
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383961303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a383961303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: 6dSgcQzwyJUy3htDohim2mN/eWxRyi6Nt2nX7ZB+ETQ=
Subject key identifier: 93:AA:9A:7A:88:16:C3:8D:AC:95:03:36:F9:80:F5:EC:DA:71:03:7A
Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial: 04F799EC1F2D21A0DA8910BEB47E6B45D0E22C8F
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383961303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Sun 03 May 2026 03:04:35 +0000
ROA not before: Sun 03 May 2026 02:59:35 +0000
ROA not after: Sun 02 May 2027 03:04:35 +0000
asID: 133798
IP address blocks: 2402:5680:89a0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:f7:99:ec:1f:2d:21:a0:da:89:10:be:b4:7e:6b:45:d0:e2:2c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Validity
Not Before: May 3 02:59:35 2026 GMT
Not After : May 2 03:04:35 2027 GMT
Subject: CN=93AA9A7A8816C38DAC950336F980F5ECDA71037A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:14:1e:5b:e9:da:cc:94:62:ca:66:77:27:2e:
19:0b:ce:22:44:88:ba:84:4d:8a:61:3e:99:56:1f:
2b:0b:98:f3:1d:56:d9:b9:64:4e:c1:2b:54:38:9f:
0d:cb:7c:d6:95:d9:08:0a:3d:cc:1a:8c:1d:36:c5:
51:12:c2:81:60:14:d6:57:dc:e8:2d:11:67:3c:34:
b2:b3:88:bb:fc:1c:2c:63:8b:f4:6c:92:28:df:7b:
ca:d1:ab:12:c1:64:1f:a7:37:f9:e2:c7:2f:c6:e7:
1c:b8:cc:e4:61:7a:f8:d6:3a:a4:8e:2d:45:1d:55:
0f:3d:32:e5:a6:e1:3b:6b:91:29:b9:eb:34:11:e5:
81:26:11:d2:4b:b0:5d:8d:f5:04:e2:63:92:6b:aa:
ad:ce:73:ab:5b:d8:02:fe:9a:63:90:fb:14:64:65:
6f:9e:f4:33:36:48:a6:04:b0:34:f0:0b:62:0e:f0:
ee:68:90:b6:69:78:fa:3f:85:be:e2:23:2f:8a:0e:
ea:a6:e2:02:b2:a3:e0:c4:36:33:db:c1:d5:2d:b9:
8c:04:eb:a9:1e:e9:d8:da:4b:48:e7:35:ff:2f:cf:
ee:03:0e:fc:06:af:bd:cd:db:a5:87:55:ea:d7:ae:
f1:39:a2:a2:a0:72:0a:25:c5:e1:6b:0d:af:ff:b4:
74:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AA:9A:7A:88:16:C3:8D:AC:95:03:36:F9:80:F5:EC:DA:71:03:7A
X509v3 Authority Key Identifier:
keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383961303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:89a0::/44
Signature Algorithm: sha256WithRSAEncryption
70:7b:af:73:ee:c0:0b:d6:bd:b4:05:22:75:33:68:03:c1:d0:
41:46:4b:af:02:44:d6:c6:3d:c3:4f:b9:73:3d:6c:58:d6:26:
c5:b4:6c:f6:ab:2c:b9:f5:cc:26:c6:99:2d:aa:1f:21:d0:e6:
40:11:f4:eb:ee:b3:f7:76:3e:60:ad:73:9f:7a:45:df:4b:22:
1a:e4:ea:4d:06:4d:b3:2a:83:b9:da:88:98:e3:f3:5a:c0:9a:
03:86:18:dc:16:74:74:e1:aa:81:21:26:b6:a4:52:7a:1a:bc:
ac:74:8f:bc:6b:98:e7:5e:dd:85:34:39:b9:18:98:f7:27:40:
0f:6b:f5:93:36:a5:3b:25:c8:5a:95:0f:5e:33:bb:c5:24:9f:
18:2c:de:b2:02:3b:16:df:91:3a:ff:02:53:1e:61:d7:11:f0:
a6:04:0d:6d:e0:60:9c:0a:a7:d0:f7:b9:8a:02:1e:12:94:b3:
4a:7f:60:6e:90:53:97:17:41:49:e6:8f:1a:bf:d0:a5:43:5e:
47:a9:cb:38:37:d3:48:8b:42:57:32:e2:ea:bf:f9:92:46:b1:
71:c3:cc:7f:7c:c5:c3:fc:74:5c:11:bd:ae:75:ec:27:b6:41:
c4:63:21:54:b3:e3:63:04:08:8a:1f:8b:14:30:fa:9f:1a:57:
1b:7c:70:61
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUBPeZ7B8tIaDaiRC+tH5rRdDiLI8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTVGQkVBQ0ZBRUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2
MzIxQTVDMDAeFw0yNjA1MDMwMjU5MzVaFw0yNzA1MDIwMzA0MzVaMDMxMTAvBgNV
BAMTKDkzQUE5QTdBODgxNkMzOERBQzk1MDMzNkY5ODBGNUVDREE3MTAzN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtFB5b6drMlGLKZncnLhkLziJE
iLqETYphPplWHysLmPMdVtm5ZE7BK1Q4nw3LfNaV2QgKPcwajB02xVESwoFgFNZX
3OgtEWc8NLKziLv8HCxji/Rskijfe8rRqxLBZB+nN/nixy/G5xy4zORhevjWOqSO
LUUdVQ89MuWm4TtrkSm56zQR5YEmEdJLsF2N9QTiY5Jrqq3Oc6tb2AL+mmOQ+xRk
ZW+e9DM2SKYEsDTwC2IO8O5okLZpePo/hb7iIy+KDuqm4gKyo+DENjPbwdUtuYwE
66ke6djaS0jnNf8vz+4DDvwGr73N26WHVerXrvE5oqKgcgolxeFrDa//tHQjAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUk6qaeogWw42slQM2+YD17NpxA3owHwYDVR0j
BBgwFoAUFfvqz67T+fMyWXM49ALIcmMhpcAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzMwM2U2YmItNzM0OS00N2FhLWE0Y2QtNTFkOGEwZTIyMmY2LzAvMTVGQkVBQ0ZB
RUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2MzIxQTVDMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNUZCRUFDRkFFRDNGOUYzMzI1OTczMzhGNDAyQzg3MjYzMjFB
NUMwLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h
NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzgzOTYxMzAz
YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk
AlaAiaAwDQYJKoZIhvcNAQELBQADggEBAHB7r3PuwAvWvbQFInUzaAPB0EFGS68C
RNbGPcNPuXM9bFjWJsW0bParLLn1zCbGmS2qHyHQ5kAR9Ovus/d2PmCtc596Rd9L
Ihrk6k0GTbMqg7naiJjj81rAmgOGGNwWdHThqoEhJrakUnoavKx0j7xrmOde3YU0
ObkYmPcnQA9r9ZM2pTslyFqVD14zu8Uknxgs3rICOxbfkTr/AlMeYdcR8KYEDW3g
YJwKp9D3uYoCHhKUs0p/YG6QU5cXQUnmjxq/0KVDXkepyzg300iLQlcy4uq/+ZJG
sXHDzH98xcP8dFwRva517Ce2QcRjIVSz42MECIofixQw+p8aVxt8cGE=
-----END CERTIFICATE-----
Generated at Wed May 13 13:00:59 2026 by rpki-client