
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a3a2f33322d3438203d3e203338353236.roa
File: 323430353a333734303a3a2f33322d3438203d3e203338353236.roa (raw, json)
Hash identifier: VSzfN1c75MCp5L9+DpZCaaLVduJNZdf88SR3xUtOjtg=
Subject key identifier: 61:1D:52:37:64:61:4F:9B:BC:01:F0:CB:2F:F6:93:ED:A3:8E:2E:ED
Certificate issuer: /CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
Certificate serial: 09E03D5B75F2FFE981F05790DE5829E679E03525
Authority key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a3a2f33322d3438203d3e203338353236.roa
Signing time: Sun 03 May 2026 03:14:12 +0000
ROA not before: Sun 03 May 2026 03:09:12 +0000
ROA not after: Sun 02 May 2027 03:14:12 +0000
asID: 38526
IP address blocks: 2405:3740::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl
rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:e0:3d:5b:75:f2:ff:e9:81:f0:57:90:de:58:29:e6:79:e0:35:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
Validity
Not Before: May 3 03:09:12 2026 GMT
Not After : May 2 03:14:12 2027 GMT
Subject: CN=611D523764614F9BBC01F0CB2FF693EDA38E2EED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fe:ca:eb:87:c6:ae:4c:57:1f:c9:33:95:57:
45:f1:c5:e8:87:39:7d:82:9b:a1:fa:64:d7:e4:28:
e5:1a:28:7e:3c:83:89:9f:65:44:7b:62:f5:16:99:
9c:31:12:c8:f2:7d:7f:a4:e1:03:b9:ca:40:54:df:
71:56:f1:81:2d:ac:3c:37:d8:ac:09:5f:b1:54:ad:
aa:e9:12:d2:d4:64:c8:91:4f:1c:e3:22:f5:6e:9b:
e9:2d:5a:fa:b8:90:1e:88:01:df:f1:50:dc:e5:c3:
df:3a:72:99:95:6f:4e:9a:1e:1c:6e:2b:d6:c0:de:
21:17:ad:a7:83:98:1b:29:de:18:37:ce:d0:ec:a8:
3f:e3:9f:f1:c8:6b:f9:1a:96:fc:b3:89:ae:0b:04:
93:47:45:c4:d3:03:0f:41:e4:ed:7a:14:ea:5f:bb:
8c:c0:0a:6b:4c:28:e8:20:c8:ca:c1:88:fb:66:32:
fe:b8:1c:44:2c:de:a4:eb:f3:4f:3f:02:81:19:c9:
c7:e6:24:c6:9f:af:56:71:87:9b:5a:67:18:1e:51:
62:a1:93:04:89:b8:c6:ae:ea:d0:70:be:3e:29:31:
c2:a8:d7:89:87:25:d5:be:20:a2:18:b7:3b:62:d8:
6a:19:e9:21:4b:b3:55:d3:12:6c:3a:e4:68:63:93:
94:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1D:52:37:64:61:4F:9B:BC:01:F0:CB:2F:F6:93:ED:A3:8E:2E:ED
X509v3 Authority Key Identifier:
keyid:C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a3a2f33322d3438203d3e203338353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:3740::/32
Signature Algorithm: sha256WithRSAEncryption
41:29:8c:24:03:e8:05:25:8a:f9:ec:77:b3:d3:25:18:a3:76:
a6:04:dc:92:6c:1c:a8:eb:9f:b4:d6:a7:23:3b:af:0e:e6:07:
fc:78:99:31:d0:8d:e0:92:ba:a7:b1:3a:8b:b9:c4:13:77:5a:
15:56:8e:55:5d:67:e7:ea:87:2d:58:91:6d:aa:6e:ef:36:6c:
b4:bc:d5:d3:b6:a5:8d:40:6b:77:ff:65:7a:e1:8f:4e:e9:71:
e2:0f:22:61:d5:32:2f:11:d9:86:f3:ab:21:db:9a:90:3f:c5:
cc:5b:32:15:f7:9b:83:d3:dd:e0:a3:e9:20:01:df:0a:57:0a:
8b:31:1b:bb:79:45:89:c4:59:7b:9b:67:e9:58:6c:77:08:13:
90:07:b6:bd:0e:6a:a4:55:5f:4f:b8:1d:ac:27:b9:a9:ee:44:
02:c5:21:cd:0f:67:8c:b7:3d:19:88:b2:1d:90:58:9d:2d:c7:
ae:db:2a:26:c9:81:53:c7:c9:9f:0c:f9:12:36:d0:02:32:66:
fe:d7:76:eb:fb:a3:4a:65:b1:7e:11:09:a1:9d:d3:93:07:c8:
4c:48:58:32:f9:d4:3b:e0:9d:4f:11:a5:27:9c:4c:95:04:e7:
75:74:62:d8:f3:26:58:f6:7a:87:d6:79:71:9e:01:f4:fc:f6:
45:b4:05:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:56:03 2026 by rpki-client