
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383733303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a383733303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: KggVsNZs4AOatysFggwL0mEgcn+YlFIZx1N5LY9/JXc=
Subject key identifier: 34:AA:B7:03:14:FA:92:30:E3:B9:ED:A5:37:F6:BC:18:6B:C8:2E:5A
Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial: 26B93418E9E28D906F71FCCAB0D37D952D777463
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383733303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Sun 03 May 2026 03:04:32 +0000
ROA not before: Sun 03 May 2026 02:59:32 +0000
ROA not after: Sun 02 May 2027 03:04:32 +0000
asID: 133798
IP address blocks: 2402:5680:8730::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:b9:34:18:e9:e2:8d:90:6f:71:fc:ca:b0:d3:7d:95:2d:77:74:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Validity
Not Before: May 3 02:59:32 2026 GMT
Not After : May 2 03:04:32 2027 GMT
Subject: CN=34AAB70314FA9230E3B9EDA537F6BC186BC82E5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a8:4a:7b:1b:ea:26:bb:5c:cc:2c:22:a2:50:
ac:44:56:ec:e8:a6:be:4d:c1:66:42:d5:44:73:22:
22:dc:5f:9b:d1:a1:5e:94:bd:23:69:f3:10:49:5e:
73:34:3a:35:1f:c6:6e:81:fc:c5:56:d9:05:8f:34:
5f:a4:f4:31:78:fe:6e:44:cd:68:48:7b:10:8f:c0:
20:02:72:0a:98:76:d4:b0:a1:eb:18:96:60:86:ae:
bf:9e:79:b1:71:88:5b:63:45:60:d0:c3:95:1e:6b:
76:86:d7:b9:08:14:4e:f7:c8:03:27:a6:e6:fd:29:
72:65:9b:4e:13:31:3c:ed:a7:23:02:d6:76:6a:f1:
31:6f:ab:18:c6:9d:b6:95:e5:8c:e6:d3:c0:6e:2c:
bc:08:f5:99:ec:72:f3:88:5e:29:78:1a:dc:63:80:
66:22:bb:2d:f3:39:b0:d6:8f:82:40:1a:18:6f:c5:
0a:07:b5:d4:25:15:27:a5:3e:97:18:19:92:40:77:
e0:60:b2:5c:9c:25:9a:37:f0:5f:78:71:fa:48:d2:
30:fc:fc:d0:de:99:3c:9a:12:24:73:91:6e:e3:71:
08:34:9c:bf:3c:c9:d6:5a:a4:72:b8:93:83:8d:b8:
88:4b:ba:6e:e0:ff:13:e0:c5:ec:c5:e4:72:fb:d2:
bc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AA:B7:03:14:FA:92:30:E3:B9:ED:A5:37:F6:BC:18:6B:C8:2E:5A
X509v3 Authority Key Identifier:
keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383733303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:8730::/44
Signature Algorithm: sha256WithRSAEncryption
5c:f9:47:a6:8b:94:7d:6d:7d:54:e2:bc:05:32:1b:30:67:ef:
b2:3b:ab:67:0c:6a:dc:76:50:24:44:be:a4:c0:27:12:08:68:
40:52:ae:d8:33:8c:58:52:00:1f:31:e8:c3:57:b5:49:f7:6d:
5e:d2:72:d5:f2:26:38:92:e7:b4:da:03:30:7a:d1:01:89:81:
d6:49:cf:7c:a3:50:0b:f3:70:6c:e6:36:48:2c:18:59:91:14:
83:74:24:e7:97:c2:f6:83:71:4b:7f:2e:09:06:da:b3:9c:12:
c6:09:8a:3f:d0:6c:10:d9:bc:ec:bb:8e:19:26:fc:4e:e6:e9:
43:1a:7d:f4:79:bf:b7:af:4e:a0:3f:a5:f9:d5:e6:ed:aa:f9:
83:95:b5:e4:1b:12:38:3f:b8:59:f6:66:49:ee:2a:22:99:a6:
1f:97:e4:0a:1a:f3:33:bf:3b:f2:3a:df:58:e6:31:1c:13:81:
fa:fc:cb:e1:05:53:d8:80:3f:53:b9:27:06:00:4e:67:b9:c8:
bf:8e:f1:13:2e:3e:c2:ca:4e:1f:b7:e0:6e:c7:e7:b1:dc:80:
aa:76:70:f6:e7:17:f7:54:f4:ba:43:0d:46:fb:65:22:a3:b2:
ca:49:d2:41:82:45:9a:58:90:88:ce:e0:f5:be:59:15:5c:e7:
de:d1:b6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:21:44 2026 by rpki-client