
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031663a3a2f34382d3438203d3e203338353236.roa
File: 323430353a333734303a393031663a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier: yr3aoYjqpviNY4N3RsZzOlFedxpxmgzaexJXLqoO6Io=
Subject key identifier: 53:03:55:47:1F:40:C7:DA:84:46:71:1B:9D:00:61:F9:41:80:FE:E3
Certificate issuer: /CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
Certificate serial: 34F3D65FC482B5B72015CCA13A2AEF497F6C1C1D
Authority key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031663a3a2f34382d3438203d3e203338353236.roa
Signing time: Sun 03 May 2026 03:14:10 +0000
ROA not before: Sun 03 May 2026 03:09:10 +0000
ROA not after: Sun 02 May 2027 03:14:10 +0000
asID: 38526
IP address blocks: 2405:3740:901f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl
rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:f3:d6:5f:c4:82:b5:b7:20:15:cc:a1:3a:2a:ef:49:7f:6c:1c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
Validity
Not Before: May 3 03:09:10 2026 GMT
Not After : May 2 03:14:10 2027 GMT
Subject: CN=530355471F40C7DA8446711B9D0061F94180FEE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:df:f7:a8:88:6b:43:64:64:6e:2d:bd:0e:af:
d8:29:1b:53:4d:f4:1e:3e:e5:40:36:95:f9:2a:7a:
6c:6f:4c:20:09:86:3c:f0:ea:61:18:d6:24:8f:6c:
50:87:30:fb:54:72:1f:69:be:30:b8:9e:15:ca:dc:
bb:3c:3b:d7:06:c6:5f:d7:c4:f8:f5:07:0e:22:b1:
7b:ce:2c:f0:65:2c:a9:7f:22:1a:44:f1:c0:c6:b5:
2d:40:8f:49:3e:9b:e5:37:27:17:7f:4a:9e:e8:35:
bf:d1:3c:06:e3:a9:ce:e7:ff:12:77:42:b6:d5:04:
9c:aa:3b:90:8b:10:0b:a1:d7:78:26:9d:ed:33:7a:
e6:90:b1:31:64:58:cb:5f:a6:5a:c3:61:22:4b:18:
12:98:e2:12:87:c6:20:04:ad:4f:75:33:36:70:96:
29:7e:cb:bc:1e:ab:21:11:01:5a:00:3c:cb:75:ee:
d4:5d:86:1a:17:9a:36:bc:2c:00:f2:19:77:3a:df:
e9:e1:6f:2c:04:16:8d:32:67:af:f5:fc:74:27:e5:
ba:6c:4c:18:19:81:2f:d9:db:49:91:4d:34:91:e7:
af:a6:e3:79:af:23:58:9f:48:25:a2:4c:c0:b5:32:
81:b6:71:4f:e1:f4:e8:dc:05:91:1b:43:51:80:d0:
d2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:03:55:47:1F:40:C7:DA:84:46:71:1B:9D:00:61:F9:41:80:FE:E3
X509v3 Authority Key Identifier:
keyid:C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031663a3a2f34382d3438203d3e203338353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:3740:901f::/48
Signature Algorithm: sha256WithRSAEncryption
4f:85:5e:8c:04:b8:63:b7:ff:89:a8:a5:24:91:a7:90:db:03:
84:87:f4:91:11:d9:07:5a:d9:48:65:cd:17:43:d7:9c:9d:0d:
98:4b:9b:f6:dc:fd:27:dd:80:d1:87:4a:81:0a:ee:d8:de:44:
20:7b:71:74:fd:df:96:76:45:1f:4e:5b:d8:e4:81:70:86:e8:
41:d1:e3:60:c3:11:4b:e7:6e:18:e7:84:99:4c:f8:1b:94:e8:
e7:b3:b4:3c:ac:2d:fd:37:98:3b:cb:38:8a:67:a4:77:b9:9c:
37:cd:95:c0:45:f0:e7:8f:b0:16:f1:88:ff:c7:2b:bb:b7:51:
85:90:fd:05:f3:f8:ca:60:7a:89:23:1e:c4:4c:b7:ab:b7:17:
3f:d1:40:8c:7a:7d:a9:b8:6b:f7:11:21:08:c9:bd:02:de:95:
e5:27:39:f5:25:de:3c:68:3c:64:17:6a:5d:10:ab:0c:12:5d:
1b:63:13:36:64:c6:5e:52:63:24:68:bd:f4:15:f5:2d:2c:1c:
a3:25:93:c5:9e:01:de:81:0f:48:73:65:6a:5f:c4:02:88:f2:
92:f9:a5:39:11:94:26:8c:43:7c:9e:e6:f2:bf:25:3a:8c:e8:
41:ae:fd:2b:f7:68:04:10:af:44:80:54:56:61:f2:aa:36:5a:
67:91:40:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:47:46 2026 by rpki-client