
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383864303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a383864303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: jojLZv0VN/mO0Wv5XMkHRXryb9DdPe4t/3Vy3l0Ns1o=
Subject key identifier: 19:73:EE:58:4B:0B:B4:D7:25:42:55:53:FD:66:0E:9E:07:51:F0:86
Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial: 2AD4893459A57BE336ED4FCD709AD4274DE99308
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383864303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Sun 03 May 2026 03:04:25 +0000
ROA not before: Sun 03 May 2026 02:59:25 +0000
ROA not after: Sun 02 May 2027 03:04:25 +0000
asID: 133798
IP address blocks: 2402:5680:88d0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:d4:89:34:59:a5:7b:e3:36:ed:4f:cd:70:9a:d4:27:4d:e9:93:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Validity
Not Before: May 3 02:59:25 2026 GMT
Not After : May 2 03:04:25 2027 GMT
Subject: CN=1973EE584B0BB4D725425553FD660E9E0751F086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:56:42:a8:b8:3d:24:6c:9f:84:27:46:b1:1d:
20:59:de:51:93:1d:a4:e0:ff:9a:49:c5:51:f4:82:
be:26:63:57:1e:73:e0:f5:bf:8f:99:ee:a0:5f:17:
9d:d8:63:f3:17:92:4c:e7:4c:d3:d7:c4:f4:5e:63:
54:f0:9b:61:e6:f2:ef:3f:ce:c3:18:69:88:12:42:
29:af:b1:c2:ed:93:d0:57:07:f1:d7:90:56:98:87:
24:28:05:aa:4f:7e:52:bb:0e:9b:9d:c0:3a:7b:0b:
7b:fb:5d:34:0f:36:6d:f9:d1:fe:a0:e4:58:c9:d4:
8f:af:d4:8d:04:1c:54:ee:bc:26:f2:cb:f6:fd:8a:
ce:ec:34:bd:d9:ad:46:7e:df:90:a4:c8:ed:7a:4d:
bd:9e:b8:22:a2:ae:f1:5e:c8:25:8c:be:54:cb:a5:
1b:9a:5c:e7:9a:1a:b1:22:e8:f5:ef:f7:f3:1e:af:
e1:db:a7:10:e7:17:34:7f:f0:49:04:76:9f:99:4a:
57:b8:11:93:56:82:51:eb:0d:76:d2:aa:cf:0f:bf:
d5:b1:cd:6d:27:b3:f5:29:b0:f6:e7:16:0e:62:d5:
bc:b6:ff:20:b4:36:d1:b8:9d:79:8e:ae:24:dc:0e:
55:0c:d1:9a:75:be:e7:ec:e1:22:cb:37:fa:7b:7e:
94:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:73:EE:58:4B:0B:B4:D7:25:42:55:53:FD:66:0E:9E:07:51:F0:86
X509v3 Authority Key Identifier:
keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383864303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:88d0::/44
Signature Algorithm: sha256WithRSAEncryption
05:7d:e2:c9:d9:6c:1b:ac:79:e8:a2:04:56:1b:f2:8c:8f:cf:
60:74:99:54:33:77:8b:a7:f0:21:f1:5d:48:54:48:b5:f7:de:
ab:ac:a3:91:35:b9:51:d6:92:0b:5f:1d:35:4b:41:e1:25:0d:
70:f6:f2:47:06:73:bb:54:8c:d4:60:35:7f:e5:62:21:13:ce:
31:3c:8e:bb:95:c5:15:bd:d0:f0:df:ee:8d:1f:bd:23:c3:59:
d7:43:e6:d6:82:8d:25:d2:70:64:0c:70:0c:1c:22:0e:b9:13:
ca:54:59:1d:68:d5:8b:a4:9d:c5:18:5c:79:c4:96:21:c4:f9:
6b:cc:e3:df:c4:2f:d8:77:51:6f:b1:46:6f:cf:5e:cd:35:46:
6a:3f:68:a3:64:62:ec:ea:5c:65:5e:df:b5:b7:a4:77:91:29:
53:9e:e5:d6:f9:52:fc:eb:54:30:7b:b1:2a:40:da:9d:e2:4e:
ee:fd:5c:97:31:fd:a6:45:d3:cf:4a:51:1e:62:04:27:c6:cf:
56:48:12:21:d0:ba:12:a8:be:23:fe:fa:87:86:46:7f:3a:e7:
0f:20:06:b3:57:2c:83:3a:3d:a5:7a:e8:bf:b8:12:5e:ba:67:
97:35:46:25:5e:4f:bc:3f:96:0a:89:b4:98:13:5e:f2:cb:e2:
79:b2:b8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:00:35 2026 by rpki-client