
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a3a2f33322d3332203d3e20313338383837.roa
File: 323430353a6334303a3a2f33322d3332203d3e20313338383837.roa (raw, json)
Hash identifier: O6flVT/BjgsdY42z9V2dLz5E/e2Z/+dSUp+QehcFeRU=
Subject key identifier: AD:4A:D3:23:C7:BB:20:41:CB:86:6F:B5:8E:13:63:DD:A4:51:58:94
Certificate issuer: /CN=C9E3CF72C347D28B4B430DB737BE80CB0172B106
Certificate serial: 1217E85A5E65D87E9C9FB821BAB3179AC90F3EC8
Authority key identifier: C9:E3:CF:72:C3:47:D2:8B:4B:43:0D:B7:37:BE:80:CB:01:72:B1:06
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E3CF72C347D28B4B430DB737BE80CB0172B106.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a3a2f33322d3332203d3e20313338383837.roa
Signing time: Sun 03 May 2026 03:03:13 +0000
ROA not before: Sun 03 May 2026 02:58:13 +0000
ROA not after: Sun 02 May 2027 03:03:13 +0000
asID: 138887
IP address blocks: 2405:c40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/C9E3CF72C347D28B4B430DB737BE80CB0172B106.crl
rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/C9E3CF72C347D28B4B430DB737BE80CB0172B106.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E3CF72C347D28B4B430DB737BE80CB0172B106.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:34:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:17:e8:5a:5e:65:d8:7e:9c:9f:b8:21:ba:b3:17:9a:c9:0f:3e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C9E3CF72C347D28B4B430DB737BE80CB0172B106
Validity
Not Before: May 3 02:58:13 2026 GMT
Not After : May 2 03:03:13 2027 GMT
Subject: CN=AD4AD323C7BB2041CB866FB58E1363DDA4515894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cc:2f:b9:a9:12:70:87:07:ab:58:2a:08:fb:
bd:d8:32:be:2e:e0:6b:1e:a9:61:5a:fc:2d:7a:ea:
96:20:2c:42:09:fb:1d:93:fd:35:13:67:ef:97:15:
63:55:68:39:b4:4c:58:a6:c0:9a:4c:27:ec:77:2d:
95:2e:f8:8e:6c:85:fd:2c:5d:9a:fc:25:ea:e9:ed:
94:f6:e9:ee:e9:7b:3a:16:6a:9a:d4:84:41:2b:92:
b9:46:38:e0:99:8d:ae:a3:3a:c2:c3:7f:2c:a9:a4:
22:05:01:24:56:2a:53:2c:58:d6:c7:53:a0:29:80:
36:60:be:b5:93:24:44:61:f8:2e:bc:55:69:31:58:
df:dd:36:f9:a4:d9:6d:f0:3a:6c:4e:6c:52:24:48:
95:b9:c5:30:ef:65:da:4d:56:30:09:01:2f:a5:ec:
05:fa:02:0b:66:24:4f:d8:19:db:c5:09:fc:e6:e9:
ee:07:26:d2:0d:ca:24:12:87:2d:3b:01:ae:3e:76:
f8:e3:87:8c:e7:f4:a6:bd:ef:5c:9b:40:68:71:3e:
af:15:23:6e:cd:db:58:89:fc:42:ca:42:80:56:41:
28:6c:28:f2:cf:f7:a7:cb:b9:46:34:f2:bc:2f:64:
51:78:06:c8:0d:72:e0:1d:44:6e:e0:50:93:59:1f:
1d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4A:D3:23:C7:BB:20:41:CB:86:6F:B5:8E:13:63:DD:A4:51:58:94
X509v3 Authority Key Identifier:
keyid:C9:E3:CF:72:C3:47:D2:8B:4B:43:0D:B7:37:BE:80:CB:01:72:B1:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/C9E3CF72C347D28B4B430DB737BE80CB0172B106.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E3CF72C347D28B4B430DB737BE80CB0172B106.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a3a2f33322d3332203d3e20313338383837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:c40::/32
Signature Algorithm: sha256WithRSAEncryption
59:1d:75:59:bf:7c:4a:92:80:98:aa:56:32:8d:e8:fc:a8:9c:
48:ef:ab:b7:50:82:f9:f7:35:8f:c7:3b:53:be:14:f1:25:e1:
9f:4c:8d:45:b3:62:57:15:5a:62:3a:05:2d:4f:eb:07:c7:75:
1a:26:0f:fe:56:b4:2e:ea:21:fa:e8:ca:38:29:7c:c4:18:61:
2c:37:ac:c9:a1:f6:46:c6:08:ea:75:4a:71:90:22:27:dd:04:
3f:2e:ec:98:68:2e:81:01:41:21:2f:e4:c9:2a:7b:41:dc:98:
7a:82:12:43:c0:aa:0b:5d:8e:fa:56:44:ac:c7:3b:6f:d9:90:
2d:85:53:76:60:53:77:3b:75:10:84:ec:fb:72:b3:d4:78:e0:
62:8c:ab:5c:41:75:72:db:38:6d:8a:59:d7:d2:cd:8b:35:5a:
91:01:20:c2:a8:c2:69:99:8f:23:8d:0e:0a:ef:52:d8:72:97:
5e:0d:67:4b:34:7f:b2:c1:f6:95:60:fc:e4:41:ca:46:30:03:
c1:8b:04:22:6c:66:e1:5b:57:78:70:31:21:70:70:85:38:c3:
6e:67:ab:68:28:6a:63:d8:d0:aa:9b:64:75:dc:26:84:b3:c8:
7d:84:fc:26:45:19:64:11:e8:3d:09:b2:21:89:1d:fa:cd:74:
7b:a4:f9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:27:13 2026 by rpki-client