
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a3231363a3a2f34382d3438203d3e20313337333239.roa
File: 323430323a343834303a3231363a3a2f34382d3438203d3e20313337333239.roa (raw, json)
Hash identifier: Im9g2+txBoxMJyrB1HnDRjR6Wu2b0izJvEUYHjiXpi0=
Subject key identifier: 8B:8E:30:AF:5C:B4:E5:79:FC:C8:74:A1:AD:50:6B:14:3D:5D:6B:76
Certificate issuer: /CN=C6F0EA3F498965C7361B5EBC2E891630AD2F39BA
Certificate serial: 4E764B70250F99FDB016772FCAC176F95B88DE9A
Authority key identifier: C6:F0:EA:3F:49:89:65:C7:36:1B:5E:BC:2E:89:16:30:AD:2F:39:BA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a3231363a3a2f34382d3438203d3e20313337333239.roa
Signing time: Sun 03 May 2026 03:12:47 +0000
ROA not before: Sun 03 May 2026 03:07:47 +0000
ROA not after: Sun 02 May 2027 03:12:47 +0000
asID: 137329
IP address blocks: 2402:4840:216::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.crl
rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:76:4b:70:25:0f:99:fd:b0:16:77:2f:ca:c1:76:f9:5b:88:de:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C6F0EA3F498965C7361B5EBC2E891630AD2F39BA
Validity
Not Before: May 3 03:07:47 2026 GMT
Not After : May 2 03:12:47 2027 GMT
Subject: CN=8B8E30AF5CB4E579FCC874A1AD506B143D5D6B76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:27:1e:e3:98:65:5a:19:bb:51:35:6d:c3:20:
97:70:8b:5f:6d:c5:e8:85:65:a6:43:a8:27:d8:2e:
f6:be:e8:c5:fa:cf:60:d1:4f:84:f5:47:58:07:53:
f7:d0:fa:b4:99:4b:75:63:8a:3f:6e:b6:6a:e5:d8:
79:2a:66:85:7c:1e:26:89:28:7d:7e:5f:a2:da:ba:
0f:3a:57:ff:e2:ca:0d:55:56:d4:1a:fa:47:10:cd:
ad:cd:47:93:96:26:62:78:64:79:18:4e:01:b8:52:
8f:37:88:82:dc:07:59:44:3a:ab:1b:33:27:fc:70:
9c:0f:49:93:3c:f6:76:08:bb:4a:89:32:86:da:e7:
be:4c:ae:ef:61:4e:5b:68:8a:e1:bc:2a:b6:0e:a3:
fc:33:98:ba:aa:78:69:e3:f6:12:56:2c:c7:55:d9:
f6:d8:c1:cc:85:92:88:ba:7a:18:74:1d:54:ac:82:
97:f2:5a:2a:96:8c:35:23:f7:f7:06:dd:5e:3b:f7:
87:1c:9b:73:6d:96:d9:ac:9c:df:5d:64:fd:93:99:
25:f3:eb:5a:1b:81:0f:56:10:d9:d4:2e:c2:2a:53:
12:a3:61:69:d1:18:b5:f0:ad:eb:46:2b:e9:e0:30:
88:cf:20:cb:5f:d8:a5:ab:c2:bb:f7:c8:47:df:1c:
f4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8E:30:AF:5C:B4:E5:79:FC:C8:74:A1:AD:50:6B:14:3D:5D:6B:76
X509v3 Authority Key Identifier:
keyid:C6:F0:EA:3F:49:89:65:C7:36:1B:5E:BC:2E:89:16:30:AD:2F:39:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a3231363a3a2f34382d3438203d3e20313337333239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:4840:216::/48
Signature Algorithm: sha256WithRSAEncryption
9b:ce:96:f6:a0:2a:b4:96:a2:c5:57:69:de:52:a1:81:26:96:
79:45:d7:aa:68:e9:72:a4:76:c0:1f:b1:cf:0d:96:13:de:de:
ba:30:04:e0:ff:d5:a3:e3:ab:21:0a:91:18:0f:80:af:d6:28:
e5:e8:1b:cc:1f:ba:41:48:d0:df:d7:53:a0:b9:fc:f9:38:46:
8c:8e:f2:06:39:91:19:ea:23:3d:d6:cf:cc:a7:09:cb:5b:71:
cd:2d:77:1d:7b:a0:34:a5:c7:14:9f:8c:9c:4d:5c:d5:40:21:
d9:d3:5e:57:7a:73:29:29:6d:e4:3e:27:f4:d3:19:ed:27:c3:
d7:7d:b7:38:f5:1e:12:0a:28:0d:41:74:4b:ba:2a:9c:e4:c0:
1a:c7:24:94:7e:a0:12:52:9c:38:0c:78:77:d0:14:06:ed:30:
97:22:04:67:ee:1c:4f:27:b5:0b:f0:f1:fe:fb:72:45:d8:26:
08:f0:e4:ee:81:8d:f0:30:52:75:16:b8:db:7a:37:c5:46:fe:
62:cd:fa:75:83:b8:10:b3:c5:ca:d0:8d:df:05:ef:ec:c9:fc:
35:ba:bc:58:eb:20:ce:9e:7c:d0:12:aa:a6:cf:ae:4b:2f:28:
ce:e3:9c:d3:a4:21:fa:86:85:fc:df:f1:da:b4:de:dd:a5:51:
57:58:e1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:50:06 2026 by rpki-client