
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383862303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a383862303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: MgK1gFAgGHc0JxBU7o89AYRvyFuUmA9bCnDxFvrHHWY=
Subject key identifier: CA:56:6A:D1:74:D0:A9:3B:1A:8F:D4:B2:3F:E6:43:1D:70:1C:B8:A5
Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial: 06113F7C619E614DE222536440D3170B5AC8AC5D
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383862303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Sun 03 May 2026 03:04:17 +0000
ROA not before: Sun 03 May 2026 02:59:17 +0000
ROA not after: Sun 02 May 2027 03:04:17 +0000
asID: 133798
IP address blocks: 2402:5680:88b0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:11:3f:7c:61:9e:61:4d:e2:22:53:64:40:d3:17:0b:5a:c8:ac:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Validity
Not Before: May 3 02:59:17 2026 GMT
Not After : May 2 03:04:17 2027 GMT
Subject: CN=CA566AD174D0A93B1A8FD4B23FE6431D701CB8A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e5:9f:c8:d6:6a:42:96:47:c3:a7:70:f6:a1:
6f:af:a1:07:b3:f1:47:5b:4b:e3:05:f5:15:51:1d:
08:54:03:e2:54:c9:51:42:07:1c:4d:2b:f1:ed:7e:
8c:3f:d2:6b:98:5e:9b:19:48:a3:28:01:2c:7b:e4:
c1:2b:3b:c0:62:fa:23:89:6c:39:14:86:96:3a:e1:
3a:92:6e:14:7a:03:7b:89:5c:7b:48:f8:57:d3:23:
8e:e7:97:43:0a:cc:be:f0:0c:1c:71:c1:ed:bc:57:
1c:2a:8d:44:20:a6:97:a2:75:5d:55:6d:d7:4f:dc:
aa:3d:8c:bd:e4:e9:a8:7a:7c:d3:1b:bb:eb:dc:a6:
34:20:ca:88:55:dd:c6:86:7b:18:55:30:1a:b3:40:
39:dd:b5:72:53:b4:90:ad:b4:81:2b:7d:3e:1c:f4:
2b:e5:e9:49:7d:1b:fa:98:ec:73:b2:ab:cd:24:e6:
2b:ad:38:8a:f8:47:5e:93:19:1f:c3:37:06:6f:d3:
f1:35:2f:0e:8b:b6:ea:a1:21:81:3c:1e:75:d3:4d:
62:89:75:24:6c:56:d4:95:8e:eb:5a:f3:7a:3f:dc:
9a:ae:76:6c:d0:54:05:55:07:b5:f8:41:73:b4:9f:
21:99:15:c4:8a:a4:1c:df:9b:70:91:a2:63:6d:8c:
fd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:56:6A:D1:74:D0:A9:3B:1A:8F:D4:B2:3F:E6:43:1D:70:1C:B8:A5
X509v3 Authority Key Identifier:
keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383862303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:88b0::/44
Signature Algorithm: sha256WithRSAEncryption
2a:a4:ee:da:cc:49:43:6d:df:af:f5:8d:dd:bc:51:3f:fa:08:
54:86:92:27:10:1d:5e:d7:db:57:7e:0e:ec:99:94:45:68:ad:
90:80:4d:70:3c:3b:2e:6c:45:f0:c3:d2:bc:91:5f:c1:f1:12:
db:4f:b2:0d:4e:f0:db:26:03:38:1b:05:c8:1d:e9:70:c9:99:
37:8a:23:da:37:fd:48:61:0f:39:fa:3c:84:ad:65:2c:7b:2d:
4e:e9:c7:07:70:3d:96:63:1d:0b:91:ed:d7:bc:65:4d:b3:2c:
3a:e0:4a:f8:77:84:37:22:76:a9:a9:85:c4:55:59:d1:00:9f:
90:c6:0b:8b:51:ae:69:20:d6:24:27:53:69:1b:45:e4:e3:85:
6e:fb:e9:51:5e:0b:0b:51:47:a7:5d:d4:96:50:43:56:ef:61:
f7:18:f8:0e:12:f5:49:79:bc:1e:d4:c7:58:81:b0:79:fc:eb:
bf:7a:c4:2c:79:af:5a:1f:e5:5a:12:2b:04:0e:a6:24:57:1d:
f6:65:53:4b:f5:c7:53:4f:1e:87:09:28:25:35:9e:4d:4d:c5:
51:83:96:db:e9:8a:60:53:e4:25:cb:5f:cb:b1:e1:09:72:4d:
d3:75:77:eb:82:d0:3b:d8:66:8e:dc:1e:a0:cc:7b:65:e1:f0:
47:da:12:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:13:27 2026 by rpki-client