
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/323430323a666463303a313337333a3a2f34382d3438203d3e20313337333633.roa
File: 323430323a666463303a313337333a3a2f34382d3438203d3e20313337333633.roa (raw, json)
Hash identifier: ZDiFkcumHYkuWYUBaPK86t3Am+BHd46fhGXEEhnKxDM=
Subject key identifier: B7:57:79:1C:DF:75:A2:EC:F7:1F:8B:B3:60:13:94:AB:01:8E:F3:AF
Certificate issuer: /CN=A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305
Certificate serial: 6951B11AFF391ECEBB2D4D0116050ABC4DA54E64
Authority key identifier: A0:6C:E5:EE:EF:DB:5B:66:43:B1:8A:83:EB:E3:9B:3C:52:FF:D3:05
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/323430323a666463303a313337333a3a2f34382d3438203d3e20313337333633.roa
Signing time: Sun 03 May 2026 03:08:23 +0000
ROA not before: Sun 03 May 2026 03:03:23 +0000
ROA not after: Sun 02 May 2027 03:08:23 +0000
asID: 137363
IP address blocks: 2402:fdc0:1373::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.crl
rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:50:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:51:b1:1a:ff:39:1e:ce:bb:2d:4d:01:16:05:0a:bc:4d:a5:4e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305
Validity
Not Before: May 3 03:03:23 2026 GMT
Not After : May 2 03:08:23 2027 GMT
Subject: CN=B757791CDF75A2ECF71F8BB3601394AB018EF3AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:72:a8:c8:74:d5:ec:af:31:fa:02:f9:7a:2f:
2b:c2:5d:28:44:40:f4:d1:cc:7e:76:3b:19:41:31:
85:f4:cb:f1:3e:e4:a0:4b:b5:06:89:36:66:bd:35:
ce:da:c5:a0:42:d1:9f:c3:70:02:5f:6d:9d:5f:4d:
eb:f3:b5:e4:15:bc:0f:6e:51:c4:4e:27:32:bd:de:
2b:c1:f6:f7:23:ce:fd:91:17:fc:5b:22:29:bf:01:
2b:83:68:e7:95:b1:87:df:a5:f0:e3:fc:0b:83:56:
63:05:fb:7d:54:ad:93:34:2d:fa:5a:68:28:af:f1:
6c:7a:e1:98:ea:a8:c9:ad:04:30:f5:8a:a4:66:28:
e1:1f:c8:50:8e:8c:21:7d:29:1e:ac:34:28:55:aa:
3d:1a:52:06:4f:12:a0:98:d0:2e:76:99:ad:a0:d2:
63:64:5d:92:8f:01:29:a3:2e:bc:1c:de:dc:b6:18:
5b:e4:d7:f1:a1:ee:72:16:dc:ba:47:e1:70:85:05:
b9:c8:e2:02:4b:9d:d8:fb:2a:49:25:a7:85:e7:7e:
cf:b4:3d:b6:35:58:58:29:d5:7d:d7:a6:41:31:6f:
44:15:1b:07:a6:78:e6:a3:63:8d:31:a9:62:0b:d9:
ed:1c:aa:ac:c5:e8:35:d2:c6:9b:e1:8e:10:69:eb:
87:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:57:79:1C:DF:75:A2:EC:F7:1F:8B:B3:60:13:94:AB:01:8E:F3:AF
X509v3 Authority Key Identifier:
keyid:A0:6C:E5:EE:EF:DB:5B:66:43:B1:8A:83:EB:E3:9B:3C:52:FF:D3:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/323430323a666463303a313337333a3a2f34382d3438203d3e20313337333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:fdc0:1373::/48
Signature Algorithm: sha256WithRSAEncryption
21:46:e6:59:75:c2:3b:9a:76:26:7f:36:76:4a:c2:b9:10:a8:
b5:e6:50:d9:93:73:8a:00:ca:54:11:db:d1:c6:7f:eb:f5:34:
e8:40:03:0b:ed:b2:82:c3:08:5e:e0:7d:1d:6d:34:de:31:47:
11:d5:a7:95:55:23:be:f1:e4:6e:12:21:76:fb:fd:61:d1:cb:
02:77:87:e0:3d:b6:7f:45:81:75:2c:b1:fa:d6:cd:20:bd:90:
0a:90:0c:04:c3:14:91:16:38:f9:f0:85:7f:58:60:71:04:96:
e6:25:7b:d4:5d:4b:af:7a:2f:af:4b:36:12:9c:40:e7:ab:6a:
4f:2c:c2:ba:21:b0:4f:12:a5:ae:42:c8:78:82:38:9d:7c:be:
5e:a2:15:96:e5:2b:56:16:82:55:3b:95:ab:ab:20:37:35:7d:
af:6e:5f:5b:02:d9:58:20:6e:ca:28:b4:3d:0f:70:23:b8:38:
3e:6f:86:c3:3a:e5:cc:ed:c1:a3:03:75:92:ae:21:00:3f:34:
52:35:45:2d:1f:cf:ed:4a:1f:fb:20:50:d6:1c:8f:3c:1f:cc:
5e:b0:28:df:c8:87:92:d9:29:9f:c2:eb:9d:e8:33:fa:72:7a:
cb:19:ba:16:34:2b:9a:36:f9:5a:5a:03:92:36:2c:af:87:43:
56:ac:31:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:57:51 2026 by rpki-client