8c:d9:
1b:8b:b9:07:c9:7b:9d:7f:2d:28:ad:e7:e2:2d:d2:
86:4f:e2:70:14:7d:14:46:b5:74:a0:f5:02:22:34:
9b:70:63:a0:b6:d6:7a:17:e1:b9:ed:1b:d0:6e:cf:
b6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B3:CD:EB:4C:5E:2F:91:ED:DD:4B:9E:26:1A:BE:EE:7C:4D:63:36
X509v3 Authority Key Identifier:
keyid:FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a323a3a2f34382d3438203d3e203338353030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:2700:2::/48
Signature Algorithm: sha256WithRSAEncryption
a0:b3:f9:ff:98:33:2e:92:40:c0:90:60:58:b6:9a:c5:d6:00:
72:7a:3d:3e:65:69:54:fa:20:ac:3e:96:47:ed:b8:b5:fb:6e:
65:e2:ef:3a:11:ed:cc:3c:a7:f1:8f:fa:43:49:83:67:15:be:
b0:8c:da:a5:6b:b9:08:02:5c:67:c8:c1:e4:3e:dc:5c:25:81:
62:90:f6:e4:ec:ac:9f:81:5e:a5:3c:78:b7:5d:c1:84:03:4b:
d3:63:09:28:75:d5:aa:25:38:37:54:97:ba:74:26:e2:00:12:
09:bd:fa:46:2d:4a:b5:8c:21:15:e3:aa:4e:79:66:c9:05:9e:
58:e7:0f:46:ad:62:d9:f2:98:ef:cb:4e:65:0e:c0:d7:93:c5:
4a:29:9e:42:35:c0:d8:bd:0f:54:08:bc:46:92:92:fa:e9:9f:
3f:90:ba:4e:c4:93:7e:8e:ed:0c:ea:a1:05:c5:bf:88:99:8f:
9b:01:95:2c:b6:f2:3b:bf:16:2f:08:4d:83:53:58:ab:c5:d3:
41:56:ec:5f:e7:64:d2:ed:f2:68:d0:2c:13:f6:be:f9:39:75:
58:04:59:c3:9b:46:a9:3f:1c:a3:1b:73:5b:5d:06:9d:05:ee:
60:42:c6:4c:c0:7d:6c:c1:35:de:10:ea:eb:c7:28:5b:22:a2:
75:b8:33:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:34 2026 by rpki-client