
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/323030313a6466343a366330303a3a2f34382d3438203d3e20313333383032.roa
File: 323030313a6466343a366330303a3a2f34382d3438203d3e20313333383032.roa (raw, json)
Hash identifier: EcmhUiw7Snwp5Kn69lml8JUMOFi76KPsbkN9tGNhEFs=
Subject key identifier: D3:2C:97:ED:AB:72:DC:4D:2D:74:71:FA:1A:63:07:B2:A2:1D:1D:E7
Certificate issuer: /CN=80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6
Certificate serial: 3AC750BA2E5BAD3C946C8D3C8D469C45AC0A1238
Authority key identifier: 80:30:18:01:E5:9D:6B:55:BD:D4:DD:0C:3C:BD:8E:F9:AC:F5:B6:A6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/323030313a6466343a366330303a3a2f34382d3438203d3e20313333383032.roa
Signing time: Sun 03 May 2026 03:01:21 +0000
ROA not before: Sun 03 May 2026 02:56:21 +0000
ROA not after: Sun 02 May 2027 03:01:21 +0000
asID: 133802
IP address blocks: 2001:df4:6c00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.crl
rsync://rpki-rsync.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:c7:50:ba:2e:5b:ad:3c:94:6c:8d:3c:8d:46:9c:45:ac:0a:12:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6
Validity
Not Before: May 3 02:56:21 2026 GMT
Not After : May 2 03:01:21 2027 GMT
Subject: CN=D32C97EDAB72DC4D2D7471FA1A6307B2A21D1DE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:72:1e:9d:e1:3a:2d:32:73:52:a3:b6:e4:74:
62:1d:cf:f8:0c:25:5d:62:ab:f8:46:81:db:6a:a0:
1e:46:04:ff:b5:dc:4c:b8:7f:8b:25:5f:09:96:95:
21:1f:55:34:b8:65:75:af:c6:48:26:7f:58:6f:fd:
84:fe:92:09:6f:f6:38:b9:72:66:d4:73:a1:dd:36:
73:e9:75:6c:11:a6:13:c3:ff:3b:cc:3e:3d:7f:df:
25:08:74:9e:d0:85:38:8f:c1:2e:40:fc:fa:4f:46:
cf:89:ed:96:4f:09:d6:e1:8b:5e:69:a7:cb:93:cf:
42:c4:02:dd:68:24:95:47:d1:91:fc:df:5a:04:30:
17:22:1d:35:43:7d:5c:b9:ee:d2:86:83:c9:9b:78:
2a:41:e5:31:f7:91:35:c5:52:06:fc:6c:46:d6:99:
b3:da:7f:01:a7:08:ac:c3:10:61:4e:e1:aa:31:61:
2a:b6:24:61:ab:aa:b4:3a:b2:28:67:9c:b5:db:a8:
24:fd:c6:d3:02:95:6b:56:73:5d:c7:6b:d9:38:bd:
aa:7f:22:9e:da:1c:08:01:86:9a:62:72:36:ae:14:
eb:e5:d2:b2:34:61:14:f4:81:71:55:b2:6e:a9:4b:
19:53:f4:c1:c5:66:87:5d:e8:c6:5c:20:0b:df:a2:
3d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2C:97:ED:AB:72:DC:4D:2D:74:71:FA:1A:63:07:B2:A2:1D:1D:E7
X509v3 Authority Key Identifier:
keyid:80:30:18:01:E5:9D:6B:55:BD:D4:DD:0C:3C:BD:8E:F9:AC:F5:B6:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80301801E59D6B55BDD4DD0C3CBD8EF9ACF5B6A6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/323030313a6466343a366330303a3a2f34382d3438203d3e20313333383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:6c00::/48
Signature Algorithm: sha256WithRSAEncryption
a0:6d:e7:8a:74:92:64:bf:a3:f1:98:5a:28:95:6d:d7:61:b2:
be:b6:bb:bc:11:0c:4d:65:e5:22:e3:cd:56:12:8e:4c:5f:95:
97:ce:c3:93:05:99:f4:fa:29:c0:24:93:2f:ac:63:d4:bc:65:
c5:44:6c:32:10:09:d4:20:08:9f:e7:58:83:b8:63:5e:72:34:
b5:a7:ff:9a:3c:fe:c1:88:e7:d9:86:92:03:27:93:6a:94:9b:
7f:14:23:72:a0:15:00:60:bf:3b:76:10:32:b4:43:10:ec:53:
3a:1f:8b:fe:40:bb:2f:d2:5d:8e:5c:bb:37:4e:8a:8e:69:57:
1c:69:1b:58:3e:e7:02:a7:41:f5:06:d3:3e:25:74:41:52:28:
ba:f7:42:3e:4f:22:62:2f:e1:cc:a3:e4:a3:fe:aa:8e:26:05:
8d:d1:92:38:1f:58:d1:09:a2:32:9c:f8:9c:a4:e2:b6:ec:32:
12:d5:6d:dc:51:00:19:f5:ef:10:59:85:41:b1:7e:9e:f9:1f:
d0:1d:8e:02:dc:61:7f:c4:72:6b:ec:92:5b:f7:23:f2:d0:4b:
26:df:1f:2b:6f:73:da:b8:85:db:c1:6f:02:3f:09:bf:64:df:
ab:61:17:48:62:c1:d6:b4:ca:84:e9:1c:8a:bc:a4:58:3a:42:
31:bf:cd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:24:46 2026 by rpki-client