
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa
File: 323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa (raw, json)
Hash identifier: LCoG5MBtVr1gnp0Cb9QG4F/kZ9BcJIu/HLJgqKdyZtQ=
Subject key identifier: 80:15:97:84:89:8D:CC:E4:82:17:2F:D6:BA:03:AB:6F:7F:09:27:C2
Certificate issuer: /CN=4E0311031DBA1471A97F3183416162430EA78405
Certificate serial: 180D6DAFC715643D9BA90777DFF473FB908A437B
Authority key identifier: 4E:03:11:03:1D:BA:14:71:A9:7F:31:83:41:61:62:43:0E:A7:84:05
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa
Signing time: Sun 03 May 2026 03:06:47 +0000
ROA not before: Sun 03 May 2026 03:01:47 +0000
ROA not after: Sun 02 May 2027 03:06:47 +0000
asID: 149736
IP address blocks: 2401:48e0:4001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.crl
rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:41:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:0d:6d:af:c7:15:64:3d:9b:a9:07:77:df:f4:73:fb:90:8a:43:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E0311031DBA1471A97F3183416162430EA78405
Validity
Not Before: May 3 03:01:47 2026 GMT
Not After : May 2 03:06:47 2027 GMT
Subject: CN=80159784898DCCE482172FD6BA03AB6F7F0927C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9d:6b:67:f9:86:57:3c:df:c2:62:43:a4:2a:
09:b9:34:bd:8f:42:e5:3b:5e:bd:26:78:2f:e2:69:
38:89:28:77:b9:ad:bb:e6:df:91:a7:d8:f1:ce:77:
e3:44:4c:af:6e:96:8f:1d:bc:ff:64:ae:80:6b:db:
95:b3:d1:9d:13:24:a8:10:d6:d1:93:ee:6e:93:fc:
c6:5c:aa:39:63:b6:f4:b3:c9:3e:4b:e9:d8:c9:dc:
27:61:81:3c:a0:ee:ba:49:76:6e:60:ec:d0:4a:fa:
0c:ac:2c:ea:2d:fc:20:32:1f:ad:3c:43:4b:7d:4e:
3e:c0:c4:0b:8f:0c:50:f9:4d:7b:11:e2:f5:c4:e9:
61:fa:fc:80:7e:3b:64:9d:80:ca:61:33:30:20:f8:
d9:15:48:89:a5:b6:0c:cc:16:36:e4:24:e7:42:a1:
88:1a:e3:e1:9b:90:ce:30:8f:b7:0b:25:5d:29:bc:
90:46:6e:83:ac:33:28:3c:ce:0d:b7:21:93:c5:d3:
f8:48:8f:1a:91:85:d6:df:f5:2e:43:5b:8f:1d:15:
15:4a:0e:5a:e7:8d:dd:60:94:98:41:f4:6b:6f:21:
6f:6c:3d:b5:04:ce:55:5c:25:b5:86:e3:c3:70:a3:
48:34:b5:a0:13:c2:7c:7d:1d:47:c7:a5:ba:3e:a6:
86:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:15:97:84:89:8D:CC:E4:82:17:2F:D6:BA:03:AB:6F:7F:09:27:C2
X509v3 Authority Key Identifier:
keyid:4E:03:11:03:1D:BA:14:71:A9:7F:31:83:41:61:62:43:0E:A7:84:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:48e0:4001::/48
Signature Algorithm: sha256WithRSAEncryption
6f:b5:63:2d:47:49:1f:38:69:31:49:6e:5f:5b:98:ba:6b:8f:
55:5d:d3:ae:63:42:90:ef:e4:a9:df:14:63:33:08:72:00:26:
9f:3f:a4:19:de:35:ce:ee:3f:03:39:8f:ba:c3:b3:09:b5:ab:
c2:f1:5a:88:20:77:40:03:65:52:e3:2f:8c:ab:a3:4b:e1:8c:
3f:96:bd:0f:1e:6a:67:77:92:45:13:52:b5:21:04:11:f8:aa:
38:c4:a6:b6:fb:7c:be:1e:90:7f:07:00:8a:18:16:f3:ff:64:
8b:8e:16:6c:40:c9:b3:26:f9:0b:b6:02:54:51:fc:c5:fb:8f:
02:8e:74:25:03:47:bc:26:ae:c3:db:2b:a5:25:7c:6e:4f:62:
87:86:30:0b:c5:3d:a3:17:62:8c:86:5b:c6:a5:ac:27:e0:5f:
02:99:71:70:da:8a:44:98:0d:83:93:2d:04:71:26:c1:ab:36:
de:04:11:90:9f:45:85:25:92:d0:3d:21:88:36:09:8d:26:9e:
c4:09:c8:66:02:ff:00:ef:03:b3:34:5d:5d:e7:5c:63:ae:1c:
ec:47:70:bd:ac:62:14:46:ae:bf:b3:af:58:75:d5:31:00:5b:
64:88:21:20:e4:5c:cf:a6:fb:83:69:46:c5:a4:96:a0:cb:3d:
5d:81:46:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:39:32 2026 by rpki-client