
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030363a3a2f34382d3438203d3e203338353236.roa
File: 323430353a333734303a393030363a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier: cUN8Y6Ob/zTdYQyUM9jvbvRwYaQmpBrW2QBBz901ZMg=
Subject key identifier: 77:43:FC:C7:91:14:AF:7D:70:63:6F:7E:12:C9:E1:FF:18:6F:27:EC
Certificate issuer: /CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
Certificate serial: 336EF8DB41C536BF05FAF4D18045F27F1FAA86FA
Authority key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030363a3a2f34382d3438203d3e203338353236.roa
Signing time: Sun 03 May 2026 03:14:13 +0000
ROA not before: Sun 03 May 2026 03:09:13 +0000
ROA not after: Sun 02 May 2027 03:14:13 +0000
asID: 38526
IP address blocks: 2405:3740:9006::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl
rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:6e:f8:db:41:c5:36:bf:05:fa:f4:d1:80:45:f2:7f:1f:aa:86:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
Validity
Not Before: May 3 03:09:13 2026 GMT
Not After : May 2 03:14:13 2027 GMT
Subject: CN=7743FCC79114AF7D70636F7E12C9E1FF186F27EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f6:6d:ff:81:15:e4:a1:c6:f1:04:1b:ae:c3:
3a:bc:40:13:1d:82:44:47:a4:59:8e:06:43:2e:c4:
5e:17:b2:7d:1b:e3:f5:2b:85:9f:06:25:60:07:86:
27:cd:c4:0e:8f:37:78:48:48:70:83:2a:59:79:fe:
84:6d:c7:79:02:ef:65:59:ee:00:5d:4d:eb:fe:b0:
58:59:21:56:59:32:af:a2:5a:82:0c:65:bc:61:b4:
ad:19:85:35:1e:8a:00:23:01:46:94:05:59:39:83:
3f:f0:08:6d:33:56:c5:dd:cb:70:a2:9f:3b:92:51:
55:90:5e:78:71:80:12:e2:24:34:e6:63:cf:ce:5c:
66:cf:09:82:32:da:5e:5d:d7:de:4f:a0:3d:ca:82:
7e:e4:e7:e5:11:a4:9b:1d:53:9f:d4:e7:ae:99:10:
94:a3:36:a6:49:2b:d0:b0:08:8c:77:07:81:8d:0c:
3f:9f:7f:90:e0:93:72:8b:f0:90:d9:bb:59:d9:d1:
19:69:40:83:35:0b:f7:e1:51:bd:d8:e5:0c:28:8b:
28:c5:bc:cf:d3:ac:b3:38:67:a2:df:c8:1d:d1:78:
68:71:bc:a0:06:86:79:59:6c:a2:30:bc:33:c3:ac:
67:e3:f5:6d:3d:27:5a:59:b2:26:cc:06:d6:f5:77:
6a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:43:FC:C7:91:14:AF:7D:70:63:6F:7E:12:C9:E1:FF:18:6F:27:EC
X509v3 Authority Key Identifier:
keyid:C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030363a3a2f34382d3438203d3e203338353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:3740:9006::/48
Signature Algorithm: sha256WithRSAEncryption
8a:c4:c9:f4:1a:83:10:52:21:61:f1:11:ba:3b:10:77:fa:12:
25:f6:d5:4e:e1:38:20:16:15:d5:55:91:5a:e7:6a:9c:ed:5c:
00:cd:50:1c:2b:6d:1b:68:4c:61:c6:c6:19:27:09:3a:b8:41:
e6:6e:d7:c1:3a:fb:dd:33:c2:45:a9:96:dd:b2:77:23:7d:bd:
43:e3:f2:a7:f7:29:a0:57:de:2b:7e:4a:9a:e6:b2:91:e1:fb:
7e:4b:7e:fc:bf:86:b0:21:97:39:c5:5e:d7:4c:1d:c5:1c:c2:
3e:0a:27:fb:94:07:32:e1:69:e3:a5:15:87:8a:0f:2b:96:35:
f5:ba:da:db:1d:73:9f:35:20:a4:95:a9:92:89:54:d7:a0:fa:
e0:01:e9:3e:e1:26:6d:f2:eb:6c:88:0d:41:cb:17:bf:c0:e3:
75:d2:ac:f2:6f:13:6c:b7:fb:a2:73:dd:cb:cb:8f:84:3b:a9:
ff:ce:97:e2:56:45:4a:08:3d:c5:36:01:bf:41:30:24:a6:43:
3d:c8:5a:3e:15:92:d8:b2:48:3c:a1:1b:26:34:64:ff:d7:3a:
e3:fa:d5:16:a8:0b:e4:cb:23:6f:38:da:47:c3:00:ec:e8:5a:
cb:b7:a9:f2:52:15:4f:6d:2c:9d:e1:6b:f2:5e:9e:b0:ff:2e:
60:c7:12:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:35:03 2026 by rpki-client