
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383837303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a383837303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: KLqJZxinXKf8uCbZwMNMb/9pKodH4UU3umb/DXc7TzI=
Subject key identifier: 62:7F:46:73:15:44:1F:EE:C9:08:10:3F:9E:60:51:C0:44:01:59:47
Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial: 4CD29B0E7A5012EDD981E89B805DBA5D73F2321E
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383837303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Sun 03 May 2026 03:04:16 +0000
ROA not before: Sun 03 May 2026 02:59:16 +0000
ROA not after: Sun 02 May 2027 03:04:16 +0000
asID: 133798
IP address blocks: 2402:5680:8870::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:d2:9b:0e:7a:50:12:ed:d9:81:e8:9b:80:5d:ba:5d:73:f2:32:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Validity
Not Before: May 3 02:59:16 2026 GMT
Not After : May 2 03:04:16 2027 GMT
Subject: CN=627F467315441FEEC908103F9E6051C044015947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9d:46:f1:3b:bf:66:50:51:78:7c:b3:94:ae:
a5:95:b9:85:86:a6:75:b0:63:9b:10:8e:73:0c:bf:
0f:40:f0:54:54:02:a6:99:2c:09:33:12:d2:07:00:
b4:2a:c1:39:02:2b:f5:98:90:fe:95:a0:c8:68:82:
db:21:e0:7a:3d:4e:3b:8d:27:98:88:56:95:20:37:
3a:9e:68:fa:dc:30:08:ab:b7:f0:a0:e9:bb:ed:74:
00:4b:be:05:53:a8:f4:b7:c0:81:bb:ef:28:be:c0:
47:8a:0d:ab:c0:93:64:87:68:fb:2f:fd:36:aa:19:
c4:61:79:ec:b9:cd:fe:30:f7:42:3c:1d:03:0e:2e:
65:4f:c9:bf:65:f3:8d:52:f7:18:90:52:cc:11:c8:
ca:71:03:35:d4:2d:87:df:e7:05:ae:0d:a9:cb:bf:
a0:c7:0e:3e:a9:0b:70:bd:00:e6:d5:a4:27:69:b9:
d2:d7:14:31:2a:15:36:06:cf:ec:56:ed:b7:d3:48:
0e:be:13:c2:a4:42:35:04:f7:c1:20:8e:4f:05:0c:
db:18:e2:ac:fb:c3:dc:98:f9:53:c6:25:df:de:56:
53:91:f3:04:0f:34:0b:c8:fc:4e:50:34:a5:bf:ff:
2d:62:67:84:a5:2b:9b:51:61:49:9b:95:47:93:9b:
78:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7F:46:73:15:44:1F:EE:C9:08:10:3F:9E:60:51:C0:44:01:59:47
X509v3 Authority Key Identifier:
keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383837303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:8870::/44
Signature Algorithm: sha256WithRSAEncryption
b5:4b:0b:aa:85:23:88:d5:3d:96:31:6f:1c:40:1c:2e:28:fe:
7b:82:55:71:d2:a2:22:cf:41:48:eb:c8:3a:dd:7b:bb:52:31:
ab:6e:0a:52:60:4d:6d:80:83:85:09:d4:99:c6:17:00:e7:a6:
34:40:ca:69:13:7d:8d:7d:94:17:94:09:21:e4:4f:a4:91:9e:
c5:32:f2:b0:29:0c:e3:cc:1f:ad:7e:cc:f8:66:35:ff:81:dc:
8c:74:8e:53:94:00:80:ea:6b:8e:7b:27:ed:19:4f:b8:a0:a4:
be:27:c2:b9:90:1d:63:ed:39:73:70:03:10:49:ff:57:68:d2:
34:6a:df:e3:12:19:da:34:f1:fc:f4:2b:89:4d:b7:fd:96:38:
19:a9:96:14:3a:5c:3b:5e:81:bb:4d:6a:dd:d1:04:f2:f7:85:
e4:3c:87:00:11:18:63:ba:d8:16:f4:45:1e:58:55:46:60:5c:
2e:10:2d:2f:61:6c:a1:6c:a5:bc:7d:fd:cc:2e:23:65:57:ee:
2b:7b:d5:c3:d0:cb:c8:1f:18:79:7f:75:56:19:dc:5b:7c:cf:
d9:8e:14:47:57:33:e7:9a:40:4f:21:99:23:c5:f6:45:88:07:
23:22:a0:f4:10:4d:77:a4:ea:9f:8c:ac:ca:54:09:96:b6:27:
27:46:e1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:08:56 2026 by rpki-client