
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/323430313a313063303a3a2f33342d3334203d3e20313331373137.roa
File: 323430313a313063303a3a2f33342d3334203d3e20313331373137.roa (raw, json)
Hash identifier: wcqHrqI3rqZ/cg1ulVOK7tcT1pphG3X5jdB33VoSub8=
Subject key identifier: 47:58:DC:09:75:34:4A:BD:26:0E:0A:B1:96:F4:DE:CD:B6:9A:07:F9
Certificate issuer: /CN=CB0A606FD0642E68B5212AE751953E0B9A92959F
Certificate serial: 61D0786EBD1B0AC583B1E01EDA39DAFB9BD0B2C0
Authority key identifier: CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/323430313a313063303a3a2f33342d3334203d3e20313331373137.roa
Signing time: Sun 03 May 2026 03:08:06 +0000
ROA not before: Sun 03 May 2026 03:03:06 +0000
ROA not after: Sun 02 May 2027 03:08:06 +0000
asID: 131717
IP address blocks: 2401:10c0::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl
rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:20:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:d0:78:6e:bd:1b:0a:c5:83:b1:e0:1e:da:39:da:fb:9b:d0:b2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB0A606FD0642E68B5212AE751953E0B9A92959F
Validity
Not Before: May 3 03:03:06 2026 GMT
Not After : May 2 03:08:06 2027 GMT
Subject: CN=4758DC0975344ABD260E0AB196F4DECDB69A07F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a1:d2:ad:06:20:b5:2d:63:16:e2:a3:43:5c:
5a:1e:68:1c:7e:b3:ca:44:be:91:cc:c7:b8:21:bb:
62:57:f6:3f:d2:7b:9f:48:04:f0:3a:57:32:af:71:
c3:41:c9:81:28:32:4d:7f:5a:f0:4d:ad:ad:c0:ef:
e4:9c:12:46:eb:d9:9e:d7:72:d9:b8:69:01:12:d5:
bf:9f:44:a3:ec:de:38:8c:1b:81:b5:21:3a:49:a8:
03:ed:f5:54:28:b6:b0:4e:bd:15:4f:de:63:87:99:
17:a1:ed:c9:28:40:df:84:43:ca:20:aa:91:b8:f7:
3a:78:e1:f9:ea:43:fe:96:7d:be:a0:76:7a:bf:37:
64:d0:b8:df:c3:ca:c0:30:ef:36:82:8a:ab:98:4b:
e6:42:92:d8:57:0a:68:bc:bb:62:8e:4e:d9:01:a4:
eb:92:d5:1c:49:40:6d:81:32:f2:9b:64:ba:ca:b4:
e7:03:7c:45:d6:3c:fa:7d:d3:53:83:b5:41:c9:1f:
6e:62:66:c0:12:97:ab:e5:57:c3:ef:b6:6d:46:88:
9c:20:ba:30:20:fe:1a:48:62:6c:f1:7b:78:11:b3:
c2:91:35:27:b0:df:94:8d:dc:9c:7b:5c:ce:24:36:
2f:a7:bc:54:00:db:db:91:a9:85:3e:7a:f9:79:35:
ad:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:58:DC:09:75:34:4A:BD:26:0E:0A:B1:96:F4:DE:CD:B6:9A:07:F9
X509v3 Authority Key Identifier:
keyid:CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/323430313a313063303a3a2f33342d3334203d3e20313331373137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:10c0::/34
Signature Algorithm: sha256WithRSAEncryption
41:d7:b5:96:09:5a:ae:04:03:52:ff:8c:11:c3:f6:7f:7c:b8:
12:55:37:1d:cc:d8:90:80:a3:8f:cf:65:42:2c:06:77:81:72:
c7:7c:ae:7e:11:2e:f4:f2:2b:81:f6:07:8b:22:7e:81:2a:ca:
c5:b7:4b:c8:dc:c3:66:55:cd:28:77:19:71:b0:e6:87:ce:85:
e4:cb:04:e3:65:01:67:45:47:89:3b:6a:7a:e4:64:7c:5a:cc:
b6:13:30:60:e3:af:46:45:94:7b:b4:68:6c:c5:65:47:4f:b9:
8d:95:ae:21:16:1c:0c:60:05:4b:d7:f8:03:16:53:8a:d8:73:
51:3c:9a:46:3b:2a:ef:e9:41:42:2a:a0:33:d7:ee:49:70:fe:
c9:0d:b6:fa:05:34:fb:1c:26:eb:5c:b5:2d:35:c9:95:12:5e:
b5:bc:5e:f9:9b:b9:14:aa:be:4a:98:98:3a:62:99:94:7f:a6:
d4:d6:9e:66:c7:ca:9c:5d:ce:e5:19:0c:6d:e1:ef:2a:ba:49:
92:e4:7e:2a:87:ec:e6:f8:21:55:7b:93:d4:41:69:4b:1a:93:
89:79:d3:cd:5a:6f:9c:a2:d6:f7:9f:93:15:10:eb:d6:ac:4b:
3f:97:bc:2e:0b:41:4e:73:b3:ab:f9:8c:8d:07:d0:c7:44:c3:
0f:e4:89:98
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUYdB4br0bCsWDseAe2jna+5vQssAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0IwQTYwNkZEMDY0MkU2OEI1MjEyQUU3NTE5NTNFMEI5
QTkyOTU5RjAeFw0yNjA1MDMwMzAzMDZaFw0yNzA1MDIwMzA4MDZaMDMxMTAvBgNV
BAMTKDQ3NThEQzA5NzUzNDRBQkQyNjBFMEFCMTk2RjRERUNEQjY5QTA3RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLodKtBiC1LWMW4qNDXFoeaBx+
s8pEvpHMx7ghu2JX9j/Se59IBPA6VzKvccNByYEoMk1/WvBNra3A7+ScEkbr2Z7X
ctm4aQES1b+fRKPs3jiMG4G1ITpJqAPt9VQotrBOvRVP3mOHmReh7ckoQN+EQ8og
qpG49zp44fnqQ/6Wfb6gdnq/N2TQuN/DysAw7zaCiquYS+ZCkthXCmi8u2KOTtkB
pOuS1RxJQG2BMvKbZLrKtOcDfEXWPPp901ODtUHJH25iZsASl6vlV8Pvtm1GiJwg
ujAg/hpIYmzxe3gRs8KRNSew35SN3Jx7XM4kNi+nvFQA29uRqYU+evl5Na39AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUR1jcCXU0Sr0mDgqxlvTezbaaB/kwHwYDVR0j
BBgwFoAUywpgb9BkLmi1ISrnUZU+C5qSlZ8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDA3NDcxYTMtZWU1My00OTljLTlmMmQtY2YxNmIxZTRhMzUzLzAvQ0IwQTYwNkZE
MDY0MkU2OEI1MjEyQUU3NTE5NTNFMEI5QTkyOTU5Ri5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DQjBBNjA2RkQwNjQyRTY4QjUyMTJBRTc1MTk1M0UwQjlBOTI5
NTlGLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QwNzQ3MWEzLWVlNTMtNDk5Yy05
ZjJkLWNmMTZiMWU0YTM1My8wLzMyMzQzMDMxM2EzMTMwNjMzMDNhM2EyZjMzMzQy
ZDMzMzQyMDNkM2UyMDMxMzMzMTM3MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBiQBEMAAMA0GCSqG
SIb3DQEBCwUAA4IBAQBB17WWCVquBANS/4wRw/Z/fLgSVTcdzNiQgKOPz2VCLAZ3
gXLHfK5+ES708iuB9geLIn6BKsrFt0vI3MNmVc0odxlxsOaHzoXkywTjZQFnRUeJ
O2p65GR8Wsy2EzBg469GRZR7tGhsxWVHT7mNla4hFhwMYAVL1/gDFlOK2HNRPJpG
Oyrv6UFCKqAz1+5JcP7JDbb6BTT7HCbrXLUtNcmVEl61vF75m7kUqr5KmJg6YpmU
f6bU1p5mx8qcXc7lGQxt4e8qukmS5H4qh+zm+CFVe5PUQWlLGpOJedPNWm+cotb3
n5MVEOvWrEs/l7wuC0FOc7Or+YyNB9DHRMMP5ImY
-----END CERTIFICATE-----
Generated at Wed May 13 05:44:24 2026 by rpki-client