
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030313a3a2f34382d3438203d3e203338353236.roa
File: 323430353a333734303a393030313a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier: g03VxpVTwWx7zgu1qO971fLzSsXKK921N3eq7YdrE1w=
Subject key identifier: 0A:5A:52:92:0C:FF:AC:81:02:92:62:66:E8:04:20:DD:7A:67:84:F0
Certificate issuer: /CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
Certificate serial: 11195B49A61802B22224AF1BD18732C369CA65CE
Authority key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030313a3a2f34382d3438203d3e203338353236.roa
Signing time: Sun 03 May 2026 03:14:11 +0000
ROA not before: Sun 03 May 2026 03:09:11 +0000
ROA not after: Sun 02 May 2027 03:14:11 +0000
asID: 38526
IP address blocks: 2405:3740:9001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl
rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:19:5b:49:a6:18:02:b2:22:24:af:1b:d1:87:32:c3:69:ca:65:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
Validity
Not Before: May 3 03:09:11 2026 GMT
Not After : May 2 03:14:11 2027 GMT
Subject: CN=0A5A52920CFFAC8102926266E80420DD7A6784F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8d:f1:b0:fc:1c:22:cb:d8:8e:5f:33:a8:40:
1c:8e:5d:ad:39:22:e1:2d:e8:13:81:d3:21:bf:2b:
80:3b:9f:31:98:78:61:e6:93:54:b8:b0:81:e3:fa:
bf:40:60:16:36:36:23:4b:ac:39:03:c3:f4:00:19:
6e:cc:db:3e:8a:ca:c3:87:77:c6:f5:5e:ca:c7:e2:
4c:68:39:86:2a:b3:70:84:f1:3b:47:1a:84:15:e3:
de:bd:6b:16:90:d1:ce:3e:1b:1d:d8:0c:0e:86:2b:
b1:4b:23:12:b4:2c:d2:03:d8:fb:02:b9:74:7a:03:
02:8e:fd:24:30:bf:89:85:05:d3:e0:31:03:aa:95:
39:29:bf:35:a5:75:ef:79:09:be:e2:a2:be:56:bb:
c9:5f:3f:a8:f8:c6:d8:00:73:76:7a:a4:d2:1e:e3:
da:b7:9a:8f:6e:70:36:75:84:6a:7f:4e:0f:44:a3:
14:5c:c6:ca:b1:92:f6:87:aa:1c:ca:70:cb:1d:30:
e1:0c:70:23:49:77:1b:2d:37:0b:21:ad:be:e0:81:
d5:a6:85:78:7b:05:e4:f8:fa:3e:fa:e2:73:50:cb:
ad:a5:97:c0:91:71:b5:d0:ed:f6:c7:5c:87:a1:2c:
1d:33:c0:63:4b:c4:47:b4:7d:ba:9a:10:07:89:b8:
1d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5A:52:92:0C:FF:AC:81:02:92:62:66:E8:04:20:DD:7A:67:84:F0
X509v3 Authority Key Identifier:
keyid:C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030313a3a2f34382d3438203d3e203338353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:3740:9001::/48
Signature Algorithm: sha256WithRSAEncryption
1d:85:19:41:1c:38:93:3d:5e:7a:0a:8c:56:24:02:65:00:d0:
c3:e3:b0:cb:21:3e:aa:a6:8d:39:20:a5:41:cc:25:18:53:8d:
94:78:a4:da:1b:e1:d3:c3:3d:d4:10:dd:26:31:cb:26:f6:98:
e2:db:43:57:91:8b:da:64:b0:4f:e3:81:e1:09:de:ba:f5:b6:
41:b2:d4:0d:13:24:b3:e0:58:be:d9:ca:79:49:30:58:7a:a3:
43:80:6b:4e:ab:d2:61:d2:6d:10:49:bc:13:60:67:90:83:1b:
41:2c:44:9e:f2:1b:74:78:a4:02:1c:07:f6:4c:70:3b:a5:41:
73:de:26:33:1f:54:97:98:9d:f8:ac:44:31:59:56:a4:b8:41:
07:01:ac:5e:42:93:43:b7:7c:5e:f8:82:5d:15:9d:65:8e:f3:
38:07:51:c6:d6:97:bc:e7:0c:1a:12:5f:22:9f:36:e4:0f:d2:
00:89:c1:2c:4f:40:2d:89:c6:8b:04:37:68:a3:5d:7e:03:a6:
ab:e0:94:f0:de:6f:cf:a2:22:03:0a:4f:39:d2:a0:5e:88:56:
57:b8:13:be:53:f8:56:3f:7d:07:64:f6:07:54:96:1c:59:9c:
b8:07:43:5c:4f:ad:6e:1f:e3:cc:d7:91:90:f9:75:88:b2:5a:
6e:04:1b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:13:55 2026 by rpki-client