
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/323030313a6466343a646638303a3a2f34382d3438203d3e20313431303730.roa
File: 323030313a6466343a646638303a3a2f34382d3438203d3e20313431303730.roa (raw, json)
Hash identifier: ILoy/+ibUDKAFOxVMLinSZB9MoToaiC2+Ky+vT/tKdU=
Subject key identifier: F4:B9:38:55:7F:B0:52:EE:86:27:69:5A:DA:FD:15:E3:DD:5C:E2:55
Certificate issuer: /CN=330A616F2A63EBF0BB32E25EC313E1C92CE7476B
Certificate serial: 5E223FC944D07C55EC1EA6FE032AB389BF1AB20D
Authority key identifier: 33:0A:61:6F:2A:63:EB:F0:BB:32:E2:5E:C3:13:E1:C9:2C:E7:47:6B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/323030313a6466343a646638303a3a2f34382d3438203d3e20313431303730.roa
Signing time: Sun 03 May 2026 03:01:39 +0000
ROA not before: Sun 03 May 2026 02:56:39 +0000
ROA not after: Sun 02 May 2027 03:01:39 +0000
asID: 141070
IP address blocks: 2001:df4:df80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.crl
rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:05:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:22:3f:c9:44:d0:7c:55:ec:1e:a6:fe:03:2a:b3:89:bf:1a:b2:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=330A616F2A63EBF0BB32E25EC313E1C92CE7476B
Validity
Not Before: May 3 02:56:39 2026 GMT
Not After : May 2 03:01:39 2027 GMT
Subject: CN=F4B938557FB052EE8627695ADAFD15E3DD5CE255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:84:62:d0:4f:12:8f:cf:c3:d2:b0:77:26:b7:
f6:a8:ee:e6:c1:42:8f:59:42:0f:e4:55:bb:2f:dc:
92:f0:ab:ba:4b:9e:54:6d:ce:a5:b2:e5:74:5f:65:
45:87:ec:25:86:48:69:b4:a6:f7:9c:12:54:d7:10:
f6:50:b3:25:17:60:32:c4:c3:2f:72:dd:1c:0f:2e:
72:26:19:a1:5f:5d:c5:ad:19:05:ad:b6:9e:dc:44:
1d:4b:1e:db:ca:a6:1f:b6:5e:96:6d:00:3b:82:fc:
84:10:80:04:40:bf:5e:8d:a2:96:53:61:f5:8e:02:
e0:50:d9:dd:bb:31:7a:ea:8f:f0:b1:a7:a8:a7:d3:
21:4a:3a:90:51:ed:f2:9a:88:81:19:73:0c:8e:d6:
4a:14:61:76:da:c1:4a:5d:70:2c:63:6f:79:9f:11:
5e:cf:b8:4e:50:c0:b2:d0:48:ed:1d:4c:c9:e2:38:
40:71:e8:aa:35:2d:0e:80:54:2b:b9:ae:00:6b:2b:
7d:2f:1b:2b:d3:37:62:dd:8d:d3:2a:ca:00:70:db:
87:83:b8:4a:b0:ec:82:21:df:3c:af:fa:b6:12:b9:
47:ee:63:9a:be:8a:a6:2a:d2:b6:41:0d:8a:0a:2f:
df:fc:74:76:d2:2c:4f:38:9e:01:42:41:45:4d:f0:
a6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B9:38:55:7F:B0:52:EE:86:27:69:5A:DA:FD:15:E3:DD:5C:E2:55
X509v3 Authority Key Identifier:
keyid:33:0A:61:6F:2A:63:EB:F0:BB:32:E2:5E:C3:13:E1:C9:2C:E7:47:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/323030313a6466343a646638303a3a2f34382d3438203d3e20313431303730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:df80::/48
Signature Algorithm: sha256WithRSAEncryption
93:74:27:44:43:a9:c0:35:79:78:47:8a:09:3e:bf:f3:86:cd:
b4:43:e6:ab:71:58:3c:56:f0:67:26:25:02:c0:56:00:94:a6:
4c:f3:ab:82:ff:b5:c9:a1:8c:59:28:fa:fe:3a:21:0d:cd:da:
da:35:ca:b2:52:8a:77:1f:50:07:ce:70:46:be:7a:61:e5:20:
9b:49:0e:57:60:16:d7:01:a4:f9:d4:03:ca:3f:ca:ec:00:db:
56:59:e4:ea:24:f9:ca:56:6a:bc:9f:3c:cb:71:17:99:2a:81:
e0:9d:20:dd:17:71:6f:26:3b:8e:66:d6:a3:03:5c:47:99:58:
67:2c:75:75:b1:ee:b4:a5:b3:50:d9:7d:50:e1:65:1c:26:c2:
71:b7:13:62:d3:bf:de:53:98:54:c9:f8:00:c1:6d:d2:9a:d9:
e8:45:64:38:7e:57:6e:98:d1:28:10:3b:91:4a:2e:07:71:2e:
47:bd:be:33:b2:ce:b2:fc:fd:b4:36:ed:02:89:6e:2f:14:ad:
21:8c:1c:ca:7c:e7:88:93:02:a5:bf:eb:c2:e6:5c:d1:5d:ca:
e1:a1:10:46:7a:48:33:9a:05:0f:5c:94:a6:2c:9d:5e:06:b2:
8a:86:15:a5:9f:96:09:f3:59:3b:6c:9d:fd:f3:95:7a:cf:d6:
34:73:e0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:52:05 2026 by rpki-client