
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383838303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a383838303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: LmANRFrle3ROWG5772AWmhU0obopADmLMtuVukM0So8=
Subject key identifier: EE:6F:B1:2D:C3:91:25:CF:54:65:D7:63:F2:DB:E2:D5:AD:D1:E9:40
Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial: 5D743B070ED59325EEEB02B97A500739848BE11C
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383838303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Sun 03 May 2026 03:04:08 +0000
ROA not before: Sun 03 May 2026 02:59:08 +0000
ROA not after: Sun 02 May 2027 03:04:08 +0000
asID: 133798
IP address blocks: 2402:5680:8880::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:74:3b:07:0e:d5:93:25:ee:eb:02:b9:7a:50:07:39:84:8b:e1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Validity
Not Before: May 3 02:59:08 2026 GMT
Not After : May 2 03:04:08 2027 GMT
Subject: CN=EE6FB12DC39125CF5465D763F2DBE2D5ADD1E940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:27:af:72:a5:7b:78:7f:ab:4a:40:98:44:e9:
59:ed:73:f0:8b:b9:4c:b5:ed:54:f6:cc:15:f5:c5:
97:08:fe:ba:ec:03:fc:2c:66:b9:99:59:bd:0d:41:
e0:16:d0:30:72:a3:cb:d1:1c:b5:c2:2f:48:fc:74:
21:2c:ce:bd:d8:62:47:a4:85:f1:12:15:00:c6:e5:
13:d7:bf:11:dc:45:b9:0a:1c:a1:5e:48:79:2f:ed:
3f:84:f9:ed:4c:e1:fc:a3:87:f1:e2:5d:4c:14:63:
1f:c9:95:73:bc:3b:80:09:5a:98:70:0e:c9:f8:c2:
38:4c:a4:be:92:64:4d:6e:8d:75:e2:49:d9:7e:89:
b2:e6:43:9d:b5:63:61:0f:d1:5d:85:b2:a8:c1:21:
81:9f:65:80:0a:54:82:cb:f5:1d:f6:84:40:37:bb:
3e:7a:7f:f0:a2:b5:61:1c:fd:4d:f4:1f:85:be:d1:
4a:80:71:cc:5e:da:d5:0e:cf:9e:d8:6e:30:64:5d:
5d:c1:8b:21:56:6f:a1:46:4c:85:08:da:c5:95:91:
5c:42:61:bd:18:b6:e1:0f:7f:f5:c5:2e:1f:4c:a6:
c9:78:d5:18:45:f2:b9:4f:97:78:6a:ac:35:ce:99:
40:4e:c6:39:ef:1c:50:89:bc:85:06:6f:6a:44:68:
08:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6F:B1:2D:C3:91:25:CF:54:65:D7:63:F2:DB:E2:D5:AD:D1:E9:40
X509v3 Authority Key Identifier:
keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383838303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:8880::/44
Signature Algorithm: sha256WithRSAEncryption
69:42:6d:14:d6:37:2f:ea:0d:f0:81:ae:e5:cb:ff:1b:96:34:
95:f9:19:41:92:df:b4:e9:6a:45:81:fd:57:b7:ff:60:3b:56:
7e:e0:05:6d:c4:e9:49:9c:a1:1b:df:60:ec:d3:04:7c:aa:b2:
47:b5:05:0b:02:1d:6a:a4:78:38:32:44:f2:74:70:9b:cc:46:
59:7b:5d:10:f9:fd:3a:08:f7:53:12:68:76:01:bb:c6:44:73:
25:01:46:71:c6:74:60:6b:45:25:29:fc:aa:87:f2:57:71:fe:
d4:d2:4f:23:49:a4:ea:e6:9a:4a:02:19:cb:dc:54:c3:c5:69:
ce:4b:04:9f:1d:a9:26:9e:7f:ab:53:d2:95:de:d8:c7:1e:03:
39:36:68:73:f6:c5:63:9c:ca:f0:6b:b7:6a:9d:1f:bf:63:7b:
cb:82:6d:73:8a:67:fc:fe:b9:47:f1:2d:85:f1:42:bb:41:99:
67:5f:10:94:ca:ab:8d:c4:25:4e:e8:14:d2:01:88:15:4a:9a:
01:14:ec:11:f8:1b:62:85:2d:dc:88:32:16:4a:c8:57:d2:af:
ae:ba:30:36:a1:87:17:c6:88:b2:cd:21:db:fe:ad:21:d9:a6:
4a:8f:2b:f4:8d:8a:e3:9a:f3:51:45:1a:00:cc:b3:90:7e:c4:
ca:e2:ba:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:08:31 2026 by rpki-client