
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/323030313a6466363a636330303a3a2f34382d3438203d3e203535363833.roa
File: 323030313a6466363a636330303a3a2f34382d3438203d3e203535363833.roa (raw, json)
Hash identifier: SaxfvfB1C+pa8JqacbPuSe8u4XyvvbZQ+27IK/agWXM=
Subject key identifier: 9D:FB:E0:08:25:30:84:28:5C:7A:06:ED:F2:0F:D9:E1:70:77:A9:D2
Certificate issuer: /CN=046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2
Certificate serial: 4F8668959880A8D897AC93E30166B8530A866AFC
Authority key identifier: 04:6A:4B:8C:47:8B:38:CB:7E:FB:9F:06:A5:AD:9C:74:86:4E:9F:D2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/323030313a6466363a636330303a3a2f34382d3438203d3e203535363833.roa
Signing time: Sun 03 May 2026 03:09:25 +0000
ROA not before: Sun 03 May 2026 03:04:25 +0000
ROA not after: Sun 02 May 2027 03:09:25 +0000
asID: 55683
IP address blocks: 2001:df6:cc00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.crl
rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:44:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:86:68:95:98:80:a8:d8:97:ac:93:e3:01:66:b8:53:0a:86:6a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2
Validity
Not Before: May 3 03:04:25 2026 GMT
Not After : May 2 03:09:25 2027 GMT
Subject: CN=9DFBE008253084285C7A06EDF20FD9E17077A9D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4e:d1:16:62:80:4d:6a:2b:bb:3a:fd:3f:be:
9c:a1:66:50:40:1c:b6:3c:47:14:86:3b:9f:5e:5b:
bd:28:b9:60:f3:d2:dc:9f:22:7e:94:6f:8f:b7:b0:
dc:c3:8f:97:4a:27:10:cc:65:65:ef:ec:f9:30:fb:
d0:f7:3f:b2:99:14:4d:ff:96:08:36:7c:b1:00:cc:
25:67:64:fa:b3:a8:8a:5c:4a:b3:92:d2:3c:b0:42:
ba:6e:e5:e4:31:5f:16:8d:9b:c5:71:e5:ef:a7:78:
f4:e9:94:c4:0e:42:98:c6:a2:9c:b1:f8:d7:31:e9:
70:c8:cf:a6:3e:93:a5:ba:2b:4f:e9:c1:cf:8c:7f:
7b:75:5b:bc:59:68:44:7d:ab:25:ae:0c:71:5a:28:
50:a6:25:64:6a:c7:0c:34:8d:b5:6e:f9:a1:16:56:
61:a0:18:2d:86:b1:30:1e:06:f5:8b:f4:99:e3:f7:
c8:01:37:3e:9b:e9:83:8b:5f:d2:97:00:45:b0:a3:
e3:dc:4d:8a:ff:a7:8c:09:d7:23:a2:15:91:4b:a1:
fd:e5:e4:2d:af:a3:24:37:cc:39:14:43:8a:c1:4c:
2c:e6:cd:21:ee:08:b2:cf:e2:9e:43:c9:d4:72:95:
ef:eb:96:7a:46:6e:86:ed:b3:a4:e3:da:9a:cd:de:
ed:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FB:E0:08:25:30:84:28:5C:7A:06:ED:F2:0F:D9:E1:70:77:A9:D2
X509v3 Authority Key Identifier:
keyid:04:6A:4B:8C:47:8B:38:CB:7E:FB:9F:06:A5:AD:9C:74:86:4E:9F:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/323030313a6466363a636330303a3a2f34382d3438203d3e203535363833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:cc00::/48
Signature Algorithm: sha256WithRSAEncryption
0b:66:7d:55:20:88:66:d2:51:46:8c:63:fc:c3:d0:2d:92:b4:
8d:58:52:e7:a5:e9:b2:81:a3:34:77:10:ae:6c:8c:f2:41:d0:
01:2d:d8:25:7c:3f:ad:51:21:8a:ca:e1:33:52:96:9a:74:51:
22:a7:5f:4f:c2:be:f2:76:f2:9b:61:97:a2:9a:34:4b:34:80:
10:8c:12:94:00:a6:23:72:65:53:9f:a0:25:4c:c5:52:56:5a:
04:cf:e4:eb:5c:64:6b:09:f1:17:3e:31:26:09:ad:7b:39:75:
8f:d8:ee:a6:f6:d1:51:f2:f7:a6:b5:f3:2e:4e:81:29:45:4b:
fa:66:8e:0b:11:b3:c5:96:b6:65:c8:26:87:d2:a8:cb:29:30:
81:27:9b:9f:17:04:92:44:40:ae:d9:2f:de:db:72:22:ea:e6:
98:36:d6:02:85:d0:bb:95:d9:71:ed:79:fe:83:23:66:92:ce:
64:41:ca:61:5b:d0:14:58:aa:d3:21:cf:8e:be:88:14:bf:79:
73:9a:1a:a0:f3:f4:c1:3c:76:aa:34:e5:e0:f0:4d:c7:92:df:
16:eb:6e:50:7f:de:3c:c6:fb:03:a6:eb:cd:33:82:62:63:33:
09:aa:85:f1:ea:5c:7d:10:4c:36:e5:8d:fb:37:93:81:e9:86:
cb:ae:60:7a
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUT4ZolZiAqNiXrJPjAWa4UwqGavwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ2QTRCOEM0NzhCMzhDQjdFRkI5RjA2QTVBRDlDNzQ4
NjRFOUZEMjAeFw0yNjA1MDMwMzA0MjVaFw0yNzA1MDIwMzA5MjVaMDMxMTAvBgNV
BAMTKDlERkJFMDA4MjUzMDg0Mjg1QzdBMDZFREYyMEZEOUUxNzA3N0E5RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDTtEWYoBNaiu7Ov0/vpyhZlBA
HLY8RxSGO59eW70ouWDz0tyfIn6Ub4+3sNzDj5dKJxDMZWXv7Pkw+9D3P7KZFE3/
lgg2fLEAzCVnZPqzqIpcSrOS0jywQrpu5eQxXxaNm8Vx5e+nePTplMQOQpjGopyx
+Ncx6XDIz6Y+k6W6K0/pwc+Mf3t1W7xZaER9qyWuDHFaKFCmJWRqxww0jbVu+aEW
VmGgGC2GsTAeBvWL9Jnj98gBNz6b6YOLX9KXAEWwo+PcTYr/p4wJ1yOiFZFLof3l
5C2voyQ3zDkUQ4rBTCzmzSHuCLLP4p5DydRyle/rlnpGbobts6Tj2prN3u3dAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUnfvgCCUwhChcegbt8g/Z4XB3qdIwHwYDVR0j
BBgwFoAUBGpLjEeLOMt++58Gpa2cdIZOn9IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDNiOGFlOTctNjgxOC00OGE5LWFiZTQtZWRiOTYwNDlmM2M4LzAvMDQ2QTRCOEM0
NzhCMzhDQjdFRkI5RjA2QTVBRDlDNzQ4NjRFOUZEMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wNDZBNEI4QzQ3OEIzOENCN0VGQjlGMDZBNUFEOUM3NDg2NEU5
RkQyLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QzYjhhZTk3LTY4MTgtNDhhOS1h
YmU0LWVkYjk2MDQ5ZjNjOC8wLzMyMzAzMDMxM2E2NDY2MzYzYTYzNjMzMDMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzNTM2MzgzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDfbM
ADANBgkqhkiG9w0BAQsFAAOCAQEAC2Z9VSCIZtJRRoxj/MPQLZK0jVhS56XpsoGj
NHcQrmyM8kHQAS3YJXw/rVEhisrhM1KWmnRRIqdfT8K+8nbym2GXopo0SzSAEIwS
lACmI3JlU5+gJUzFUlZaBM/k61xkawnxFz4xJgmtezl1j9jupvbRUfL3prXzLk6B
KUVL+maOCxGzxZa2Zcgmh9KoyykwgSebnxcEkkRArtkv3ttyIurmmDbWAoXQu5XZ
ce15/oMjZpLOZEHKYVvQFFiq0yHPjr6IFL95c5oaoPP0wTx2qjTl4PBNx5LfFutu
UH/ePMb7A6brzTOCYmMzCaqF8epcfRBMNuWN+zeTgemGy65geg==
-----END CERTIFICATE-----
Generated at Wed May 13 05:54:37 2026 by rpki-client