
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030373a3a2f34382d3438203d3e203338353030.roa
File: 323430333a323730303a343030373a3a2f34382d3438203d3e203338353030.roa (raw, json)
Hash identifier: ChgWqhpSSPGRvBu1f1bxJeWD8a3t19xx8OeP/hnMA4U=
Subject key identifier: 03:23:0B:1E:54:EF:14:D3:A1:C7:47:92:42:B5:45:A6:5A:4D:A5:2E
Certificate issuer: /CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Certificate serial: 77A92822F74229834B1A7CF530C8D93F4A02AFC6
Authority key identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030373a3a2f34382d3438203d3e203338353030.roa
Signing time: Sun 03 May 2026 02:59:52 +0000
ROA not before: Sun 03 May 2026 02:54:52 +0000
ROA not after: Sun 02 May 2027 02:59:52 +0000
asID: 38500
IP address blocks: 2403:2700:4007::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:56:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:a9:28:22:f7:42:29:83:4b:1a:7c:f5:30:c8:d9:3f:4a:02:af:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Validity
Not Before: May 3 02:54:52 2026 GMT
Not After : May 2 02:59:52 2027 GMT
Subject: CN=03230B1E54EF14D3A1C7479242B545A65A4DA52E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bd:8a:bd:85:7d:8a:c1:b4:70:a1:bd:51:7f:
68:8d:4a:2e:31:a4:3e:94:25:41:57:f6:57:c1:c2:
16:49:28:05:b9:cf:c6:7b:37:85:fe:59:6a:b1:ff:
09:b3:1e:e9:f4:90:d1:bf:22:30:f5:12:35:a9:cb:
60:77:a0:45:21:92:ef:4e:95:94:80:d7:d4:9b:bf:
9b:71:f7:91:da:f6:dc:79:68:de:3c:22:2e:ba:6c:
7b:fc:0f:63:c8:d9:0f:cd:27:21:00:c3:db:12:7f:
29:e4:1b:a6:9e:55:d1:ec:54:03:ff:9c:50:bd:51:
b2:4a:d5:e8:df:18:58:20:e1:35:44:4c:cf:b7:49:
f0:7b:81:0c:8b:b5:0a:cf:77:e4:0f:43:93:fa:fa:
7c:61:2c:f8:6b:7c:ef:04:03:ba:32:d7:d9:a8:18:
9d:19:55:cf:66:81:bf:d9:2c:e7:3c:57:1e:79:d8:
16:23:e0:e5:c9:84:67:88:bd:e8:34:7c:0a:60:50:
af:14:e6:2a:84:c4:03:24:f4:3e:e3:0c:f4:1d:d6:
34:4f:b1:be:65:a7:11:7c:08:90:68:15:c2:db:5a:
63:d2:1c:82:68:6a:b7:58:27:90:63:80:67:73:74:
e2:d5:04:42:59:31:b3:ea:6b:d7:62:a9:f4:76:05:
a9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:23:0B:1E:54:EF:14:D3:A1:C7:47:92:42:B5:45:A6:5A:4D:A5:2E
X509v3 Authority Key Identifier:
keyid:FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030373a3a2f34382d3438203d3e203338353030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:2700:4007::/48
Signature Algorithm: sha256WithRSAEncryption
50:20:5a:ae:5f:f1:09:ac:8f:31:78:c1:7f:86:e3:46:44:ef:
9d:7c:c2:eb:c9:1a:4f:47:29:f7:79:fb:4b:5a:f5:2c:b9:8f:
13:18:c5:b6:30:49:a1:c5:94:aa:9d:fa:2c:d0:d8:8a:73:94:
40:45:b1:a5:1b:d6:95:4f:17:12:42:eb:0d:82:35:da:cb:1c:
85:e0:48:3c:a0:a6:bb:80:81:2e:c2:8a:87:a5:a7:05:89:3e:
08:ab:c9:6c:0d:12:f9:47:65:d4:1c:fb:90:a7:67:b8:81:fd:
c6:43:f5:9a:27:bf:08:4d:3a:39:f8:0a:0f:08:c1:89:6d:8e:
16:b6:b0:de:ba:20:a0:3d:4a:10:77:a6:4a:01:ad:23:37:c2:
d9:45:01:ae:54:c6:a2:27:4a:bc:be:81:08:ac:3e:a8:35:ee:
1e:e9:25:56:1f:d3:95:9b:cf:eb:31:a6:1d:3b:76:26:8d:88:
83:46:f6:07:f4:1d:4b:b0:91:f6:a5:4d:59:d9:3e:0f:4b:09:
b9:c9:a2:03:01:dc:c8:89:a4:aa:3e:5c:fd:fc:2e:83:f8:e3:
b4:73:99:23:c6:a6:99:9b:3c:8e:a0:3c:69:4d:c7:db:da:f4:
24:28:3f:33:2c:b7:e4:09:43:64:da:27:6a:49:aa:e3:23:63:
23:07:11:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:29:06 2026 by rpki-client