
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a3a2f33362d3336203d3e20313338383837.roa
File: 323430353a6334303a3a2f33362d3336203d3e20313338383837.roa (raw, json)
Hash identifier: rp6/R1Wlz48G+rpBFS/l32yNHFJy7R2P6b7HlLCGNqQ=
Subject key identifier: 69:07:2A:43:9A:A4:AF:70:13:41:04:31:02:26:7E:0C:E0:09:51:75
Certificate issuer: /CN=C9E3CF72C347D28B4B430DB737BE80CB0172B106
Certificate serial: 4A4766CEECCCC78C34647CEC770B59FE1D4E3126
Authority key identifier: C9:E3:CF:72:C3:47:D2:8B:4B:43:0D:B7:37:BE:80:CB:01:72:B1:06
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E3CF72C347D28B4B430DB737BE80CB0172B106.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a3a2f33362d3336203d3e20313338383837.roa
Signing time: Sun 03 May 2026 03:03:14 +0000
ROA not before: Sun 03 May 2026 02:58:14 +0000
ROA not after: Sun 02 May 2027 03:03:14 +0000
asID: 138887
IP address blocks: 2405:c40::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/C9E3CF72C347D28B4B430DB737BE80CB0172B106.crl
rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/C9E3CF72C347D28B4B430DB737BE80CB0172B106.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E3CF72C347D28B4B430DB737BE80CB0172B106.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:34:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:47:66:ce:ec:cc:c7:8c:34:64:7c:ec:77:0b:59:fe:1d:4e:31:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C9E3CF72C347D28B4B430DB737BE80CB0172B106
Validity
Not Before: May 3 02:58:14 2026 GMT
Not After : May 2 03:03:14 2027 GMT
Subject: CN=69072A439AA4AF701341043102267E0CE0095175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:13:ce:8d:73:c2:56:d7:73:31:e8:37:4b:08:
91:49:54:dd:c8:3a:9e:ef:7d:7d:cb:7b:94:fd:f6:
84:20:7f:1d:b9:9a:30:f4:3b:88:1c:9a:10:19:48:
e3:d6:e4:ce:61:59:aa:f6:85:66:28:4b:ec:4e:0e:
8c:0a:15:ce:78:ec:6f:53:dd:bf:b6:bc:2b:05:2f:
7a:a2:8f:98:34:b0:51:0c:15:31:4b:fb:33:2e:9b:
3e:d4:3c:8a:a5:36:ae:33:a8:5a:a9:dc:94:71:5f:
9e:5c:4f:8f:f7:4d:20:ad:3e:7c:2c:a5:58:01:57:
b9:fb:4d:05:63:6f:bf:4c:3d:28:95:33:72:7a:ac:
ce:82:ca:e6:8d:c5:c4:eb:da:d9:61:df:65:f7:64:
bf:cb:03:5d:7c:b9:e8:80:30:a0:7b:d2:27:1a:e7:
cb:67:de:7f:51:ab:84:e0:d4:df:3a:c9:ca:64:5e:
d4:d0:d1:3d:65:68:e4:cd:b5:49:cd:9e:75:38:20:
ff:d5:c5:9e:ad:03:8b:b7:58:2a:45:51:22:c6:08:
e5:b0:8e:d6:1f:3f:13:30:7a:2d:1e:fd:25:9e:59:
4d:d2:64:de:1a:1a:a6:21:15:0e:7e:2c:2d:ee:61:
b0:df:12:ad:94:b5:b3:c6:34:19:ae:c1:be:3c:f0:
71:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:07:2A:43:9A:A4:AF:70:13:41:04:31:02:26:7E:0C:E0:09:51:75
X509v3 Authority Key Identifier:
keyid:C9:E3:CF:72:C3:47:D2:8B:4B:43:0D:B7:37:BE:80:CB:01:72:B1:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/C9E3CF72C347D28B4B430DB737BE80CB0172B106.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E3CF72C347D28B4B430DB737BE80CB0172B106.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a3a2f33362d3336203d3e20313338383837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:c40::/36
Signature Algorithm: sha256WithRSAEncryption
76:ad:0c:93:51:e9:11:8b:44:71:20:7d:c8:a9:2c:f6:36:51:
f2:ad:9e:c9:d4:52:2f:bd:f0:e6:6a:b5:a1:ca:78:ce:99:62:
09:1d:8d:9a:1c:22:db:e3:59:78:c1:31:cc:ef:0b:5d:ef:06:
75:b7:33:c2:da:15:75:d6:3a:04:cf:8b:f4:4e:ca:b4:ab:3f:
39:4a:38:b8:59:c0:c9:26:3b:fb:2e:33:06:2f:18:c5:7a:95:
a8:ef:d2:14:90:38:6f:14:c4:41:94:07:58:89:9b:49:20:6a:
f4:f2:fe:0c:cf:29:c6:77:77:1c:09:82:5c:39:41:42:6e:2f:
36:38:fc:41:f5:3d:7a:10:ad:8d:ff:af:46:d5:ba:c1:1c:1d:
86:4c:85:d8:9c:28:6f:3f:c0:b6:08:c9:76:59:6c:82:13:3c:
39:23:53:aa:0a:6b:a6:19:b2:22:9a:4b:fc:c1:05:c3:3e:36:
46:22:70:38:a5:e1:fb:86:43:57:eb:71:83:0d:e9:a9:f1:e1:
46:24:6e:bc:c9:5a:95:ac:dc:73:44:26:83:61:d3:45:f4:35:
11:1e:fc:11:b2:44:9e:27:d3:1a:94:f1:a3:6b:b3:2f:4e:5d:
d8:32:1e:aa:98:76:73:c0:b0:31:d8:13:da:d6:a0:b0:d9:37:
f7:15:cb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:25 2026 by rpki-client