
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383932303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a383932303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: meQ9Gv9X7XBPTfDk7lcJx06zlEMKfCZbV3VLy10x/Mo=
Subject key identifier: E7:19:14:C7:06:47:3A:68:20:25:AB:D0:5C:7A:D1:2F:53:E5:95:45
Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial: 25E17D1B6C9F944BE03B79041C3061909FE580DA
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383932303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Sun 03 May 2026 03:04:19 +0000
ROA not before: Sun 03 May 2026 02:59:19 +0000
ROA not after: Sun 02 May 2027 03:04:19 +0000
asID: 133798
IP address blocks: 2402:5680:8920::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:e1:7d:1b:6c:9f:94:4b:e0:3b:79:04:1c:30:61:90:9f:e5:80:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Validity
Not Before: May 3 02:59:19 2026 GMT
Not After : May 2 03:04:19 2027 GMT
Subject: CN=E71914C706473A682025ABD05C7AD12F53E59545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a5:0b:7b:d1:66:01:c2:24:82:c9:d4:61:a0:
e8:ca:fb:36:4e:5d:c2:f6:a0:1c:26:b4:e6:e6:9a:
59:0b:7e:37:c3:6b:05:a5:49:ba:f2:a7:79:11:c4:
49:5f:af:39:66:e1:c9:a2:c5:b3:6c:ae:20:80:98:
ca:ff:13:c8:33:bc:f9:83:93:a2:73:c9:13:fb:95:
9d:cd:ce:07:37:43:09:82:04:cc:a3:3b:2e:a9:5b:
34:3e:b2:0c:a1:c2:9f:fe:33:60:bb:20:7f:61:92:
e6:9b:8c:d2:fd:fc:42:17:a5:70:98:c4:72:cc:e0:
5a:d2:68:0f:a1:ed:90:55:c9:a6:07:c2:d2:33:c9:
f6:e1:08:0d:0f:dc:0d:e3:72:85:56:4b:89:39:57:
1a:4c:24:64:45:3b:94:e6:05:d9:36:df:a2:1b:ea:
3b:c2:00:fa:55:50:40:0b:bc:90:f1:88:8e:cc:83:
e6:f2:b8:c0:56:6d:9d:dc:9a:09:2b:95:e1:ce:d8:
c0:55:12:ba:f1:89:1f:5a:fc:38:97:f7:af:ac:ed:
a2:0f:67:29:5e:c3:f7:cf:f4:ec:de:5d:06:45:17:
bc:55:b0:a5:fe:ea:c5:f5:56:d4:3f:21:76:b0:b9:
1b:73:19:1d:d1:3e:fe:42:f7:46:87:9d:fe:e2:5b:
b1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:19:14:C7:06:47:3A:68:20:25:AB:D0:5C:7A:D1:2F:53:E5:95:45
X509v3 Authority Key Identifier:
keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383932303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:8920::/44
Signature Algorithm: sha256WithRSAEncryption
07:7a:c7:f1:13:ab:83:6a:ae:18:f0:e7:dc:2a:c8:99:6f:1a:
cb:90:50:4e:1a:23:e5:0c:09:ee:b0:60:04:3a:af:a5:2d:b9:
c8:16:d9:64:92:a5:c5:df:91:86:65:81:45:55:d3:47:a0:ac:
c2:8c:e3:2c:d1:17:bc:c5:20:70:61:98:b8:e4:09:de:4a:06:
70:0c:09:70:b7:86:32:e7:ee:48:5c:08:29:c5:12:5f:2f:b8:
82:d6:bd:da:35:35:84:6d:96:16:6b:5a:78:24:91:ce:a8:8b:
51:ba:ae:47:b0:a2:d0:c7:be:6e:e6:39:d0:6d:f0:18:f1:c6:
c9:08:2e:b3:a6:9a:5f:a0:df:33:6e:97:44:42:f5:f2:17:92:
79:dd:f4:1b:b7:db:9c:9b:ad:57:31:93:87:06:9e:6a:24:ea:
8f:05:dc:b1:3c:fc:8e:d7:7b:42:4f:5f:ad:08:07:bb:f0:9a:
53:2b:8b:f5:39:90:23:43:d6:e7:d3:cb:7e:66:1b:86:40:c9:
02:cd:d1:c3:ef:3f:a8:f2:a2:92:30:0f:c2:91:31:38:de:10:
c9:64:47:d2:25:cb:24:25:15:86:5f:e8:41:18:bd:25:f3:e5:
3a:a4:6c:4a:1a:32:6f:f4:45:8c:a9:e4:93:10:8e:b8:fc:11:
be:6d:fc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:13:53 2026 by rpki-client