
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/323430343a613463303a3a2f33322d3438203d3e20313338383232.roa
File: 323430343a613463303a3a2f33322d3438203d3e20313338383232.roa (raw, json)
Hash identifier: reeIiuxuHqr4MgHpxEsClw20lXN/gmt1yXdlXdiGltI=
Subject key identifier: 38:6D:C9:8E:51:17:47:6B:A7:4A:9E:D4:6B:51:14:1B:81:63:FB:B0
Certificate issuer: /CN=0D2802EC43905EEA387602B994B8B579041C8507
Certificate serial: 6AC0C9F92B9BB632A3041E39DAAB47DEEADEFBA6
Authority key identifier: 0D:28:02:EC:43:90:5E:EA:38:76:02:B9:94:B8:B5:79:04:1C:85:07
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/323430343a613463303a3a2f33322d3438203d3e20313338383232.roa
Signing time: Sun 03 May 2026 03:13:13 +0000
ROA not before: Sun 03 May 2026 03:08:13 +0000
ROA not after: Sun 02 May 2027 03:13:13 +0000
asID: 138822
IP address blocks: 2404:a4c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.crl
rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:43:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:c0:c9:f9:2b:9b:b6:32:a3:04:1e:39:da:ab:47:de:ea:de:fb:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D2802EC43905EEA387602B994B8B579041C8507
Validity
Not Before: May 3 03:08:13 2026 GMT
Not After : May 2 03:13:13 2027 GMT
Subject: CN=386DC98E5117476BA74A9ED46B51141B8163FBB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:d6:7b:26:cf:4c:dd:21:74:d4:b1:0d:6c:
a3:45:fc:4d:86:d4:41:f6:99:2d:86:9c:6a:1b:c2:
f5:b9:95:ec:87:24:17:18:68:06:9a:ea:0e:d8:f5:
b8:40:3e:6e:d1:92:dd:da:80:95:42:e2:f1:01:15:
cd:dd:b4:06:f1:46:2b:d5:3d:30:2d:ce:17:81:a2:
5f:23:dd:49:2b:ff:48:81:30:95:c5:6d:1f:6d:6f:
fc:55:f7:6c:e9:fc:90:0b:73:4d:90:2c:84:47:7c:
5b:90:0d:6d:09:d7:0a:45:9d:d9:4a:a0:50:ea:2f:
20:37:4d:79:6a:91:84:2b:98:d3:f9:19:bc:ce:74:
7e:e0:ba:4d:a4:25:a3:b7:3e:8d:ba:13:61:0e:00:
13:52:53:14:b6:67:ae:c7:6a:5a:9e:0d:5c:e9:23:
3b:70:12:9d:26:8f:cd:93:00:3f:04:7f:7b:1f:e6:
b4:7b:6e:53:31:b6:13:64:96:b5:7d:bc:ff:3e:d0:
b7:a6:cf:0e:8e:3b:90:58:af:d3:f0:0c:30:0e:82:
e0:0b:7b:0f:0f:3f:2c:bd:e8:85:9c:4c:fb:3e:ff:
09:91:c9:c1:f5:d8:8b:05:2c:c0:c4:78:46:7a:65:
dc:12:42:0b:5a:2b:e8:9a:92:b2:dd:7f:1f:ce:e8:
48:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6D:C9:8E:51:17:47:6B:A7:4A:9E:D4:6B:51:14:1B:81:63:FB:B0
X509v3 Authority Key Identifier:
keyid:0D:28:02:EC:43:90:5E:EA:38:76:02:B9:94:B8:B5:79:04:1C:85:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/323430343a613463303a3a2f33322d3438203d3e20313338383232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:a4c0::/32
Signature Algorithm: sha256WithRSAEncryption
19:d9:1e:41:42:6e:7c:91:e4:5d:eb:bd:0f:13:a8:4d:58:d3:
bd:0f:49:81:85:9c:53:0b:15:a3:75:18:c0:6d:12:cd:92:89:
8b:e9:ec:13:13:df:b0:93:69:f4:72:d1:3f:83:ea:91:d7:71:
a2:31:49:50:5f:4a:69:21:18:9a:9e:2d:6a:d8:23:9c:69:5e:
74:4f:ff:75:11:cf:82:3a:b7:c6:e2:34:54:0b:58:11:ee:7b:
09:34:4e:2b:34:26:cf:c0:bc:16:9a:ec:d9:e5:db:a8:b5:32:
05:97:4e:7c:df:eb:75:cd:87:32:a9:f4:18:ad:c3:96:25:48:
07:85:0f:45:2d:c3:0d:4b:a4:91:f3:c7:17:c8:d8:d5:b7:6d:
de:be:00:28:28:f9:f3:5d:d8:d4:28:49:34:dd:f3:4e:99:b4:
9f:20:7c:39:79:1c:47:b1:aa:12:5c:e3:2b:08:a9:9e:61:15:
4e:b7:61:a2:30:10:24:2d:94:a4:b0:ef:dd:52:1d:4b:e1:ad:
e5:24:5f:c6:cd:c7:5e:ea:f2:5e:7b:fc:e3:28:a5:cf:cb:83:
d7:4f:e8:d6:22:38:7b:c9:24:90:21:b9:f9:00:88:a3:fe:b6:
0c:f3:ee:89:26:9a:b2:e8:21:3b:1a:c9:46:59:18:9c:ae:02:
14:14:71:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:45 2026 by rpki-client