
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396230303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a396230303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: 83EO81YygQVBu7fvfZnirT6sCWLMueUnkwaqMnwFLKI=
Subject key identifier: D5:AE:76:F2:62:76:E8:6A:AB:32:5E:51:9E:08:E2:17:59:08:FD:8D
Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial: 2382999834CB0BFFAE17C1732594F73CF6F05107
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396230303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Sun 03 May 2026 03:04:14 +0000
ROA not before: Sun 03 May 2026 02:59:14 +0000
ROA not after: Sun 02 May 2027 03:04:14 +0000
asID: 133798
IP address blocks: 2402:5680:9b00::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:82:99:98:34:cb:0b:ff:ae:17:c1:73:25:94:f7:3c:f6:f0:51:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Validity
Not Before: May 3 02:59:14 2026 GMT
Not After : May 2 03:04:14 2027 GMT
Subject: CN=D5AE76F26276E86AAB325E519E08E2175908FD8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:68:69:c7:8c:dd:da:69:ec:02:b7:05:55:57:
a0:01:5b:fc:92:d4:8c:e6:64:ed:02:45:c7:a8:44:
f8:b3:0e:2d:a0:75:b7:e2:b5:41:01:b1:ab:3a:47:
96:c6:35:e9:f3:15:08:e6:91:70:47:30:32:67:9a:
c6:6c:c2:82:fa:8f:fd:dd:18:a7:e1:44:f2:e3:cf:
58:a0:96:37:72:fc:53:43:1a:6b:52:7d:85:52:79:
0e:81:23:a5:40:f7:39:ec:76:8d:60:79:60:47:65:
77:3e:6f:b8:fe:4b:e4:3a:00:b9:9d:60:4c:35:c8:
aa:5f:cd:b5:b1:8f:ca:92:bb:c2:5d:9f:59:bb:49:
87:8a:a6:f8:fd:78:39:fd:2a:5e:9b:c2:aa:3c:4c:
f1:6c:b2:3b:2f:cd:a4:09:74:fa:d1:6d:15:d3:93:
ba:61:88:8b:f2:69:fa:02:3b:26:b1:cf:f3:10:d7:
f1:bd:81:67:32:76:8f:4a:38:b5:36:49:01:fa:51:
b5:4d:99:d6:84:9a:77:ed:0f:90:2a:d1:34:6e:d8:
1c:cf:07:b0:2c:b2:32:72:05:57:98:a7:02:93:ae:
ce:90:14:c3:8a:48:6b:29:30:59:ce:cc:d3:9a:0b:
88:cd:a9:d0:b1:96:98:56:b8:c2:e2:ae:5f:36:c4:
bd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AE:76:F2:62:76:E8:6A:AB:32:5E:51:9E:08:E2:17:59:08:FD:8D
X509v3 Authority Key Identifier:
keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396230303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:9b00::/44
Signature Algorithm: sha256WithRSAEncryption
94:87:57:13:53:bd:53:c0:35:ce:6d:a9:2f:2e:da:e8:7a:53:
69:9e:0f:28:4b:43:08:29:0c:87:3a:54:dd:c0:b1:4e:f9:d7:
ff:67:a6:c9:fa:61:f7:b6:00:da:f1:a5:9e:84:95:59:34:86:
b0:fb:33:bd:3e:c1:3f:de:6a:b0:a3:84:67:9d:7a:de:e1:b0:
3b:be:88:cb:20:7c:af:d2:72:50:9f:e4:e0:03:7b:8c:f2:53:
23:a3:34:51:67:5c:df:5c:ec:f4:4d:e4:9c:c5:2e:69:f5:9e:
6c:a8:50:fa:32:11:88:ad:bb:11:91:48:64:99:4c:1f:59:cc:
07:51:6a:41:66:53:20:cb:9d:fc:1c:11:3e:0f:9d:cd:46:fe:
cf:85:8b:e8:38:52:09:d8:5b:6b:7e:7f:fb:06:92:fb:32:8a:
36:00:9c:c2:2c:55:77:ae:d9:a0:66:7c:16:2c:5e:3e:5d:ee:
f9:18:50:8b:94:28:66:4b:90:2c:f7:fd:f7:3a:0b:37:ae:03:
64:9e:10:48:57:75:ce:34:70:1a:e2:24:31:3b:4d:64:01:ee:
92:2f:d9:41:e3:eb:21:f5:44:b9:da:9d:54:af:37:3b:90:12:
85:3e:cd:6b:fb:74:bc:c9:db:a6:1b:d4:3c:4f:9f:aa:bb:5b:
9c:16:bc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:50:48 2026 by rpki-client