
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/323430353a633934303a3a2f33322d3332203d3e20313430303132.roa
File: 323430353a633934303a3a2f33322d3332203d3e20313430303132.roa (raw, json)
Hash identifier: F9rq8pU2wW/Oa03Jq6P0raRbd+1OsCNjkCP/TyMkA1w=
Subject key identifier: FC:4E:24:D9:21:2C:2C:42:55:05:06:44:96:CB:C4:E4:AB:6C:20:5B
Certificate issuer: /CN=762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311
Certificate serial: 350593959AA7552D74D7254E6CB0085040B2AFB1
Authority key identifier: 76:2D:DF:A9:6C:CF:A5:1E:66:E5:F8:88:33:DA:AF:3C:CC:EB:43:11
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/323430353a633934303a3a2f33322d3332203d3e20313430303132.roa
Signing time: Sun 03 May 2026 03:13:03 +0000
ROA not before: Sun 03 May 2026 03:08:03 +0000
ROA not after: Sun 02 May 2027 03:13:03 +0000
asID: 140012
IP address blocks: 2405:c940::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.crl
rsync://rpki-rsync.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:40:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:05:93:95:9a:a7:55:2d:74:d7:25:4e:6c:b0:08:50:40:b2:af:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311
Validity
Not Before: May 3 03:08:03 2026 GMT
Not After : May 2 03:13:03 2027 GMT
Subject: CN=FC4E24D9212C2C425505064496CBC4E4AB6C205B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4b:0c:dd:a2:93:60:7e:81:6a:24:1e:8a:08:
75:a4:ab:9a:18:c4:08:d8:35:ed:ff:11:2b:ae:d8:
df:26:49:7c:c3:15:01:a5:e5:72:15:e7:61:3c:24:
49:ec:a5:bb:69:2f:df:67:e7:d6:51:41:d2:26:ce:
fa:63:46:61:86:41:d9:d3:ef:9a:4b:bc:a5:91:f2:
88:e1:e8:2e:71:17:7d:20:1f:b6:16:47:75:fe:94:
d9:e6:70:1d:8c:52:a6:2c:e3:96:a8:8c:3d:98:f1:
e6:24:8a:ba:4e:45:32:de:d0:91:f5:a3:00:63:48:
1e:3b:09:f9:72:86:f8:69:b7:5d:24:bf:ab:36:b8:
4b:fd:f2:6c:c0:98:cc:d1:79:99:01:e5:88:77:d5:
c7:b6:32:24:32:da:b2:30:96:a5:93:c3:39:0a:e7:
cc:fd:35:9a:a1:85:f8:10:30:92:4e:c4:bc:0b:e2:
4b:8e:8c:ae:1a:21:d9:47:55:ed:eb:f5:ee:39:5d:
81:6b:fa:0a:19:7b:c2:59:72:e5:fd:02:7b:25:cc:
81:da:28:ee:fa:4f:fe:c3:38:7d:de:b3:fa:01:0f:
d2:3a:e5:1c:0c:79:03:f7:c7:ab:18:5f:00:01:c1:
c7:bd:0d:6a:de:fd:4c:3b:7d:14:24:27:ae:48:b9:
2f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4E:24:D9:21:2C:2C:42:55:05:06:44:96:CB:C4:E4:AB:6C:20:5B
X509v3 Authority Key Identifier:
keyid:76:2D:DF:A9:6C:CF:A5:1E:66:E5:F8:88:33:DA:AF:3C:CC:EB:43:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/323430353a633934303a3a2f33322d3332203d3e20313430303132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:c940::/32
Signature Algorithm: sha256WithRSAEncryption
6b:2f:6b:43:4e:56:3d:76:4e:9a:86:40:20:82:05:da:0c:82:
03:5b:3e:ba:a6:43:30:77:a5:3d:65:a9:ed:da:70:a0:10:d1:
83:4f:23:25:10:3b:c1:2c:91:95:8b:b1:7c:24:a2:b4:46:37:
14:7e:5c:ce:69:8d:2c:a3:0f:1b:f8:72:fc:a2:9e:81:a1:10:
8d:a3:2d:8b:b9:38:15:3b:97:54:7e:c9:c6:39:11:2e:6b:e6:
06:fe:9d:ff:e3:aa:51:4a:4f:7e:e4:28:5c:45:ca:82:4f:92:
db:eb:e6:df:f2:10:52:32:e7:65:d0:a1:e4:53:87:41:d9:b3:
db:64:2a:79:2f:3c:af:5c:d5:b7:06:95:be:80:f1:3e:11:bb:
04:60:44:a8:fe:a9:e7:31:2e:7a:b7:a4:57:7c:35:09:8f:e0:
7f:a0:2c:0f:c4:a5:fc:00:0f:de:94:64:f1:c4:32:4c:85:f5:
c6:bd:4f:5c:2a:37:43:33:9d:6e:b6:95:90:13:b0:b7:03:1b:
8f:71:0e:8b:49:a2:07:3b:5a:49:4b:50:16:19:53:44:d7:b0:
72:02:ae:a3:fb:81:0e:cc:87:41:90:3d:5d:95:6f:17:03:d7:
81:d7:97:18:06:b6:08:52:a9:a2:f1:25:ac:5f:13:8f:26:18:
50:c9:ca:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:35:09 2026 by rpki-client