
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031343a3a2f34382d3438203d3e203338353236.roa
File: 323430353a333734303a393031343a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier: OeInPsM+2RQT6MA5rnlP0h2SIR1jL9ab4Cbr8Jwfnb4=
Subject key identifier: 2C:BE:A3:2C:49:B2:D5:B7:1D:61:1E:C8:04:9A:43:35:F7:71:52:C1
Certificate issuer: /CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
Certificate serial: 47C80F4EC6AB05AAC19DBE572C9DDF19990857E9
Authority key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031343a3a2f34382d3438203d3e203338353236.roa
Signing time: Sun 03 May 2026 03:14:02 +0000
ROA not before: Sun 03 May 2026 03:09:02 +0000
ROA not after: Sun 02 May 2027 03:14:02 +0000
asID: 38526
IP address blocks: 2405:3740:9014::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl
rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:c8:0f:4e:c6:ab:05:aa:c1:9d:be:57:2c:9d:df:19:99:08:57:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
Validity
Not Before: May 3 03:09:02 2026 GMT
Not After : May 2 03:14:02 2027 GMT
Subject: CN=2CBEA32C49B2D5B71D611EC8049A4335F77152C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:84:08:0a:60:0c:9e:a6:39:91:a2:77:24:31:
d2:b0:51:bf:c2:d6:4d:7e:bf:bc:2c:82:f1:9f:59:
a5:46:64:2b:58:55:07:55:d7:63:bb:72:36:7d:61:
1b:d6:89:69:6a:80:51:41:3b:c6:ea:d4:86:17:15:
2d:f8:5c:0f:80:da:07:c2:5d:fd:94:32:a6:46:fb:
00:ec:6c:15:c5:3d:a2:3c:cf:a5:de:13:16:e1:36:
64:54:cc:de:d9:a4:e7:fe:ff:23:7e:1b:6c:5a:b1:
91:96:9a:9f:23:fb:ac:2a:5a:14:44:23:eb:82:db:
85:19:1e:15:b1:0c:f3:96:a8:3d:3e:79:bf:19:6f:
7f:cb:94:a9:62:58:64:ef:4d:d2:17:29:ad:7a:cf:
df:3b:a1:20:c1:da:11:cf:60:2e:17:12:e6:e3:6d:
03:dc:31:01:64:5f:f0:24:0c:af:1f:4c:3c:df:79:
60:85:df:d8:db:77:c5:0e:9e:39:41:3e:19:23:ee:
ef:78:dc:7d:34:7f:11:70:3d:22:fe:f7:73:72:bb:
0f:f5:cd:54:a6:15:9f:3d:0c:be:23:0f:2a:ad:9e:
d8:aa:00:9c:f2:47:58:31:92:41:88:e2:fd:90:88:
24:58:3e:08:50:76:2d:90:92:01:25:01:24:31:9f:
9f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BE:A3:2C:49:B2:D5:B7:1D:61:1E:C8:04:9A:43:35:F7:71:52:C1
X509v3 Authority Key Identifier:
keyid:C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031343a3a2f34382d3438203d3e203338353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:3740:9014::/48
Signature Algorithm: sha256WithRSAEncryption
0a:c7:d6:69:15:b7:fa:5c:5b:38:2d:07:d1:53:e7:52:cc:6d:
6b:34:e2:56:0b:7e:21:7a:c2:19:55:63:21:44:d1:10:ee:fc:
4a:9e:42:66:53:56:e5:38:21:27:fe:2f:5d:61:fd:05:09:4c:
27:7e:a9:3a:0a:51:27:1b:b1:35:01:3d:ba:a2:9c:26:56:0f:
15:42:cf:45:95:15:28:a4:8f:00:b6:6b:d6:97:04:30:21:15:
29:32:42:8e:7c:01:70:ec:8a:c0:ea:8e:e7:93:2c:17:ba:4f:
b6:1f:5d:01:ad:8a:c4:27:08:5f:49:a8:7f:0c:04:ae:e6:c2:
b1:2c:1a:04:86:1d:13:73:9e:f6:30:da:17:72:96:bb:96:0c:
f1:47:c7:5f:94:ee:37:75:fc:40:24:aa:56:59:46:97:ac:fa:
cc:19:c3:b5:95:43:ee:38:c8:4c:af:87:93:51:57:a7:74:f5:
ac:e9:0a:f0:eb:65:c7:18:bd:62:b5:67:5a:07:4b:83:fd:59:
ac:07:87:76:75:c2:68:8a:4d:d9:99:0c:a3:1f:86:1b:19:3c:
67:11:8a:38:b8:19:39:50:93:55:e4:1b:5b:33:d1:ba:35:72:
57:cb:26:55:2e:33:73:5e:50:e2:cc:d1:68:91:b9:ce:bf:09:
28:e9:2d:22
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUR8gPTsarBarBnb5XLJ3fGZkIV+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzYzMkEwQ0Y0REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3
RTNDRkZENzAeFw0yNjA1MDMwMzA5MDJaFw0yNzA1MDIwMzE0MDJaMDMxMTAvBgNV
BAMTKDJDQkVBMzJDNDlCMkQ1QjcxRDYxMUVDODA0OUE0MzM1Rjc3MTUyQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrhAgKYAyepjmRonckMdKwUb/C
1k1+v7wsgvGfWaVGZCtYVQdV12O7cjZ9YRvWiWlqgFFBO8bq1IYXFS34XA+A2gfC
Xf2UMqZG+wDsbBXFPaI8z6XeExbhNmRUzN7ZpOf+/yN+G2xasZGWmp8j+6wqWhRE
I+uC24UZHhWxDPOWqD0+eb8Zb3/LlKliWGTvTdIXKa16z987oSDB2hHPYC4XEubj
bQPcMQFkX/AkDK8fTDzfeWCF39jbd8UOnjlBPhkj7u943H00fxFwPSL+93Nyuw/1
zVSmFZ89DL4jDyqtntiqAJzyR1gxkkGI4v2QiCRYPghQdi2QkgElASQxn5/pAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQULL6jLEmy1bcdYR7IBJpDNfdxUsEwHwYDVR0j
BBgwFoAUxjKgz02n3ed8vKwfNnEWoH48/9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTY1ZTc4MTAtNjdmNC00MWMyLTgwMzQtNDY1MjczM2I4ZGQyLzAvQzYzMkEwQ0Y0
REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3RTNDRkZENy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DNjMyQTBDRjREQTdEREU3N0NCQ0FDMUYzNjcxMTZBMDdFM0NG
RkQ3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04
MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzkzMDMxMzQz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3
QJAUMA0GCSqGSIb3DQEBCwUAA4IBAQAKx9ZpFbf6XFs4LQfRU+dSzG1rNOJWC34h
esIZVWMhRNEQ7vxKnkJmU1blOCEn/i9dYf0FCUwnfqk6ClEnG7E1AT26opwmVg8V
Qs9FlRUopI8AtmvWlwQwIRUpMkKOfAFw7IrA6o7nkywXuk+2H10BrYrEJwhfSah/
DASu5sKxLBoEhh0Tc572MNoXcpa7lgzxR8dflO43dfxAJKpWWUaXrPrMGcO1lUPu
OMhMr4eTUVendPWs6Qrw62XHGL1itWdaB0uD/VmsB4d2dcJoik3ZmQyjH4YbGTxn
EYo4uBk5UJNV5BtbM9G6NXJXyyZVLjNzXlDizNFokbnOvwko6S0i
-----END CERTIFICATE-----
Generated at Wed May 13 12:46:43 2026 by rpki-client