
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383930303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a383930303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: Hjtt4p/f415OcxBOLaGORf9mH7Zp6vVydTisQqnogXg=
Subject key identifier: FA:19:2A:CC:05:63:0F:A6:6A:52:9B:E1:5E:39:B1:11:BD:84:1F:89
Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial: 2BFEF5662B54EEA1581C19C140A4D6E9207C243B
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383930303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Sun 03 May 2026 03:04:34 +0000
ROA not before: Sun 03 May 2026 02:59:34 +0000
ROA not after: Sun 02 May 2027 03:04:34 +0000
asID: 133798
IP address blocks: 2402:5680:8900::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:fe:f5:66:2b:54:ee:a1:58:1c:19:c1:40:a4:d6:e9:20:7c:24:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Validity
Not Before: May 3 02:59:34 2026 GMT
Not After : May 2 03:04:34 2027 GMT
Subject: CN=FA192ACC05630FA66A529BE15E39B111BD841F89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:89:ec:cb:17:15:6a:26:04:8f:99:9a:fd:ec:
7b:b4:a4:f1:71:95:c9:53:24:e2:86:fa:39:3b:17:
6a:7f:43:22:fc:d5:88:d8:b6:4f:09:9a:8e:d0:6a:
85:be:f1:aa:5f:ef:24:30:7a:3a:09:c8:36:30:09:
77:a0:62:b1:e8:71:95:e7:23:1e:9a:c1:ac:79:91:
14:83:7e:20:0c:ed:a1:ef:9e:fa:a6:aa:7d:f3:19:
a0:73:86:4a:b0:30:a2:53:d6:d3:5e:e3:65:26:fc:
f2:2d:7f:13:82:09:e0:8c:04:bb:21:ba:ac:a1:53:
ee:6d:48:79:50:3a:7c:0b:75:de:c6:fc:97:8b:71:
a0:47:c5:44:60:18:7b:8a:eb:f0:ba:3f:33:f8:70:
32:b2:0f:39:76:9f:4e:7b:b9:e8:e0:47:66:1f:24:
b6:c3:52:29:f4:61:4b:6b:aa:4e:83:e4:2e:f2:ff:
70:3d:d5:45:6e:99:94:e8:14:96:9e:4c:b6:4d:55:
db:5b:f4:a7:c9:0c:f2:4d:a3:56:ab:c0:63:f9:1b:
96:55:dc:e3:68:27:3d:69:36:99:d5:95:c9:9a:89:
61:85:f5:e1:34:df:7a:c2:1b:0a:ea:06:36:76:24:
ee:ec:81:86:72:dd:d4:40:59:9a:4c:b8:8f:d4:de:
c1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:19:2A:CC:05:63:0F:A6:6A:52:9B:E1:5E:39:B1:11:BD:84:1F:89
X509v3 Authority Key Identifier:
keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383930303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:8900::/44
Signature Algorithm: sha256WithRSAEncryption
a8:fb:d4:ae:1a:1f:ad:83:f1:3e:2f:0d:b1:ea:96:0a:89:fd:
49:cf:fc:8f:33:0d:8d:1f:f4:25:f5:2f:8b:54:ae:54:f7:39:
74:d4:13:63:86:d7:49:66:e1:64:0d:ae:29:48:5b:06:c3:1b:
2b:59:fb:86:c9:86:52:85:f9:c6:9e:cb:9b:15:87:54:e4:26:
87:69:bb:e5:87:bd:8c:57:7f:a1:ef:de:07:05:73:2f:5c:37:
0a:b3:86:82:e5:ec:75:f9:59:84:03:06:8d:ec:2e:7f:fa:9b:
e4:f8:f3:2b:dd:e2:f3:83:00:03:49:c8:bb:36:76:65:51:db:
5d:81:aa:04:2a:09:52:d0:52:b5:56:eb:8b:4f:c4:16:fd:c7:
c4:bf:c6:c1:29:46:da:92:a7:f3:a9:07:be:b4:4f:cb:82:d2:
72:00:b8:78:b5:cb:56:32:30:9a:c7:3f:dc:87:83:24:16:55:
9a:e8:c6:70:0c:98:be:ef:41:11:ba:43:b6:86:28:e4:58:ca:
53:da:4d:94:08:e3:9c:04:6d:40:70:24:e3:b6:5a:72:e2:82:
76:b3:b1:c8:ad:00:d7:e9:d9:6e:53:0f:0a:fb:c6:c1:d8:24:
bd:03:8b:f5:f2:64:6f:a5:e8:20:fb:d6:03:1a:bf:45:5a:e6:
0b:28:d5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:51:12 2026 by rpki-client