
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/323030313a6466313a353638303a3a2f34382d3438203d3e20313339333738.roa
File: 323030313a6466313a353638303a3a2f34382d3438203d3e20313339333738.roa (raw, json)
Hash identifier: 2PZRw81bQ6C6T+rhPpeS2pJwxgW1qGxBfnel2RNaMVk=
Subject key identifier: 6C:5B:77:E5:E8:FB:9D:FE:3F:2A:A2:80:D5:BE:F4:43:FC:54:0F:72
Certificate issuer: /CN=C07483FD18FF1839E62A24FF8ED607A44F4A2EF1
Certificate serial: 24CC4F04772B5E090AA90A2384B5053639BC4B
Authority key identifier: C0:74:83:FD:18:FF:18:39:E6:2A:24:FF:8E:D6:07:A4:4F:4A:2E:F1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/323030313a6466313a353638303a3a2f34382d3438203d3e20313339333738.roa
Signing time: Sun 03 May 2026 03:09:52 +0000
ROA not before: Sun 03 May 2026 03:04:52 +0000
ROA not after: Sun 02 May 2027 03:09:52 +0000
asID: 139378
IP address blocks: 2001:df1:5680::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.crl
rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:27:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:cc:4f:04:77:2b:5e:09:0a:a9:0a:23:84:b5:05:36:39:bc:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C07483FD18FF1839E62A24FF8ED607A44F4A2EF1
Validity
Not Before: May 3 03:04:52 2026 GMT
Not After : May 2 03:09:52 2027 GMT
Subject: CN=6C5B77E5E8FB9DFE3F2AA280D5BEF443FC540F72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:64:09:be:81:d2:68:c5:30:79:0d:81:46:be:
eb:d8:50:64:0f:55:8b:63:d2:bc:7f:35:26:a8:3f:
32:9f:d3:a9:ab:14:5d:68:33:b0:4d:1c:c1:c2:2e:
e6:5f:fb:24:d9:e4:e5:5c:0f:0a:b1:be:71:25:b4:
4b:13:fd:b4:11:9c:d7:35:6e:60:7a:b7:55:9e:54:
35:e9:c9:56:26:21:cb:cf:a4:52:a4:81:f5:61:af:
09:c5:c6:54:1c:86:1f:be:02:cd:17:32:d0:04:b4:
5b:37:3a:ce:1e:bc:cb:9f:b6:35:e5:03:e9:43:d9:
d1:35:9a:d1:f3:39:b6:ce:54:59:cc:ef:3a:63:aa:
6c:dc:4c:d9:89:72:ad:e6:a8:69:81:51:5b:a4:55:
e0:5d:ba:96:b0:26:15:3e:05:6b:fe:51:11:2d:c9:
4d:97:05:16:20:d1:fc:61:fd:cd:e5:72:f7:f8:3d:
8b:58:23:11:fb:99:b9:c3:1c:03:a5:b3:97:86:3b:
a6:86:25:64:5c:64:69:43:64:6e:8c:6f:86:c2:92:
ac:75:8d:af:05:90:7d:3e:79:d3:56:b6:5c:f5:63:
6a:94:00:db:73:75:d8:5d:c2:9a:ab:25:b0:26:7b:
b8:c0:29:c7:a2:2c:93:b0:05:e9:db:ad:a9:dc:b4:
20:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5B:77:E5:E8:FB:9D:FE:3F:2A:A2:80:D5:BE:F4:43:FC:54:0F:72
X509v3 Authority Key Identifier:
keyid:C0:74:83:FD:18:FF:18:39:E6:2A:24:FF:8E:D6:07:A4:4F:4A:2E:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/323030313a6466313a353638303a3a2f34382d3438203d3e20313339333738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df1:5680::/48
Signature Algorithm: sha256WithRSAEncryption
9f:c4:36:8c:c2:ed:60:ce:06:f9:9c:a2:88:7e:43:ef:4d:14:
55:42:88:cc:3a:3f:f3:f7:c1:29:25:cb:63:eb:87:55:3c:79:
77:fb:fa:76:f2:58:16:4d:11:9f:26:7d:c0:2e:b8:f2:f2:7e:
f1:42:6b:23:a0:ff:fe:26:71:aa:de:da:2e:08:e0:95:ee:c0:
3e:94:c1:29:b0:c6:81:6c:d7:76:95:d4:de:7e:42:ca:93:4e:
56:38:01:24:f2:a7:9b:45:0c:e4:b7:22:a9:96:77:dd:03:a9:
48:26:21:77:10:72:7c:ea:f9:ec:fe:34:8d:c0:39:21:06:65:
a1:ce:28:49:ed:81:b3:2e:0d:dd:fe:e5:a0:95:b6:56:3c:ae:
e7:34:dc:76:d1:2f:e8:73:b7:3e:0d:93:75:a1:fa:6f:c7:97:
02:be:a6:65:49:d8:b1:bd:88:cd:de:16:11:79:1b:f0:8c:ef:
07:6c:90:59:a2:81:31:22:44:1c:60:ca:75:9e:0a:63:a2:25:
61:c9:53:60:ff:b8:19:06:15:57:f6:bb:24:93:47:13:64:47:
43:9d:dc:4b:11:7c:60:26:8e:a2:a9:f5:c0:6b:73:f5:bf:c7:
a1:09:d6:14:1b:42:0c:93:50:65:9b:4d:8a:88:9b:8a:eb:fd:
47:e9:e6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:01:32 2026 by rpki-client