
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030393a3a2f34382d3438203d3e203338353236.roa
File: 323430353a333734303a383030393a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier: z18wz9koxXkBDBfDR13UXR8waA1GzCrAOQZ3ftGGGC8=
Subject key identifier: A6:54:50:4C:46:21:28:91:B4:4B:79:C2:C8:37:39:6F:53:EC:A5:8C
Certificate issuer: /CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
Certificate serial: 341949BAE555F8ED18E12B97BD9A8A72262240A8
Authority key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030393a3a2f34382d3438203d3e203338353236.roa
Signing time: Sun 03 May 2026 03:14:02 +0000
ROA not before: Sun 03 May 2026 03:09:02 +0000
ROA not after: Sun 02 May 2027 03:14:02 +0000
asID: 38526
IP address blocks: 2405:3740:8009::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl
rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:19:49:ba:e5:55:f8:ed:18:e1:2b:97:bd:9a:8a:72:26:22:40:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
Validity
Not Before: May 3 03:09:02 2026 GMT
Not After : May 2 03:14:02 2027 GMT
Subject: CN=A654504C46212891B44B79C2C837396F53ECA58C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:00:a1:64:6d:36:c2:b2:5a:5c:2d:73:ef:59:
0f:ae:91:c2:d6:26:d8:b1:30:96:7e:7e:73:c7:f9:
0d:e6:39:19:4d:b5:12:e4:c7:6a:8c:dc:e0:01:fa:
ed:18:18:27:7b:49:e2:97:36:24:f5:53:ea:d1:5f:
2f:04:ed:78:87:8f:31:25:40:4a:39:c0:c0:b1:ba:
ce:84:1e:b6:3f:e9:a0:5d:12:70:43:e3:47:08:d0:
ed:07:3c:06:b1:b9:b8:7c:a6:bb:69:c4:e9:6f:ed:
12:f8:75:cc:ee:bf:f4:37:b7:3d:ed:83:21:a6:f5:
fc:c0:8b:03:ca:0f:6e:d4:74:f2:b4:e3:4c:50:26:
cb:c5:1a:8d:df:ab:f8:83:0a:13:7c:68:00:33:d5:
7a:81:73:8f:48:0d:90:bf:78:0d:98:96:56:f0:8d:
a5:3f:2e:62:75:75:d6:6a:99:3a:db:34:98:d9:0c:
70:64:d8:ee:f7:7d:c2:64:bf:78:49:3a:ab:a4:70:
2f:c3:99:66:07:2e:49:2e:a8:a7:2b:79:be:24:46:
45:c0:92:97:e0:03:6c:9e:b8:53:a9:c4:d3:f3:e1:
10:0a:70:58:7d:30:c2:e2:ae:fd:54:a6:51:89:ce:
62:70:ac:04:67:99:18:4f:d4:43:31:2b:3f:1b:8f:
3a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:54:50:4C:46:21:28:91:B4:4B:79:C2:C8:37:39:6F:53:EC:A5:8C
X509v3 Authority Key Identifier:
keyid:C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030393a3a2f34382d3438203d3e203338353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:3740:8009::/48
Signature Algorithm: sha256WithRSAEncryption
64:22:76:d7:88:78:70:d8:b6:60:e9:23:47:9b:43:50:17:4e:
b6:fb:4b:b1:2c:94:ec:12:0a:9d:e8:c9:61:71:5e:3a:c3:ce:
02:48:bf:0d:75:9a:89:7f:04:3e:07:09:ce:1a:db:c1:e1:ae:
e0:91:33:5c:d0:fa:ad:d5:af:b7:19:ff:9b:d8:9b:62:6a:c0:
c9:33:0c:52:36:46:cb:f3:bf:38:ba:ae:d5:bf:49:44:cc:cf:
07:e8:ce:16:d8:a2:a4:97:ee:b7:8e:43:ad:dd:40:6b:e2:5d:
59:90:a5:ed:e8:4c:f1:d8:a3:06:ec:b0:fe:6e:c1:9f:da:69:
f1:3b:b7:2a:e1:da:5f:3b:6a:2c:f4:38:8e:aa:8c:4d:ea:3f:
35:ff:92:2f:9b:e8:7b:86:79:eb:ce:9c:62:98:d7:04:c9:88:
85:30:e2:4c:b1:7f:05:ad:85:56:71:4a:94:83:2b:13:75:16:
5e:36:02:ec:ef:70:61:49:3d:77:a9:c8:e3:12:ef:32:a2:7f:
9c:a6:30:78:37:3b:80:c7:7b:aa:fc:67:e8:62:30:65:e8:a6:
79:1e:67:5e:fb:27:ef:58:60:cb:6b:c6:2e:e3:f1:9c:3e:aa:
ea:56:e0:54:d9:d8:b4:d2:18:f5:8d:bc:33:22:02:1c:50:4d:
ac:59:6a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:50:53 2026 by rpki-client