
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030393a3a2f34382d3438203d3e203338353030.roa
File: 323430333a323730303a343030393a3a2f34382d3438203d3e203338353030.roa (raw, json)
Hash identifier: e6cQeG27wU4NNfU2NzFlh670ya/RH2WRPUjvC9Gn7E8=
Subject key identifier: E1:05:A9:8E:7F:7F:B6:6F:81:8B:24:A1:43:A2:B2:0E:49:41:66:C4
Certificate issuer: /CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Certificate serial: 4BCDFEAD5E18EFF936B00F8C8E9E61EE6E21BBA7
Authority key identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030393a3a2f34382d3438203d3e203338353030.roa
Signing time: Sun 03 May 2026 03:00:08 +0000
ROA not before: Sun 03 May 2026 02:55:08 +0000
ROA not after: Sun 02 May 2027 03:00:08 +0000
asID: 38500
IP address blocks: 2403:2700:4009::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:56:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:cd:fe:ad:5e:18:ef:f9:36:b0:0f:8c:8e:9e:61:ee:6e:21:bb:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Validity
Not Before: May 3 02:55:08 2026 GMT
Not After : May 2 03:00:08 2027 GMT
Subject: CN=E105A98E7F7FB66F818B24A143A2B20E494166C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:05:94:8c:e9:62:2e:c6:d8:1e:1e:15:b7:7b:
6d:c0:78:e6:21:29:23:fd:58:bd:a1:a1:9f:77:06:
72:ea:4b:4a:a5:16:52:b5:50:cd:6f:30:7f:8f:96:
11:2c:ed:04:23:4c:cf:72:eb:17:dc:ac:0c:fc:e9:
2c:4e:9a:59:c4:2b:11:1e:68:86:7f:6e:f2:ba:0d:
fd:4f:fa:79:72:4d:fb:40:4f:82:89:75:d7:b5:d8:
0e:5c:9c:77:71:dc:38:ab:50:c0:4c:c4:a7:f9:2f:
ff:a1:01:a4:dd:59:5e:60:04:dc:e0:2c:0b:2a:99:
68:c4:36:43:3e:2e:2c:0e:9e:da:50:d6:ff:c4:9a:
e1:72:fb:51:d1:85:02:80:e9:d1:71:d4:9e:76:b2:
ca:34:17:d3:16:ef:62:f0:86:a0:15:64:20:45:2b:
fc:b1:73:68:a5:e7:43:c9:1a:fb:e7:b6:5b:1b:3c:
37:12:9d:92:b8:31:3a:86:91:17:b4:11:03:f5:5c:
7c:49:4a:a8:98:2b:b9:00:15:0f:40:74:85:5d:8d:
6f:f1:9d:60:4b:cd:15:b6:2d:57:bc:59:63:5e:03:
4b:db:95:4d:9e:20:b7:92:86:a3:a5:bd:f2:00:ec:
39:13:18:ff:db:a7:33:27:61:64:ce:c2:8d:ce:e5:
94:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:05:A9:8E:7F:7F:B6:6F:81:8B:24:A1:43:A2:B2:0E:49:41:66:C4
X509v3 Authority Key Identifier:
keyid:FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030393a3a2f34382d3438203d3e203338353030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:2700:4009::/48
Signature Algorithm: sha256WithRSAEncryption
a6:96:45:6d:82:c1:6d:88:c1:f3:4c:b5:a2:86:d8:53:54:f8:
2e:68:59:2d:12:74:41:8c:02:f6:66:49:2e:63:8b:30:7a:54:
1b:1a:47:fa:e1:3d:ee:74:70:0c:5e:c5:9b:66:78:43:6f:d9:
e4:b5:18:30:9e:be:a6:f3:89:56:b8:2d:37:2b:00:f4:03:79:
04:23:3f:8d:99:3a:ca:fa:f6:f7:56:a6:1d:ef:38:55:19:b7:
2f:66:bc:1e:52:32:6e:b9:1c:31:f4:fb:d0:c4:8b:3f:48:e0:
fb:0c:8c:18:c1:17:ad:e4:e7:f5:33:0c:82:a2:62:ed:66:87:
08:f1:fc:49:56:73:ed:23:3b:5d:df:47:6e:d5:94:7e:b5:99:
06:84:14:8c:54:42:aa:fd:37:77:da:49:f0:0f:61:72:88:dc:
62:98:7d:6d:37:79:78:2e:12:8f:3e:6f:f3:2b:8e:5c:16:4a:
f9:49:5b:63:d3:d9:d8:f8:d5:2f:ca:ac:91:67:38:93:ec:c6:
66:6b:99:e4:55:55:7b:47:1c:98:ba:08:5c:de:df:f6:c3:d5:
11:b5:ce:86:90:df:ba:7d:c0:3f:ac:2b:fd:cb:00:2f:9b:de:
40:63:b3:f9:e5:0c:85:2b:7c:21:35:7a:3e:10:f3:e7:86:15:
70:67:d8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:00:08 2026 by rpki-client