
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a3130363a3a2f34382d3438203d3e20313337333239.roa
File: 323430323a343834303a3130363a3a2f34382d3438203d3e20313337333239.roa (raw, json)
Hash identifier: 973hiSbvLqBbI7qsG6P3Q7p1003VDddC0E5Gpm0EPSk=
Subject key identifier: AF:A6:97:D4:86:D4:6E:79:7C:05:ED:79:D7:FF:65:1F:E8:B3:48:A1
Certificate issuer: /CN=C6F0EA3F498965C7361B5EBC2E891630AD2F39BA
Certificate serial: 1403D1E11AF56DE790BC9D2A2ED806B0514AB48C
Authority key identifier: C6:F0:EA:3F:49:89:65:C7:36:1B:5E:BC:2E:89:16:30:AD:2F:39:BA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a3130363a3a2f34382d3438203d3e20313337333239.roa
Signing time: Sun 03 May 2026 03:12:43 +0000
ROA not before: Sun 03 May 2026 03:07:43 +0000
ROA not after: Sun 02 May 2027 03:12:43 +0000
asID: 137329
IP address blocks: 2402:4840:106::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.crl
rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:03:d1:e1:1a:f5:6d:e7:90:bc:9d:2a:2e:d8:06:b0:51:4a:b4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C6F0EA3F498965C7361B5EBC2E891630AD2F39BA
Validity
Not Before: May 3 03:07:43 2026 GMT
Not After : May 2 03:12:43 2027 GMT
Subject: CN=AFA697D486D46E797C05ED79D7FF651FE8B348A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:58:e2:f9:d5:9f:da:4f:48:16:4b:e9:a3:3b:
d7:00:88:f1:40:63:60:ae:ee:35:16:24:14:d1:f6:
ab:81:17:85:75:17:ca:b0:37:52:af:bc:8f:3b:bf:
ea:7e:f8:d5:93:39:e9:02:dd:bb:40:af:84:7c:4a:
06:7b:81:1a:39:33:64:e7:a9:51:40:14:24:ac:5f:
8a:22:40:cc:bf:27:a3:67:9e:30:42:cb:91:af:e2:
5f:f0:52:02:f8:2e:5f:c3:2a:5d:f4:bc:1d:27:15:
f0:b8:de:85:0c:5f:da:e8:5b:0c:c4:e4:b1:e6:ba:
de:ae:5d:24:16:5b:70:e6:99:dc:af:33:6e:df:8a:
62:8a:a5:04:cf:c2:2c:9a:a5:36:9c:11:5b:09:e8:
00:2a:27:e0:4c:80:d6:64:f3:1c:3b:ac:62:e2:05:
5d:91:d9:b6:55:0e:de:59:71:3c:b0:0c:38:6c:9d:
d2:0f:1e:53:51:55:04:cb:f5:ea:08:0e:f2:4d:01:
02:94:96:3d:65:ce:93:21:c0:89:97:3c:73:64:0d:
cc:46:e0:f0:20:8e:26:b2:26:da:68:f9:23:a9:45:
b3:c0:32:f6:25:88:b0:55:76:32:fe:d1:e3:52:af:
b5:08:5f:64:9e:72:99:39:9f:40:97:e2:96:e5:4c:
6a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A6:97:D4:86:D4:6E:79:7C:05:ED:79:D7:FF:65:1F:E8:B3:48:A1
X509v3 Authority Key Identifier:
keyid:C6:F0:EA:3F:49:89:65:C7:36:1B:5E:BC:2E:89:16:30:AD:2F:39:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a3130363a3a2f34382d3438203d3e20313337333239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:4840:106::/48
Signature Algorithm: sha256WithRSAEncryption
24:02:4e:07:4f:4a:bd:f1:a0:d9:31:36:1e:cc:36:eb:c9:7f:
a5:31:7c:5a:31:d9:be:29:d7:36:96:a3:0f:68:c8:24:e1:72:
0c:20:5b:94:3c:35:59:e9:ec:7f:84:bd:db:ea:5f:70:9c:85:
82:c9:c0:36:c7:8c:c0:86:36:e1:00:0d:e5:96:83:37:49:96:
c7:61:80:5b:ba:1b:a6:91:bf:a2:76:19:80:e4:95:11:b6:94:
9d:fa:75:dc:dc:b8:97:2f:f4:71:eb:8b:84:75:8c:72:c8:57:
03:6b:32:62:3d:0d:5e:dd:cc:a8:a6:2a:94:eb:1a:c1:fb:15:
0f:6f:19:f3:66:cb:5c:39:62:26:3e:03:8f:fd:24:31:b3:95:
e7:4d:89:78:94:3b:fa:dd:84:f5:b8:7d:22:9f:29:01:e0:52:
3b:69:d7:e1:18:cd:fe:df:a3:92:57:56:f2:fb:29:0b:78:d3:
c3:c9:75:1d:53:ab:80:13:92:a9:46:0b:2d:be:fe:d8:ab:bf:
54:b7:bd:cc:4e:f4:cb:5a:c6:dc:6e:dd:92:88:bc:47:5e:2b:
a3:08:28:7d:8e:4a:10:58:3e:bb:d1:a5:0c:ea:05:e1:7e:bf:
f7:7f:61:4a:31:96:ab:46:0c:d9:6c:72:3e:27:e0:2e:eb:28:
3c:82:60:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:43:08 2026 by rpki-client