
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030313a3a2f34382d3438203d3e203338353030.roa
File: 323430333a323730303a343030313a3a2f34382d3438203d3e203338353030.roa (raw, json)
Hash identifier: UPnUe3jX9MF2GbT72esOKC+lgPFUmTqaYwzrYJHJ5io=
Subject key identifier: 45:EC:2D:F0:8A:00:7E:5E:95:68:36:FE:A6:37:80:F1:66:4A:5C:DA
Certificate issuer: /CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Certificate serial: 2DAB57AA5E18C1EA4CA504A0DEDE78EDBAEF833D
Authority key identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030313a3a2f34382d3438203d3e203338353030.roa
Signing time: Sun 03 May 2026 03:00:07 +0000
ROA not before: Sun 03 May 2026 02:55:07 +0000
ROA not after: Sun 02 May 2027 03:00:07 +0000
asID: 38500
IP address blocks: 2403:2700:4001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:56:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:ab:57:aa:5e:18:c1:ea:4c:a5:04:a0:de:de:78:ed:ba:ef:83:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Validity
Not Before: May 3 02:55:07 2026 GMT
Not After : May 2 03:00:07 2027 GMT
Subject: CN=45EC2DF08A007E5E956836FEA63780F1664A5CDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a1:ff:3e:9b:1e:e3:54:62:86:bd:91:bf:44:
0d:31:de:61:95:13:32:af:7f:5b:ed:40:3d:e0:39:
06:31:ea:36:16:88:72:a3:ed:7f:99:d7:14:62:51:
cf:26:cf:28:eb:a4:18:13:fc:4d:c3:80:77:54:1e:
08:28:55:2c:ec:2c:bf:ad:26:c4:08:30:e9:90:48:
5e:65:ae:a0:a1:07:c3:15:09:a2:b6:eb:2f:a1:72:
28:e6:de:88:de:53:59:00:0f:47:06:75:62:2f:e3:
83:dc:fd:dd:04:2a:bc:aa:05:6b:7a:5d:07:20:a9:
db:55:f3:d1:cb:e3:34:c4:2d:de:ac:94:a4:c3:d9:
65:90:15:45:2f:c4:66:69:a5:82:87:3e:82:8b:b4:
c5:31:55:97:ba:fb:53:ab:cc:c0:7a:53:4e:dd:01:
7a:a3:fe:94:21:f5:82:37:4b:bd:c1:15:2b:e4:17:
c2:b8:69:71:ee:bd:a9:9e:c6:23:26:62:17:21:d4:
05:66:fd:63:78:72:91:3e:bf:30:3b:30:14:c2:f7:
af:61:a3:5e:a2:0c:bf:2e:26:6e:4a:22:de:01:de:
ef:a3:ec:0f:18:2c:af:24:e2:61:0e:4e:94:39:c6:
cf:c5:04:84:a9:de:61:55:8d:8e:95:3d:0d:e6:3e:
a9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EC:2D:F0:8A:00:7E:5E:95:68:36:FE:A6:37:80:F1:66:4A:5C:DA
X509v3 Authority Key Identifier:
keyid:FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030313a3a2f34382d3438203d3e203338353030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:2700:4001::/48
Signature Algorithm: sha256WithRSAEncryption
34:1f:93:06:23:c2:46:f9:2d:21:3e:ef:c9:0d:fa:86:08:fe:
39:05:b2:ff:08:32:f5:be:a1:0f:d0:56:5b:62:e2:08:57:cd:
44:3d:2c:3f:69:96:42:67:3b:bd:9e:e3:8c:38:1f:f2:19:5b:
de:05:f7:a9:61:2e:d4:72:d6:c4:99:85:0c:e9:cb:d4:35:ad:
b7:24:da:29:7d:a0:6b:e0:27:b4:f9:74:0c:a2:23:10:77:6c:
d6:f2:c9:27:51:35:71:61:ee:0a:d5:2d:c1:6f:14:ef:61:cb:
0e:4d:39:c5:d2:f1:fb:7e:a1:56:ac:19:7c:e1:fc:ff:9d:62:
d0:11:50:52:1c:5d:05:f4:5a:f7:2e:8a:0a:1b:bc:47:fc:bf:
26:03:ca:75:e0:b0:34:80:27:71:d8:2b:1d:dc:04:47:9f:f6:
5a:95:a4:fd:28:bc:eb:cb:55:e0:fe:4d:75:ec:85:f4:5f:9e:
3b:af:33:40:8a:05:73:38:55:91:a7:a6:0e:6c:23:a7:c8:3d:
f6:7f:22:76:d3:4d:01:75:a3:e5:a6:f6:06:35:74:50:26:ec:
79:10:f5:56:c5:db:e4:4f:e0:ac:72:2a:c6:b9:8c:24:22:1c:
e7:7b:71:3d:67:3f:c8:4d:ab:58:d3:b6:5c:0e:85:9b:1a:84:
fc:e7:db:42
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIULatXql4YwepMpQSg3t547brvgz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIwODFDNEI5MDlDREY1NjE4NEQwNDU1QjJBQTFGNTJF
QkZDOTI5MzAeFw0yNjA1MDMwMjU1MDdaFw0yNzA1MDIwMzAwMDdaMDMxMTAvBgNV
BAMTKDQ1RUMyREYwOEEwMDdFNUU5NTY4MzZGRUE2Mzc4MEYxNjY0QTVDREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChof8+mx7jVGKGvZG/RA0x3mGV
EzKvf1vtQD3gOQYx6jYWiHKj7X+Z1xRiUc8mzyjrpBgT/E3DgHdUHggoVSzsLL+t
JsQIMOmQSF5lrqChB8MVCaK26y+hcijm3ojeU1kAD0cGdWIv44Pc/d0EKryqBWt6
XQcgqdtV89HL4zTELd6slKTD2WWQFUUvxGZppYKHPoKLtMUxVZe6+1OrzMB6U07d
AXqj/pQh9YI3S73BFSvkF8K4aXHuvamexiMmYhch1AVm/WN4cpE+vzA7MBTC969h
o16iDL8uJm5KIt4B3u+j7A8YLK8k4mEOTpQ5xs/FBISp3mFVjY6VPQ3mPqljAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQURewt8IoAfl6VaDb+pjeA8WZKXNowHwYDVR0j
BBgwFoAU+wgcS5Cc31YYTQRVsqofUuv8kpMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjA0MDY4ZjMtYTc1Yi00NzY0LTllODAtMWZhNTcyOTIwN2ZjLzAvRkIwODFDNEI5
MDlDREY1NjE4NEQwNDU1QjJBQTFGNTJFQkZDOTI5My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GQjA4MUM0QjkwOUNERjU2MTg0RDA0NTVCMkFBMUY1MkVCRkM5
MjkzLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2IwNDA2OGYzLWE3NWItNDc2NC05
ZTgwLTFmYTU3MjkyMDdmYy8wLzMyMzQzMDMzM2EzMjM3MzAzMDNhMzQzMDMwMzEz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMDMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAMn
AEABMA0GCSqGSIb3DQEBCwUAA4IBAQA0H5MGI8JG+S0hPu/JDfqGCP45BbL/CDL1
vqEP0FZbYuIIV81EPSw/aZZCZzu9nuOMOB/yGVveBfepYS7UctbEmYUM6cvUNa23
JNopfaBr4Ce0+XQMoiMQd2zW8sknUTVxYe4K1S3BbxTvYcsOTTnF0vH7fqFWrBl8
4fz/nWLQEVBSHF0F9Fr3LooKG7xH/L8mA8p14LA0gCdx2Csd3ARHn/ZalaT9KLzr
y1Xg/k117IX0X547rzNAigVzOFWRp6YObCOnyD32fyJ2000BdaPlpvYGNXRQJux5
EPVWxdvkT+CscirGuYwkIhzne3E9Zz/ITatY07ZcDoWbGoT859tC
-----END CERTIFICATE-----
Generated at Wed May 13 09:18:14 2026 by rpki-client