
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396231303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a396231303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: 6sxn7D6Fm7AHckigvGqi2slnksGFEBycgth1nNT+hYg=
Subject key identifier: AF:8B:A5:4A:9D:BD:5D:5E:10:59:2F:FA:B9:D0:5E:DA:A6:47:76:D4
Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial: 3439541CC3BF56944852995A82052E421331B32D
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396231303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Sun 03 May 2026 03:04:20 +0000
ROA not before: Sun 03 May 2026 02:59:20 +0000
ROA not after: Sun 02 May 2027 03:04:20 +0000
asID: 133798
IP address blocks: 2402:5680:9b10::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:39:54:1c:c3:bf:56:94:48:52:99:5a:82:05:2e:42:13:31:b3:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Validity
Not Before: May 3 02:59:20 2026 GMT
Not After : May 2 03:04:20 2027 GMT
Subject: CN=AF8BA54A9DBD5D5E10592FFAB9D05EDAA64776D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ae:ad:a7:c7:49:d5:ea:d0:7e:ef:68:07:cb:
3d:f5:cc:02:63:ce:21:d5:a5:61:df:6b:ff:64:65:
0a:0e:7f:d0:7d:09:66:9c:53:bb:d0:fa:89:48:6a:
61:92:40:6c:bc:39:bb:ea:c3:29:f2:a0:1b:b4:bc:
ef:8c:a1:15:ee:7c:25:99:9f:f0:8b:18:64:7c:ed:
a4:d5:e6:69:01:44:4d:36:cc:45:10:00:77:c8:20:
02:ec:17:e8:e4:8e:92:5e:3f:59:8e:39:f4:f0:81:
3f:4e:62:01:cc:79:3a:3b:ae:d6:a2:56:d0:de:8a:
e1:b6:42:6d:0b:54:16:1a:b8:28:b8:da:dc:e5:71:
21:1e:f0:90:b5:b5:a4:af:4e:ac:62:99:6d:a8:8d:
e4:d7:b1:4a:53:54:db:c6:e0:04:cf:e6:a4:8a:24:
c0:9d:f7:a2:99:ca:a3:23:d0:45:c7:bb:65:37:95:
6f:cf:40:04:f3:10:cf:d6:19:28:a9:4f:b4:09:fa:
65:8f:ba:33:ae:69:30:36:1d:84:ca:88:da:dc:b3:
6e:e6:ac:4b:6c:d3:70:1a:d9:83:96:06:42:0c:f2:
cf:43:c0:c1:c9:e0:47:7e:97:cc:00:1e:38:07:2d:
44:2e:82:b3:a5:97:fd:b8:12:22:17:31:a7:c0:bb:
01:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8B:A5:4A:9D:BD:5D:5E:10:59:2F:FA:B9:D0:5E:DA:A6:47:76:D4
X509v3 Authority Key Identifier:
keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396231303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:9b10::/44
Signature Algorithm: sha256WithRSAEncryption
19:2b:24:da:28:21:c9:1a:a0:45:e0:a0:2f:ef:e7:79:a5:35:
5f:3b:9b:d4:64:ef:3f:8e:74:e6:30:1d:89:55:63:b6:2a:41:
cb:62:df:87:97:5c:11:00:e0:d2:10:40:6f:05:40:28:d4:47:
40:8f:bd:4a:32:cf:c3:e4:b4:ce:28:46:ab:30:9c:b9:62:23:
4b:78:3d:cb:90:68:cb:80:58:17:f5:a7:fa:f9:11:54:74:2b:
13:ff:0e:29:c2:43:fb:a3:de:71:5f:1b:d4:4a:18:c3:75:df:
0c:87:4e:5e:3f:15:d9:ff:37:cc:fe:0b:16:4f:48:0a:c5:26:
1e:56:c4:16:f3:ca:35:70:73:99:6a:c2:c9:1c:d5:50:8d:1d:
d4:46:73:9b:70:9d:48:e9:66:c4:59:c9:72:85:a5:f8:49:12:
9a:e6:98:f3:44:98:92:33:0d:c5:d5:59:d8:e3:95:26:49:b9:
b6:ad:30:87:42:03:52:b7:04:77:6c:04:32:d4:13:3b:35:5e:
9d:15:57:7a:e3:cb:91:da:74:09:b7:bd:91:f0:2f:88:d3:6e:
a0:9a:e3:ce:5c:2b:12:cf:b8:b0:10:26:91:44:f1:c3:cb:8c:
71:e9:49:a8:b5:9c:bd:29:c3:cb:94:b5:b6:2a:30:34:e8:54:
80:b4:59:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:08:49 2026 by rpki-client