
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383730303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a383730303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: xPRKAITMoljxCOO8PUXFRHc9r+Ya2LWvTaU+MIyiQFY=
Subject key identifier: DA:5F:32:AE:D0:47:B5:E3:96:FB:CC:19:A5:B2:04:65:F1:CA:2B:0E
Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial: 66BC13F09C41B9496D6410CE5B46A9A57D7AEBC6
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383730303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Sun 03 May 2026 03:04:23 +0000
ROA not before: Sun 03 May 2026 02:59:23 +0000
ROA not after: Sun 02 May 2027 03:04:23 +0000
asID: 133798
IP address blocks: 2402:5680:8700::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:bc:13:f0:9c:41:b9:49:6d:64:10:ce:5b:46:a9:a5:7d:7a:eb:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Validity
Not Before: May 3 02:59:23 2026 GMT
Not After : May 2 03:04:23 2027 GMT
Subject: CN=DA5F32AED047B5E396FBCC19A5B20465F1CA2B0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:2f:5e:e7:fb:68:67:85:a9:3d:a9:8f:60:
fe:99:bc:25:68:a5:23:58:a2:99:75:c2:d7:08:37:
d0:3f:a5:e0:bf:3b:cc:f0:b4:4f:a6:87:72:79:36:
b0:48:36:8e:2c:d3:e3:8e:df:14:f0:77:89:23:6a:
68:5f:15:a8:9a:38:56:99:8a:da:e1:38:d9:92:17:
9d:73:65:ad:99:ee:10:50:a5:1c:d3:5c:cc:ac:38:
f4:8f:00:90:43:03:09:7e:a9:ac:00:49:85:ad:95:
82:d2:42:fe:0b:ce:3a:eb:cb:40:ac:78:09:b0:1a:
35:ca:c0:ce:09:0d:86:4e:3e:29:5b:5f:76:17:bc:
11:6c:63:ec:f4:22:bc:a4:df:77:c9:5b:37:db:a8:
2f:fe:df:04:67:99:15:63:97:d3:19:f0:e9:d7:6d:
b1:97:4a:58:68:7c:2f:32:d6:9e:8a:42:02:b9:1b:
5c:af:df:bf:03:bb:91:30:90:f1:5e:37:c9:29:29:
76:f0:ee:14:15:38:72:85:b6:f4:b5:7d:ae:07:3f:
36:09:1f:dd:99:e7:2f:a2:7b:72:ad:8f:9c:03:1b:
ce:c0:c0:02:11:8f:2e:b9:28:e3:10:b5:dd:a9:5f:
4a:0e:24:44:26:0e:73:d0:4a:09:b2:02:0a:b5:0c:
7a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5F:32:AE:D0:47:B5:E3:96:FB:CC:19:A5:B2:04:65:F1:CA:2B:0E
X509v3 Authority Key Identifier:
keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383730303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:8700::/44
Signature Algorithm: sha256WithRSAEncryption
7b:e8:86:82:59:4b:6c:90:22:38:f3:77:4f:1f:41:22:c0:ab:
46:c3:e8:11:ec:53:68:c8:ba:a8:34:82:45:4f:69:4f:b7:6b:
b0:17:86:b3:ce:22:53:8c:96:6c:e4:cf:cd:a3:53:e9:ac:3a:
bb:da:78:2f:e5:dc:a8:89:3e:82:04:85:70:15:60:00:2a:79:
63:33:ba:c1:81:5a:5d:8e:bf:a2:41:b0:e1:3d:20:f2:c8:2f:
40:be:be:9a:cf:80:1f:15:6d:a9:f9:54:6d:9b:96:ee:0e:84:
a8:1e:79:73:4c:10:5e:ae:7f:f5:0e:7f:88:2f:5a:76:e1:11:
fe:2d:7e:cb:f5:38:2d:c8:41:ea:0b:c4:5e:1a:62:e4:53:b0:
74:a9:b5:09:eb:4e:75:05:6c:72:17:30:27:a5:bb:04:f0:6e:
9f:32:ba:82:45:19:15:dc:31:f2:42:e4:8e:e5:b2:81:ed:91:
60:1c:50:00:5e:01:ec:e9:ee:9b:4f:40:b7:2d:51:4f:55:01:
1f:6d:6a:7c:c7:f1:38:25:2a:ab:db:17:ff:f2:23:76:53:76:
d2:eb:28:e6:f5:d7:62:75:49:53:20:48:0d:10:dd:22:fa:52:
35:a7:94:02:bd:4e:2b:e1:c4:f3:4b:a0:79:c3:09:54:e4:cf:
05:77:c6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:43:04 2026 by rpki-client