
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/323430363a376234303a3a2f33322d3438203d3e203538383231.roa
File: 323430363a376234303a3a2f33322d3438203d3e203538383231.roa (raw, json)
Hash identifier: +hu0CwIQk5R0Cx8ZxKSynMp86E6i1MoIZ/GUTrtz3uk=
Subject key identifier: F4:BD:8A:F5:F1:37:00:D0:D9:98:EB:84:AA:B7:59:E0:76:60:E8:22
Certificate issuer: /CN=38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B
Certificate serial: 76FFC180F9199ED69619DD71283B0CDB05C817C0
Authority key identifier: 38:B9:07:C3:E2:C1:10:CE:66:3B:16:84:C7:AA:D6:D8:5A:9A:0E:8B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/323430363a376234303a3a2f33322d3438203d3e203538383231.roa
Signing time: Sun 03 May 2026 03:07:34 +0000
ROA not before: Sun 03 May 2026 03:02:34 +0000
ROA not after: Sun 02 May 2027 03:07:34 +0000
asID: 58821
IP address blocks: 2406:7b40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl
rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:58:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:ff:c1:80:f9:19:9e:d6:96:19:dd:71:28:3b:0c:db:05:c8:17:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B
Validity
Not Before: May 3 03:02:34 2026 GMT
Not After : May 2 03:07:34 2027 GMT
Subject: CN=F4BD8AF5F13700D0D998EB84AAB759E07660E822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f2:7a:20:65:e5:bd:74:7f:38:c4:47:cb:03:
c0:fc:b0:d0:22:eb:70:ae:2e:55:82:d1:b0:4a:43:
15:ee:6d:dd:e0:3f:ff:c9:45:07:20:e4:8d:d9:e2:
c4:c4:39:34:53:8b:28:e4:2f:7b:2f:7d:8d:1e:38:
fb:a3:67:bd:7f:f7:7a:f1:ff:0f:92:10:bb:29:16:
95:60:0d:1d:b3:bf:f4:cd:e6:5e:11:b8:b7:1c:72:
e2:9c:da:45:4a:24:3f:72:e5:da:19:f6:3e:6d:43:
21:a5:f3:cc:3e:6b:4d:ca:c8:a9:01:c8:47:cf:d6:
fb:ed:10:76:6f:2b:03:3d:bd:af:63:87:90:33:df:
c9:8e:69:c8:25:b7:49:61:36:86:91:ea:97:df:23:
93:82:54:bb:7b:da:54:c5:60:44:a1:3c:5c:6b:4f:
a5:34:9d:c4:7a:ae:a5:7e:1f:2c:f8:27:fe:61:c2:
fd:9f:c9:66:2f:19:59:28:75:3a:05:32:60:80:3c:
88:b5:5d:34:17:86:10:f5:5d:8d:17:59:6a:86:a8:
f5:ec:da:e0:ab:80:ad:45:06:0b:ad:dd:f8:be:2c:
3a:6f:8d:ec:49:62:47:54:c5:55:80:c7:2f:f3:8f:
62:7b:a9:75:7a:c3:3f:eb:19:2b:2f:59:4e:1e:fd:
29:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BD:8A:F5:F1:37:00:D0:D9:98:EB:84:AA:B7:59:E0:76:60:E8:22
X509v3 Authority Key Identifier:
keyid:38:B9:07:C3:E2:C1:10:CE:66:3B:16:84:C7:AA:D6:D8:5A:9A:0E:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/323430363a376234303a3a2f33322d3438203d3e203538383231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:7b40::/32
Signature Algorithm: sha256WithRSAEncryption
8c:15:09:68:81:b6:b8:b3:e3:cb:da:76:8c:82:ef:cc:50:d0:
24:7c:0c:ec:82:54:27:c0:2b:13:9f:33:06:3b:8f:11:9d:bc:
29:41:cc:31:f6:5e:54:59:76:69:44:7e:a4:80:3b:fd:56:3e:
84:5d:c4:5e:80:2e:cd:ac:aa:58:69:d0:cd:c0:a2:b0:c7:2a:
c2:0b:80:b7:5e:4d:31:75:45:a4:3d:9f:73:53:9f:ed:00:c4:
e0:10:f7:34:0a:a0:ce:a7:4a:df:5f:0d:30:0f:7c:4d:cf:26:
89:40:ca:3e:1b:63:29:92:99:ec:08:01:1f:bf:cc:46:4c:3b:
16:1d:4c:b1:64:62:45:13:70:5c:18:12:e3:3e:d0:6d:18:ca:
7f:2d:16:6b:2b:49:44:04:60:a7:7a:e6:f8:f5:d4:e9:41:32:
64:5e:00:85:35:ce:2b:41:e6:94:cf:71:0c:d5:dc:96:9f:df:
76:f0:06:ad:b1:cd:ed:08:1b:8b:a7:5d:34:8f:08:12:a4:fa:
9f:ae:7b:ea:93:46:31:e9:90:a1:57:28:60:1d:45:39:c4:b0:
e1:27:62:ea:b6:5c:b1:5d:1c:9c:ba:09:57:ca:70:88:46:a2:
f5:6a:e5:62:6c:ac:81:95:cd:30:db:f4:1d:43:48:18:ac:c4:
10:6c:08:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:11 2026 by rpki-client