
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393964303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a393964303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: z/gnpMnRxku8H9hICdAozcIlOK0mwvRdvSLiTHSpFS4=
Subject key identifier: 59:CE:CD:4C:81:65:4B:31:8E:17:50:53:CD:A5:A9:8E:36:2B:43:DD
Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial: 7E358CCD510FDB2A0EA1732714862F94F22CEC63
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393964303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Sun 03 May 2026 03:04:24 +0000
ROA not before: Sun 03 May 2026 02:59:24 +0000
ROA not after: Sun 02 May 2027 03:04:24 +0000
asID: 133798
IP address blocks: 2402:5680:99d0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:35:8c:cd:51:0f:db:2a:0e:a1:73:27:14:86:2f:94:f2:2c:ec:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Validity
Not Before: May 3 02:59:24 2026 GMT
Not After : May 2 03:04:24 2027 GMT
Subject: CN=59CECD4C81654B318E175053CDA5A98E362B43DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2e:e3:49:de:83:77:7f:06:1d:bd:cb:dc:75:
07:86:9b:98:77:3a:f5:21:cf:31:f4:a9:3b:e3:29:
84:af:9b:d7:0a:8b:3f:1b:01:60:90:50:9f:fd:9e:
5d:01:ee:52:a8:d4:0d:7d:8b:b0:93:a9:5d:f4:4f:
8f:7c:44:0d:d3:cb:bf:18:1b:1a:2e:ff:ee:ea:fb:
43:e7:db:53:19:66:a0:f6:09:22:80:ba:1e:3d:aa:
29:03:8a:4a:c1:13:50:8f:3a:55:bf:8a:4b:ed:d1:
d9:32:86:7f:3f:62:0a:98:21:4b:41:b6:78:91:83:
5b:af:92:bb:33:e8:5f:f6:0a:03:04:c3:2b:a3:86:
20:5b:8a:04:41:2b:cc:10:26:f8:8e:50:bb:2a:a7:
0f:8d:7a:26:6d:4d:0e:76:d6:2d:d1:d0:ae:95:07:
a1:a2:6a:ee:ac:d2:3c:5c:f0:d7:da:f8:1d:c2:2d:
ae:98:ab:68:ef:eb:a8:c4:67:56:ec:e7:1f:ea:0d:
13:06:75:dc:08:89:7c:7a:a9:6a:1a:e4:0a:bd:20:
1a:de:0e:49:2b:b7:47:c2:12:45:7f:9c:99:a4:2c:
21:77:9f:88:c2:37:ad:c7:9d:8f:e4:5a:51:62:2f:
a3:a8:c3:c4:a9:1c:8c:98:74:4a:99:53:69:ed:c4:
a4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CE:CD:4C:81:65:4B:31:8E:17:50:53:CD:A5:A9:8E:36:2B:43:DD
X509v3 Authority Key Identifier:
keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393964303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:99d0::/44
Signature Algorithm: sha256WithRSAEncryption
60:82:cb:be:eb:3b:a3:74:14:bf:e7:c2:76:96:2c:4f:a0:49:
fa:b0:b1:df:ec:2e:e0:aa:15:ed:44:fa:36:13:76:36:77:73:
68:cf:19:d4:1a:ff:ed:21:62:f9:5a:f7:47:d6:56:05:52:9a:
73:68:44:92:10:10:7d:32:df:3a:fc:3e:7f:69:bb:73:99:78:
7d:1c:a4:83:3a:00:9f:56:18:97:a4:1c:5f:a6:c4:f2:19:c0:
bc:fa:6f:18:43:13:f7:60:2a:40:01:de:be:7e:06:f5:24:d7:
2e:95:f2:7e:0c:b3:e0:34:c0:9a:5a:b7:f0:97:7f:c0:3c:0f:
70:06:05:05:b3:51:74:31:30:06:da:2a:66:4c:57:82:d3:7e:
03:b1:71:b6:c7:72:3e:2d:ac:f5:97:04:6b:6f:8d:44:c7:a0:
64:4f:60:fa:79:1d:4d:af:39:90:a8:a3:fe:03:5b:db:6d:71:
ce:78:a0:e6:8a:13:41:cd:7f:81:11:28:b5:d3:0c:4e:1c:6c:
eb:07:68:f0:a2:4c:30:b1:8c:2f:09:c3:99:56:22:2b:15:5c:
c6:9f:6b:ec:35:75:49:a5:b7:aa:9d:39:db:c9:2e:af:8a:00:
21:02:d5:f7:72:bc:1f:9e:2a:19:33:a0:65:0f:f2:5c:bc:bd:
01:a8:b9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:43:12 2026 by rpki-client