
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393331303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a393331303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: UUfYj5RGcnNV/i2V/SkoLY8vTl4lcVAlMFzWQ+4gNik=
Subject key identifier: 3C:6A:E1:87:C3:29:03:38:70:C9:92:2B:A2:AF:F0:36:72:F7:46:96
Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial: 0E42E9A85C13AB3DB87196E9EB62CD3D7170BC1B
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393331303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Sun 03 May 2026 03:04:27 +0000
ROA not before: Sun 03 May 2026 02:59:27 +0000
ROA not after: Sun 02 May 2027 03:04:27 +0000
asID: 133798
IP address blocks: 2402:5680:9310::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:42:e9:a8:5c:13:ab:3d:b8:71:96:e9:eb:62:cd:3d:71:70:bc:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Validity
Not Before: May 3 02:59:27 2026 GMT
Not After : May 2 03:04:27 2027 GMT
Subject: CN=3C6AE187C329033870C9922BA2AFF03672F74696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9a:a6:5c:97:e9:18:e4:e9:10:ee:01:8d:6d:
95:79:74:f1:91:5a:83:a5:30:92:4b:ab:af:5f:c9:
6b:5e:07:c4:db:58:e2:34:2a:83:14:01:c2:6c:ef:
59:c7:e6:5a:48:77:48:c9:09:2e:b6:d5:56:e3:94:
fa:f0:d5:49:32:93:22:00:d9:4e:ff:2b:d7:00:85:
dc:47:59:17:e6:f8:1f:52:10:e6:f8:3c:ce:2f:85:
b6:88:0a:a6:4b:2d:08:f2:af:42:73:00:f5:28:4b:
06:af:42:b7:1a:16:3f:f1:6c:9c:52:91:f6:ec:33:
9a:f5:49:80:f6:f2:61:5d:a3:b0:10:a5:4f:15:8a:
e0:a2:83:23:70:ec:22:77:b4:13:05:8f:b7:f8:f6:
2b:75:06:c6:2c:d4:b9:7f:79:2a:59:9a:0e:40:d0:
06:83:ef:30:38:92:b1:b9:23:45:53:4f:45:e7:fc:
49:f4:e1:23:8d:4a:89:2e:19:bf:9d:ba:f9:5a:7d:
83:57:7e:f8:aa:11:09:2c:e9:00:15:a1:5c:2e:35:
bc:89:91:55:7a:f0:dd:b5:24:8c:3f:ce:86:99:fc:
72:16:18:b9:81:14:e8:4e:d8:6a:8e:54:b9:ca:88:
a3:bc:e2:fa:19:2c:2a:a8:0f:81:82:9a:ad:71:04:
ef:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6A:E1:87:C3:29:03:38:70:C9:92:2B:A2:AF:F0:36:72:F7:46:96
X509v3 Authority Key Identifier:
keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393331303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:9310::/44
Signature Algorithm: sha256WithRSAEncryption
49:9e:d7:1c:f7:1d:32:e4:f1:4f:a2:12:5e:5e:cd:ea:bb:19:
96:53:a7:1b:f0:8c:2b:c8:d0:0c:d5:26:3d:0c:fe:7c:64:6a:
db:f8:67:cb:e3:aa:8a:a6:12:37:39:ba:cf:7b:23:f5:c7:2f:
d0:b0:f7:43:78:44:44:c9:71:da:a3:76:35:d6:86:79:f8:32:
be:3b:5f:7c:a7:d5:64:36:c9:91:39:18:56:dd:bc:78:a5:5f:
f2:21:b3:96:d1:0a:3e:8e:0f:cc:8b:92:6a:2b:da:9b:97:14:
65:7c:fe:ea:2c:65:09:0d:f1:0a:18:c9:4f:7d:f7:6e:03:86:
f9:58:54:a7:a6:28:12:67:6b:2c:b1:7c:78:f8:fb:26:2b:c0:
da:fe:e9:10:89:03:0b:b6:03:79:86:90:e7:d9:c0:67:5e:ed:
9e:38:3c:e6:d2:29:2c:3f:f9:f6:b9:2f:92:ac:68:6c:30:7e:
25:9e:82:47:06:c5:08:d5:e8:30:b6:cf:af:e4:1c:6b:9e:12:
7b:77:42:89:f7:b5:52:b1:e9:d7:15:84:32:81:9b:9b:11:ff:
f1:99:66:01:f4:53:ec:a7:70:6a:88:43:ae:48:f9:13:eb:0b:
c9:2d:9f:de:58:6a:2c:98:32:6e:ad:21:f0:1a:7d:c4:f1:7f:
84:a2:ec:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:02:41 2026 by rpki-client