
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030323a3a2f34382d3438203d3e203338353236.roa
File: 323430353a333734303a393030323a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier: tHxPdA0Vko6EJ2UxghnOuNmX2+ALZconxKjMn1FmGko=
Subject key identifier: FC:64:A6:E3:35:49:D2:45:7D:7E:49:32:F4:72:9E:20:60:31:BF:F1
Certificate issuer: /CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
Certificate serial: 495BECFD444B531FF72A55A610A395169F8BCC01
Authority key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030323a3a2f34382d3438203d3e203338353236.roa
Signing time: Sun 03 May 2026 03:14:13 +0000
ROA not before: Sun 03 May 2026 03:09:13 +0000
ROA not after: Sun 02 May 2027 03:14:13 +0000
asID: 38526
IP address blocks: 2405:3740:9002::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl
rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:5b:ec:fd:44:4b:53:1f:f7:2a:55:a6:10:a3:95:16:9f:8b:cc:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
Validity
Not Before: May 3 03:09:13 2026 GMT
Not After : May 2 03:14:13 2027 GMT
Subject: CN=FC64A6E33549D2457D7E4932F4729E206031BFF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:39:ec:75:68:86:07:e3:ff:10:61:54:f1:
d0:20:35:43:07:eb:ab:a4:43:ee:41:a6:36:fa:1d:
4a:ba:06:f5:c1:15:4e:06:e0:86:91:6b:06:89:9c:
11:fe:78:53:cf:8e:6a:53:dd:3a:ed:9d:12:c0:b8:
09:70:7b:61:93:0a:0f:bc:19:50:f6:37:1e:9f:80:
d9:7f:91:f6:8d:fb:ad:1b:34:62:15:27:6c:6d:54:
72:71:89:b8:d5:1f:e2:e2:f9:7a:1e:50:fd:3a:e5:
35:96:e7:9b:53:bc:67:28:6f:a0:16:27:d4:f8:37:
90:21:a1:2a:97:f1:30:0c:e4:92:c0:36:01:4d:65:
76:b2:bb:41:5f:35:c5:cd:86:fd:a5:a7:a8:ec:56:
a5:5b:8e:60:19:b5:b5:11:eb:db:41:df:09:af:1d:
e7:ba:35:c7:e9:2f:d6:12:f5:03:60:a1:22:9a:3f:
7a:d7:05:72:7c:c8:1e:f1:c8:13:77:14:6d:ee:bf:
7e:94:77:fd:45:40:ea:c1:01:e1:00:39:4c:da:4f:
ab:ed:10:b7:2d:90:7d:94:4a:99:f9:0f:d0:ef:b5:
80:be:48:ef:b8:72:dc:a5:ad:f0:e9:63:08:ed:cb:
64:d3:a4:d7:89:72:4b:d2:d9:c6:64:11:14:83:fd:
ce:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:64:A6:E3:35:49:D2:45:7D:7E:49:32:F4:72:9E:20:60:31:BF:F1
X509v3 Authority Key Identifier:
keyid:C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030323a3a2f34382d3438203d3e203338353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:3740:9002::/48
Signature Algorithm: sha256WithRSAEncryption
4e:82:2e:61:32:1a:f5:08:b5:9e:41:23:21:60:45:a6:8e:ff:
fd:b4:db:8f:5c:ec:fe:58:01:95:3e:0b:75:2f:7f:00:ba:71:
1b:98:47:56:ae:3f:50:f2:c5:af:59:4d:b3:00:ef:b6:da:19:
5c:a0:e0:90:63:78:c4:40:2d:c0:e0:5f:ff:2d:ad:82:2d:10:
09:48:26:f9:23:58:93:8b:38:04:70:ca:5c:f3:2e:08:fc:61:
5c:c3:bd:1c:e6:fb:d3:56:e5:9b:82:58:64:8f:78:de:44:f1:
57:bf:32:7e:72:8b:88:26:fb:ff:11:cf:0c:19:c8:fe:26:53:
08:9b:65:a7:f1:af:c8:e2:f7:97:c1:2c:8a:44:73:86:69:4f:
0c:8a:dd:f3:8f:0e:2e:58:03:47:75:e5:98:5b:5a:e5:77:dd:
58:09:1f:ed:e5:1d:0e:76:3a:dd:68:95:b8:c3:c4:b2:f1:5f:
7d:47:bc:8a:bf:7a:0d:d3:38:35:46:a6:5f:d6:23:74:ef:bf:
c7:f2:39:7d:d2:01:16:08:1a:36:0e:70:40:df:60:dd:9c:30:
57:9f:4c:dc:16:3c:5a:e2:58:94:ae:3f:10:6f:c6:0b:be:92:
31:80:56:83:9c:fa:18:a9:0e:a5:41:2a:8d:34:f6:25:b3:01:
74:10:3b:ee
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUSVvs/URLUx/3KlWmEKOVFp+LzAEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzYzMkEwQ0Y0REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3
RTNDRkZENzAeFw0yNjA1MDMwMzA5MTNaFw0yNzA1MDIwMzE0MTNaMDMxMTAvBgNV
BAMTKEZDNjRBNkUzMzU0OUQyNDU3RDdFNDkzMkY0NzI5RTIwNjAzMUJGRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCmTnsdWiGB+P/EGFU8dAgNUMH
66ukQ+5Bpjb6HUq6BvXBFU4G4IaRawaJnBH+eFPPjmpT3TrtnRLAuAlwe2GTCg+8
GVD2Nx6fgNl/kfaN+60bNGIVJ2xtVHJxibjVH+Li+XoeUP065TWW55tTvGcob6AW
J9T4N5AhoSqX8TAM5JLANgFNZXayu0FfNcXNhv2lp6jsVqVbjmAZtbUR69tB3wmv
Hee6NcfpL9YS9QNgoSKaP3rXBXJ8yB7xyBN3FG3uv36Ud/1FQOrBAeEAOUzaT6vt
ELctkH2USpn5D9DvtYC+SO+4ctylrfDpYwjty2TTpNeJckvS2cZkERSD/c5TAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU/GSm4zVJ0kV9fkky9HKeIGAxv/EwHwYDVR0j
BBgwFoAUxjKgz02n3ed8vKwfNnEWoH48/9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTY1ZTc4MTAtNjdmNC00MWMyLTgwMzQtNDY1MjczM2I4ZGQyLzAvQzYzMkEwQ0Y0
REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3RTNDRkZENy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DNjMyQTBDRjREQTdEREU3N0NCQ0FDMUYzNjcxMTZBMDdFM0NG
RkQ3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04
MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzkzMDMwMzIz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3
QJACMA0GCSqGSIb3DQEBCwUAA4IBAQBOgi5hMhr1CLWeQSMhYEWmjv/9tNuPXOz+
WAGVPgt1L38AunEbmEdWrj9Q8sWvWU2zAO+22hlcoOCQY3jEQC3A4F//La2CLRAJ
SCb5I1iTizgEcMpc8y4I/GFcw70c5vvTVuWbglhkj3jeRPFXvzJ+couIJvv/Ec8M
Gcj+JlMIm2Wn8a/I4veXwSyKRHOGaU8Mit3zjw4uWANHdeWYW1rld91YCR/t5R0O
djrdaJW4w8Sy8V99R7yKv3oN0zg1RqZf1iN077/H8jl90gEWCBo2DnBA32DdnDBX
n0zcFjxa4liUrj8Qb8YLvpIxgFaDnPoYqQ6lQSqNNPYlswF0EDvu
-----END CERTIFICATE-----
Generated at Wed May 13 12:51:46 2026 by rpki-client