
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383833303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a383833303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: ZgBCGivvGTfp6PHHw9LYml/8oubIlQcfOJQ3LVN32xg=
Subject key identifier: 75:3D:5A:BF:0B:4C:3E:5C:72:D4:29:98:C3:0C:2D:20:EF:0B:6A:5D
Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial: 3C4784C69BDE335844C87CB3A961FFF7768DA7A9
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383833303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Sun 03 May 2026 03:04:18 +0000
ROA not before: Sun 03 May 2026 02:59:18 +0000
ROA not after: Sun 02 May 2027 03:04:18 +0000
asID: 133798
IP address blocks: 2402:5680:8830::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:47:84:c6:9b:de:33:58:44:c8:7c:b3:a9:61:ff:f7:76:8d:a7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Validity
Not Before: May 3 02:59:18 2026 GMT
Not After : May 2 03:04:18 2027 GMT
Subject: CN=753D5ABF0B4C3E5C72D42998C30C2D20EF0B6A5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b8:38:1e:1c:d1:45:a1:dd:54:76:2c:33:8e:
c1:9a:e0:e2:30:f2:72:1b:47:e4:0d:5a:e4:8b:93:
75:45:72:60:f7:45:f3:c9:92:36:20:73:12:23:c6:
47:f3:97:b7:c7:3d:6a:e8:d2:89:0c:bf:9c:87:09:
9c:1b:f7:eb:15:49:13:a0:da:3b:1d:c3:78:a1:36:
e0:a6:e6:f4:2e:6b:b0:2e:6e:a4:06:16:3f:64:57:
a2:8b:ca:11:39:9e:13:c7:43:56:a7:04:c9:4f:77:
70:25:0a:cd:1d:fb:b1:64:c0:e3:df:34:e2:02:21:
9f:27:10:da:2c:14:24:8d:c0:55:4d:5b:65:21:25:
cd:8d:1b:6f:b0:0e:bc:2f:82:1d:77:9b:13:7a:e3:
8f:71:3c:58:d5:b3:22:07:a5:ec:53:e2:d8:d9:65:
b7:d6:83:f5:4d:f6:bc:d9:90:19:4b:5d:6e:dc:76:
ef:9c:21:15:b1:e0:9b:cb:1d:4b:a9:fe:5c:e2:48:
a1:46:88:b7:32:6f:15:44:1d:02:d2:53:30:e4:be:
4d:ea:8f:d2:19:c4:fe:5b:0b:2e:ac:9f:53:c9:73:
85:30:cd:2c:41:87:e4:b7:cd:f4:16:e4:2d:4c:33:
34:07:38:e9:4c:41:93:20:7f:99:cd:44:98:ce:61:
ca:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3D:5A:BF:0B:4C:3E:5C:72:D4:29:98:C3:0C:2D:20:EF:0B:6A:5D
X509v3 Authority Key Identifier:
keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383833303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:8830::/44
Signature Algorithm: sha256WithRSAEncryption
bc:04:ca:fb:ce:05:c8:41:a3:f9:17:36:19:e1:0b:0a:1a:ef:
ab:fc:80:55:27:78:a5:7c:74:00:64:1c:bb:ab:0f:e8:18:d6:
04:0b:0b:13:ef:f1:ae:7b:d8:13:9d:d8:06:14:40:d8:79:b4:
d9:6a:be:4f:95:d1:0b:74:a2:af:20:74:72:f8:1d:61:45:d1:
9d:3a:c6:ee:76:4b:63:70:02:7d:fa:80:ce:e5:c3:91:8e:29:
90:b9:8d:ab:7e:91:12:39:cd:3f:e4:67:c1:c2:c1:64:f3:c1:
37:b6:f1:03:71:8d:5b:5c:85:fe:52:5e:cc:07:bd:76:88:7b:
38:25:f8:d0:95:c2:79:34:90:1a:82:3b:86:44:8f:54:c8:e6:
48:3c:f7:d0:3a:28:38:8b:e7:87:6c:63:e8:b0:1b:cb:ea:bc:
4a:8b:fc:20:d9:61:27:08:f5:dd:76:f5:db:ef:50:53:f1:42:
7d:22:5b:9a:a0:3e:55:cf:7b:73:e9:01:9a:fe:a7:70:84:b1:
ab:6b:96:03:46:82:fc:6f:6b:dd:2f:a2:34:d0:f6:af:1b:1f:
cf:88:ca:5f:37:f7:6a:87:20:21:70:3b:6f:24:02:68:46:6c:
94:bf:b9:03:8e:c7:aa:44:07:1c:bf:e5:48:ca:3f:42:f2:63:
66:bc:71:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:18:49 2026 by rpki-client