
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393139303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a393139303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: 6aYKhpHLHAYOQRgE1GiTljhwZoft5Wr2GnEsevkIevQ=
Subject key identifier: EC:5B:82:19:B9:BD:D8:3D:6F:9D:DF:33:35:FB:EA:F7:1A:3B:30:CB
Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial: 4AC04D016449BFF66EAB3F2BD7EBCABABC47CD1E
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393139303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Sun 03 May 2026 03:04:13 +0000
ROA not before: Sun 03 May 2026 02:59:13 +0000
ROA not after: Sun 02 May 2027 03:04:13 +0000
asID: 133798
IP address blocks: 2402:5680:9190::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:c0:4d:01:64:49:bf:f6:6e:ab:3f:2b:d7:eb:ca:ba:bc:47:cd:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Validity
Not Before: May 3 02:59:13 2026 GMT
Not After : May 2 03:04:13 2027 GMT
Subject: CN=EC5B8219B9BDD83D6F9DDF3335FBEAF71A3B30CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d3:82:26:51:05:c2:a8:69:5c:f4:a5:cf:33:
86:96:50:28:b1:04:8a:a4:07:80:38:1c:ea:8f:23:
f8:8d:e5:27:8c:52:9a:a3:75:ac:74:0c:54:8d:0b:
e3:77:d8:74:1a:9a:e4:53:2d:45:61:74:ef:70:12:
bd:8f:c1:13:ed:e9:8f:d6:00:4b:30:84:d2:94:f3:
b5:7a:3b:87:ea:39:9c:6d:bf:a1:0f:8f:e7:aa:dc:
8e:fd:90:36:c0:42:ca:60:dd:9a:33:52:39:be:c0:
c8:f8:6e:57:cb:e9:99:d5:04:cd:a6:77:08:82:cb:
39:a7:5a:74:32:1c:5b:e6:1d:45:38:0e:16:51:1f:
39:c3:d8:ad:30:c2:59:92:15:35:83:16:67:6d:d0:
7a:fa:63:d0:11:dc:91:01:35:bd:7e:ef:5d:b3:86:
3c:cb:ea:68:5c:af:6c:14:2f:01:21:d1:6d:42:4e:
c9:3e:77:c9:32:00:f9:ae:55:b1:65:af:69:1e:fb:
3a:72:e2:92:8c:a7:09:c9:3e:d8:fd:6c:60:29:92:
81:fd:ff:a7:09:5e:86:3d:73:64:eb:4e:e2:0c:98:
c6:47:dc:d4:ca:40:01:b6:61:17:e9:5f:89:17:40:
7e:6e:6b:a5:3c:fb:46:90:fb:04:f7:f0:dc:b3:2b:
f1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5B:82:19:B9:BD:D8:3D:6F:9D:DF:33:35:FB:EA:F7:1A:3B:30:CB
X509v3 Authority Key Identifier:
keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393139303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:9190::/44
Signature Algorithm: sha256WithRSAEncryption
4a:1d:ab:db:8d:c7:9e:dc:4f:b7:3e:93:96:dd:83:2c:de:87:
6f:10:92:77:ae:1e:5d:48:b1:5f:86:c5:9e:e1:11:83:3e:bb:
0c:92:f8:8a:e1:a4:3a:37:bc:e8:2b:ca:f2:80:d6:34:ce:a4:
ae:27:3d:c6:e8:2a:6d:8f:5b:7c:e8:98:29:19:3e:ac:d3:47:
06:27:d8:b1:35:e2:41:6d:8f:89:f2:4c:14:4e:36:99:07:83:
a2:bc:93:a4:91:36:89:f0:da:53:a7:6e:d8:87:fc:e4:f3:9d:
6c:8d:a0:e6:01:e8:90:ca:ca:e8:35:4b:bd:63:5c:dd:c4:e9:
b1:4b:de:5d:f6:ce:a1:c0:b3:d6:07:07:87:97:56:6d:6f:ce:
17:38:0e:0d:25:ed:40:d9:0d:b6:97:6d:ac:75:c3:27:bc:e0:
1a:1e:c0:2d:e9:3b:8b:f1:19:91:ed:ac:cc:ba:30:78:1b:65:
d8:b4:26:8f:74:bd:60:8f:8c:bc:7a:95:6c:8f:be:40:92:8f:
97:f8:a9:6e:64:9d:af:ef:2f:b0:b8:41:09:e9:9f:09:0a:7d:
6a:87:8a:29:60:1a:2d:8d:a3:8e:4a:cc:22:2a:ae:de:fb:ab:
05:7a:6e:a0:23:c4:dc:a3:78:29:a5:4d:cb:bf:b0:ac:b8:78:
d4:f3:d2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:17:14 2026 by rpki-client