
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a6433353a3a2f34382d3438203d3e20313339343137.roa
File: 323430343a636163303a6433353a3a2f34382d3438203d3e20313339343137.roa (raw, json)
Hash identifier: XQoJYvX/Jyzxvg/lWPIIgCxev9VlJLeFKwoMQRKPgvA=
Subject key identifier: B5:E9:B1:13:9F:7E:54:3D:27:A7:47:07:3C:2B:E8:38:58:9E:B8:EC
Certificate issuer: /CN=E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E
Certificate serial: 16C681ED98214FAEEABF75E3ABA1099F7BC1A74E
Authority key identifier: E6:60:3C:08:B5:CF:1A:CE:E1:C7:3D:33:C6:00:D4:F4:FD:F5:DC:2E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a6433353a3a2f34382d3438203d3e20313339343137.roa
Signing time: Sun 03 May 2026 03:13:32 +0000
ROA not before: Sun 03 May 2026 03:08:32 +0000
ROA not after: Sun 02 May 2027 03:13:32 +0000
asID: 139417
IP address blocks: 2404:cac0:d35::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.crl
rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:c6:81:ed:98:21:4f:ae:ea:bf:75:e3:ab:a1:09:9f:7b:c1:a7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E
Validity
Not Before: May 3 03:08:32 2026 GMT
Not After : May 2 03:13:32 2027 GMT
Subject: CN=B5E9B1139F7E543D27A747073C2BE838589EB8EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ce:03:7b:e8:46:fa:74:85:aa:8a:dd:c9:db:
39:73:b1:a2:8a:e4:bc:d9:f0:b0:54:4c:45:c9:2f:
41:df:47:85:d4:b3:1d:fe:6a:7b:9d:2d:aa:bb:ce:
f8:de:ac:0c:fa:0a:8b:96:11:6b:64:e5:5e:bf:1d:
1b:1c:62:20:34:8e:14:4a:0f:1f:a8:f6:26:65:fd:
eb:5b:c7:46:3c:ad:10:fb:31:ff:24:33:e7:92:8f:
b4:5d:b5:a4:b1:da:4e:dd:fb:f9:a0:a8:89:ba:a0:
7c:0e:b5:6a:c7:d6:8e:d2:39:75:d3:76:37:a8:23:
ba:e6:16:5a:64:58:59:16:35:2c:0a:25:20:05:37:
01:80:d5:8e:e1:5d:a6:a2:f5:1c:f6:f2:0d:1a:77:
31:8e:6a:34:f7:4e:63:b3:55:23:86:4a:0a:7a:13:
69:40:5d:14:09:44:b3:23:c0:be:15:30:91:9e:cf:
99:a4:dc:c7:f4:81:e3:58:c9:73:ea:16:18:4b:3f:
52:70:ac:36:99:d4:75:da:84:47:84:1b:0e:9c:98:
c0:da:3f:a1:65:98:23:a1:33:51:c8:61:05:a1:af:
53:0e:58:ad:04:a7:61:a7:41:e7:28:20:67:8c:34:
2b:71:97:57:b0:45:c4:61:83:4a:cc:6a:c5:83:7e:
95:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E9:B1:13:9F:7E:54:3D:27:A7:47:07:3C:2B:E8:38:58:9E:B8:EC
X509v3 Authority Key Identifier:
keyid:E6:60:3C:08:B5:CF:1A:CE:E1:C7:3D:33:C6:00:D4:F4:FD:F5:DC:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a6433353a3a2f34382d3438203d3e20313339343137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:cac0:d35::/48
Signature Algorithm: sha256WithRSAEncryption
ba:cf:62:5d:65:28:de:f7:bf:3b:6b:58:4f:71:c0:fc:dd:a7:
cc:e0:6a:d2:fc:cf:e4:7d:c0:82:96:10:1a:16:74:f3:cc:74:
34:78:d4:e6:83:1a:0b:4e:54:42:23:0f:d9:88:86:98:dd:a6:
05:5f:5e:9b:41:df:57:fa:df:6e:0e:eb:00:e1:ab:64:f3:13:
63:57:78:bc:d7:3b:c8:c4:be:ff:d4:9a:3c:b5:45:9d:8f:1b:
ba:23:5d:7f:33:55:ee:87:77:88:e5:21:f6:5a:8b:79:ed:44:
25:40:e0:75:12:49:98:6f:e8:4d:ac:02:41:96:c4:69:3d:3f:
79:bc:45:60:5f:9e:a1:8a:64:41:7b:34:68:47:6e:52:67:4b:
bd:38:d0:dd:2a:c3:ca:00:07:a5:2b:da:63:a4:d6:86:5a:c8:
b9:17:76:23:25:5d:1d:ce:25:58:1f:c1:ee:95:a9:6a:06:9e:
c4:17:17:b0:0f:58:02:86:19:9f:72:24:43:8a:ef:e8:a8:a2:
1b:78:dd:ae:e3:03:4c:b7:9e:48:3e:8a:23:fe:05:30:13:44:
9d:ad:dc:82:35:9f:60:6b:e2:08:40:c7:89:eb:14:71:f7:a2:
fb:04:a9:b3:5f:1e:f1:13:49:bc:65:56:7b:43:08:93:8b:a3:
93:48:96:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:27:23 2026 by rpki-client