
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a363a3a2f34382d3438203d3e203338353030.roa
File: 323430333a323730303a363a3a2f34382d3438203d3e203338353030.roa (raw, json)
Hash identifier: Lpi5eeFxU9ZcK0YIPbb+f+wGT9n/2r98zN2GsrkMbfU=
Subject key identifier: 4D:6B:C9:62:C3:6C:E7:03:D7:B7:84:C9:EF:E4:D6:8B:2E:6F:94:4D
Certificate issuer: /CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Certificate serial: 2EC26F6C2139567B24F3A24C8B735C1FD0E88E9D
Authority key identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a363a3a2f34382d3438203d3e203338353030.roa
Signing time: Sun 03 May 2026 02:59:56 +0000
ROA not before: Sun 03 May 2026 02:54:56 +0000
ROA not after: Sun 02 May 2027 02:59:56 +0000
asID: 38500
IP address blocks: 2403:2700:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:56:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:c2:6f:6c:21:39:56:7b:24:f3:a2:4c:8b:73:5c:1f:d0:e8:8e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Validity
Not Before: May 3 02:54:56 2026 GMT
Not After : May 2 02:59:56 2027 GMT
Subject: CN=4D6BC962C36CE703D7B784C9EFE4D68B2E6F944D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:54:6a:af:8d:bb:b8:fc:a0:a8:29:f1:34:2a:
34:d4:9b:96:cd:39:ef:0c:f5:5a:b7:dd:d2:ca:19:
8f:17:85:a5:3d:04:e5:be:62:3d:b6:db:5d:6c:a9:
eb:b9:4a:0c:e6:38:5d:83:61:c1:1a:3f:f9:f4:7a:
05:3f:ba:df:06:0b:47:53:0c:21:5b:31:d0:96:da:
0e:9c:76:c8:4f:60:14:9b:6e:97:d3:eb:a5:2c:68:
21:66:2d:b6:58:1c:c5:b2:47:56:36:2d:57:3b:af:
9e:b4:ba:01:64:24:03:08:35:08:ef:ed:e3:6c:74:
6c:f4:4f:d5:9e:d0:52:25:b1:b1:a6:30:ed:81:33:
e5:b5:14:4b:94:79:dd:ac:a2:3d:27:04:e9:b5:52:
42:77:01:06:43:66:c2:6d:68:a0:92:3a:84:f5:06:
7b:9e:4e:f2:fe:0e:b6:33:12:96:3f:1e:92:f6:e9:
56:46:6c:8e:a6:51:80:e6:f0:c0:b1:98:b6:35:56:
c9:6e:bd:0c:23:00:06:43:e3:fc:16:d5:12:d5:8c:
2b:55:10:d6:9b:c8:f3:ab:20:90:aa:c7:f1:e2:66:
54:5c:d1:f3:9b:ca:2d:3d:c2:e2:b7:21:07:1e:e8:
d4:ff:6e:12:c2:2e:d9:70:10:9f:0b:9f:95:98:2c:
58:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6B:C9:62:C3:6C:E7:03:D7:B7:84:C9:EF:E4:D6:8B:2E:6F:94:4D
X509v3 Authority Key Identifier:
keyid:FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a363a3a2f34382d3438203d3e203338353030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:2700:6::/48
Signature Algorithm: sha256WithRSAEncryption
05:b6:ba:57:67:04:0e:5b:4e:bd:85:2b:7c:5f:a2:fe:83:3d:
9d:a2:48:10:e5:70:48:eb:34:7b:29:5d:69:1f:e1:55:ad:61:
b0:4b:9f:49:e7:46:52:87:fb:1f:ad:2c:86:08:5a:30:80:92:
d1:a1:74:f7:71:80:19:aa:3b:ff:47:59:1a:d8:eb:2d:03:04:
6f:60:e3:65:91:d9:18:65:83:78:43:6b:c4:d6:bd:ff:4d:3d:
1e:76:d8:1d:21:8f:3f:4b:02:fb:13:fe:4e:e5:fa:7a:cd:7a:
3d:8f:8a:fd:25:a4:7d:bd:09:27:97:e3:0f:19:2d:47:40:c1:
bb:ee:75:c8:13:62:37:d8:90:db:8c:e8:22:df:09:6f:76:cd:
c4:e2:9b:70:92:ea:f9:8e:4e:5e:f3:19:d9:15:d3:be:b1:76:
c1:69:5f:99:c0:5e:32:a1:88:2c:35:cb:b6:82:c4:a7:f0:c8:
c5:00:36:80:6e:af:a9:d3:a8:3a:c2:69:50:35:70:e3:f0:83:
c1:84:4e:20:e5:9f:ff:fc:7b:1c:86:60:a6:e6:4c:c5:1c:48:
e0:7b:9b:2d:ea:81:1b:c9:e8:23:7c:1f:b9:b1:a7:79:67:8d:
ce:d2:6e:70:a0:37:09:3c:02:0b:51:4f:e0:5e:8e:52:29:2f:
c3:0c:09:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:09:01 2026 by rpki-client