
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/323430323a666463303a633830313a3a2f34382d3438203d3e20313337333633.roa
File: 323430323a666463303a633830313a3a2f34382d3438203d3e20313337333633.roa (raw, json)
Hash identifier: 12hGBEU127xFfYRBwaq0Vm/CxpSbZT0y22MOj9lRvjg=
Subject key identifier: 1C:D6:D0:6A:0C:94:EB:DF:D2:85:89:37:87:E2:7B:03:0D:89:DF:A2
Certificate issuer: /CN=A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305
Certificate serial: 49523F3F021F11881EF99274A87A3DD0610846DB
Authority key identifier: A0:6C:E5:EE:EF:DB:5B:66:43:B1:8A:83:EB:E3:9B:3C:52:FF:D3:05
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/323430323a666463303a633830313a3a2f34382d3438203d3e20313337333633.roa
Signing time: Sun 03 May 2026 03:08:19 +0000
ROA not before: Sun 03 May 2026 03:03:19 +0000
ROA not after: Sun 02 May 2027 03:08:19 +0000
asID: 137363
IP address blocks: 2402:fdc0:c801::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.crl
rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:50:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:52:3f:3f:02:1f:11:88:1e:f9:92:74:a8:7a:3d:d0:61:08:46:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305
Validity
Not Before: May 3 03:03:19 2026 GMT
Not After : May 2 03:08:19 2027 GMT
Subject: CN=1CD6D06A0C94EBDFD285893787E27B030D89DFA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ad:3e:c7:3f:c1:35:f3:09:b6:c1:6c:a4:7f:
63:b4:49:82:f3:19:d3:b9:a4:ad:4b:d1:9b:98:fe:
1f:1c:ea:75:be:56:14:75:cc:f8:0e:ab:dc:01:59:
82:2d:dd:6d:e1:09:8d:c0:f9:6e:7c:43:30:08:df:
b4:3b:6b:f6:ed:09:e5:0f:cf:01:3a:f9:97:75:50:
6a:7f:6f:88:83:30:aa:99:b6:a8:5c:2a:7d:20:10:
c8:4d:a8:32:d4:83:4c:c0:ee:c8:07:6f:8f:33:5c:
cc:dc:4b:79:2e:f4:91:b2:62:0a:89:d4:77:41:c7:
52:8c:9a:9a:51:51:c0:ca:93:dc:9d:94:91:9e:13:
cd:85:33:43:d1:7f:ba:8b:73:3d:2a:2b:a5:d5:8e:
41:1a:a2:91:83:35:65:a7:47:26:b3:bc:85:51:46:
5f:e7:55:4d:d9:c9:b5:a3:97:06:79:d4:34:cf:1d:
34:5a:bb:e5:3e:cc:8d:26:6b:e1:f3:95:6a:1c:cb:
84:67:a7:a6:de:3d:73:d6:f2:86:e5:a0:d0:3b:96:
50:52:0d:8a:20:ae:9e:8f:86:df:de:b0:c1:f3:d2:
72:d0:ea:5e:05:1e:f1:3f:68:b0:47:47:40:a6:01:
25:e9:e6:8a:85:26:0d:58:71:b4:56:a3:70:83:2d:
63:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D6:D0:6A:0C:94:EB:DF:D2:85:89:37:87:E2:7B:03:0D:89:DF:A2
X509v3 Authority Key Identifier:
keyid:A0:6C:E5:EE:EF:DB:5B:66:43:B1:8A:83:EB:E3:9B:3C:52:FF:D3:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/323430323a666463303a633830313a3a2f34382d3438203d3e20313337333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:fdc0:c801::/48
Signature Algorithm: sha256WithRSAEncryption
01:4e:fd:69:ce:d2:14:b3:75:b1:93:59:15:08:f2:a9:8a:8f:
d7:1d:8b:13:11:c7:bc:e7:5d:d7:b2:95:0e:66:1a:01:59:5e:
6c:83:b4:c2:04:14:d3:e1:c2:a8:78:f0:e9:bf:8b:89:3a:b0:
34:24:c8:88:dc:db:60:92:15:5e:d1:be:63:b0:19:4c:b0:7f:
b8:2e:8e:d2:0a:46:8c:ce:5d:84:37:c7:e8:98:89:98:08:dd:
75:d4:0c:c0:81:66:7e:0e:30:91:1c:fc:26:52:b2:5d:8c:a2:
0c:1e:e2:dc:19:31:d0:d1:47:ef:ef:d7:68:4e:9e:c9:fd:68:
f4:dc:0e:bf:ea:6a:67:f0:f5:6c:99:84:05:82:b5:88:98:b0:
a9:b2:8c:b3:59:8a:17:1b:2f:c3:d4:07:6f:95:b5:42:54:66:
93:4d:85:51:3e:07:bd:0c:30:3d:3a:80:85:2a:d3:2c:37:94:
50:f6:3b:45:79:07:97:be:65:81:64:e8:96:a8:ed:41:0b:80:
02:6c:f4:a9:f9:39:8f:3f:d9:36:36:c5:95:1d:59:90:0c:1f:
59:69:39:26:c8:00:7a:b5:f0:cd:d9:e6:64:05:82:62:ab:c4:
e8:7f:c4:44:59:d3:3c:af:63:f6:6f:2d:b5:17:23:89:84:44:
36:3d:ef:47
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUSVI/PwIfEYge+ZJ0qHo90GEIRtswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA2Q0U1RUVFRkRCNUI2NjQzQjE4QTgzRUJFMzlCM0M1
MkZGRDMwNTAeFw0yNjA1MDMwMzAzMTlaFw0yNzA1MDIwMzA4MTlaMDMxMTAvBgNV
BAMTKDFDRDZEMDZBMEM5NEVCREZEMjg1ODkzNzg3RTI3QjAzMEQ4OURGQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgrT7HP8E18wm2wWykf2O0SYLz
GdO5pK1L0ZuY/h8c6nW+VhR1zPgOq9wBWYIt3W3hCY3A+W58QzAI37Q7a/btCeUP
zwE6+Zd1UGp/b4iDMKqZtqhcKn0gEMhNqDLUg0zA7sgHb48zXMzcS3ku9JGyYgqJ
1HdBx1KMmppRUcDKk9ydlJGeE82FM0PRf7qLcz0qK6XVjkEaopGDNWWnRyazvIVR
Rl/nVU3ZybWjlwZ51DTPHTRau+U+zI0ma+HzlWocy4Rnp6bePXPW8obloNA7llBS
DYogrp6Pht/esMHz0nLQ6l4FHvE/aLBHR0CmASXp5oqFJg1YcbRWo3CDLWNhAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUHNbQagyU69/ShYk3h+J7Aw2J36IwHwYDVR0j
BBgwFoAUoGzl7u/bW2ZDsYqD6+ObPFL/0wUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDEwODViNGEtZjU3My00MmYzLTgyNWMtMWNmMGM4NzJiMTUyLzAvQTA2Q0U1RUVF
RkRCNUI2NjQzQjE4QTgzRUJFMzlCM0M1MkZGRDMwNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BMDZDRTVFRUVGREI1QjY2NDNCMThBODNFQkUzOUIzQzUyRkZE
MzA1LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QxMDg1YjRhLWY1NzMtNDJmMy04
MjVjLTFjZjBjODcyYjE1Mi8wLzMyMzQzMDMyM2E2NjY0NjMzMDNhNjMzODMwMzEz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzczMzM2MzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk
Av3AyAEwDQYJKoZIhvcNAQELBQADggEBAAFO/WnO0hSzdbGTWRUI8qmKj9cdixMR
x7znXdeylQ5mGgFZXmyDtMIEFNPhwqh48Om/i4k6sDQkyIjc22CSFV7RvmOwGUyw
f7gujtIKRozOXYQ3x+iYiZgI3XXUDMCBZn4OMJEc/CZSsl2Mogwe4twZMdDRR+/v
12hOnsn9aPTcDr/qamfw9WyZhAWCtYiYsKmyjLNZihcbL8PUB2+VtUJUZpNNhVE+
B70MMD06gIUq0yw3lFD2O0V5B5e+ZYFk6Jao7UELgAJs9Kn5OY8/2TY2xZUdWZAM
H1lpOSbIAHq18M3Z5mQFgmKrxOh/xERZ0zyvY/ZvLbUXI4mERDY970c=
-----END CERTIFICATE-----
Generated at Wed May 13 15:44:47 2026 by rpki-client