
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/323430363a343563303a3a2f33332d3438203d3e203634333030.roa
File: 323430363a343563303a3a2f33332d3438203d3e203634333030.roa (raw, json)
Hash identifier: 0XuhY+T94wXhxTCvmTzUJVF+dBVIx5FGQo4RfqmReyU=
Subject key identifier: DE:C0:6F:05:27:E9:71:4F:41:DB:73:2A:11:90:21:AA:0A:12:BC:38
Certificate issuer: /CN=04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4
Certificate serial: 4A8CA297637C1256C61ABD65C840025F3ED0ABEF
Authority key identifier: 04:DB:47:55:C7:5A:83:1C:D9:18:17:E6:A9:B7:E4:E1:ED:2D:F2:D4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/323430363a343563303a3a2f33332d3438203d3e203634333030.roa
Signing time: Sun 03 May 2026 03:13:16 +0000
ROA not before: Sun 03 May 2026 03:08:16 +0000
ROA not after: Sun 02 May 2027 03:13:16 +0000
asID: 64300
IP address blocks: 2406:45c0::/33 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.crl
rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:8c:a2:97:63:7c:12:56:c6:1a:bd:65:c8:40:02:5f:3e:d0:ab:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4
Validity
Not Before: May 3 03:08:16 2026 GMT
Not After : May 2 03:13:16 2027 GMT
Subject: CN=DEC06F0527E9714F41DB732A119021AA0A12BC38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:30:3a:b3:17:51:7a:6c:93:e0:cb:68:22:bd:
0f:6d:b4:08:d9:53:34:98:47:eb:ae:44:80:d1:dc:
7b:41:ad:78:3a:af:0e:2a:48:01:5b:cd:1a:6b:a9:
46:0c:15:a9:f4:43:a5:02:eb:bb:8c:2f:de:f4:a1:
ca:e4:34:cf:79:ad:a2:ca:c8:82:31:93:b5:98:88:
39:7c:be:2e:c3:1f:d3:d5:66:3b:db:11:9f:b0:09:
56:14:41:26:bd:cf:28:f6:f2:31:8e:46:92:ad:74:
03:5f:cf:af:d8:bc:c5:3f:e7:8d:d8:ed:32:f9:04:
17:da:80:48:e5:3d:b0:95:46:df:28:59:35:40:67:
0f:d6:4c:fe:6d:94:79:e6:e0:6a:53:7e:b2:25:2f:
dd:f7:74:59:eb:7f:5d:4b:9a:55:0f:c8:d7:e4:cb:
46:76:4f:4c:fe:6b:f1:68:af:33:c3:df:72:c5:ff:
1c:68:5d:3b:db:52:18:90:de:99:90:c4:bc:72:23:
dd:7b:0d:b6:97:67:2d:3e:88:15:83:08:8e:5b:cd:
07:fe:27:f5:de:13:8c:a1:c9:3a:d1:ce:3b:01:06:
a2:b9:ad:7f:d6:6d:58:5c:54:a0:21:f4:cc:14:61:
a9:6b:0d:e8:00:1e:8b:c9:57:0b:d7:49:25:ff:ca:
37:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C0:6F:05:27:E9:71:4F:41:DB:73:2A:11:90:21:AA:0A:12:BC:38
X509v3 Authority Key Identifier:
keyid:04:DB:47:55:C7:5A:83:1C:D9:18:17:E6:A9:B7:E4:E1:ED:2D:F2:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/323430363a343563303a3a2f33332d3438203d3e203634333030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:45c0::/33
Signature Algorithm: sha256WithRSAEncryption
8e:40:d7:6f:37:4e:1a:11:7e:b9:47:b4:6a:a4:72:7f:72:98:
a1:9c:a8:ae:ff:86:0c:bb:1d:0e:d1:41:50:74:c1:7e:bf:a5:
98:58:63:44:56:16:78:04:27:b0:80:08:cc:fb:fe:d1:80:72:
1c:7b:1a:d2:5f:8b:b1:d9:f1:d9:0b:f2:33:d2:3a:62:75:5c:
ef:48:33:dc:e5:5a:e0:31:0f:9b:53:83:7c:ba:54:ac:9e:0c:
a7:6e:c2:a0:1a:04:f5:04:7a:c7:17:13:c0:49:e4:10:61:68:
13:38:c3:35:94:4e:82:b0:cb:48:b8:61:63:85:28:39:65:8a:
1a:77:fc:1b:da:a6:dd:0e:0c:cf:2d:14:19:b6:f5:13:18:61:
1c:94:95:0e:21:bc:82:df:79:3d:db:a4:d2:92:dd:bd:ec:3f:
66:08:d6:ad:80:b4:11:7a:28:67:3f:8a:1c:6b:bc:34:3d:27:
1c:18:21:c4:bc:91:d5:24:76:15:57:3c:9e:07:48:c2:32:39:
f2:fa:78:b3:dc:8d:c0:c8:a5:5e:bf:d0:b6:3d:da:3d:32:c7:
b1:14:7b:8d:41:bf:bf:fc:d8:34:83:db:55:66:41:8b:87:53:
a1:6f:b5:d0:b2:1a:05:23:55:9b:f8:90:fd:cd:7a:13:35:45:
1d:4a:5b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:43 2026 by rpki-client