
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383130303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a383130303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: yvbuAvnYxJThIjaF2OrNHNCvaTfsW3DiRr/DCOvmxmA=
Subject key identifier: 08:16:8A:CF:6E:3D:6D:AD:90:5A:6B:66:B0:4A:5F:6B:ED:DB:06:13
Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial: 06EF555BD1AFE5FC3AD48C8155784055BA97C542
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383130303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Sun 03 May 2026 03:04:32 +0000
ROA not before: Sun 03 May 2026 02:59:32 +0000
ROA not after: Sun 02 May 2027 03:04:32 +0000
asID: 133798
IP address blocks: 2402:5680:8100::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:ef:55:5b:d1:af:e5:fc:3a:d4:8c:81:55:78:40:55:ba:97:c5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Validity
Not Before: May 3 02:59:32 2026 GMT
Not After : May 2 03:04:32 2027 GMT
Subject: CN=08168ACF6E3D6DAD905A6B66B04A5F6BEDDB0613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:da:7e:ab:76:91:93:7d:d7:d6:ae:12:7f:ea:
23:66:52:60:16:96:17:d6:58:9f:95:f7:ab:b8:6b:
a0:cb:4b:3a:1f:4b:b0:65:18:7d:ce:1b:1c:5b:4f:
6e:d9:8b:96:24:89:76:e4:1a:c8:c8:05:73:2f:74:
4a:6f:f9:71:58:e8:4b:5d:24:6f:ca:24:ef:bd:e4:
32:5d:6a:5f:3f:d5:d3:ec:b0:1c:5d:83:10:5e:e2:
1c:1f:07:84:d6:86:d1:dd:50:1f:e5:42:22:41:67:
3c:92:83:5d:5b:6f:49:bb:5a:f1:04:f0:ed:c0:2c:
60:ac:6e:e3:7e:f3:15:1d:56:23:cd:da:82:60:10:
a6:ae:19:b2:59:8f:dc:fb:b6:6d:7b:7a:03:17:23:
51:c5:d8:e1:c5:2c:e9:a9:b0:e4:b5:19:e5:b7:fe:
64:a3:b2:e5:74:d4:7b:ea:4d:2b:78:b3:05:cd:69:
d4:2b:c6:cb:79:8d:56:13:12:7b:27:6d:2d:d9:1e:
90:c2:c5:91:61:11:82:59:f3:99:94:f5:79:60:54:
18:44:08:c6:f8:25:e2:17:3a:f8:35:c2:62:ee:70:
d3:83:a9:5c:4c:87:00:3c:e0:db:3c:13:ca:23:fd:
f7:a8:42:37:dc:e9:66:14:ce:7f:8a:4d:a5:a9:1a:
65:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:16:8A:CF:6E:3D:6D:AD:90:5A:6B:66:B0:4A:5F:6B:ED:DB:06:13
X509v3 Authority Key Identifier:
keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383130303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:8100::/44
Signature Algorithm: sha256WithRSAEncryption
8e:e1:a5:c8:04:9d:e9:62:28:8b:32:e2:bb:d6:28:21:82:37:
e2:75:17:1b:ad:1c:e8:aa:e7:1e:ad:18:64:6d:6c:6c:a5:3e:
dd:86:4b:fa:58:25:63:4b:36:a9:d0:3c:7c:50:72:ad:8f:ff:
ef:f3:56:58:83:00:d2:a8:82:a6:4e:1e:3c:f7:a8:1c:2b:6d:
6b:a1:cd:69:68:93:61:db:5c:bc:b0:f7:18:4a:dc:84:d2:a9:
d5:fa:44:52:d8:43:7d:67:29:ad:7f:9e:2c:90:7d:86:64:c4:
00:15:5e:4f:c0:bd:ea:e2:5f:9d:be:3c:e1:82:09:f6:32:12:
2e:eb:c5:4a:70:37:bb:8b:1d:57:ae:e1:b0:b3:5b:2b:88:36:
e3:dd:f4:f4:9a:a5:41:0a:1b:f0:86:21:c6:04:4e:5b:58:64:
d9:e2:44:28:92:b9:da:8d:89:b9:44:da:fd:b5:cb:8e:33:c0:
b5:30:cc:3a:56:7a:11:7b:f9:a5:8e:af:7f:da:c7:29:f0:8c:
d8:93:ed:01:4f:4c:e2:c7:ce:3f:c6:9e:30:f3:02:f0:2e:61:
69:0f:e2:9b:0b:3e:6e:ba:52:8f:7a:df:32:18:3c:9a:76:e0:
e1:9c:76:3b:56:2e:41:73:f5:8a:55:43:69:f2:4d:3d:66:22:
65:20:92:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:51:41 2026 by rpki-client