
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031333a3a2f34382d3438203d3e203338353236.roa
File: 323430353a333734303a393031333a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier: RPQ5h9bu6JwPYrm+3WChg4SVDWk4x5lMH6siT+wYQzM=
Subject key identifier: 2B:DF:29:9E:7B:E1:E1:DC:5C:20:ED:C7:9E:9F:1B:56:28:4E:E3:86
Certificate issuer: /CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
Certificate serial: 28FCB87C9186D7DB2AFD35AD45B846B6D17A9FDF
Authority key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031333a3a2f34382d3438203d3e203338353236.roa
Signing time: Sun 03 May 2026 03:14:11 +0000
ROA not before: Sun 03 May 2026 03:09:11 +0000
ROA not after: Sun 02 May 2027 03:14:11 +0000
asID: 38526
IP address blocks: 2405:3740:9013::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl
rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:fc:b8:7c:91:86:d7:db:2a:fd:35:ad:45:b8:46:b6:d1:7a:9f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
Validity
Not Before: May 3 03:09:11 2026 GMT
Not After : May 2 03:14:11 2027 GMT
Subject: CN=2BDF299E7BE1E1DC5C20EDC79E9F1B56284EE386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ed:09:22:9f:fe:6e:96:8c:ca:72:d9:13:09:
0b:ec:cb:96:48:b9:5f:65:45:a5:e2:40:50:73:6a:
27:3d:d9:10:8d:6b:a2:a9:7a:31:66:95:a3:d7:93:
55:69:b1:5e:72:c4:7a:f5:53:1e:0c:ab:cf:ac:17:
27:53:fd:cc:0a:53:0a:ed:f4:6d:f2:13:e2:a9:d1:
3b:f6:2f:af:b6:c0:4b:c1:15:59:e5:c6:c9:69:43:
aa:1f:c2:2c:62:07:e0:48:81:6e:d9:89:ca:9c:da:
53:7e:2f:55:1f:8e:7f:b7:c6:a5:60:f7:61:8a:e7:
5f:82:66:1e:f4:59:d1:17:49:d5:07:bc:e5:e2:0a:
8c:19:53:61:ba:ea:4c:16:39:1c:06:90:dd:97:31:
8a:24:d3:99:14:2e:26:22:30:7f:58:a7:42:e8:ee:
51:7b:11:6a:b4:f0:b0:36:28:54:0b:19:6e:6f:e9:
75:02:ce:c8:9e:70:75:79:c6:3b:d1:35:ac:1f:b1:
57:9a:00:73:cd:1d:61:a8:d4:34:e2:a5:56:c3:49:
ad:99:07:c3:88:62:00:2f:e5:b7:e6:1d:39:ce:7d:
b5:1b:f0:11:4b:bf:48:d1:06:3d:6f:59:0d:1d:23:
0b:cb:c9:dd:47:39:36:9b:6e:37:25:c9:81:63:6f:
1e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DF:29:9E:7B:E1:E1:DC:5C:20:ED:C7:9E:9F:1B:56:28:4E:E3:86
X509v3 Authority Key Identifier:
keyid:C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031333a3a2f34382d3438203d3e203338353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:3740:9013::/48
Signature Algorithm: sha256WithRSAEncryption
53:7f:43:1c:32:2b:95:fb:a7:73:05:3f:5f:2e:8f:4f:ab:65:
ff:fd:2c:a4:3e:4a:0f:85:b4:24:3d:a5:5a:12:be:9f:6e:72:
52:42:9f:b2:fa:15:f1:2c:dd:ff:9c:4a:d2:01:a8:57:d5:07:
55:b8:92:9b:05:69:ad:e5:1d:83:67:e2:cf:e7:78:e2:ea:d9:
6e:ce:cc:72:5d:ec:09:84:39:60:cf:1e:d5:93:55:72:32:00:
c5:36:c6:6d:f1:6e:d5:9b:da:69:a4:ad:d9:4a:a3:78:5a:d0:
f1:ce:c2:7b:6f:04:2b:26:f1:69:c9:06:c7:49:f0:a1:b4:29:
07:41:de:2a:18:a2:14:11:3b:b4:96:32:ac:e5:5f:17:77:9e:
b1:56:1a:6a:5d:16:7b:57:aa:b1:08:4f:f6:e5:83:1b:5f:ad:
ee:a7:e7:5e:20:46:35:a5:bb:98:78:40:8e:9d:a0:31:77:a2:
c2:ed:52:52:4b:d7:94:41:de:f5:80:6b:77:24:00:1e:05:98:
a7:2f:fa:bd:81:81:e6:9d:f8:c2:aa:3b:cc:16:f4:28:57:49:
c7:7f:68:a0:64:a0:fa:21:e5:ee:a0:d3:d8:fa:d5:64:00:e0:
59:4c:85:39:8f:ed:96:87:9d:de:4e:f8:0c:0a:5f:34:98:a6:
79:5a:b0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:51:45 2026 by rpki-client