
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383836303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a383836303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: BNSU2+6v12yKWrseyzPrW0RALnkjM2X5aU1pTKUbSV4=
Subject key identifier: 1E:01:4E:CF:CD:AF:E8:E5:4A:69:EA:95:BC:C8:5A:A1:BA:F5:55:B4
Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial: 5D155E32FE9DA65175F5FDAF76FC3A22BEBA15CA
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383836303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Sun 03 May 2026 03:04:20 +0000
ROA not before: Sun 03 May 2026 02:59:20 +0000
ROA not after: Sun 02 May 2027 03:04:20 +0000
asID: 133798
IP address blocks: 2402:5680:8860::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:15:5e:32:fe:9d:a6:51:75:f5:fd:af:76:fc:3a:22:be:ba:15:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Validity
Not Before: May 3 02:59:20 2026 GMT
Not After : May 2 03:04:20 2027 GMT
Subject: CN=1E014ECFCDAFE8E54A69EA95BCC85AA1BAF555B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b1:5b:fb:43:50:e1:5d:24:3d:86:a4:8d:a3:
00:73:71:fe:76:ec:b7:ae:4c:34:3e:cb:37:22:f8:
f9:9b:90:0d:43:93:fa:65:07:e6:7b:5c:67:72:f7:
b6:ec:c4:c4:ce:37:5a:19:11:56:a2:c8:e1:56:a9:
08:f5:7b:50:e4:e4:2e:53:2d:30:0f:fa:a3:68:23:
94:fb:3f:21:4b:bf:4d:e0:98:5f:d8:fa:a1:2e:f1:
10:5d:08:07:a4:b9:68:2b:d5:14:80:e0:b0:5c:2e:
1e:9d:80:78:8a:75:c9:15:c0:e7:49:30:05:d0:dd:
c6:68:4e:b4:2e:f7:62:39:bb:88:8e:6a:d5:dd:71:
48:cf:0f:52:e3:07:00:75:e6:30:26:dc:47:65:5b:
97:09:14:db:7a:01:e8:d6:c3:e5:24:64:2b:ac:06:
3a:62:68:de:12:cb:07:27:fb:5f:8d:08:1c:fe:6b:
f1:e9:f0:59:23:46:f9:c2:98:ea:50:6b:c6:1e:82:
b5:77:08:6a:ab:85:81:78:f3:40:d4:a6:9d:96:29:
20:64:1f:d6:71:ce:a3:f0:15:a2:db:21:b2:cd:91:
f1:68:4c:b8:24:cb:47:0a:3c:e1:76:15:6f:a7:ec:
69:5a:7a:d5:2e:44:c3:e3:a7:f9:be:d7:38:48:0c:
30:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:01:4E:CF:CD:AF:E8:E5:4A:69:EA:95:BC:C8:5A:A1:BA:F5:55:B4
X509v3 Authority Key Identifier:
keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383836303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:8860::/44
Signature Algorithm: sha256WithRSAEncryption
0a:a7:d5:a8:3a:be:47:4c:84:8e:f3:f8:6e:07:73:3a:05:fe:
81:88:9a:56:62:ba:c2:ab:58:23:6c:bf:f7:2f:7e:80:82:70:
9f:97:00:6e:82:a0:d6:b8:f3:aa:76:cd:c6:dc:65:d3:c6:ba:
4a:95:40:81:a8:bd:e0:61:32:87:6d:83:a6:65:fe:0c:6b:80:
bf:bb:ac:2b:4e:66:32:b2:37:68:42:0f:64:90:cd:42:57:04:
72:eb:3d:de:2d:c4:da:91:a6:7a:17:cb:61:3d:89:db:53:2c:
3b:90:23:08:e7:ea:b0:08:44:cb:18:b1:74:f2:3c:2a:97:d5:
03:63:71:28:61:d2:17:eb:57:fa:21:ea:25:d1:d2:9c:f3:a4:
39:8b:ac:19:13:30:47:c6:5d:f2:5f:cc:ff:44:28:54:87:00:
7d:75:06:2b:02:b0:06:66:73:70:19:be:29:f0:cf:12:1c:e3:
5f:54:4c:0c:2b:a5:7a:a7:20:dc:d4:a0:40:bb:ee:16:c3:db:
fc:1c:27:a1:66:2c:13:e6:64:42:0f:2d:97:ec:a2:cc:b9:78:
7f:06:2e:9c:cb:fa:a6:5e:45:7b:2a:66:f3:a9:e5:a6:22:03:
8f:d4:85:a7:89:c2:9a:14:7e:43:6f:d9:68:c3:dc:d5:f1:55:
df:1a:a3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:09:08 2026 by rpki-client