
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/323030313a6466343a363463303a3a2f34382d3438203d3e20313533313430.roa
File: 323030313a6466343a363463303a3a2f34382d3438203d3e20313533313430.roa (raw, json)
Hash identifier: WBFw33DVjLMzvjb9A+5nTenZ7QhkAKAHSXyABZyuBhE=
Subject key identifier: 8D:93:F0:2F:96:AB:5D:53:07:B7:45:93:5B:58:4F:84:0A:2A:19:3A
Certificate issuer: /CN=EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC
Certificate serial: 5C2E08C774719A693CB4CD0C20EA5ACAE327A3D6
Authority key identifier: EF:4A:2E:C5:53:79:CA:2F:E3:A7:D2:4D:D2:C2:85:E8:BF:3A:39:FC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/323030313a6466343a363463303a3a2f34382d3438203d3e20313533313430.roa
Signing time: Sun 03 May 2026 03:06:54 +0000
ROA not before: Sun 03 May 2026 03:01:54 +0000
ROA not after: Sun 02 May 2027 03:06:54 +0000
asID: 153140
IP address blocks: 2001:df4:64c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.crl
rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:12:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:2e:08:c7:74:71:9a:69:3c:b4:cd:0c:20:ea:5a:ca:e3:27:a3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC
Validity
Not Before: May 3 03:01:54 2026 GMT
Not After : May 2 03:06:54 2027 GMT
Subject: CN=8D93F02F96AB5D5307B745935B584F840A2A193A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b5:39:43:a3:ba:b0:ac:af:d3:91:70:2b:33:
d1:dc:dd:be:23:16:f2:8d:6e:7b:e9:42:92:d5:32:
d2:4f:14:cc:5c:53:fa:16:87:b3:ad:12:ee:42:b1:
db:41:c7:9f:95:c2:52:5b:85:ca:4f:c8:93:30:77:
72:3e:dc:d3:73:28:55:ff:99:c3:86:57:2f:bb:1d:
e4:7b:c1:d7:23:cb:5b:37:9a:22:0f:ae:4b:16:c0:
14:b1:c4:d7:25:1b:e5:c3:23:31:34:f7:b8:33:e7:
d9:e2:e3:2b:f6:25:9a:e1:ed:27:e5:26:dc:05:35:
bb:37:73:48:fc:f2:40:43:1a:de:f4:8c:3a:a1:4c:
d4:5a:da:a5:3e:bd:18:ca:c9:90:82:b3:4b:16:b9:
89:6b:c8:f5:20:d1:da:20:58:bd:3e:b5:05:fc:68:
bc:8b:b4:d0:2c:12:70:30:b1:e6:c8:63:6e:63:3b:
52:9d:3e:0a:52:a6:c5:0a:14:5b:64:e0:ee:6e:94:
86:64:ef:60:8b:45:9d:df:31:b7:22:9f:12:60:2c:
c9:50:72:b9:e9:4a:c5:b0:e9:ed:e4:a0:6c:e2:75:
8a:db:2e:bc:5d:27:98:c7:ac:65:ea:28:5b:db:f9:
93:5d:13:26:27:1c:bc:07:50:d9:62:d0:dd:43:7a:
18:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:93:F0:2F:96:AB:5D:53:07:B7:45:93:5B:58:4F:84:0A:2A:19:3A
X509v3 Authority Key Identifier:
keyid:EF:4A:2E:C5:53:79:CA:2F:E3:A7:D2:4D:D2:C2:85:E8:BF:3A:39:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/323030313a6466343a363463303a3a2f34382d3438203d3e20313533313430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:64c0::/48
Signature Algorithm: sha256WithRSAEncryption
56:56:13:6c:c7:93:dd:1f:3b:62:bf:3f:27:a4:d2:c8:61:50:
8a:b9:5f:83:10:c1:22:97:94:04:c0:e4:3f:ef:ba:b5:c6:e7:
0c:e9:22:73:bb:e0:94:9b:da:ca:6a:63:6f:9e:31:7c:eb:b0:
6d:41:b3:c6:d9:ed:69:54:cc:26:a6:c8:e0:92:39:ff:9e:55:
ef:5c:9d:a4:4e:ed:94:30:d4:dc:0b:dc:53:c6:96:a1:4f:d4:
ca:b1:db:76:11:c2:9e:f9:aa:79:88:0c:c7:9f:ea:26:00:3b:
5a:78:20:1d:6d:c3:f3:0c:a0:9a:40:e9:4f:2c:eb:4f:bb:06:
1c:b4:93:dc:62:09:cc:91:38:5e:95:f1:68:65:7e:b9:79:eb:
03:c9:14:2b:0f:53:56:83:14:0a:dd:5f:62:03:29:8a:d4:3f:
9e:cd:26:e9:4c:0a:8c:7f:b0:e6:0b:b6:a2:9b:84:f5:db:2d:
5d:17:57:03:d5:a1:08:b3:8a:2a:4a:f0:21:ae:6b:24:d6:19:
d0:d2:0f:29:38:32:e7:1a:23:a7:01:2c:77:70:cd:b3:f0:88:
34:d7:61:c6:9a:e5:d1:58:c4:ec:cb:45:36:26:ea:29:05:55:
8c:6f:c0:16:95:3b:24:5c:1e:7d:fb:2d:c1:e9:e0:e4:6b:66:
b7:bd:0f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:01 2026 by rpki-client