
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/323430343a636263303a3a2f33322d3332203d3e20313338383433.roa
File: 323430343a636263303a3a2f33322d3332203d3e20313338383433.roa (raw, json)
Hash identifier: SF5csYZOV6O0/pz/yzpUeG3NGqNwVVPBe+gjRAAxx1w=
Subject key identifier: 69:8B:B0:48:B4:54:0D:8D:80:11:51:93:DF:63:56:D7:22:C2:1C:6E
Certificate issuer: /CN=2702EC259515C0960B0BFF36647679F0CA781E52
Certificate serial: 79E24E1711262425EC0FF8347DE550CF1F0A2999
Authority key identifier: 27:02:EC:25:95:15:C0:96:0B:0B:FF:36:64:76:79:F0:CA:78:1E:52
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2702EC259515C0960B0BFF36647679F0CA781E52.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/323430343a636263303a3a2f33322d3332203d3e20313338383433.roa
Signing time: Sun 03 May 2026 03:02:24 +0000
ROA not before: Sun 03 May 2026 02:57:24 +0000
ROA not after: Sun 02 May 2027 03:02:24 +0000
asID: 138843
IP address blocks: 2404:cbc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.crl
rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2702EC259515C0960B0BFF36647679F0CA781E52.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:49:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:e2:4e:17:11:26:24:25:ec:0f:f8:34:7d:e5:50:cf:1f:0a:29:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2702EC259515C0960B0BFF36647679F0CA781E52
Validity
Not Before: May 3 02:57:24 2026 GMT
Not After : May 2 03:02:24 2027 GMT
Subject: CN=698BB048B4540D8D80115193DF6356D722C21C6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6c:c2:eb:4c:dd:58:8d:ac:8b:1e:05:37:cf:
36:89:3b:c0:e6:63:6d:76:9b:78:57:26:1d:4c:a7:
f9:76:92:75:d5:7e:54:db:7e:b5:64:5d:12:90:30:
73:86:bb:fb:eb:de:96:99:2c:7d:b9:a7:b9:aa:7d:
7a:a6:b9:6c:6f:df:28:a1:c9:63:ba:ff:71:fc:0d:
30:b1:87:f4:f8:cc:c0:e4:73:e8:62:11:e3:a6:57:
41:89:19:9a:4f:dc:fa:2a:21:c3:e1:5c:93:65:a3:
e5:40:e8:ca:be:28:0f:af:50:41:38:7c:81:ee:f3:
9f:92:36:8e:17:ee:27:44:e1:38:b4:92:c8:0b:0d:
49:c8:07:a5:9e:27:30:52:36:2b:8e:dd:a1:6b:b3:
41:b5:61:95:68:4d:0e:ef:a3:f6:d7:47:98:02:da:
37:33:47:72:f4:11:4d:e8:c2:04:be:27:4d:ea:03:
46:bf:40:6d:c9:26:bb:c1:20:ac:45:87:bc:f1:c5:
90:84:fc:cb:15:ca:0a:0b:79:ae:36:62:5c:cd:78:
7e:72:16:10:4c:72:03:bb:d6:fe:18:4f:a9:c1:e8:
80:d0:b0:29:22:01:7f:a2:8d:f1:80:e4:87:13:23:
ce:06:18:32:cc:75:85:5a:ad:71:04:c5:6f:b7:75:
8f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8B:B0:48:B4:54:0D:8D:80:11:51:93:DF:63:56:D7:22:C2:1C:6E
X509v3 Authority Key Identifier:
keyid:27:02:EC:25:95:15:C0:96:0B:0B:FF:36:64:76:79:F0:CA:78:1E:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2702EC259515C0960B0BFF36647679F0CA781E52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/323430343a636263303a3a2f33322d3332203d3e20313338383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:cbc0::/32
Signature Algorithm: sha256WithRSAEncryption
3f:b3:38:9c:21:e6:b2:34:dd:02:86:84:90:6e:0a:7b:71:36:
fb:4f:01:bf:37:27:71:89:9d:65:fc:1d:a8:e0:77:6d:d7:09:
73:04:83:7f:4e:bb:c8:68:9d:c5:e9:23:42:4a:d2:e2:ba:96:
06:0c:a0:92:9d:dd:2e:7e:d9:5e:cb:8c:eb:82:ba:8c:5f:03:
c8:30:35:a1:40:33:d0:ce:f8:21:40:c4:c1:eb:9a:cf:09:cf:
7a:c0:20:a3:71:e5:63:82:1a:c8:8b:3b:70:2e:71:6c:9b:ea:
38:9e:57:81:78:65:42:59:01:73:d7:93:15:74:84:56:6d:5a:
15:bf:cf:a1:49:17:57:55:55:af:45:c5:ca:79:70:48:21:d0:
80:2a:39:eb:e7:68:55:9c:29:c2:81:4e:fe:40:68:a1:a0:d8:
00:bb:ef:94:02:26:a3:89:1e:80:bb:d0:71:c6:78:e7:32:1c:
77:84:90:b0:ab:4b:98:bc:6b:27:54:6f:f3:2a:56:68:0c:5a:
9e:11:3f:3e:83:a9:61:7c:33:0e:1e:6a:40:89:4f:b7:f8:50:
4b:46:1c:fc:95:8c:6e:54:7b:cc:50:b1:a7:7c:35:33:5a:f8:
a8:bb:ba:33:89:c5:d3:6a:aa:bc:a9:2f:ef:33:af:09:5d:3f:
43:ef:f7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:46:09 2026 by rpki-client