
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/323030313a6466323a346238303a3a2f34382d3438203d3e20313339343537.roa
File: 323030313a6466323a346238303a3a2f34382d3438203d3e20313339343537.roa (raw, json)
Hash identifier: oMj1Nm7h+Y4mu9LBu3K/xKLS+Wp19Y5meMISqDSZ+JY=
Subject key identifier: 3C:3D:46:8F:A5:F8:76:91:45:37:A1:97:C2:A4:62:B2:77:5F:92:5C
Certificate issuer: /CN=01572889DF1075E65143A4EF4BC1D8C749046C13
Certificate serial: 0674DE930D97876422FE8022F7F1B1E007DC1063
Authority key identifier: 01:57:28:89:DF:10:75:E6:51:43:A4:EF:4B:C1:D8:C7:49:04:6C:13
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01572889DF1075E65143A4EF4BC1D8C749046C13.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/323030313a6466323a346238303a3a2f34382d3438203d3e20313339343537.roa
Signing time: Sun 03 May 2026 03:11:47 +0000
ROA not before: Sun 03 May 2026 03:06:47 +0000
ROA not after: Sun 02 May 2027 03:11:47 +0000
asID: 139457
IP address blocks: 2001:df2:4b80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.crl
rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01572889DF1075E65143A4EF4BC1D8C749046C13.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:17:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:74:de:93:0d:97:87:64:22:fe:80:22:f7:f1:b1:e0:07:dc:10:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01572889DF1075E65143A4EF4BC1D8C749046C13
Validity
Not Before: May 3 03:06:47 2026 GMT
Not After : May 2 03:11:47 2027 GMT
Subject: CN=3C3D468FA5F876914537A197C2A462B2775F925C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6b:59:67:dd:4e:31:c4:48:dc:ad:89:85:94:
8b:3c:40:9b:ba:6e:15:53:5d:86:03:6e:78:3b:e1:
57:41:11:cc:d0:37:06:38:8f:ed:31:4c:1f:b6:f7:
41:0e:25:dd:43:94:8f:de:f9:a8:e3:8c:19:53:05:
5a:cd:e4:5f:36:8d:79:b9:f5:71:be:87:09:0a:24:
87:a4:c7:47:90:3e:fa:c3:80:12:0e:3f:2d:4e:61:
cc:62:e6:d3:1a:e0:e9:df:aa:38:ce:b5:95:87:5f:
26:5d:97:ce:d4:1f:31:9a:9e:17:21:94:df:ae:5e:
90:de:46:d1:99:c2:9d:30:55:5b:57:43:a3:44:84:
f2:92:4c:a5:83:f0:a6:8d:4f:83:8a:0f:da:22:62:
bc:0c:e6:c0:02:52:22:78:5f:f6:a2:22:dd:f2:31:
b0:f7:68:02:78:3d:24:dd:8b:9d:52:2f:55:2e:42:
7c:d5:d3:9e:95:90:68:77:20:44:19:1c:50:50:cd:
84:fa:7e:c3:ae:fc:39:cc:78:d9:84:3e:cc:51:cf:
8b:a8:d8:0b:c4:f3:38:ee:07:38:32:dc:cb:90:12:
a7:aa:96:a7:46:a1:32:70:83:70:34:d1:2e:31:b7:
d7:21:d6:11:f2:f9:c2:9e:44:ef:4f:55:67:fb:ae:
26:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3D:46:8F:A5:F8:76:91:45:37:A1:97:C2:A4:62:B2:77:5F:92:5C
X509v3 Authority Key Identifier:
keyid:01:57:28:89:DF:10:75:E6:51:43:A4:EF:4B:C1:D8:C7:49:04:6C:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01572889DF1075E65143A4EF4BC1D8C749046C13.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/323030313a6466323a346238303a3a2f34382d3438203d3e20313339343537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:4b80::/48
Signature Algorithm: sha256WithRSAEncryption
63:3a:9b:60:2f:1c:21:5b:72:34:0c:48:30:20:3f:59:39:34:
bf:90:f4:4f:cf:6b:2f:aa:8d:21:d2:a6:c1:ec:a4:2a:d3:0a:
17:a7:60:3b:90:2b:a9:a4:cb:a8:a9:c6:fb:07:8b:26:b7:d7:
04:3d:cb:38:b4:a4:e3:f2:21:9c:b4:6d:2f:b2:bb:91:b4:bb:
6c:e1:0b:d6:a3:af:43:da:da:07:a8:ae:fc:20:a7:20:a9:68:
fa:b7:90:ce:69:c6:19:ef:e6:1a:23:3d:49:97:20:a6:30:62:
eb:f1:b7:32:3f:4b:b3:00:3a:d7:3e:bc:75:e6:19:af:fe:fa:
4d:87:cd:92:bd:79:b5:e1:71:22:e6:3d:f3:a8:12:f6:aa:23:
a9:6f:96:0d:eb:d7:d2:55:3b:97:37:05:ed:77:ab:81:57:0b:
51:09:7e:61:28:90:8b:1f:31:fa:9f:83:96:96:86:70:b3:52:
ec:49:69:de:44:33:0a:dc:e5:7c:6a:0a:02:3c:a0:dc:1d:b7:
26:35:48:dd:e1:fc:3c:52:a8:a1:08:b4:6e:c1:9d:8c:60:1d:
57:82:c5:28:78:ae:62:f0:c7:47:80:58:a2:86:71:14:8c:8e:
2b:c6:b2:1b:8e:35:02:56:e8:3f:76:01:9e:bc:f4:59:f1:d2:
25:89:7a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:47:20 2026 by rpki-client