
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a313030303a3a2f34382d3438203d3e20313339343137.roa
File: 323430343a636163303a313030303a3a2f34382d3438203d3e20313339343137.roa (raw, json)
Hash identifier: qKiEi+X6hIsXyk7xeS/5tia9mbc1egOJBI6eB51p1Ug=
Subject key identifier: EF:B1:E8:44:31:9E:8F:0E:C4:53:CA:11:BE:E1:19:22:97:B8:35:BB
Certificate issuer: /CN=E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E
Certificate serial: 0B42B80CFA457E62A2AD9288FC9A36456FC04164
Authority key identifier: E6:60:3C:08:B5:CF:1A:CE:E1:C7:3D:33:C6:00:D4:F4:FD:F5:DC:2E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a313030303a3a2f34382d3438203d3e20313339343137.roa
Signing time: Sun 03 May 2026 03:13:33 +0000
ROA not before: Sun 03 May 2026 03:08:33 +0000
ROA not after: Sun 02 May 2027 03:13:33 +0000
asID: 139417
IP address blocks: 2404:cac0:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.crl
rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:42:b8:0c:fa:45:7e:62:a2:ad:92:88:fc:9a:36:45:6f:c0:41:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E
Validity
Not Before: May 3 03:08:33 2026 GMT
Not After : May 2 03:13:33 2027 GMT
Subject: CN=EFB1E844319E8F0EC453CA11BEE1192297B835BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:25:b6:3a:cf:61:c9:d9:e3:eb:eb:4a:c7:
1c:f5:81:90:5d:c4:be:52:bf:be:0d:f4:a5:d1:6b:
61:c3:ba:b2:5b:e6:e6:33:32:1c:fc:08:60:e9:6c:
69:d5:45:12:b8:e8:1b:7d:41:39:30:c3:95:e2:c9:
35:10:3d:8a:09:46:93:51:a4:ea:45:2e:60:58:77:
9c:1a:f1:2a:9b:4b:16:82:ec:d8:aa:0f:21:2e:8c:
63:65:1f:42:37:eb:1d:6a:b8:dd:2e:dc:63:18:9a:
cc:2d:8f:a0:21:2d:e4:50:ec:09:7e:c0:f9:81:46:
59:19:1d:a5:92:3d:41:bc:23:59:2e:9c:cd:2f:df:
b7:d5:2c:4e:ce:31:d8:36:30:79:36:ca:37:c6:0a:
12:7d:01:13:84:d4:99:b9:f8:6f:e6:e0:85:2d:14:
5c:d2:3d:eb:e1:c8:c2:52:dc:58:33:86:ed:15:1c:
c1:8b:1a:34:8e:bd:01:cb:8f:e9:b4:b1:ef:60:f2:
a9:4c:12:0e:47:44:c7:1a:79:22:00:96:eb:83:f6:
c8:ec:df:e1:84:9e:9e:4d:bb:31:6d:f6:8e:73:31:
77:f0:9e:41:d1:88:fa:de:64:27:aa:6b:1a:89:0c:
41:a2:fe:95:0e:ff:4b:4f:60:b3:f8:e6:82:dc:0f:
7c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B1:E8:44:31:9E:8F:0E:C4:53:CA:11:BE:E1:19:22:97:B8:35:BB
X509v3 Authority Key Identifier:
keyid:E6:60:3C:08:B5:CF:1A:CE:E1:C7:3D:33:C6:00:D4:F4:FD:F5:DC:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a313030303a3a2f34382d3438203d3e20313339343137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:cac0:1000::/48
Signature Algorithm: sha256WithRSAEncryption
92:e1:b2:73:df:62:78:09:66:84:87:5a:a7:b2:1c:19:c4:ae:
aa:cf:15:78:0e:0d:0d:8a:dc:08:35:78:f1:13:99:23:c6:ce:
e9:45:e8:3b:27:e3:d3:ba:22:61:76:8d:bf:26:dc:fd:07:e6:
f2:d0:6e:f9:e7:0f:49:c0:39:12:a1:a3:9c:ff:49:2d:78:58:
5a:7d:bf:dc:98:8e:18:96:a0:d9:5c:cd:25:99:9f:e8:7f:ec:
3b:51:9f:5c:cf:e0:10:52:5c:42:49:49:b0:67:9a:9d:7f:5b:
07:09:45:17:57:bc:0d:98:79:a8:1f:9d:40:6d:94:3c:29:d0:
26:d8:66:5d:7f:7e:49:bb:1f:df:ba:12:6d:aa:51:05:7e:19:
8f:79:fa:f2:6a:ff:56:c5:13:bf:fa:84:53:08:75:e5:0d:9b:
b1:b9:a3:bf:fa:85:de:8d:ac:ae:a9:3a:79:8b:af:b0:4f:39:
1a:92:b8:3f:88:0c:c7:1d:ef:67:87:c0:4d:5b:2e:52:1e:01:
c8:4d:5a:08:e7:1b:75:0b:09:7b:0c:1c:56:d0:b3:56:e5:29:
91:9d:ec:41:1f:1f:0f:3d:72:4f:4c:ba:50:56:26:88:9e:33:
d7:7b:d9:89:da:44:1f:fc:1c:eb:ab:76:10:ef:89:5a:ec:64:
eb:3d:24:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:58:00 2026 by rpki-client