
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383964303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a383964303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: urN2iwBhUlscG0bjMq+U9nhmSzpmi5ODK/PlYaXV1w8=
Subject key identifier: BD:A7:35:AB:C2:8B:E4:D3:20:D0:8B:0F:F5:6C:A9:DE:6F:BE:34:CB
Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial: 240052F5FBA2EFB7210F1DFF47CEB0FB744FDC49
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383964303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Sun 03 May 2026 03:04:19 +0000
ROA not before: Sun 03 May 2026 02:59:19 +0000
ROA not after: Sun 02 May 2027 03:04:19 +0000
asID: 133798
IP address blocks: 2402:5680:89d0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:00:52:f5:fb:a2:ef:b7:21:0f:1d:ff:47:ce:b0:fb:74:4f:dc:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Validity
Not Before: May 3 02:59:19 2026 GMT
Not After : May 2 03:04:19 2027 GMT
Subject: CN=BDA735ABC28BE4D320D08B0FF56CA9DE6FBE34CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d2:d9:3c:c2:1b:e9:20:35:27:cc:5d:d0:fc:
23:71:2b:a3:1e:3d:20:c2:b2:4d:11:8e:98:d4:95:
05:24:68:f0:d4:94:71:9d:41:15:c2:74:c7:5b:8b:
7e:83:81:45:48:cc:5a:ff:e1:ae:2e:9b:74:d9:6f:
85:e9:e1:78:59:ce:ea:91:7f:3e:78:a8:c5:da:25:
29:13:2e:3b:49:7c:c1:5a:38:8f:88:8e:ba:35:a2:
70:27:2f:a8:2e:1f:d2:38:d2:6d:63:5a:88:2c:34:
45:c8:61:ce:fc:b1:97:15:be:4a:54:5c:9d:4e:06:
bc:a1:63:bf:c7:ab:2c:0d:e4:62:ce:12:46:27:f2:
5e:8a:85:a1:fa:cc:80:fc:d3:43:36:c1:c1:13:8c:
ec:9b:22:9e:64:6f:f9:ea:c1:df:97:50:7b:2c:b5:
5d:7b:5c:1d:b4:2e:e1:4a:ef:15:8b:0d:6f:a2:66:
65:03:ec:e2:a4:68:e4:0f:30:92:26:e8:88:76:1d:
53:dc:86:a2:76:c0:34:cf:f2:a4:ab:ac:cc:7b:4f:
d9:50:92:9b:96:a9:e2:39:5f:cc:33:d4:bd:08:48:
f1:0e:a1:65:ec:77:83:5a:22:2e:e5:0b:a3:68:ad:
21:af:b4:96:3e:7f:3f:35:56:df:6d:88:55:6f:42:
b8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A7:35:AB:C2:8B:E4:D3:20:D0:8B:0F:F5:6C:A9:DE:6F:BE:34:CB
X509v3 Authority Key Identifier:
keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383964303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:89d0::/44
Signature Algorithm: sha256WithRSAEncryption
54:11:fb:1e:f9:f6:e3:fd:a2:4e:0a:7c:de:13:3b:0d:24:bd:
44:f8:8b:0f:a0:74:0d:9a:47:d7:7e:37:07:fd:6b:c1:3d:0a:
ab:9e:e0:13:c8:c2:de:91:b4:5f:14:1a:28:dd:35:e2:8e:ce:
74:ab:cb:b9:5f:66:b9:9b:55:0e:5d:6a:1f:51:3e:56:b4:b8:
fa:16:41:f8:9c:86:f9:f6:3b:5b:d3:ef:e6:10:d2:7b:12:76:
f7:b0:76:20:ee:50:38:f9:87:61:ae:55:74:d4:69:df:da:23:
74:24:ef:ce:63:6a:6d:73:af:13:c1:60:30:47:09:1c:d9:57:
24:62:da:a5:6e:9e:2a:7d:e7:a9:72:3d:5c:1a:ae:12:9d:14:
18:ac:a2:d7:16:ef:0f:79:3e:51:1a:85:a2:1c:75:1d:42:0b:
41:a8:5e:8f:4e:70:c1:e9:80:b4:6a:2d:80:a4:a1:ac:18:cc:
9b:cc:bf:24:71:fb:d2:a7:24:85:8a:82:b1:b5:e4:1a:20:9c:
79:ed:5b:3a:0c:ea:48:d0:fb:cc:ef:6e:a2:78:44:87:ac:d5:
68:6e:54:cd:3a:26:68:05:4c:ef:7f:f3:41:6e:82:08:2f:26:
0a:98:c4:2d:6d:7b:b2:59:54:77:f7:56:30:72:6f:09:13:1f:
c5:1d:1f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:47:05 2026 by rpki-client