
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031653a3a2f34382d3438203d3e203338353236.roa
File: 323430353a333734303a393031653a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier: KiF/4BXVl/rU0yibYtIp8vRR/9Zq8tOUxLiBvkNh7jY=
Subject key identifier: 5F:F2:E1:0D:95:8F:F6:B4:92:7F:BC:90:44:51:17:11:5E:B7:FA:21
Certificate issuer: /CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
Certificate serial: 33E23E2358103DF9DEE0D7E52342BBC2E5EF0241
Authority key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031653a3a2f34382d3438203d3e203338353236.roa
Signing time: Sun 03 May 2026 03:14:08 +0000
ROA not before: Sun 03 May 2026 03:09:08 +0000
ROA not after: Sun 02 May 2027 03:14:08 +0000
asID: 38526
IP address blocks: 2405:3740:901e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl
rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:e2:3e:23:58:10:3d:f9:de:e0:d7:e5:23:42:bb:c2:e5:ef:02:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
Validity
Not Before: May 3 03:09:08 2026 GMT
Not After : May 2 03:14:08 2027 GMT
Subject: CN=5FF2E10D958FF6B4927FBC90445117115EB7FA21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ea:05:9e:4f:a8:08:5f:1d:70:6d:dd:77:97:
7b:6a:58:2e:37:fd:bb:50:5a:c3:6b:e4:b4:26:8f:
de:35:40:50:24:62:71:41:0e:a8:bc:db:3d:94:73:
47:77:97:39:18:da:cd:91:d1:a5:dc:00:50:22:fe:
48:00:72:bd:2b:ef:d4:cd:c1:33:37:e9:6b:be:5f:
2c:f5:b6:b5:28:02:d0:8b:7f:5b:cc:1d:b7:59:fc:
73:49:c2:cd:c9:41:bf:e4:12:ea:79:40:31:41:e8:
fd:70:00:68:03:32:91:d2:eb:59:3d:8a:68:6c:cf:
96:38:85:e9:0c:77:46:ce:f4:fa:05:e1:88:dc:0f:
05:3f:fb:2c:6b:cb:55:f5:cc:39:b0:62:2f:9a:3d:
4c:aa:c6:c2:78:4e:29:d8:36:56:e1:3a:71:cc:8b:
dc:0e:21:15:eb:0d:43:cb:2e:29:aa:d1:6d:8e:92:
73:ef:02:e0:c3:61:02:a8:d0:7e:34:a3:71:ad:d9:
1b:05:a3:0d:a7:03:ee:b6:c3:06:49:00:27:80:07:
a6:bf:a5:a2:ae:cd:d6:ee:f2:06:23:96:62:9f:9c:
60:cb:b1:28:d7:72:b7:77:45:8d:66:45:68:97:01:
5a:7d:57:b7:50:3c:8c:42:81:62:f7:22:dc:8e:2a:
56:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F2:E1:0D:95:8F:F6:B4:92:7F:BC:90:44:51:17:11:5E:B7:FA:21
X509v3 Authority Key Identifier:
keyid:C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031653a3a2f34382d3438203d3e203338353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:3740:901e::/48
Signature Algorithm: sha256WithRSAEncryption
2f:f0:76:58:f2:82:a4:35:2d:eb:68:42:fe:cd:a0:07:2e:b0:
76:53:53:f1:33:f4:cd:89:a3:b0:b0:06:18:92:98:67:28:e1:
6a:b5:fd:9b:fe:fd:6b:7d:b3:8f:85:32:ce:83:4a:61:b6:98:
1b:c6:a2:2e:e9:23:8d:a0:e0:29:30:9c:e1:7d:ce:79:a0:73:
98:89:45:c4:1b:1b:e2:26:62:1c:12:45:a3:aa:7d:dd:2d:c3:
3b:b7:9c:96:79:c7:1a:c1:f1:6c:e5:e2:44:cf:9f:91:72:2d:
a9:93:ca:59:ae:46:30:70:46:77:7e:30:a7:1d:a9:fd:ed:72:
56:4b:69:22:6c:24:7b:80:f9:0a:41:05:9d:db:eb:97:1a:60:
14:ef:3c:2e:ae:84:91:ba:49:d5:6c:1f:d1:01:04:1c:66:08:
38:68:f0:4a:3c:03:36:27:7b:c8:e5:fd:fa:2e:73:2e:41:f7:
dd:eb:5e:b6:73:13:e4:8d:fc:2f:c5:2a:7c:c4:eb:de:9b:74:
76:6e:c0:d0:09:96:56:5a:9b:0e:86:60:9e:1d:53:da:99:39:
be:9a:f3:aa:bb:b9:7b:73:f5:70:cf:b9:30:cd:bc:9d:e4:25:
77:20:eb:aa:dc:c6:aa:20:7c:b9:2e:25:71:92:53:7d:3f:17:
c8:c5:f6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:57:27 2026 by rpki-client