
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/323030313a6466333a323938303a3a2f34382d3438203d3e20313331373133.roa
File: 323030313a6466333a323938303a3a2f34382d3438203d3e20313331373133.roa (raw, json)
Hash identifier: 80Gvop42Sr4Mv89QUfWoI6OrfNSDVB/7edd/HH4ZzLY=
Subject key identifier: 88:DE:02:5F:9D:D5:4D:00:16:05:30:BE:20:8F:50:6C:5E:39:4B:61
Certificate issuer: /CN=E37B0ECEEE1B7CCC291448F04F5224C8485B08AC
Certificate serial: 14CDE63B431D4D421D843D080B03048D67AA4AE3
Authority key identifier: E3:7B:0E:CE:EE:1B:7C:CC:29:14:48:F0:4F:52:24:C8:48:5B:08:AC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E37B0ECEEE1B7CCC291448F04F5224C8485B08AC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/323030313a6466333a323938303a3a2f34382d3438203d3e20313331373133.roa
Signing time: Sun 03 May 2026 03:01:11 +0000
ROA not before: Sun 03 May 2026 02:56:11 +0000
ROA not after: Sun 02 May 2027 03:01:11 +0000
asID: 131713
IP address blocks: 2001:df3:2980::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/E37B0ECEEE1B7CCC291448F04F5224C8485B08AC.crl
rsync://rpki-rsync.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/E37B0ECEEE1B7CCC291448F04F5224C8485B08AC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E37B0ECEEE1B7CCC291448F04F5224C8485B08AC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:cd:e6:3b:43:1d:4d:42:1d:84:3d:08:0b:03:04:8d:67:aa:4a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E37B0ECEEE1B7CCC291448F04F5224C8485B08AC
Validity
Not Before: May 3 02:56:11 2026 GMT
Not After : May 2 03:01:11 2027 GMT
Subject: CN=88DE025F9DD54D00160530BE208F506C5E394B61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a4:fa:3f:af:10:88:5f:c1:1e:bf:23:36:f8:
d4:db:f5:65:c1:d3:a1:6e:c9:98:72:35:06:4c:d5:
73:e6:ea:b6:25:7e:2b:8d:67:2f:44:b7:3e:b1:9b:
4f:60:1b:8f:d6:da:60:68:9c:50:67:13:d3:eb:59:
32:54:84:e3:6e:29:ab:6e:bf:76:55:68:b0:b8:eb:
b2:72:b7:a0:ec:ea:e0:5c:fd:ad:97:56:cd:27:9a:
ba:77:6a:cf:79:6e:fd:f7:f3:0d:db:d8:66:71:53:
58:a3:ba:4d:1a:14:95:00:e4:11:9a:05:86:0c:f0:
fc:80:e7:85:7b:c1:df:ae:e8:6f:2d:6b:5f:75:69:
f4:ad:05:86:5d:85:12:18:43:7d:aa:be:78:1a:3d:
8c:16:bc:98:c3:ed:cf:0d:6d:a8:24:31:88:4e:e4:
d1:49:a2:20:59:b1:83:f9:59:d8:f0:2c:49:ee:6f:
3a:d5:fb:f0:f3:07:ff:0a:af:91:6e:5d:f2:77:fe:
bb:05:3a:52:c4:7b:70:65:b2:1c:a2:da:e2:78:fb:
cd:41:cd:d6:fa:e7:e2:54:a4:4b:01:4c:15:50:b8:
ff:98:72:c8:78:77:72:f9:15:01:59:3d:56:fc:49:
b2:93:b2:10:e9:82:e8:a8:91:5c:5f:c9:7a:43:46:
09:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DE:02:5F:9D:D5:4D:00:16:05:30:BE:20:8F:50:6C:5E:39:4B:61
X509v3 Authority Key Identifier:
keyid:E3:7B:0E:CE:EE:1B:7C:CC:29:14:48:F0:4F:52:24:C8:48:5B:08:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/E37B0ECEEE1B7CCC291448F04F5224C8485B08AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E37B0ECEEE1B7CCC291448F04F5224C8485B08AC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/323030313a6466333a323938303a3a2f34382d3438203d3e20313331373133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:2980::/48
Signature Algorithm: sha256WithRSAEncryption
00:ee:b8:d4:17:55:e0:ff:d0:f3:f5:13:73:47:02:3c:f4:68:
93:7a:58:4b:48:a4:44:92:36:0c:6c:3e:78:47:7c:c3:ad:b8:
ab:75:5f:52:81:b4:55:be:81:9f:75:24:98:6a:a9:2c:94:07:
3a:29:8d:3e:83:34:f3:78:fe:54:1c:36:9f:02:0c:63:78:49:
ee:55:3e:d1:5f:b6:fa:7d:0a:d4:af:b6:c9:6f:f4:ec:3f:f6:
e6:19:1e:5b:7f:43:5b:13:99:c2:a8:10:1a:15:d2:5e:81:c2:
f4:d3:ad:fa:69:bf:0a:32:69:ef:b6:cc:27:79:b4:7a:33:21:
66:cf:e4:76:2b:87:6f:e0:c8:35:5b:05:bc:d7:ba:11:78:d4:
b5:ed:cc:c4:72:1d:f7:cb:c7:9c:64:9e:0e:ba:7d:d3:f5:13:
82:d7:5a:92:d4:41:06:c9:20:79:1f:78:f4:98:87:8b:62:78:
6c:76:28:87:02:46:3b:64:45:3f:85:51:e1:13:83:ad:c6:0d:
08:e9:95:59:a5:12:b5:5f:82:45:2d:8f:21:8e:1d:0d:36:bd:
e3:61:86:79:ad:8c:81:bf:2f:1c:e8:cd:f7:a2:84:77:f6:4b:
fe:d8:a2:6b:8c:e7:e9:7d:9d:1e:20:3e:47:cd:62:d1:6b:68:
af:a2:74:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:58:20 2026 by rpki-client