
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/323430353a363063303a3a2f33322d3332203d3e20313332363337.roa
File: 323430353a363063303a3a2f33322d3332203d3e20313332363337.roa (raw, json)
Hash identifier: CrMtOMSFObcp/eUieJpJ4rq+BfgXeOHMxmhovNg+UBg=
Subject key identifier: 36:AC:69:82:F3:B8:A5:F8:49:0A:73:6A:FF:0C:A0:75:CF:C1:62:DE
Certificate issuer: /CN=98061B92F04107DC7EA9C6A38A8DE08E3EFD9569
Certificate serial: 394FE3396641C7CBAB24018FE002DAC8471DCE9A
Authority key identifier: 98:06:1B:92:F0:41:07:DC:7E:A9:C6:A3:8A:8D:E0:8E:3E:FD:95:69
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/323430353a363063303a3a2f33322d3332203d3e20313332363337.roa
Signing time: Sun 03 May 2026 03:07:44 +0000
ROA not before: Sun 03 May 2026 03:02:44 +0000
ROA not after: Sun 02 May 2027 03:07:44 +0000
asID: 132637
IP address blocks: 2405:60c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.crl
rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:55:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:4f:e3:39:66:41:c7:cb:ab:24:01:8f:e0:02:da:c8:47:1d:ce:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98061B92F04107DC7EA9C6A38A8DE08E3EFD9569
Validity
Not Before: May 3 03:02:44 2026 GMT
Not After : May 2 03:07:44 2027 GMT
Subject: CN=36AC6982F3B8A5F8490A736AFF0CA075CFC162DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4f:0c:7f:97:dd:32:f4:10:73:e0:7b:ba:da:
73:90:ec:44:22:44:cc:8c:a9:97:eb:d5:15:ac:ec:
13:cf:bc:9e:2a:c3:56:05:69:ac:77:45:06:c3:1c:
20:b7:2c:2d:69:5e:23:5e:fd:54:aa:70:2c:0a:55:
c5:18:92:4a:97:aa:19:5a:e4:39:84:72:9f:11:bb:
a2:a6:f1:85:b1:b1:5e:c1:8b:09:3b:cf:af:8b:aa:
8e:83:9a:4c:f9:98:fb:49:ca:b1:7b:a8:56:cb:29:
4b:c7:6b:69:f9:57:16:d4:69:93:e0:6b:02:d0:c2:
f1:09:51:68:51:60:42:4f:fb:b2:da:59:8a:5c:04:
46:05:f1:f9:f3:d1:f1:80:68:6a:c7:db:1a:b9:78:
e1:79:73:fd:97:d3:c8:45:c9:c0:2f:73:2b:d9:58:
94:7a:e9:cd:81:e5:af:63:7c:b3:e0:ba:a5:58:45:
f4:b1:b8:b6:4d:09:e7:31:d2:0d:f2:c6:8a:0d:39:
68:82:db:b1:64:7c:53:cd:16:96:95:4a:c3:fb:e1:
81:f6:6f:36:e6:c2:c5:7d:d4:ec:b3:94:8e:60:25:
d6:83:4c:20:45:ac:01:67:f1:52:e6:d0:1b:70:c1:
1b:ea:39:f6:b0:64:6c:13:ed:df:d9:c5:01:54:45:
ac:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AC:69:82:F3:B8:A5:F8:49:0A:73:6A:FF:0C:A0:75:CF:C1:62:DE
X509v3 Authority Key Identifier:
keyid:98:06:1B:92:F0:41:07:DC:7E:A9:C6:A3:8A:8D:E0:8E:3E:FD:95:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/323430353a363063303a3a2f33322d3332203d3e20313332363337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:60c0::/32
Signature Algorithm: sha256WithRSAEncryption
37:fa:5a:35:b5:86:ae:07:43:ef:33:d5:39:23:49:a7:cf:d1:
59:ec:62:b8:75:f4:a6:e6:7c:92:c7:53:46:88:f0:65:85:c9:
57:5e:1f:b4:3b:7e:39:3c:b0:85:0e:8e:f7:3d:f9:7b:1d:15:
3f:3a:3f:07:d6:d7:d6:61:6f:eb:44:a6:80:db:fa:05:a6:76:
7f:10:1d:47:1e:2e:ef:32:d9:61:a9:30:eb:83:90:95:92:bb:
de:1f:b8:5a:5a:6c:c5:c4:4c:6d:b3:fd:d3:6a:fc:4b:78:6c:
f4:4b:1d:11:e7:24:7d:f1:b8:98:c6:8d:f3:a4:e4:85:20:1e:
57:85:68:e8:26:e9:00:c8:57:32:0c:6a:a8:48:3e:bc:b0:18:
a5:61:98:bb:6b:d8:26:a9:c3:3c:d2:89:9c:6b:3e:4a:d0:92:
a0:24:82:9a:69:a9:5d:26:88:5c:dd:14:9e:85:81:eb:6d:b4:
6a:5b:63:00:d9:9f:6d:cf:29:b7:41:3f:35:e0:28:4c:e7:75:
f1:85:ba:3d:c3:39:4b:fc:bb:21:82:b1:87:d9:88:a2:67:28:
fd:ea:bd:ad:f1:15:7d:e5:81:d2:82:7a:fe:f3:b5:30:99:86:
61:e6:99:73:a2:65:3b:a1:07:dd:c8:08:67:04:16:0c:42:b0:
10:33:49:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:36:55 2026 by rpki-client