
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383734303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a383734303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: wH+0t1+k/CNtvKmMBA+K85nXfM2gJTNavnEZna8BSb4=
Subject key identifier: 5F:7B:AB:B8:BE:6E:6E:D8:F9:33:95:96:91:03:EA:19:40:69:BA:E6
Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial: 25FC86206A0AB82648C54F47BF08104E6DEBCE85
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383734303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Sun 03 May 2026 03:04:18 +0000
ROA not before: Sun 03 May 2026 02:59:18 +0000
ROA not after: Sun 02 May 2027 03:04:18 +0000
asID: 133798
IP address blocks: 2402:5680:8740::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:fc:86:20:6a:0a:b8:26:48:c5:4f:47:bf:08:10:4e:6d:eb:ce:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Validity
Not Before: May 3 02:59:18 2026 GMT
Not After : May 2 03:04:18 2027 GMT
Subject: CN=5F7BABB8BE6E6ED8F93395969103EA194069BAE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:67:1c:d0:43:6b:ec:e3:f4:35:46:ad:e2:4d:
77:ca:02:44:94:3f:44:5a:d6:c4:47:9d:5b:8c:54:
fa:b4:63:77:65:c9:db:97:64:af:3f:a3:1e:37:fd:
cc:0d:06:76:29:15:c7:13:a9:6e:f6:b0:d5:0f:6c:
16:74:7d:b5:aa:95:d1:e3:98:b7:13:be:44:0c:50:
b7:09:3c:95:98:46:87:06:85:fc:58:9b:ba:de:e3:
9b:c3:b9:f1:19:f3:25:e2:c0:54:15:e1:99:af:c0:
90:20:1d:17:30:c5:ea:5c:79:f8:71:ee:06:bf:c4:
f0:68:2d:87:72:12:d8:bd:48:12:f8:a9:db:a1:51:
37:2f:66:d2:0c:f0:df:68:4d:ac:d7:06:fd:7a:25:
11:33:8a:62:b0:b3:c5:b4:ca:d8:be:09:5d:21:99:
b8:3d:08:de:46:8c:03:2c:15:02:f6:51:1b:d6:00:
13:09:7f:2a:6c:07:e5:9a:ef:b1:3f:37:fc:50:6b:
37:e4:8f:14:2e:8a:bd:7e:c9:9b:23:4a:55:6e:76:
13:ac:d4:82:42:7b:78:89:d0:be:d8:b5:aa:55:f8:
05:dd:92:92:17:b9:b7:f6:42:45:43:9f:06:69:5d:
95:72:0c:20:8b:3d:24:ab:87:f4:7b:de:11:9b:f9:
52:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7B:AB:B8:BE:6E:6E:D8:F9:33:95:96:91:03:EA:19:40:69:BA:E6
X509v3 Authority Key Identifier:
keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383734303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:8740::/44
Signature Algorithm: sha256WithRSAEncryption
41:b2:b9:09:23:a7:36:1f:80:b7:a4:c4:da:dc:e6:84:35:0e:
12:27:df:03:7c:ca:d8:48:2f:f7:a1:f8:2d:14:17:31:d1:91:
15:25:83:72:16:cf:dc:2c:fd:94:3a:0a:4f:a7:e6:36:58:cb:
72:04:2b:9f:73:70:51:26:de:cc:9a:54:94:68:d2:fd:d6:02:
42:de:bf:4a:37:41:3b:45:0d:7d:ed:c6:3d:e7:9a:5a:69:77:
c6:bb:f6:33:29:e7:c7:66:3c:3e:24:2f:b0:02:a0:31:03:f7:
78:03:77:9f:12:04:d2:a0:8c:d0:4a:71:53:25:c0:8d:70:61:
31:d9:cd:7e:06:33:69:51:9a:dd:47:a1:7d:b7:77:60:f2:08:
a9:3b:c2:a6:fe:96:28:6f:da:ec:8c:d5:10:64:f6:c7:5e:cc:
02:5e:4f:ea:4a:0d:de:21:b9:c6:15:c2:eb:e1:5a:55:be:53:
84:d3:b2:ab:d4:36:f2:13:fb:7c:64:fb:d7:c7:3d:d1:6c:01:
dd:27:71:03:d3:a8:ca:2d:3d:e5:1f:d7:6b:09:0f:27:41:fc:
10:21:02:07:cf:67:39:15:aa:37:a7:84:43:db:b1:00:23:99:
56:b9:04:af:72:7a:ef:f1:23:85:19:b3:25:1c:26:e4:6a:52:
34:b2:d1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:13:40 2026 by rpki-client