
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386633303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a386633303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: cz7lOqTuDLLVUmeJqRs5FrpJ2RFHt8WEPXQO9OCf7wY=
Subject key identifier: 39:24:1A:A5:DB:63:0A:2C:FF:13:63:1F:16:0D:E5:23:A2:C2:A3:FC
Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial: 5EF55E54119F33C4F7D449224D9EE5E0665A1631
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386633303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Sun 03 May 2026 03:04:29 +0000
ROA not before: Sun 03 May 2026 02:59:29 +0000
ROA not after: Sun 02 May 2027 03:04:29 +0000
asID: 133798
IP address blocks: 2402:5680:8f30::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:f5:5e:54:11:9f:33:c4:f7:d4:49:22:4d:9e:e5:e0:66:5a:16:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Validity
Not Before: May 3 02:59:29 2026 GMT
Not After : May 2 03:04:29 2027 GMT
Subject: CN=39241AA5DB630A2CFF13631F160DE523A2C2A3FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:93:e8:a1:67:86:60:86:b2:0d:b5:3c:e6:
5c:c0:ed:1b:46:90:71:db:5d:86:f7:da:25:20:24:
9a:61:9a:90:8c:f0:97:17:36:56:6d:1a:e2:29:b5:
a8:28:b8:85:9e:a3:ad:f6:89:27:5d:0f:7a:8a:ae:
d1:19:28:80:dd:db:0c:d0:a4:00:01:ed:17:7c:fd:
f4:02:c3:b6:e7:19:fb:c7:50:94:aa:26:55:90:ce:
9a:8e:2f:e0:ed:4e:87:4e:8e:97:30:a5:c0:ca:4e:
22:2b:7b:1f:6e:9c:63:cb:6a:fe:23:2d:5a:e0:a0:
9b:70:79:f4:a0:db:62:91:71:10:b7:e1:1f:91:7b:
4e:a7:9e:52:e3:4d:d8:34:88:e3:22:f3:0d:2b:ad:
c6:44:d6:eb:9e:20:e0:4a:9b:4f:c9:41:9a:f5:34:
f5:2a:9a:2d:91:79:d4:b4:e5:11:f3:37:6c:83:4c:
56:9b:09:b8:1d:bd:aa:d5:ba:00:79:0d:a6:a0:c4:
3b:42:a6:11:ee:60:5c:e4:16:d7:a7:8d:d3:09:b4:
90:33:3a:91:04:8d:2c:c6:7e:1c:e0:7a:23:c3:d0:
78:d0:5e:e9:35:35:7c:ed:5a:c1:75:e9:3b:80:4d:
d5:55:0f:3c:42:f2:67:1d:04:01:35:3c:6e:63:bd:
68:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:24:1A:A5:DB:63:0A:2C:FF:13:63:1F:16:0D:E5:23:A2:C2:A3:FC
X509v3 Authority Key Identifier:
keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386633303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:8f30::/44
Signature Algorithm: sha256WithRSAEncryption
94:fe:c8:7d:dd:46:c5:20:bb:90:d8:09:e1:01:73:ff:1f:c1:
14:4d:d6:07:44:13:1c:58:6e:58:d8:84:fe:87:d2:0b:e5:87:
13:f1:9f:a6:e1:0f:94:13:3f:88:9c:ca:c3:02:d4:f5:0d:0b:
e0:55:22:f1:20:86:fe:4b:cb:46:c1:3e:63:85:73:12:c1:af:
6d:62:90:e9:ca:ef:88:82:ad:46:f9:df:6b:ad:c0:1b:06:00:
e2:8f:37:97:ee:f3:4b:af:e0:4e:08:fe:b2:ab:a4:46:38:cd:
ef:1e:15:33:ed:88:ef:d6:d3:64:a9:30:52:4a:9b:a1:ad:73:
6b:3e:1b:d1:d3:e0:5a:e6:a5:dc:5d:28:81:75:bd:41:d0:2d:
54:9d:55:e4:52:b0:47:91:f3:6b:29:1c:3f:4a:9f:e0:a5:20:
ad:88:42:61:a8:62:8a:80:a4:0f:1b:ba:22:15:5c:72:b3:3f:
ed:f0:3b:eb:23:c2:84:37:bb:95:68:39:e8:76:45:5a:d1:7b:
9d:e1:69:10:bb:47:62:2f:a5:8c:b1:0b:e8:d7:99:48:fc:6f:
69:0e:bc:a2:8a:17:0d:9b:d7:59:53:21:1d:b3:cb:16:fa:f4:
d3:6e:79:c5:00:75:45:72:e5:03:ef:62:23:38:be:39:70:19:
a0:8e:3d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:30:22 2026 by rpki-client