
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383938303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a383938303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: Msif3q7nr92JIlB+002P5oMZDJNfARHTAQ7qq017tMA=
Subject key identifier: 9B:8B:10:AC:83:1B:C9:46:82:99:23:99:F0:82:27:B7:B8:D2:C5:EE
Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial: 2534915726F4E1FCEA72010514EA3E32846ABA00
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383938303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Sun 03 May 2026 03:04:25 +0000
ROA not before: Sun 03 May 2026 02:59:25 +0000
ROA not after: Sun 02 May 2027 03:04:25 +0000
asID: 133798
IP address blocks: 2402:5680:8980::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:34:91:57:26:f4:e1:fc:ea:72:01:05:14:ea:3e:32:84:6a:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Validity
Not Before: May 3 02:59:25 2026 GMT
Not After : May 2 03:04:25 2027 GMT
Subject: CN=9B8B10AC831BC94682992399F08227B7B8D2C5EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ce:59:e2:64:45:b9:2e:e4:5d:e6:1f:eb:cc:
e3:c8:25:88:54:1e:8f:04:3d:44:f7:fa:67:ab:58:
fc:0e:14:96:ab:e1:e2:39:43:ed:71:86:4f:57:b9:
32:15:80:ea:db:35:a2:1d:aa:bd:5b:0d:67:0e:42:
42:d3:18:68:0e:ec:ec:8f:3e:c2:43:61:84:75:5b:
31:20:8b:90:97:35:1a:a7:e4:38:0e:ad:c5:fd:f6:
a7:4f:03:52:73:19:76:46:a6:94:e6:49:39:e8:2e:
ff:d3:96:93:a4:14:76:fb:23:d2:aa:67:35:5e:50:
75:db:b8:61:b8:62:6d:98:d3:18:11:f2:86:82:02:
77:b7:5a:26:c6:2a:23:83:59:12:65:1a:51:ad:90:
0b:72:40:dd:9e:de:7f:5e:97:d2:61:2f:60:c2:3b:
dd:8d:d0:2c:30:79:ef:7c:a1:54:6c:f0:be:a0:13:
8e:f7:bc:32:ca:0f:c3:52:70:23:a5:85:34:7f:7a:
a8:99:87:9d:8d:e5:2a:fc:87:6b:a7:09:94:91:a0:
31:c5:b7:7b:92:50:36:ac:e6:a0:14:09:57:d6:cb:
71:ba:c9:3b:e3:10:b2:53:94:fb:a6:cd:e1:7a:88:
80:78:7e:0f:d1:20:fd:1f:b9:64:de:02:c1:09:78:
57:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8B:10:AC:83:1B:C9:46:82:99:23:99:F0:82:27:B7:B8:D2:C5:EE
X509v3 Authority Key Identifier:
keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383938303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:8980::/44
Signature Algorithm: sha256WithRSAEncryption
a7:49:d0:d2:ff:92:4b:6e:79:52:ba:a6:7d:dd:75:a7:65:cb:
ea:da:0a:7e:be:ac:04:20:62:94:54:d2:02:e0:60:bc:31:28:
1f:d8:8d:ad:af:40:22:9d:5c:a8:02:65:fa:72:2d:e7:f1:6c:
c9:2b:da:94:31:29:e8:75:ee:40:41:55:b3:4b:4d:d6:fb:51:
1f:de:11:7c:23:cb:0d:f2:c9:62:11:31:a8:ba:58:28:f6:2e:
e5:27:e7:42:44:66:86:a8:b0:2a:5a:ad:85:de:d6:69:74:49:
26:b8:dd:cb:c9:ba:3f:f5:03:ab:14:97:ab:32:1f:2a:1e:64:
f4:d9:2e:29:8c:70:f7:d8:6a:5f:3d:17:8e:6a:8f:66:1c:b6:
43:d9:d5:f2:f6:6d:3f:68:31:5b:4f:f0:40:29:f8:cb:c7:d9:
f7:1d:d6:4e:b8:d6:1e:49:21:6f:af:68:41:7e:45:b5:5b:ad:
07:1d:b5:12:05:0b:73:b0:42:92:c8:7e:ed:3a:09:3d:59:26:
6c:6a:4b:c1:33:6f:85:a9:e1:a1:08:91:37:ef:07:45:22:b1:
3d:29:74:67:ff:a5:89:67:7b:19:c9:95:90:50:b8:d0:13:c0:
31:9f:67:a7:c5:62:40:c8:e6:99:0b:00:d6:c2:b2:a2:6f:08:
83:7f:1e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:28:33 2026 by rpki-client