
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396133303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a396133303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: UDomkE+1V2pGIoYMlBqtZMkbsd0QYA20RG5fXlC8NGk=
Subject key identifier: 90:E8:35:D3:22:D7:80:E8:F8:39:6F:57:25:76:6E:6E:F6:24:F6:BD
Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial: 0325F9FEACD7AE4528B8F021D0B70546EB60667C
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396133303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Sun 03 May 2026 03:04:26 +0000
ROA not before: Sun 03 May 2026 02:59:26 +0000
ROA not after: Sun 02 May 2027 03:04:26 +0000
asID: 133798
IP address blocks: 2402:5680:9a30::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:25:f9:fe:ac:d7:ae:45:28:b8:f0:21:d0:b7:05:46:eb:60:66:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Validity
Not Before: May 3 02:59:26 2026 GMT
Not After : May 2 03:04:26 2027 GMT
Subject: CN=90E835D322D780E8F8396F5725766E6EF624F6BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:75:3d:3e:78:d9:4b:e3:d6:3e:0c:66:38:
c1:d0:1c:74:5b:40:ae:77:78:e7:24:69:78:0a:a0:
2d:48:8b:33:ac:00:fb:da:df:d2:e1:70:34:59:c1:
04:d3:a7:1c:92:d9:51:2c:a5:be:f5:93:30:88:29:
02:e6:d5:d0:a8:e7:c3:23:23:12:f2:5a:86:dc:66:
05:3b:af:2c:ab:c2:94:f7:bc:81:c5:52:2f:19:5b:
ec:6a:d3:c7:36:b9:61:c1:ff:3e:bc:97:6b:92:d8:
54:63:73:a2:58:8f:29:56:c9:fc:4e:b5:c7:f5:5c:
ba:86:df:10:a6:9c:40:cc:94:f2:04:ff:d6:74:37:
c1:c7:04:c7:0b:72:84:7d:b7:93:15:be:8e:7f:ad:
ae:12:0d:23:48:44:98:0c:2e:55:92:9d:c2:41:23:
38:49:4c:35:c0:5d:a4:5b:b0:d5:71:1f:e9:ab:e2:
ef:cf:17:cf:38:00:d9:20:58:16:db:de:59:74:18:
4b:34:0f:bc:ba:20:57:57:35:bd:19:c8:ef:55:5e:
be:b8:40:d1:d6:d6:95:48:1f:6f:e4:a3:ec:82:1a:
31:07:d3:a1:2d:ad:fc:55:12:66:03:f7:24:f4:1d:
06:d0:b5:9c:57:c3:56:62:3a:35:35:20:f4:0c:d0:
31:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E8:35:D3:22:D7:80:E8:F8:39:6F:57:25:76:6E:6E:F6:24:F6:BD
X509v3 Authority Key Identifier:
keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396133303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:9a30::/44
Signature Algorithm: sha256WithRSAEncryption
a8:c9:99:4c:03:2c:30:04:e6:57:0b:fe:bb:53:c9:51:ae:c9:
54:fe:e3:9f:cc:f5:e1:07:a3:b3:8c:2a:d9:28:24:39:ae:18:
ef:93:fb:d3:9d:95:2e:82:28:16:2f:61:d4:fd:c0:65:3c:48:
9b:10:01:f5:37:40:0e:e9:a6:47:14:5f:6b:3a:f3:e3:9d:b3:
93:f8:a8:6a:fd:84:2e:93:4d:2a:5b:52:1b:51:cd:ff:3e:69:
b8:c6:50:0b:6a:a3:75:b6:83:f4:c4:8a:98:43:79:87:91:3b:
1b:10:fc:85:35:ee:13:db:bc:7b:0e:7a:1b:67:2b:f2:1a:dc:
fc:dd:4d:b6:35:c4:91:37:cc:fb:4b:5a:8d:69:08:18:42:f2:
11:94:11:a7:45:75:99:17:11:07:0c:fa:5c:f3:65:f8:ef:14:
cc:dc:30:12:a6:71:15:39:1b:19:b9:89:d8:cb:65:c4:9e:e1:
f1:ec:b0:14:4a:5a:cf:51:8f:25:ed:31:d4:33:27:d2:ef:6d:
a8:61:5b:5b:db:48:3f:df:8c:3f:df:70:32:12:b4:ac:cd:94:
c5:3b:2b:a1:33:7a:eb:df:dc:99:90:2b:ea:ff:2c:30:61:a4:
7b:fc:21:fa:3a:e7:7c:be:06:e5:2f:82:b4:e1:26:d4:15:eb:
55:78:2f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:17:15 2026 by rpki-client