
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/323430313a333334303a3a2f33322d3438203d3e203435373232.roa
File: 323430313a333334303a3a2f33322d3438203d3e203435373232.roa (raw, json)
Hash identifier: yTgPRgQVzVx38fMyxtuZ61ES4EUBA+qjN64rJdc/fj0=
Subject key identifier: B0:D6:76:68:6D:A3:1E:F3:51:61:CC:56:D3:EE:90:E0:DB:BC:F9:2E
Certificate issuer: /CN=FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0
Certificate serial: 5E6E219C00480B8F707F404487C2B8BD39A4FABA
Authority key identifier: FC:7B:C0:6A:FF:64:0D:4C:BB:0F:95:A3:77:1E:C6:23:4F:CF:3E:D0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/323430313a333334303a3a2f33322d3438203d3e203435373232.roa
Signing time: Sun 03 May 2026 03:13:52 +0000
ROA not before: Sun 03 May 2026 03:08:52 +0000
ROA not after: Sun 02 May 2027 03:13:52 +0000
asID: 45722
IP address blocks: 2401:3340::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.crl
rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:33:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:6e:21:9c:00:48:0b:8f:70:7f:40:44:87:c2:b8:bd:39:a4:fa:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0
Validity
Not Before: May 3 03:08:52 2026 GMT
Not After : May 2 03:13:52 2027 GMT
Subject: CN=B0D676686DA31EF35161CC56D3EE90E0DBBCF92E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6a:23:08:6e:20:aa:21:55:a0:81:3e:39:ab:
81:7d:12:30:1c:57:bf:00:43:06:5a:26:7c:1b:ec:
aa:e3:61:9e:6a:d5:08:78:f4:75:30:ff:b7:50:24:
d4:c7:2c:77:c3:36:8a:64:ed:45:93:65:ce:c4:9f:
c9:33:b8:7d:4e:88:d0:a0:0e:54:a2:4e:02:25:33:
3d:fc:b1:46:bc:88:da:85:1d:85:74:ea:8c:8c:ed:
21:dc:59:6f:90:e7:de:35:a6:1c:69:30:76:7a:2b:
a9:dd:de:c8:64:cc:dd:c5:90:c8:6a:f1:f1:1f:8b:
be:23:c7:2c:82:c0:7c:03:b6:50:f3:5d:f7:03:58:
2f:9a:48:92:93:7f:a6:59:dd:50:17:ad:9c:b4:44:
23:97:85:d6:e7:95:7e:41:c9:28:16:91:3d:20:eb:
29:c7:cf:93:38:ce:91:a6:80:73:d9:7d:ba:44:0a:
a9:71:ab:dd:a7:c3:9e:29:39:e6:d2:3a:55:cd:03:
f4:4e:d2:c1:a0:fb:1b:cf:de:b0:95:e8:32:8a:e9:
74:b1:1f:4e:53:bd:bb:01:83:b2:9d:d0:ef:dd:09:
7f:80:a1:f5:c7:79:51:98:59:a8:2a:51:f3:a5:70:
bb:15:3b:67:31:47:da:ba:5d:a1:34:e8:5e:46:81:
1e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D6:76:68:6D:A3:1E:F3:51:61:CC:56:D3:EE:90:E0:DB:BC:F9:2E
X509v3 Authority Key Identifier:
keyid:FC:7B:C0:6A:FF:64:0D:4C:BB:0F:95:A3:77:1E:C6:23:4F:CF:3E:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/323430313a333334303a3a2f33322d3438203d3e203435373232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:3340::/32
Signature Algorithm: sha256WithRSAEncryption
44:a8:1c:48:6d:32:42:d0:92:21:92:65:77:08:50:35:61:11:
1e:6f:61:de:49:d0:25:3b:89:90:c6:22:f7:03:ed:a8:69:19:
46:0f:54:5b:93:a6:92:ad:be:ab:a8:c8:c8:21:43:a7:62:d3:
ed:2d:f9:b6:46:75:0f:eb:4f:cb:88:0b:8c:54:35:b9:60:e4:
04:ea:f8:87:5b:61:a6:9e:ce:b6:a2:00:ce:af:0d:22:2b:c2:
80:c7:3b:41:03:ec:f5:a1:5d:f1:b2:21:dd:6b:2e:0e:bf:6d:
60:8a:84:49:d6:e9:f9:18:94:2a:c7:98:c4:3f:29:da:7a:4a:
c4:21:8f:73:fa:97:c3:a9:82:10:f0:29:44:cc:d9:77:69:22:
b8:37:34:ad:06:9d:9a:e0:6d:fa:ed:1a:d0:7c:ce:fb:e1:cb:
a9:81:31:59:c4:53:8d:e2:f2:7a:30:19:f8:35:51:16:3a:55:
11:5c:a8:d1:2e:b0:77:cd:18:4f:20:43:93:57:e9:3b:03:39:
97:fc:68:95:e5:78:6d:8b:e2:7a:b0:bd:b8:e8:7f:5b:8f:df:
3c:c0:22:19:ef:33:8e:e4:8c:d6:9a:64:d6:1a:8a:8f:46:a9:
bf:1e:13:fa:37:8d:7a:b6:57:32:57:6b:44:9f:4a:fe:66:9f:
4c:ed:d3:b5
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUXm4hnABIC49wf0BEh8K4vTmk+rowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM3QkMwNkFGRjY0MEQ0Q0JCMEY5NUEzNzcxRUM2MjM0
RkNGM0VEMDAeFw0yNjA1MDMwMzA4NTJaFw0yNzA1MDIwMzEzNTJaMDMxMTAvBgNV
BAMTKEIwRDY3NjY4NkRBMzFFRjM1MTYxQ0M1NkQzRUU5MEUwREJCQ0Y5MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnaiMIbiCqIVWggT45q4F9EjAc
V78AQwZaJnwb7KrjYZ5q1Qh49HUw/7dQJNTHLHfDNopk7UWTZc7En8kzuH1OiNCg
DlSiTgIlMz38sUa8iNqFHYV06oyM7SHcWW+Q5941phxpMHZ6K6nd3shkzN3FkMhq
8fEfi74jxyyCwHwDtlDzXfcDWC+aSJKTf6ZZ3VAXrZy0RCOXhdbnlX5BySgWkT0g
6ynHz5M4zpGmgHPZfbpECqlxq92nw54pOebSOlXNA/RO0sGg+xvP3rCV6DKK6XSx
H05TvbsBg7Kd0O/dCX+AofXHeVGYWagqUfOlcLsVO2cxR9q6XaE06F5GgR7NAgMB
AAGjggIxMIICLTAdBgNVHQ4EFgQUsNZ2aG2jHvNRYcxW0+6Q4Nu8+S4wHwYDVR0j
BBgwFoAU/HvAav9kDUy7D5Wjdx7GI0/PPtAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTYwN2Q5MjktNGNhOC00ZjUzLWEyOTgtNWUzM2JlMWY4NjA0LzAvRkM3QkMwNkFG
RjY0MEQ0Q0JCMEY5NUEzNzcxRUM2MjM0RkNGM0VEMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GQzdCQzA2QUZGNjQwRDRDQkIwRjk1QTM3NzFFQzYyMzRGQ0Yz
RUQwLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U2MDdkOTI5LTRjYTgtNGY1My1h
Mjk4LTVlMzNiZTFmODYwNC8wLzMyMzQzMDMxM2EzMzMzMzQzMDNhM2EyZjMzMzIy
ZDM0MzgyMDNkM2UyMDM0MzUzNzMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkATNAMA0GCSqGSIb3
DQEBCwUAA4IBAQBEqBxIbTJC0JIhkmV3CFA1YREeb2HeSdAlO4mQxiL3A+2oaRlG
D1Rbk6aSrb6rqMjIIUOnYtPtLfm2RnUP60/LiAuMVDW5YOQE6viHW2Gmns62ogDO
rw0iK8KAxztBA+z1oV3xsiHday4Ov21gioRJ1un5GJQqx5jEPynaekrEIY9z+pfD
qYIQ8ClEzNl3aSK4NzStBp2a4G367RrQfM774cupgTFZxFON4vJ6MBn4NVEWOlUR
XKjRLrB3zRhPIEOTV+k7AzmX/GiV5Xhti+J6sL246H9bj988wCIZ7zOO5IzWmmTW
GoqPRqm/HhP6N416tlcyV2tEn0r+Zp9M7dO1
-----END CERTIFICATE-----
Generated at Wed May 13 08:51:51 2026 by rpki-client