
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343a3a2f34382d3438203d3e203338353030.roa
File: 323430333a323730303a343a3a2f34382d3438203d3e203338353030.roa (raw, json)
Hash identifier: UPbbdIqQsmI/vSW3CZ1tj/OrCzab0U5LpiDLLej2mwU=
Subject key identifier: 89:FA:73:4D:6D:E7:9C:39:53:3E:29:B8:B3:66:B6:FC:CF:81:76:FA
Certificate issuer: /CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Certificate serial: 6083BD0EADBFC5990AA4D832625CA5D2E4A73C55
Authority key identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343a3a2f34382d3438203d3e203338353030.roa
Signing time: Sun 03 May 2026 02:59:58 +0000
ROA not before: Sun 03 May 2026 02:54:58 +0000
ROA not after: Sun 02 May 2027 02:59:58 +0000
asID: 38500
IP address blocks: 2403:2700:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:56:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:83:bd:0e:ad:bf:c5:99:0a:a4:d8:32:62:5c:a5:d2:e4:a7:3c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Validity
Not Before: May 3 02:54:58 2026 GMT
Not After : May 2 02:59:58 2027 GMT
Subject: CN=89FA734D6DE79C39533E29B8B366B6FCCF8176FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:41:34:1b:59:a7:77:21:45:78:1d:c6:85:74:
9b:97:3a:ef:a4:15:1b:ca:a7:20:ee:82:7d:2f:d9:
a6:19:1e:c8:4a:74:08:0e:08:d9:b0:c2:e5:8b:f0:
40:74:1a:8c:66:a3:96:0a:eb:e4:90:d2:78:02:5c:
cc:5b:82:e2:b4:4b:f5:8d:e2:47:59:51:d5:62:ca:
01:d9:5d:6d:f6:99:42:4a:68:b3:93:c0:df:97:3a:
2f:5e:fe:0b:90:49:67:59:e5:d7:62:74:d3:89:5a:
40:1a:4b:9f:b8:ed:30:f6:8c:82:ff:31:4e:93:ec:
71:a3:bf:b1:1a:0c:43:37:7a:7a:d0:9a:ba:13:db:
08:84:db:24:bd:41:bb:70:58:de:e1:fa:fc:cc:47:
cc:32:92:60:3e:66:6b:d6:97:ec:89:63:38:05:c1:
c3:3d:31:aa:c4:e9:83:bf:5b:c3:c0:c9:54:c7:8c:
e9:f7:42:af:85:3d:55:c8:73:96:6d:6d:d9:75:a4:
19:b4:79:0c:6c:4f:df:c7:75:cf:a4:32:ca:64:f0:
e9:89:ea:d4:d5:94:6c:9c:70:f2:0f:c5:a0:e9:fd:
cc:20:95:bc:43:d8:c9:a8:67:5d:21:eb:21:a5:fa:
12:c0:a6:c1:d2:d5:9a:5f:5c:f7:9c:aa:07:f7:28:
fc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FA:73:4D:6D:E7:9C:39:53:3E:29:B8:B3:66:B6:FC:CF:81:76:FA
X509v3 Authority Key Identifier:
keyid:FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343a3a2f34382d3438203d3e203338353030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:2700:4::/48
Signature Algorithm: sha256WithRSAEncryption
3f:9c:61:c0:a8:13:3d:5e:d3:76:b7:a6:44:d6:3c:9d:30:7d:
9c:d1:6a:3f:6a:cd:ec:85:48:89:25:0b:ca:05:29:93:50:f0:
df:4f:21:78:43:ec:6f:a6:64:71:13:49:c6:7a:37:c2:07:e5:
c3:7a:09:ec:7f:0f:f1:7d:be:96:e1:c8:2f:26:d0:40:50:d8:
71:ff:cc:0c:65:8b:99:50:a2:50:4b:ba:ff:45:ab:e5:4b:3e:
2f:8d:76:e1:d7:2c:d0:3c:c0:7e:01:1d:00:69:da:c1:5f:e5:
98:00:da:f0:56:5f:69:07:e0:a6:8f:f3:86:de:a1:10:30:ea:
7f:d2:8d:5f:92:22:49:35:cf:13:34:6c:c2:dc:8c:10:03:d7:
76:6b:e3:6d:22:d3:01:b1:44:01:a9:32:1f:9d:99:60:41:a2:
d0:7f:f6:4d:f5:1d:f2:5e:c6:d1:62:3d:bb:c9:82:8d:06:55:
b0:7e:21:64:9a:2f:a6:72:84:4c:bf:4f:88:28:06:30:51:da:
b1:ae:cc:46:89:39:75:4b:0f:dc:d1:95:80:ed:ac:9f:9a:d4:
b7:8b:c6:f6:fc:0d:70:3a:11:f8:4f:9c:4c:54:33:48:5f:e3:
0c:81:e8:ab:a4:84:88:80:31:21:ae:07:06:d1:dd:0e:7c:30:
16:e9:f3:c0
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUYIO9Dq2/xZkKpNgyYlyl0uSnPFUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIwODFDNEI5MDlDREY1NjE4NEQwNDU1QjJBQTFGNTJF
QkZDOTI5MzAeFw0yNjA1MDMwMjU0NThaFw0yNzA1MDIwMjU5NThaMDMxMTAvBgNV
BAMTKDg5RkE3MzRENkRFNzlDMzk1MzNFMjlCOEIzNjZCNkZDQ0Y4MTc2RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+QTQbWad3IUV4HcaFdJuXOu+k
FRvKpyDugn0v2aYZHshKdAgOCNmwwuWL8EB0Goxmo5YK6+SQ0ngCXMxbguK0S/WN
4kdZUdViygHZXW32mUJKaLOTwN+XOi9e/guQSWdZ5ddidNOJWkAaS5+47TD2jIL/
MU6T7HGjv7EaDEM3enrQmroT2wiE2yS9QbtwWN7h+vzMR8wykmA+ZmvWl+yJYzgF
wcM9MarE6YO/W8PAyVTHjOn3Qq+FPVXIc5Ztbdl1pBm0eQxsT9/Hdc+kMspk8OmJ
6tTVlGyccPIPxaDp/cwglbxD2MmoZ10h6yGl+hLApsHS1ZpfXPecqgf3KPxFAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUifpzTW3nnDlTPim4s2a2/M+BdvowHwYDVR0j
BBgwFoAU+wgcS5Cc31YYTQRVsqofUuv8kpMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjA0MDY4ZjMtYTc1Yi00NzY0LTllODAtMWZhNTcyOTIwN2ZjLzAvRkIwODFDNEI5
MDlDREY1NjE4NEQwNDU1QjJBQTFGNTJFQkZDOTI5My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GQjA4MUM0QjkwOUNERjU2MTg0RDA0NTVCMkFBMUY1MkVCRkM5
MjkzLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2IwNDA2OGYzLWE3NWItNDc2NC05
ZTgwLTFmYTU3MjkyMDdmYy8wLzMyMzQzMDMzM2EzMjM3MzAzMDNhMzQzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAMnAAAEMA0G
CSqGSIb3DQEBCwUAA4IBAQA/nGHAqBM9XtN2t6ZE1jydMH2c0Wo/as3shUiJJQvK
BSmTUPDfTyF4Q+xvpmRxE0nGejfCB+XDegnsfw/xfb6W4cgvJtBAUNhx/8wMZYuZ
UKJQS7r/RavlSz4vjXbh1yzQPMB+AR0AadrBX+WYANrwVl9pB+Cmj/OG3qEQMOp/
0o1fkiJJNc8TNGzC3IwQA9d2a+NtItMBsUQBqTIfnZlgQaLQf/ZN9R3yXsbRYj27
yYKNBlWwfiFkmi+mcoRMv0+IKAYwUdqxrsxGiTl1Sw/c0ZWA7ayfmtS3i8b2/A1w
OhH4T5xMVDNIX+MMgeirpISIgDEhrgcG0d0OfDAW6fPA
-----END CERTIFICATE-----
Generated at Wed May 13 04:25:54 2026 by rpki-client