
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383737303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a383737303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: PAT46n0KELZ83TjBVrQc4S11HkN42ij1Upw1Eyne2RQ=
Subject key identifier: 3E:78:21:B0:F9:14:61:4A:12:0C:82:21:98:D4:63:03:DB:E6:E5:FC
Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial: 715A8D5F5AD7F9DD2BC84E9E5E9B3D8978D3F417
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383737303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Sun 03 May 2026 03:04:07 +0000
ROA not before: Sun 03 May 2026 02:59:07 +0000
ROA not after: Sun 02 May 2027 03:04:07 +0000
asID: 133798
IP address blocks: 2402:5680:8770::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:5a:8d:5f:5a:d7:f9:dd:2b:c8:4e:9e:5e:9b:3d:89:78:d3:f4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Validity
Not Before: May 3 02:59:07 2026 GMT
Not After : May 2 03:04:07 2027 GMT
Subject: CN=3E7821B0F914614A120C822198D46303DBE6E5FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5c:98:58:66:e2:88:df:02:3d:be:67:51:98:
fe:6b:a6:0d:de:7e:36:3e:fb:e4:e6:29:2e:98:8b:
64:59:d8:8d:f5:db:b7:35:0a:8f:c0:89:7f:b2:e9:
02:9f:97:95:b4:27:72:5a:c7:fd:8c:7e:76:bc:1a:
56:6f:9c:bf:94:f7:5d:33:8d:48:fb:5b:b9:86:31:
07:91:33:c1:09:2f:81:83:30:4b:09:df:92:07:33:
5e:59:a1:21:02:16:10:d9:c5:3e:a5:98:39:65:e2:
3e:33:dd:e4:2d:92:71:1b:c2:0c:10:1a:e3:b6:a8:
f5:74:01:35:4b:3b:f3:8f:80:dd:75:0b:9c:76:82:
b9:4e:9e:f6:1d:db:a8:83:58:1d:20:a3:77:be:59:
a5:03:84:ea:f5:e9:e1:4e:a4:f3:46:ae:22:b1:09:
a8:fa:88:a4:fb:86:db:c1:fb:ac:5b:8c:44:f8:0d:
70:f1:c9:14:c6:1b:c4:6f:e1:f6:33:31:b7:e9:76:
42:f9:14:ef:3e:ae:eb:99:f8:a9:25:c6:fa:46:47:
60:9d:0d:24:4c:2c:55:87:75:dc:00:ea:9b:aa:8d:
7b:45:b4:35:13:14:bf:cb:21:ba:df:c4:cf:62:7c:
8b:cd:be:89:35:6b:62:42:e4:a3:62:e8:40:5a:90:
48:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:78:21:B0:F9:14:61:4A:12:0C:82:21:98:D4:63:03:DB:E6:E5:FC
X509v3 Authority Key Identifier:
keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383737303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:8770::/44
Signature Algorithm: sha256WithRSAEncryption
73:88:22:f5:ac:30:ad:4c:fd:a1:d7:b1:4d:d7:73:91:d2:bf:
2a:92:1e:e3:a0:11:e4:2f:01:c9:39:21:d4:9d:26:1b:9e:f3:
fd:ab:2b:9f:48:e2:2b:57:42:0a:32:3c:4a:35:dd:d0:ec:f7:
2c:85:40:2f:aa:9b:66:fa:16:f4:4b:5b:da:53:98:9e:f4:89:
8d:49:a5:2b:6e:fd:3c:28:02:36:b3:2c:cd:f8:29:e1:87:85:
35:ba:30:11:ed:90:7b:c7:8f:b4:a6:12:7f:b9:6a:b7:42:21:
c0:e7:63:ad:04:27:ab:02:f7:f0:b5:14:ec:ae:16:13:58:87:
c4:d1:10:df:7f:5e:39:6c:49:7c:7a:b3:fd:3c:cd:32:cc:0b:
ab:ad:15:a0:02:e3:6b:2b:b3:99:4b:4a:b5:b2:6c:05:98:2f:
f1:1f:4f:41:b7:61:95:76:7d:65:68:98:94:a9:7c:d4:70:f8:
89:3b:3d:ea:bd:8e:10:ae:99:cc:3b:c0:dc:78:62:66:16:4e:
31:1a:9d:9b:90:40:1f:c5:b4:9a:cd:3b:d2:68:2e:39:a5:e0:
c6:42:f0:37:31:c4:a3:15:e7:fd:32:dd:4d:d8:05:af:3a:ac:
c9:c6:21:d9:a4:40:74:b4:e3:19:a9:59:80:96:24:63:08:bd:
42:61:a4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:00:59 2026 by rpki-client