
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/323030313a6466323a653738303a3a2f34382d3438203d3e20313430303037.roa
File: 323030313a6466323a653738303a3a2f34382d3438203d3e20313430303037.roa (raw, json)
Hash identifier: 0BOLStdAwiCE9nKO2uD0bAHRwoPOw2CxvrJobarBg+g=
Subject key identifier: FC:E9:83:1B:34:49:26:2C:02:A8:F2:B3:B9:FF:F2:FA:27:E2:8B:5C
Certificate issuer: /CN=02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C
Certificate serial: 2731D2F70AEB439288A423FEA2D53C8D1100ECA6
Authority key identifier: 02:CB:E6:5B:5D:AF:9C:DD:C7:C9:73:B2:63:9A:2C:DC:B9:DB:EE:0C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/323030313a6466323a653738303a3a2f34382d3438203d3e20313430303037.roa
Signing time: Sun 03 May 2026 03:13:17 +0000
ROA not before: Sun 03 May 2026 03:08:17 +0000
ROA not after: Sun 02 May 2027 03:13:17 +0000
asID: 140007
IP address blocks: 2001:df2:e780::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.crl
rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:31:d2:f7:0a:eb:43:92:88:a4:23:fe:a2:d5:3c:8d:11:00:ec:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C
Validity
Not Before: May 3 03:08:17 2026 GMT
Not After : May 2 03:13:17 2027 GMT
Subject: CN=FCE9831B3449262C02A8F2B3B9FFF2FA27E28B5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6a:fa:e7:30:77:91:eb:ed:d9:bb:eb:0c:f4:
6e:a7:28:ea:6c:90:35:9b:e1:1f:00:3f:18:70:c0:
ba:d4:b5:98:14:69:5c:2f:cd:08:4c:1f:82:f2:d9:
bb:61:89:25:67:07:77:9d:fc:8e:69:61:b4:7b:19:
7c:e8:cc:52:cf:43:76:01:16:12:50:44:8b:1e:7a:
3b:60:fd:6e:3b:61:47:c3:09:62:17:03:3f:bc:d5:
2c:cf:74:71:8d:35:87:08:22:2f:37:9e:e9:c9:17:
1b:ed:30:13:82:2a:28:0c:ee:b2:dc:85:bb:cd:4e:
25:20:f9:81:8e:ed:d9:da:65:cd:d8:25:05:3a:2d:
92:1b:9c:0b:7b:b2:03:0f:9f:86:2e:91:64:16:b9:
71:51:df:c1:db:bb:1e:3d:43:7c:dd:fb:b4:6d:10:
ea:83:42:31:9e:cb:1d:e3:ed:3c:4a:d4:db:30:4b:
b6:34:2e:12:32:71:ae:8f:87:e3:e7:9f:d2:17:e1:
c5:7b:52:9a:da:1a:01:50:61:a8:dc:97:68:62:a6:
33:ee:05:22:f2:91:8e:16:7e:1f:d9:91:43:d4:b4:
4d:a4:0c:77:01:e9:5f:13:25:6c:bb:29:b8:53:66:
a2:3b:94:1a:3f:28:ba:62:ea:c4:1d:cc:d3:ef:f7:
4a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E9:83:1B:34:49:26:2C:02:A8:F2:B3:B9:FF:F2:FA:27:E2:8B:5C
X509v3 Authority Key Identifier:
keyid:02:CB:E6:5B:5D:AF:9C:DD:C7:C9:73:B2:63:9A:2C:DC:B9:DB:EE:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/323030313a6466323a653738303a3a2f34382d3438203d3e20313430303037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:e780::/48
Signature Algorithm: sha256WithRSAEncryption
87:fe:f4:e1:51:64:09:8f:e3:92:5f:bf:c8:1f:2f:59:93:28:
09:98:d1:8c:cc:68:6a:06:f9:aa:5b:e4:a5:90:70:69:e8:39:
14:7f:ee:eb:97:5a:23:2e:25:3f:3e:a5:e2:4a:ad:dc:e9:13:
15:c6:07:fd:89:29:c7:2d:86:7c:c2:ba:dc:04:ca:52:81:a0:
c6:42:c0:2a:13:73:cc:ab:21:66:6c:38:c1:46:52:5f:09:1c:
ca:81:92:10:aa:74:65:db:d4:ed:d5:85:40:23:24:47:38:26:
c3:be:8a:87:36:e5:39:84:43:f2:a2:96:3f:c5:af:05:2d:da:
d8:13:cc:73:2e:4a:f0:05:23:d5:83:96:1b:42:22:00:07:71:
1f:8f:96:cd:b0:ad:8e:bf:41:4c:a0:07:42:81:d9:0f:f0:52:
52:27:ef:c6:4c:10:7b:2d:ae:bd:49:b2:d0:9d:c9:1e:d6:10:
94:a1:60:a3:4a:e7:c5:5f:66:5e:22:49:8c:67:ba:2a:ab:5f:
2d:b4:1d:e8:47:bf:3f:94:a5:19:78:3a:fc:e7:0e:1f:69:f1:
61:28:12:74:c7:9e:a2:9e:d3:d6:c4:1a:18:6c:1f:3e:0f:71:
1e:44:9b:ea:bd:5c:d2:9b:1f:47:8c:51:42:16:79:e0:5c:0f:
3a:97:8c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:23:34 2026 by rpki-client