
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383939303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a383939303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: 1+4tiwLeJP25GAhVqRKYqD/JyldVua7jb2GhHkIwwdw=
Subject key identifier: A6:3C:9F:83:3A:9E:F7:E4:66:16:C7:DF:7A:7C:38:C8:D5:45:F9:09
Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial: 0515EDA1086CA09C7CB76EB2654A321332CB5AC0
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383939303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Sun 03 May 2026 03:04:15 +0000
ROA not before: Sun 03 May 2026 02:59:15 +0000
ROA not after: Sun 02 May 2027 03:04:15 +0000
asID: 133798
IP address blocks: 2402:5680:8990::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:15:ed:a1:08:6c:a0:9c:7c:b7:6e:b2:65:4a:32:13:32:cb:5a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Validity
Not Before: May 3 02:59:15 2026 GMT
Not After : May 2 03:04:15 2027 GMT
Subject: CN=A63C9F833A9EF7E46616C7DF7A7C38C8D545F909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c4:17:bd:d1:dd:e7:52:3d:8c:a0:08:fb:8d:
27:31:64:ae:2b:39:75:f8:f0:19:5f:05:1c:70:14:
f0:b5:0e:d7:d7:e3:9b:63:97:42:d0:5a:8e:90:58:
cf:5d:d3:bf:6d:3d:7b:63:54:9c:2b:b7:93:67:79:
71:23:e1:14:8f:85:06:9c:e2:10:f6:c7:3a:b3:9d:
6e:82:33:0d:3e:01:5f:94:5b:28:0f:23:12:bc:ee:
ae:0f:fb:6e:e7:8b:de:d6:7f:3d:09:2a:a9:8f:6a:
62:e7:55:e5:98:30:29:cb:12:62:8e:c8:b8:24:ee:
b5:a9:b3:1f:94:71:30:54:5e:fc:2f:9d:aa:52:ff:
b4:04:77:95:3b:2d:d6:9b:30:3e:43:dd:38:e4:3d:
b2:47:71:89:c0:33:d2:d1:a3:7d:5a:ee:8d:f3:75:
02:d8:6b:fc:23:2d:ac:77:07:aa:ee:74:b8:45:46:
18:ef:68:06:a4:1e:2a:1f:08:d2:bb:1b:74:96:b2:
cc:03:f1:a9:c0:f0:45:24:55:84:cf:22:16:1c:5d:
01:2b:38:73:07:f8:97:f9:0a:92:8b:bd:e9:30:c0:
a9:03:6b:48:53:36:fb:59:8f:ad:ac:3b:9d:b9:61:
c2:16:15:61:20:9d:28:72:3f:ed:0c:c8:11:58:8a:
04:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3C:9F:83:3A:9E:F7:E4:66:16:C7:DF:7A:7C:38:C8:D5:45:F9:09
X509v3 Authority Key Identifier:
keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383939303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:8990::/44
Signature Algorithm: sha256WithRSAEncryption
0e:56:c2:02:9a:82:60:f2:5b:5b:95:d0:c8:aa:d0:7a:3b:83:
ff:83:b2:93:ed:f6:ac:c0:aa:b2:6a:41:af:2e:e1:1b:3a:64:
05:9e:90:e4:f8:5c:dc:2e:5f:d3:67:3c:92:5b:18:c9:3f:56:
ba:9e:28:d2:53:13:9a:6f:0f:92:7e:9c:2a:f5:12:5d:dc:f9:
60:17:ad:c4:5b:12:86:c6:d3:0a:6d:38:df:52:fd:68:00:35:
c3:78:b0:70:09:40:7f:20:dd:08:51:9d:de:5c:f1:bb:c7:f1:
10:5d:ff:0e:ac:25:49:b0:ad:7b:98:7e:a8:3b:d3:bd:9d:5e:
dc:96:74:65:9d:83:b8:4e:4b:5e:a8:90:43:67:a7:be:ae:06:
50:32:d3:d5:a0:12:89:28:12:62:f1:da:81:61:86:a2:31:03:
23:ec:a8:c0:35:75:1d:3b:77:0c:fe:8c:ca:e0:57:75:1d:04:
6f:6f:7f:64:ce:4d:3f:81:1f:6b:65:dc:5a:c8:e4:2b:f1:f7:
71:ae:45:59:e5:96:e1:8c:55:0e:2b:5f:1f:75:f7:56:5d:2c:
39:21:8c:8a:93:3b:16:b9:f1:37:ff:69:1e:40:b3:ae:9a:d6:
9b:c7:ba:34:a3:6e:ed:0a:cc:18:b6:e6:af:ec:3f:66:2c:b5:
43:ac:b7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:46:51 2026 by rpki-client