
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030333a3a2f34382d3438203d3e203338353030.roa
File: 323430333a323730303a343030333a3a2f34382d3438203d3e203338353030.roa (raw, json)
Hash identifier: HvPCW5gVaYee14kogEPEx3Zo1CCElegig3tAxEvNwjs=
Subject key identifier: 0B:0D:01:31:73:08:33:30:7E:A9:EA:B9:F8:1E:DB:DE:72:23:8F:B3
Certificate issuer: /CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Certificate serial: 1A634BF6607DE6829314D28993806FAEC48C57F4
Authority key identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030333a3a2f34382d3438203d3e203338353030.roa
Signing time: Sun 03 May 2026 03:00:08 +0000
ROA not before: Sun 03 May 2026 02:55:08 +0000
ROA not after: Sun 02 May 2027 03:00:08 +0000
asID: 38500
IP address blocks: 2403:2700:4003::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:56:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:63:4b:f6:60:7d:e6:82:93:14:d2:89:93:80:6f:ae:c4:8c:57:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Validity
Not Before: May 3 02:55:08 2026 GMT
Not After : May 2 03:00:08 2027 GMT
Subject: CN=0B0D0131730833307EA9EAB9F81EDBDE72238FB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fc:a7:bc:3b:2c:0e:35:cc:df:f8:2d:8b:cd:
a5:f9:eb:58:1b:6f:98:c6:8c:cd:b8:4a:74:c2:62:
8a:5d:8e:3c:16:d9:ae:dc:50:b4:af:13:33:46:bb:
d3:d1:dc:0b:04:45:a1:b9:e9:c3:fd:f6:64:e8:da:
c9:bb:2a:e9:24:e3:8b:9b:98:0c:7e:e3:37:50:06:
0e:3b:30:0a:8a:0e:66:55:42:98:23:1d:16:77:19:
c7:69:cc:f8:b7:48:83:74:c6:12:96:7d:ea:6f:2e:
ac:81:2c:8c:ab:c2:ce:dc:64:01:f8:6f:5a:3b:31:
4a:1e:0f:29:e9:1d:1f:ab:74:79:ed:c3:33:7e:79:
8d:1c:dd:dc:67:8e:46:44:7b:6f:84:e8:91:d5:d9:
b7:38:35:5c:68:55:27:79:c6:dc:90:53:21:3d:a3:
97:8e:f7:a3:72:d0:25:94:46:bd:eb:98:01:b8:68:
59:05:78:a5:d1:34:c4:3f:c8:d5:4e:49:b4:d1:ee:
fc:11:9e:c5:f7:6e:0e:52:d6:98:16:39:d0:29:07:
ab:14:66:f2:e6:56:f0:e3:c1:13:b9:2e:2a:da:34:
19:1b:f2:15:ca:76:e9:3e:47:ed:c5:f2:b8:00:50:
c7:79:ea:89:9d:97:9f:e4:d3:90:67:ca:22:9b:5e:
a3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0D:01:31:73:08:33:30:7E:A9:EA:B9:F8:1E:DB:DE:72:23:8F:B3
X509v3 Authority Key Identifier:
keyid:FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030333a3a2f34382d3438203d3e203338353030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:2700:4003::/48
Signature Algorithm: sha256WithRSAEncryption
ae:9f:46:9a:1a:07:8a:d7:7a:37:19:f7:42:c1:ff:83:4a:54:
ef:51:ac:81:b8:9b:2f:d0:9a:2b:18:fd:00:f9:55:68:30:f2:
92:c8:72:94:7a:2f:4b:72:8a:b5:5b:1d:2c:84:e4:89:11:5f:
03:2f:cf:0d:ad:63:28:66:61:f8:dd:ba:49:92:c0:f1:b0:e1:
eb:d8:f0:c0:63:cc:32:9b:f3:f9:90:d2:15:bf:5b:8e:6a:dc:
0c:d5:9f:f3:0e:29:da:42:dd:65:5e:68:7b:82:4a:1f:13:a6:
2f:e2:09:84:b4:6b:07:60:2f:0f:7f:5c:08:e1:ef:83:2c:5b:
16:7e:62:22:9c:2b:77:8e:1e:7d:98:ce:d7:df:b6:66:03:dd:
fb:78:f7:fb:ef:3e:9e:b6:9a:c5:33:7b:19:43:cd:ca:f7:03:
bc:5b:bd:14:3b:e6:14:77:27:58:0b:09:4e:58:58:35:6f:0a:
ed:3a:97:9c:41:74:e5:f1:11:16:dc:5d:34:82:cf:f6:51:90:
59:6c:77:6a:13:9b:77:25:25:fb:d5:9c:87:b2:51:2f:90:89:
09:30:0e:8c:30:c5:8c:6f:c3:fe:b6:02:be:70:3c:6f:5b:c1:
24:f0:6a:51:36:c8:3c:a5:27:27:99:1e:69:ec:77:b1:28:2e:
eb:ce:bc:f1
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUGmNL9mB95oKTFNKJk4BvrsSMV/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIwODFDNEI5MDlDREY1NjE4NEQwNDU1QjJBQTFGNTJF
QkZDOTI5MzAeFw0yNjA1MDMwMjU1MDhaFw0yNzA1MDIwMzAwMDhaMDMxMTAvBgNV
BAMTKDBCMEQwMTMxNzMwODMzMzA3RUE5RUFCOUY4MUVEQkRFNzIyMzhGQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu/Ke8OywONczf+C2LzaX561gb
b5jGjM24SnTCYopdjjwW2a7cULSvEzNGu9PR3AsERaG56cP99mTo2sm7Kukk44ub
mAx+4zdQBg47MAqKDmZVQpgjHRZ3GcdpzPi3SIN0xhKWfepvLqyBLIyrws7cZAH4
b1o7MUoeDynpHR+rdHntwzN+eY0c3dxnjkZEe2+E6JHV2bc4NVxoVSd5xtyQUyE9
o5eO96Ny0CWURr3rmAG4aFkFeKXRNMQ/yNVOSbTR7vwRnsX3bg5S1pgWOdApB6sU
ZvLmVvDjwRO5LiraNBkb8hXKduk+R+3F8rgAUMd56omdl5/k05BnyiKbXqPJAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUCw0BMXMIMzB+qeq5+B7b3nIjj7MwHwYDVR0j
BBgwFoAU+wgcS5Cc31YYTQRVsqofUuv8kpMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjA0MDY4ZjMtYTc1Yi00NzY0LTllODAtMWZhNTcyOTIwN2ZjLzAvRkIwODFDNEI5
MDlDREY1NjE4NEQwNDU1QjJBQTFGNTJFQkZDOTI5My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GQjA4MUM0QjkwOUNERjU2MTg0RDA0NTVCMkFBMUY1MkVCRkM5
MjkzLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2IwNDA2OGYzLWE3NWItNDc2NC05
ZTgwLTFmYTU3MjkyMDdmYy8wLzMyMzQzMDMzM2EzMjM3MzAzMDNhMzQzMDMwMzMz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMDMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAMn
AEADMA0GCSqGSIb3DQEBCwUAA4IBAQCun0aaGgeK13o3GfdCwf+DSlTvUayBuJsv
0JorGP0A+VVoMPKSyHKUei9Lcoq1Wx0shOSJEV8DL88NrWMoZmH43bpJksDxsOHr
2PDAY8wym/P5kNIVv1uOatwM1Z/zDinaQt1lXmh7gkofE6Yv4gmEtGsHYC8Pf1wI
4e+DLFsWfmIinCt3jh59mM7X37ZmA937ePf77z6etprFM3sZQ83K9wO8W70UO+YU
dydYCwlOWFg1bwrtOpecQXTl8REW3F00gs/2UZBZbHdqE5t3JSX71ZyHslEvkIkJ
MA6MMMWMb8P+tgK+cDxvW8Ek8GpRNsg8pScnmR5p7HexKC7rzrzx
-----END CERTIFICATE-----
Generated at Wed May 13 09:09:24 2026 by rpki-client