
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/323430353a383138303a3a2f33322d3332203d3e2034373837.roa
File: 323430353a383138303a3a2f33322d3332203d3e2034373837.roa (raw, json)
Hash identifier: UAYb+1HjfSmt5R+QlsY+ZQQtQPafl+SlPKPY7/wXU0Q=
Subject key identifier: AC:67:B8:2C:07:83:E8:03:96:E6:C1:CE:19:CC:C1:B8:96:AF:9E:7B
Certificate issuer: /CN=488A458129866D0E7DBFF7668D82664F584F8541
Certificate serial: 35EF4F8CD984010BD965BB09DD82AC42F0C06DB5
Authority key identifier: 48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/323430353a383138303a3a2f33322d3332203d3e2034373837.roa
Signing time: Sun 03 May 2026 03:15:07 +0000
ROA not before: Sun 03 May 2026 03:10:07 +0000
ROA not after: Sun 02 May 2027 03:15:07 +0000
asID: 4787
IP address blocks: 2405:8180::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl
rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:ef:4f:8c:d9:84:01:0b:d9:65:bb:09:dd:82:ac:42:f0:c0:6d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488A458129866D0E7DBFF7668D82664F584F8541
Validity
Not Before: May 3 03:10:07 2026 GMT
Not After : May 2 03:15:07 2027 GMT
Subject: CN=AC67B82C0783E80396E6C1CE19CCC1B896AF9E7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:69:a2:ba:8c:66:2b:cb:d4:ed:6e:94:2c:8e:
fd:66:26:92:5a:85:24:08:01:88:6a:7d:22:cf:d2:
94:fb:53:dc:f6:03:f4:65:54:17:29:f7:a3:08:3d:
e3:3d:d1:26:6d:a8:b6:e4:9a:f7:f0:4b:00:55:ad:
77:c5:8f:83:12:2a:ec:a5:f0:1a:35:ac:34:6f:95:
a2:5c:d4:3e:ae:2d:b4:c3:67:a2:e6:1b:08:e2:65:
0c:55:13:5b:1a:ae:32:23:46:f8:19:57:37:e3:cf:
f6:3f:d3:fe:d2:e6:6a:43:85:5b:f7:34:7e:ea:40:
8c:11:21:c7:98:9f:2c:7c:c6:74:ec:c0:08:3c:64:
f2:3c:6b:66:97:d0:11:ec:fd:e3:d7:c2:aa:0e:0d:
7f:d7:e6:fb:bd:cf:56:d5:c3:b4:98:0f:d6:37:e0:
f3:6d:bd:d3:69:47:60:68:8f:60:6d:f1:98:ed:8b:
fc:6d:51:68:b6:69:00:32:66:2f:9f:7f:5b:01:bf:
c0:04:87:af:91:74:5c:7c:d3:d0:68:49:5e:9d:21:
0c:9f:cf:19:7e:36:76:e7:09:c0:47:74:c7:11:3e:
29:62:5f:08:c6:55:4c:57:ad:b5:40:a1:9e:bd:6b:
10:34:1c:9e:5d:e5:7f:c7:bd:bc:32:62:f5:c8:8b:
b1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:67:B8:2C:07:83:E8:03:96:E6:C1:CE:19:CC:C1:B8:96:AF:9E:7B
X509v3 Authority Key Identifier:
keyid:48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/323430353a383138303a3a2f33322d3332203d3e2034373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:8180::/32
Signature Algorithm: sha256WithRSAEncryption
e4:19:d4:17:c4:ea:70:1f:85:97:e8:9a:32:fc:11:71:e1:5d:
ea:54:0a:46:40:c5:ad:ab:3b:e1:a1:68:b4:77:d5:7c:b0:5d:
46:8c:f5:78:c7:bf:e5:ae:c9:4f:b2:63:cc:95:a6:66:f5:93:
37:c4:98:e3:2d:e7:d4:70:71:9a:31:10:2e:8f:cd:86:18:5d:
6c:1e:ac:eb:91:e2:25:e7:fd:3a:69:1b:49:dc:b1:fd:fb:14:
a8:32:40:ac:7f:e6:82:91:dd:41:40:ad:cf:41:33:c7:86:dd:
43:58:a6:36:92:65:3d:01:78:e5:db:40:e4:19:4c:25:d5:fa:
f5:e3:dd:71:66:3c:49:9e:7b:b5:28:f4:9b:43:0c:5c:03:f2:
f3:61:d3:59:5a:bc:70:b1:71:6f:31:78:fe:3f:99:b7:85:ae:
86:8e:8f:2a:1a:f0:e2:c0:bb:ac:31:3b:6d:c6:26:7d:ee:68:
a4:07:24:85:3d:db:10:86:fd:6e:bc:af:ad:4c:fd:e9:5a:d0:
e5:38:7d:9f:8f:7d:53:8b:42:ad:2f:2d:48:8d:7f:51:e6:dc:
3f:05:56:08:52:db:8d:03:61:06:c1:ec:68:e6:c6:33:20:d2:
2a:d3:fe:40:ef:f7:54:3e:95:45:ef:f4:66:13:29:54:56:8b:
3e:2d:40:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:12:06 2026 by rpki-client