
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/323430343a636534303a3a2f34382d3438203d3e20313338383834.roa
File: 323430343a636534303a3a2f34382d3438203d3e20313338383834.roa (raw, json)
Hash identifier: hSK8N/vC2/9gXsGi7sFYityEE3YHIpxX/5Nfow0h5pI=
Subject key identifier: 08:C4:45:B4:05:88:5E:BB:3C:B2:0B:1D:F1:FB:4D:91:AB:32:38:2E
Certificate issuer: /CN=5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C
Certificate serial: 5546F25DD1C8253FC2122B8ADB7DBD174D20D0E4
Authority key identifier: 5F:C4:5B:E9:ED:AC:7B:AD:3D:07:04:61:0E:37:4B:87:3F:C7:B6:1C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/323430343a636534303a3a2f34382d3438203d3e20313338383834.roa
Signing time: Sun 03 May 2026 03:00:29 +0000
ROA not before: Sun 03 May 2026 02:55:29 +0000
ROA not after: Sun 02 May 2027 03:00:29 +0000
asID: 138884
IP address blocks: 2404:ce40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.crl
rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:53:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:46:f2:5d:d1:c8:25:3f:c2:12:2b:8a:db:7d:bd:17:4d:20:d0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C
Validity
Not Before: May 3 02:55:29 2026 GMT
Not After : May 2 03:00:29 2027 GMT
Subject: CN=08C445B405885EBB3CB20B1DF1FB4D91AB32382E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:15:2c:33:93:ee:bd:93:de:b9:c3:e1:67:6f:
4e:c1:55:04:75:4a:52:bd:d0:09:aa:84:98:8f:f9:
f3:04:a0:51:22:91:1b:3b:53:68:90:06:44:22:f5:
f6:73:67:b0:26:43:78:a3:20:52:e9:c6:7d:53:d9:
7b:76:c8:bc:4f:86:56:41:af:d3:b7:38:0a:95:bc:
c9:71:e9:c9:41:4b:9a:2d:a2:0b:c7:4f:a8:98:86:
99:f5:83:e1:1e:a0:17:9b:6b:f4:8f:51:85:06:cd:
8c:97:1e:4e:00:f5:e3:d4:4d:e8:96:6e:f1:c3:41:
bb:4b:09:d2:f1:2f:57:6e:55:ce:57:9b:ba:f6:ec:
ea:e3:13:c1:9e:ce:f2:12:c4:55:e7:33:df:b3:52:
c6:28:e5:06:eb:bb:1d:ac:f7:9f:c7:d5:d5:94:92:
c1:99:3c:5d:be:f3:a5:50:bd:92:98:6f:44:b3:64:
56:16:8e:61:fc:66:0a:7d:e7:9b:e8:79:d0:83:36:
08:45:f5:3c:24:07:13:9b:ce:fb:09:44:b9:40:2c:
54:95:06:22:55:92:f0:a6:dc:2b:8b:0e:d0:15:40:
13:36:49:31:8d:7e:77:dd:1b:1a:3f:a8:a3:6c:fb:
4b:a9:cb:3e:5d:90:e5:0c:53:59:6b:f6:f5:ef:a3:
f6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C4:45:B4:05:88:5E:BB:3C:B2:0B:1D:F1:FB:4D:91:AB:32:38:2E
X509v3 Authority Key Identifier:
keyid:5F:C4:5B:E9:ED:AC:7B:AD:3D:07:04:61:0E:37:4B:87:3F:C7:B6:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/323430343a636534303a3a2f34382d3438203d3e20313338383834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:ce40::/48
Signature Algorithm: sha256WithRSAEncryption
07:d5:37:78:99:34:f8:20:6b:aa:24:75:71:fb:79:ca:7c:81:
18:d3:1a:9d:11:c7:2e:e9:aa:57:2c:58:c4:97:9f:75:cb:31:
55:37:ae:1e:a1:75:5f:c3:f8:46:71:09:29:bb:f0:72:2f:57:
e5:b5:26:15:bc:e8:9e:55:60:21:9a:f0:b9:b3:09:b7:78:20:
2d:cc:6a:c9:da:b9:4d:a7:41:6e:55:55:30:bb:01:d8:2f:b4:
d0:01:09:0d:28:17:66:52:32:e6:8c:5b:3b:b8:8b:2c:58:88:
94:a1:10:49:59:90:db:43:64:04:9d:a0:1e:19:b7:c2:b9:b7:
78:9d:2e:11:07:86:3a:cc:9a:ba:04:ce:21:82:12:01:f1:46:
20:6b:d8:63:e7:18:cd:15:82:93:19:54:10:6e:dd:ab:46:ec:
bf:f2:5c:2f:e9:e9:5f:df:2c:0f:ea:66:8e:cc:7e:65:1c:f2:
f7:11:c8:d7:09:49:de:09:4e:c1:f4:79:6f:48:12:08:82:cf:
60:67:42:b1:86:e2:f2:b6:fe:85:29:b0:21:f9:83:3d:45:b7:
db:47:0b:70:2d:bf:a6:dd:cb:22:75:d4:d0:3b:82:61:03:e4:
62:17:70:23:01:07:82:14:9a:09:46:bc:98:f1:bc:1b:ca:a0:
f5:aa:43:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:08:33 2026 by rpki-client