
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/323030313a6466343a326638303a3a2f34382d3438203d3e20313430343434.roa
File: 323030313a6466343a326638303a3a2f34382d3438203d3e20313430343434.roa (raw, json)
Hash identifier: xUUMr5UQK8a0ejdjAN7lpyb+LyL+cS2jPdq1m4lezwg=
Subject key identifier: EE:2A:8D:BE:77:68:5F:88:C5:EC:74:4D:A9:08:C5:EC:7E:E5:93:F7
Certificate issuer: /CN=7CB53701F9A5E6CBB24596105D30044B647BBC84
Certificate serial: 6ED93B496F2F48340A6DDC1EFD3E3488C1527F98
Authority key identifier: 7C:B5:37:01:F9:A5:E6:CB:B2:45:96:10:5D:30:04:4B:64:7B:BC:84
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/323030313a6466343a326638303a3a2f34382d3438203d3e20313430343434.roa
Signing time: Sun 03 May 2026 03:05:48 +0000
ROA not before: Sun 03 May 2026 03:00:48 +0000
ROA not after: Sun 02 May 2027 03:05:48 +0000
asID: 140444
IP address blocks: 2001:df4:2f80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.crl
rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:09:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:d9:3b:49:6f:2f:48:34:0a:6d:dc:1e:fd:3e:34:88:c1:52:7f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB53701F9A5E6CBB24596105D30044B647BBC84
Validity
Not Before: May 3 03:00:48 2026 GMT
Not After : May 2 03:05:48 2027 GMT
Subject: CN=EE2A8DBE77685F88C5EC744DA908C5EC7EE593F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fa:69:e3:85:d8:f5:18:c5:2f:a4:91:c2:89:
8a:87:38:0a:74:d3:85:d1:e6:30:7b:51:cb:c0:29:
34:7b:bb:22:76:5b:52:b6:34:20:7d:1e:68:88:13:
d6:62:16:df:92:47:4f:5a:44:62:c8:d6:27:5b:97:
2d:c4:6e:cb:98:f5:75:20:36:3f:41:fe:f0:61:0e:
d9:59:be:c6:da:a7:a6:50:46:b2:60:3e:92:b0:12:
ff:f1:1f:d4:06:95:94:d9:b1:08:59:ef:92:dd:69:
63:fd:c6:a0:c2:7d:6f:11:33:54:96:40:bd:3c:62:
44:5e:86:a7:e1:bb:b2:d6:15:9c:b2:f0:74:24:8a:
cc:e2:77:d5:fe:3c:10:51:11:13:c8:0f:41:49:29:
b7:38:97:a0:be:b0:6d:2d:a7:45:e4:87:65:b7:2c:
f3:08:1e:45:2c:ca:8e:e0:9b:b1:94:b8:36:f4:56:
f7:ef:56:4c:b2:ea:f8:96:b6:9b:6c:ff:a1:a7:02:
b1:ff:6c:66:04:de:d0:13:b3:19:5b:46:51:ad:39:
7e:3a:e8:22:89:7f:b6:09:c2:be:4e:4f:d6:3b:f3:
4a:97:a8:36:4f:f8:f3:bd:53:c2:fa:28:b7:85:8b:
d7:a4:9f:d2:d5:34:d6:54:ad:3b:d4:17:6a:66:99:
cd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2A:8D:BE:77:68:5F:88:C5:EC:74:4D:A9:08:C5:EC:7E:E5:93:F7
X509v3 Authority Key Identifier:
keyid:7C:B5:37:01:F9:A5:E6:CB:B2:45:96:10:5D:30:04:4B:64:7B:BC:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/323030313a6466343a326638303a3a2f34382d3438203d3e20313430343434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:2f80::/48
Signature Algorithm: sha256WithRSAEncryption
8f:a5:c2:ee:f3:4f:91:9d:54:dc:77:eb:e9:46:42:3b:5a:50:
57:18:3b:b3:e4:80:02:3c:69:9c:01:65:f3:11:70:6b:15:db:
d3:3f:4f:ea:4e:eb:ee:81:f5:6b:0d:83:50:7c:57:34:01:07:
6a:f4:0e:a6:2b:65:d6:59:dc:f5:44:2d:8c:f6:b1:12:d8:3c:
e4:42:52:5a:a6:5a:c0:26:0a:3c:74:8a:87:f9:aa:31:f9:df:
3d:8f:37:41:2d:50:fd:6e:cb:f4:2d:29:22:a3:c7:92:29:46:
02:7b:af:c6:2d:95:51:6d:38:62:45:82:74:75:e8:a9:a5:60:
9d:8a:65:e4:e0:08:3e:c8:51:bc:e4:89:b7:ce:40:84:ee:4c:
40:b4:1f:f3:b2:6a:80:53:b6:48:91:df:58:13:48:92:1c:49:
c2:ff:73:42:09:fe:e3:db:1a:ad:98:88:0b:b4:35:42:1d:25:
e5:66:d2:b0:29:e0:a5:f8:2b:9c:04:aa:d0:c6:5f:d0:73:1b:
2d:81:72:31:51:d8:11:19:cf:a4:83:3e:d8:93:90:24:18:6a:
f8:e7:b2:92:6b:23:fb:72:96:af:50:32:36:5e:73:dd:30:52:
5b:f5:32:75:b4:3c:9f:f3:fb:95:82:75:f1:7b:1c:66:7f:8a:
1d:93:6f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:08 2026 by rpki-client