
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030343a3a2f34382d3438203d3e203338353236.roa
File: 323430353a333734303a393030343a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier: GMOVEi/4PKZFJBGs6N7Ksy2a9HtqwgoOc8AqcWXxxE0=
Subject key identifier: AC:91:49:5A:F5:CD:D2:A2:5F:55:C6:98:E0:5D:C9:CA:67:64:1A:54
Certificate issuer: /CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
Certificate serial: 78F7390E3E5F5DEB694E2FC4CA977FDF3344EC10
Authority key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030343a3a2f34382d3438203d3e203338353236.roa
Signing time: Sun 03 May 2026 03:14:14 +0000
ROA not before: Sun 03 May 2026 03:09:14 +0000
ROA not after: Sun 02 May 2027 03:14:14 +0000
asID: 38526
IP address blocks: 2405:3740:9004::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl
rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:f7:39:0e:3e:5f:5d:eb:69:4e:2f:c4:ca:97:7f:df:33:44:ec:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
Validity
Not Before: May 3 03:09:14 2026 GMT
Not After : May 2 03:14:14 2027 GMT
Subject: CN=AC91495AF5CDD2A25F55C698E05DC9CA67641A54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0a:f8:5a:6a:34:34:0f:d5:a8:81:b8:8a:bf:
28:95:87:be:e2:6f:a4:f1:5b:56:f8:fc:39:db:b0:
51:15:86:19:da:8e:5f:56:2d:b9:ed:67:4a:8d:bb:
3d:95:06:38:c6:b3:31:ca:60:2b:c9:b6:0b:a5:64:
9b:e9:69:70:24:bc:d2:48:66:04:3b:5b:53:52:02:
d4:55:06:ff:08:d3:34:a7:9d:be:7b:b2:48:f9:89:
9e:c0:d7:d6:25:4b:e3:40:1d:3c:b5:ac:de:d7:a0:
ce:aa:b6:9b:19:14:f4:bb:d9:e8:58:1d:51:79:5d:
11:c9:47:b3:83:db:cf:8c:1d:d8:79:f3:14:df:1d:
d2:de:d8:e5:8a:0b:a7:3c:59:ca:5b:95:c6:39:79:
08:88:7c:84:a1:4c:64:c7:42:5d:df:69:c5:c3:5a:
9c:9c:b8:53:9f:6c:c5:79:0f:fc:7c:ae:c0:ed:79:
40:6a:a8:86:bf:5a:3b:79:fd:a6:ee:2b:58:b2:f4:
d0:86:30:b4:62:6b:12:14:d0:1d:fc:7b:89:c1:4a:
d4:86:44:83:80:cb:c1:28:84:e6:20:b2:99:9d:1e:
19:88:c0:65:e7:3b:56:76:ef:e9:e3:a7:5d:3a:38:
7e:82:9d:3c:11:e4:f6:99:d9:dd:fc:7e:d4:ed:80:
f3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:91:49:5A:F5:CD:D2:A2:5F:55:C6:98:E0:5D:C9:CA:67:64:1A:54
X509v3 Authority Key Identifier:
keyid:C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030343a3a2f34382d3438203d3e203338353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:3740:9004::/48
Signature Algorithm: sha256WithRSAEncryption
6e:35:53:e6:5e:7b:42:58:b2:91:01:48:84:ac:98:12:be:e0:
21:fa:cd:be:d5:a3:c2:df:fa:fe:75:d7:3d:d5:8a:26:6e:8f:
f9:63:e6:63:b4:f9:ee:15:0d:67:6b:d1:7e:1f:8b:c3:5f:32:
69:76:5d:de:72:27:a1:5e:bb:74:6d:b0:c3:89:7b:6e:e1:70:
82:87:79:f3:88:a4:03:b2:d7:c8:37:96:73:a4:cc:cf:59:e1:
2c:f1:51:28:63:44:6d:d9:ae:4c:06:49:c8:7f:e1:1c:c9:a3:
c6:41:6c:e5:41:78:60:7d:b8:87:7a:31:3f:5e:e3:c6:c9:78:
7c:cf:d8:78:b6:50:25:a7:8f:15:03:d1:e8:9e:58:58:11:67:
5e:8e:a4:0c:b7:5c:12:90:e4:d0:56:f6:2b:ca:88:8f:17:9b:
30:70:39:3e:3a:69:e9:e3:0b:ce:2d:61:eb:5f:0d:b7:96:92:
21:ce:f6:8d:e2:e7:c8:26:5f:06:e1:6b:a8:0a:1e:93:c9:6a:
da:15:16:d7:97:26:15:bf:4f:ac:29:43:3c:98:e7:38:4d:ae:
6f:93:ee:2a:7d:94:3b:14:b5:89:48:5d:d7:af:d6:f9:87:4d:
19:7d:32:aa:d7:65:0b:62:2d:0d:86:2e:e8:55:70:76:2b:83:
dc:e4:44:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:25:44 2026 by rpki-client