
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383933303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a383933303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: oVYBvHEEBmpISTA6eHkb3c3WRuf8xDPqrzB4QSXjgwc=
Subject key identifier: DC:16:F6:0E:55:B4:D4:A1:55:53:20:3F:B0:2D:14:01:35:05:04:75
Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial: 5A01C00D9F5879854D16A3384E54E75EAB1A6464
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383933303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Sun 03 May 2026 03:04:24 +0000
ROA not before: Sun 03 May 2026 02:59:24 +0000
ROA not after: Sun 02 May 2027 03:04:24 +0000
asID: 133798
IP address blocks: 2402:5680:8930::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:01:c0:0d:9f:58:79:85:4d:16:a3:38:4e:54:e7:5e:ab:1a:64:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Validity
Not Before: May 3 02:59:24 2026 GMT
Not After : May 2 03:04:24 2027 GMT
Subject: CN=DC16F60E55B4D4A15553203FB02D140135050475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:36:f9:2d:6e:d5:92:ec:64:ba:83:d9:d5:51:
68:48:3d:f5:f9:57:3e:19:c3:38:60:21:9e:26:7b:
21:3a:94:87:8f:bc:a7:7d:1e:3d:d4:0d:84:7b:3a:
c1:94:60:a8:b2:13:f2:36:ae:8f:96:1c:fd:20:4e:
99:37:7c:c2:f0:45:78:cc:b9:50:3a:93:cf:dc:50:
4b:b0:a8:6d:4f:7c:f1:a9:d4:7b:32:c3:f9:42:53:
7b:69:01:1c:47:a0:f7:17:28:f7:61:97:8d:66:25:
03:66:ed:16:a0:9f:bf:eb:56:7e:46:a9:a6:17:59:
02:c8:c1:16:58:38:fe:31:ec:ee:96:66:fa:a3:e3:
0e:6f:71:6c:b4:13:8e:ac:36:c4:97:6c:ea:65:7a:
ee:d4:f3:41:b2:e9:b3:83:60:4c:d6:0c:86:ac:09:
c7:76:9d:fd:bc:3f:b0:81:7a:5c:64:62:91:91:66:
2e:b7:f4:79:ce:bf:f0:0a:36:1d:5d:ad:47:30:68:
69:e0:f1:f9:60:32:27:11:92:9b:c9:9a:cf:55:8f:
fd:bc:30:1c:0b:3b:69:6a:f4:c9:41:1b:09:00:84:
93:f9:cc:5f:b1:52:ec:80:56:8d:23:1f:1a:72:a8:
49:24:2f:29:c5:18:98:59:96:ff:02:e5:1d:b7:e0:
ad:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:16:F6:0E:55:B4:D4:A1:55:53:20:3F:B0:2D:14:01:35:05:04:75
X509v3 Authority Key Identifier:
keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383933303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:8930::/44
Signature Algorithm: sha256WithRSAEncryption
18:e6:4b:05:39:23:dc:bd:d2:a4:6a:bd:25:24:76:fd:62:63:
af:78:32:93:14:f9:ff:e7:30:f0:73:6c:96:1e:39:08:3e:21:
a9:07:0c:0a:30:8e:bf:79:98:33:1e:70:50:f2:17:56:34:b3:
52:35:f4:5d:cc:73:41:3e:d6:19:bc:eb:f3:ca:a3:57:4f:75:
6d:b0:99:e4:b5:5b:48:67:33:12:70:e3:1e:1c:35:fd:54:0a:
7b:1d:ee:87:b4:6d:57:fe:30:81:b2:b6:fd:58:45:17:d8:99:
da:c4:05:73:c8:36:ac:56:9a:fc:89:e9:3f:c0:9a:3d:a9:98:
a1:36:ac:ff:b2:24:1c:67:32:d5:62:2d:05:74:ba:12:6d:03:
ee:21:34:02:c5:b9:ee:d2:c9:6d:11:dd:d4:cb:9b:8c:28:78:
83:89:a3:c1:69:cc:b8:88:d6:7d:6f:1e:ca:40:f5:fe:2f:0b:
2b:7a:ec:d0:77:6f:1e:35:b7:9c:a3:31:1f:3c:83:d3:07:cf:
af:80:05:3d:b3:69:cf:72:3e:35:ef:c9:78:bd:ac:ae:55:f0:
99:49:af:57:0c:0a:bd:4e:8b:83:de:8e:8c:a2:c9:68:d3:9d:
65:6c:8f:2a:37:f5:d4:3b:82:9b:e2:74:b0:f2:27:d6:8b:a7:
26:0d:77:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:51:46 2026 by rpki-client