
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030383a3a2f34382d3438203d3e203338353030.roa
File: 323430333a323730303a343030383a3a2f34382d3438203d3e203338353030.roa (raw, json)
Hash identifier: Vnbg8LRB3pgtA4yMHjoo70Z3VDi8z0LU7IYcym0Hofg=
Subject key identifier: 24:D6:95:AA:37:8E:96:46:C7:64:E8:9E:C9:A5:16:61:18:51:2A:28
Certificate issuer: /CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Certificate serial: 63FCAC5F03606BD7338C126951179B55EF2A4B88
Authority key identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030383a3a2f34382d3438203d3e203338353030.roa
Signing time: Sun 03 May 2026 02:59:53 +0000
ROA not before: Sun 03 May 2026 02:54:53 +0000
ROA not after: Sun 02 May 2027 02:59:53 +0000
asID: 38500
IP address blocks: 2403:2700:4008::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:56:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:fc:ac:5f:03:60:6b:d7:33:8c:12:69:51:17:9b:55:ef:2a:4b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Validity
Not Before: May 3 02:54:53 2026 GMT
Not After : May 2 02:59:53 2027 GMT
Subject: CN=24D695AA378E9646C764E89EC9A5166118512A28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:75:32:6a:ce:c7:7e:94:d7:51:77:e0:3f:69:
f5:ab:74:db:0b:ff:ba:72:9e:3f:80:e9:91:63:98:
3a:82:d6:aa:07:59:d8:d2:e7:9c:6d:e3:bb:a4:6e:
0f:45:d9:8b:87:86:60:57:0d:ec:66:ef:34:7a:e0:
61:58:86:41:26:28:bf:25:c6:b1:9d:76:8c:cf:80:
92:f1:0b:56:64:42:b0:37:29:69:81:98:2b:76:cf:
52:94:55:fd:7e:c7:ca:46:41:04:43:ba:40:bb:fe:
b1:0f:24:50:11:99:53:7b:86:99:1a:25:89:89:f2:
7f:40:ad:01:35:dc:86:88:bd:43:67:ce:f2:d7:b6:
55:bf:ee:2f:ea:10:3d:ed:42:e2:d9:97:25:ff:e5:
74:22:7a:ce:3c:0c:6e:ae:2f:68:3e:66:ec:d2:df:
3a:25:2d:3f:8f:c5:ce:b3:11:6b:49:95:35:79:cc:
43:a0:65:08:51:0a:96:e1:5a:91:f2:c0:88:1d:87:
86:2e:83:ee:f5:61:d2:c1:11:88:48:d7:b4:fa:f3:
a9:c1:da:77:59:29:1a:9b:09:e4:66:ad:4e:51:c1:
b7:40:75:a3:ad:cf:30:56:9b:66:cb:32:a5:55:43:
ca:3b:8a:dd:ef:cc:32:32:63:c6:dc:2a:ab:05:4a:
46:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D6:95:AA:37:8E:96:46:C7:64:E8:9E:C9:A5:16:61:18:51:2A:28
X509v3 Authority Key Identifier:
keyid:FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030383a3a2f34382d3438203d3e203338353030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:2700:4008::/48
Signature Algorithm: sha256WithRSAEncryption
12:85:9e:2d:94:fc:ff:7c:7d:a7:2a:f6:d5:5b:78:a2:0d:35:
7e:84:44:e4:97:75:8e:0c:2a:19:69:fc:bb:4e:9f:dc:9f:92:
40:7d:b6:2a:28:ef:d3:df:eb:de:42:4e:75:09:67:e4:3d:a6:
4f:90:bf:25:d0:e0:e7:51:94:6b:a0:cf:5c:a1:06:71:12:d9:
d8:d4:ed:dd:91:5d:e2:91:53:61:c1:fd:70:62:ab:dd:bf:78:
ab:a3:27:c5:ad:92:73:b4:bd:45:3e:7f:29:b2:9f:ae:66:70:
81:20:cc:99:06:18:41:59:e8:bc:2c:09:c9:df:7a:45:10:cc:
20:0e:74:a0:34:8d:be:04:c4:d6:9f:64:36:da:df:cc:ab:fc:
9e:c9:43:e6:f0:54:57:4b:8d:3a:4f:e8:6e:80:26:45:4c:82:
b2:e1:e9:78:42:72:07:46:9d:06:7c:76:b1:51:00:53:3b:6f:
44:b3:74:04:27:8e:d7:c7:3d:e2:77:08:0f:b7:ec:80:93:34:
0d:01:6a:fe:31:a5:99:7f:b6:2c:15:7d:5d:62:7d:ba:65:53:
c8:7b:c2:8e:26:9f:99:c6:54:ea:58:38:d0:06:a5:8d:44:83:
46:01:ce:d9:3b:cb:a7:41:de:a5:60:b8:f2:a4:fe:cc:1f:49:
6e:5f:46:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:24:14 2026 by rpki-client