
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/323430313a626538303a3a2f33322d3332203d3e20313333373939.roa
File: 323430313a626538303a3a2f33322d3332203d3e20313333373939.roa (raw, json)
Hash identifier: uc3T78iK/wf6j9+1tnEW4aWS+yqOE0CV6VcOc5FTA4g=
Subject key identifier: F5:5D:E2:29:A6:51:3D:A9:E7:CA:94:D4:5D:19:E9:63:78:37:A6:37
Certificate issuer: /CN=51F28FDA0EA4620C617F32218CB294E10169884C
Certificate serial: 415CC42F061C13572940D722442E614789DA3A8A
Authority key identifier: 51:F2:8F:DA:0E:A4:62:0C:61:7F:32:21:8C:B2:94:E1:01:69:88:4C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F28FDA0EA4620C617F32218CB294E10169884C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/323430313a626538303a3a2f33322d3332203d3e20313333373939.roa
Signing time: Sun 03 May 2026 03:07:00 +0000
ROA not before: Sun 03 May 2026 03:02:00 +0000
ROA not after: Sun 02 May 2027 03:07:00 +0000
asID: 133799
IP address blocks: 2401:be80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/51F28FDA0EA4620C617F32218CB294E10169884C.crl
rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/51F28FDA0EA4620C617F32218CB294E10169884C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F28FDA0EA4620C617F32218CB294E10169884C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:26:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:5c:c4:2f:06:1c:13:57:29:40:d7:22:44:2e:61:47:89:da:3a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51F28FDA0EA4620C617F32218CB294E10169884C
Validity
Not Before: May 3 03:02:00 2026 GMT
Not After : May 2 03:07:00 2027 GMT
Subject: CN=F55DE229A6513DA9E7CA94D45D19E9637837A637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6d:c2:9d:75:e5:22:b2:f2:f6:f4:43:7a:83:
9d:23:0c:45:f8:99:fc:c7:6a:48:48:5c:57:d9:26:
7e:d3:76:3a:28:56:48:a6:c1:5a:44:6b:53:d7:ef:
95:01:c5:f2:16:19:fc:94:4f:12:da:0f:d2:f2:39:
a3:2a:61:26:ba:12:0d:92:e8:cf:57:9a:ce:6d:a6:
01:c8:39:13:01:2e:e0:46:e1:72:7d:3a:e8:76:12:
b5:3f:46:8c:e4:2e:52:ba:ee:96:a9:c8:8b:ac:71:
45:81:76:a2:ba:f6:b9:76:98:4a:0c:4e:ac:6d:32:
07:38:fb:ff:80:e9:9b:da:5e:63:b1:8f:a3:c2:72:
1d:1a:4c:88:fd:03:3c:43:ed:f5:43:d3:3c:f5:84:
3b:97:32:9c:6d:f4:c7:c7:e5:f6:d0:c3:d6:8b:40:
a2:85:f1:35:b5:49:56:8e:32:b4:36:77:15:4e:39:
c6:9d:f6:22:1f:a0:b8:cf:00:49:9e:01:eb:ea:66:
0a:46:e0:db:c4:c7:f5:7c:99:a2:97:e2:81:47:50:
28:69:4d:45:2b:e3:02:ee:fa:3c:6b:96:93:d7:39:
6a:9e:78:46:1c:a0:8a:da:89:40:94:59:43:ad:61:
09:c0:19:32:25:ff:33:01:7b:f4:ea:15:19:2e:b9:
6d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5D:E2:29:A6:51:3D:A9:E7:CA:94:D4:5D:19:E9:63:78:37:A6:37
X509v3 Authority Key Identifier:
keyid:51:F2:8F:DA:0E:A4:62:0C:61:7F:32:21:8C:B2:94:E1:01:69:88:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/51F28FDA0EA4620C617F32218CB294E10169884C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F28FDA0EA4620C617F32218CB294E10169884C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/323430313a626538303a3a2f33322d3332203d3e20313333373939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:be80::/32
Signature Algorithm: sha256WithRSAEncryption
07:4c:78:b3:eb:da:0b:c2:1c:60:2b:5a:e0:e0:81:31:b4:46:
1a:53:a5:12:d2:51:44:1d:cd:74:a7:42:a1:eb:2f:43:85:8e:
68:eb:87:d4:6e:90:cc:4c:f8:d3:b3:b3:a0:d4:6e:86:e9:6f:
ce:64:08:3f:5c:9d:d5:5f:21:99:a5:eb:39:55:e6:12:be:23:
c7:59:62:8b:7e:cb:2d:21:65:06:00:0b:62:1e:cf:55:b3:04:
5d:3b:17:f3:fb:9b:40:7f:36:82:12:5a:8a:27:f4:7d:3a:6a:
9a:c8:22:91:b3:df:62:29:c0:2c:d8:6c:ab:92:24:e1:d1:c7:
e6:96:ea:e5:e3:c8:43:fe:d8:ea:b6:ce:34:7d:90:f0:62:4f:
b9:f6:62:bf:a2:e9:88:81:d2:c4:0e:30:3a:67:a8:47:aa:09:
66:34:54:f6:17:6f:30:26:19:01:ef:09:ca:27:ab:0f:71:08:
ef:58:55:ff:25:db:8e:5e:71:38:ca:f6:1a:b6:da:f6:a4:da:
53:7f:55:73:49:8e:76:21:4b:80:1b:d7:6a:ca:2a:09:6c:59:
bb:ce:6f:1c:23:4f:ce:26:d4:80:38:51:de:37:ea:25:be:b8:
2a:36:f1:85:6c:00:f3:be:c2:6b:08:63:17:68:f1:6b:b8:4d:
a1:db:d4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:03:00 2026 by rpki-client