
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/323430333a386334303a3a2f33322d3438203d3e20313338303634.roa
File: 323430333a386334303a3a2f33322d3438203d3e20313338303634.roa (raw, json)
Hash identifier: ltF4qAeqI9c/UFyvRzczrWncEgF/tAbn2DkZoTPs4Ww=
Subject key identifier: 9F:A3:2A:82:11:2D:D8:14:BA:CF:BD:91:92:3D:D3:9B:9E:86:5C:C5
Certificate issuer: /CN=EAB7F888E6D8656A93A8E50773CF5352039E7B93
Certificate serial: 6B2D180FD1A033433713A643D1B73222B80A139B
Authority key identifier: EA:B7:F8:88:E6:D8:65:6A:93:A8:E5:07:73:CF:53:52:03:9E:7B:93
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAB7F888E6D8656A93A8E50773CF5352039E7B93.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/323430333a386334303a3a2f33322d3438203d3e20313338303634.roa
Signing time: Sun 03 May 2026 03:12:34 +0000
ROA not before: Sun 03 May 2026 03:07:34 +0000
ROA not after: Sun 02 May 2027 03:12:34 +0000
asID: 138064
IP address blocks: 2403:8c40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/EAB7F888E6D8656A93A8E50773CF5352039E7B93.crl
rsync://rpki-rsync.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/EAB7F888E6D8656A93A8E50773CF5352039E7B93.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAB7F888E6D8656A93A8E50773CF5352039E7B93.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:2d:18:0f:d1:a0:33:43:37:13:a6:43:d1:b7:32:22:b8:0a:13:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EAB7F888E6D8656A93A8E50773CF5352039E7B93
Validity
Not Before: May 3 03:07:34 2026 GMT
Not After : May 2 03:12:34 2027 GMT
Subject: CN=9FA32A82112DD814BACFBD91923DD39B9E865CC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:02:2c:36:8c:fb:06:71:bd:7b:9b:c7:9b:7b:
af:c7:a3:1d:3f:c2:09:bf:23:4e:32:91:b9:47:3b:
8a:ed:70:59:d7:64:cf:ca:9d:34:c5:45:14:e8:cb:
1e:c3:33:12:26:50:97:37:75:ec:5a:8c:bf:e0:9e:
a7:30:40:a7:9a:37:24:36:5c:75:9a:22:da:d4:46:
5d:2c:ef:6e:2c:04:87:be:dd:a4:21:21:07:b1:9e:
67:2e:23:f9:8d:7f:40:a7:4d:e2:94:e5:df:20:00:
1e:24:cb:01:7c:a8:15:0a:a4:0c:ee:3c:ab:13:65:
81:b2:a8:fa:b8:70:ae:c5:e8:00:ef:77:f2:a4:4b:
9b:91:42:c7:4b:c1:8b:36:a7:fd:bc:a9:09:6e:f6:
d5:4e:e6:25:02:1c:4c:70:36:f1:0c:c1:01:7c:84:
34:92:05:48:8b:a2:78:68:e5:5f:f0:16:d2:ab:81:
b4:57:f1:dc:8c:dc:4b:87:35:e0:c3:4d:65:97:50:
cf:f1:0f:6b:56:e1:75:a2:64:d2:95:06:05:73:48:
11:97:d4:ab:87:1a:5c:3d:f4:e6:81:40:97:82:67:
32:3f:04:a6:89:c0:a9:83:16:5a:58:f2:43:6c:4a:
64:c6:9d:a4:6b:53:ad:a1:34:9d:43:5a:1d:c9:41:
b0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A3:2A:82:11:2D:D8:14:BA:CF:BD:91:92:3D:D3:9B:9E:86:5C:C5
X509v3 Authority Key Identifier:
keyid:EA:B7:F8:88:E6:D8:65:6A:93:A8:E5:07:73:CF:53:52:03:9E:7B:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/EAB7F888E6D8656A93A8E50773CF5352039E7B93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAB7F888E6D8656A93A8E50773CF5352039E7B93.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/323430333a386334303a3a2f33322d3438203d3e20313338303634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:8c40::/32
Signature Algorithm: sha256WithRSAEncryption
09:93:54:35:4e:ef:cc:dd:cf:0e:da:0e:e8:62:c9:ee:05:03:
14:6c:0c:40:cc:8f:25:85:ef:85:47:d0:89:ac:16:ea:e7:25:
3c:dc:9f:ce:2a:1b:97:0f:45:71:19:06:10:4c:f7:9c:50:24:
d3:d2:00:d6:65:e3:f1:1f:f7:da:25:3b:89:a7:36:c5:e0:fc:
be:a9:89:62:81:51:5c:da:86:36:3b:60:05:7d:14:0f:25:a7:
0e:d2:83:b3:79:ab:95:de:61:96:a5:63:5b:73:80:b2:56:98:
5c:2e:5d:62:f3:fe:08:23:48:a3:1b:f7:a2:71:e9:17:64:64:
78:ea:75:78:31:c6:f3:f7:bc:fe:87:61:01:2f:74:88:f4:67:
56:d5:56:36:c5:01:78:fc:34:11:2f:0f:42:4f:7e:f5:74:b4:
7a:a6:d0:ac:04:95:e0:ad:0c:c1:4a:65:0e:cc:be:e8:f3:db:
40:e1:e7:bf:32:d4:cf:58:15:4e:b9:b9:4c:f4:af:51:a1:e0:
f0:14:b7:91:35:97:41:a6:83:d5:b2:54:d3:89:f4:21:c0:af:
08:09:db:b1:69:d2:18:9c:55:4c:50:ed:18:8b:ce:f2:40:c1:
a1:b3:3f:aa:16:ef:6d:f6:b0:73:f6:52:97:7b:75:9e:47:8a:
67:9a:9b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:59:39 2026 by rpki-client