
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393164303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a393164303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: LnrrWeXNNinajOQfNqIh4Vq0f7d7E7VCJLE517uU2+k=
Subject key identifier: C6:8C:FC:69:75:59:CC:A1:E4:CD:A5:94:78:D4:A3:DE:F5:63:44:95
Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial: 6195755B3D90CE405EF7CA5B950740B669BAEDBE
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393164303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Sun 03 May 2026 03:04:11 +0000
ROA not before: Sun 03 May 2026 02:59:11 +0000
ROA not after: Sun 02 May 2027 03:04:11 +0000
asID: 133798
IP address blocks: 2402:5680:91d0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:95:75:5b:3d:90:ce:40:5e:f7:ca:5b:95:07:40:b6:69:ba:ed:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Validity
Not Before: May 3 02:59:11 2026 GMT
Not After : May 2 03:04:11 2027 GMT
Subject: CN=C68CFC697559CCA1E4CDA59478D4A3DEF5634495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:23:eb:d3:41:53:9a:36:28:99:13:4d:4a:3c:
92:94:f7:78:e5:5d:91:21:54:27:c1:a9:4f:4c:84:
6d:eb:dd:d7:2f:1c:4f:7f:8f:9d:fa:77:89:a8:f3:
97:55:46:ad:4d:fd:f7:44:16:40:3f:7a:7f:a4:c8:
e7:75:52:15:ab:55:03:fb:6f:06:ca:70:59:88:ec:
4d:2e:e4:dd:9c:e0:0b:7e:f2:71:40:e0:11:7b:d8:
02:e4:7a:6f:fe:8f:f2:9b:a2:68:44:fd:fb:3c:c6:
38:d2:b6:71:0b:b1:c1:aa:79:72:f4:46:55:c3:93:
4f:06:b9:30:f6:a7:b5:69:1f:f8:4c:cd:bf:c8:af:
5c:1d:78:7f:0f:08:b2:f7:00:a2:ee:31:7c:ac:c4:
ca:b0:93:e5:57:7d:95:e0:d7:b1:73:55:7d:08:6e:
c5:da:69:a4:82:3b:71:e0:a3:42:a3:30:c9:a2:da:
0f:65:c4:e8:9d:f3:2f:82:e2:60:ba:8f:b3:d3:2c:
8d:fa:1e:26:ae:d0:20:6a:a9:1b:88:d0:c7:31:72:
00:ee:98:32:1e:77:b8:0a:dd:d8:78:86:95:ed:5f:
10:c6:8d:b4:a5:e4:0c:de:70:e1:1f:18:29:f2:5a:
33:63:b7:d2:53:4d:67:82:b6:cf:51:0f:9b:c2:c6:
06:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8C:FC:69:75:59:CC:A1:E4:CD:A5:94:78:D4:A3:DE:F5:63:44:95
X509v3 Authority Key Identifier:
keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393164303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:91d0::/44
Signature Algorithm: sha256WithRSAEncryption
a2:6a:8d:22:92:a3:d3:f5:de:19:15:72:2b:95:ea:63:aa:6a:
6e:45:bf:07:a9:68:68:ae:fc:07:c2:98:8c:28:a2:65:a6:91:
b7:43:4f:30:d6:9b:66:cf:3e:62:2d:0f:40:1b:ad:32:5d:95:
b2:8a:87:56:ba:27:94:56:ef:60:8a:c3:77:fa:9a:67:ed:c0:
7d:f9:69:74:74:3e:4b:f1:5f:9b:57:6e:1d:6d:b8:33:fb:f5:
5a:1d:9e:95:97:e6:2e:7d:d1:25:8c:31:a7:31:ca:ab:aa:86:
61:42:6d:9a:d6:f0:1c:fc:71:b4:cd:54:b0:c2:7d:e8:db:ac:
fe:6e:b6:a0:ea:c3:2a:45:a8:25:2e:37:c3:35:13:a1:14:46:
31:16:40:99:46:4b:e9:0c:6c:50:33:c7:a0:ed:3d:67:11:b0:
3d:3f:0f:0a:ca:b3:97:4c:6b:04:e8:5d:e9:ed:43:c7:0b:1b:
16:12:6b:59:4d:50:a5:21:c1:61:0f:c1:14:f2:c5:48:78:7f:
3f:8d:52:71:20:ae:99:02:4b:c8:60:fe:d6:9f:3c:fb:72:52:
d2:c7:3d:db:e8:7b:05:34:43:3d:50:1a:bf:41:f6:24:22:b5:
22:56:82:2b:a2:d7:f3:9d:9f:af:fc:de:85:25:30:a9:6c:c0:
29:f3:cb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:46:24 2026 by rpki-client