
$ rpki-client -vvf rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/323030313a6466303a386438303a3a2f34382d3438203d3e20313338393031.roa
File: 323030313a6466303a386438303a3a2f34382d3438203d3e20313338393031.roa (raw, json)
Hash identifier: Fw4ZShoY1ipa+BexcpJaYw89aApjuOYJwqsXze7oiwI=
Subject key identifier: 13:41:64:50:D6:7C:56:92:3D:1F:69:4D:2A:FF:6F:A2:7D:30:CC:9C
Certificate issuer: /CN=E4AC5A0B7B031CC8F4387521F896C49FC8165D46
Certificate serial: 47F77258417F079F4F291E2E2A6C48E7A69B1A29
Authority key identifier: E4:AC:5A:0B:7B:03:1C:C8:F4:38:75:21:F8:96:C4:9F:C8:16:5D:46
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/323030313a6466303a386438303a3a2f34382d3438203d3e20313338393031.roa
Signing time: Sun 03 May 2026 03:15:24 +0000
ROA not before: Sun 03 May 2026 03:10:24 +0000
ROA not after: Sun 02 May 2027 03:15:24 +0000
asID: 138901
IP address blocks: 2001:df0:8d80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.crl
rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:39:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:f7:72:58:41:7f:07:9f:4f:29:1e:2e:2a:6c:48:e7:a6:9b:1a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4AC5A0B7B031CC8F4387521F896C49FC8165D46
Validity
Not Before: May 3 03:10:24 2026 GMT
Not After : May 2 03:15:24 2027 GMT
Subject: CN=13416450D67C56923D1F694D2AFF6FA27D30CC9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:58:eb:68:32:6b:47:a6:b8:1a:0b:ca:aa:f6:
61:06:38:33:ea:a3:7c:e5:bb:25:1c:01:97:fa:00:
f7:0f:e3:b3:89:64:88:54:a4:a1:49:30:55:5d:3e:
8f:bb:ed:77:ba:8b:06:a6:50:e8:94:cc:65:05:f5:
60:9a:80:0f:b0:d9:5b:f1:33:48:7b:b9:fe:94:64:
12:fc:d5:77:e9:f8:18:db:35:09:2c:39:c7:8e:46:
da:a7:c1:fe:fb:26:e2:16:aa:f9:99:25:80:c0:e9:
ef:fe:32:fe:1e:8c:e5:0d:3b:04:5f:d5:73:54:1f:
76:4d:ca:0a:02:af:f6:25:2c:eb:0e:4a:53:e3:c6:
92:4e:48:13:8e:0c:3c:f3:ea:e4:75:eb:10:cd:8a:
51:73:6a:b5:e7:d1:d4:fd:64:6e:e3:10:48:25:07:
09:4e:91:46:c6:c9:73:62:0e:34:94:46:db:f0:9c:
4c:d1:36:1b:66:eb:c6:7e:ae:03:6b:36:eb:04:70:
ca:55:87:92:8e:01:84:33:ae:b8:8c:8e:25:92:aa:
ba:77:d0:44:bb:ad:e8:83:1a:24:30:1b:f4:de:55:
eb:08:98:52:ba:63:03:11:59:7f:c3:26:65:ee:dd:
bc:28:7e:04:bc:27:f4:0a:1c:92:1c:fa:95:17:2e:
b8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:41:64:50:D6:7C:56:92:3D:1F:69:4D:2A:FF:6F:A2:7D:30:CC:9C
X509v3 Authority Key Identifier:
keyid:E4:AC:5A:0B:7B:03:1C:C8:F4:38:75:21:F8:96:C4:9F:C8:16:5D:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/323030313a6466303a386438303a3a2f34382d3438203d3e20313338393031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:8d80::/48
Signature Algorithm: sha256WithRSAEncryption
36:97:4f:a2:ed:3b:45:a2:5e:be:48:ef:f4:f7:31:9e:b8:6f:
ee:d0:3c:37:8a:7b:ae:5f:f0:00:49:05:cf:16:33:d2:de:1e:
34:e5:b9:1d:32:67:3f:9b:9e:6c:5a:43:8c:30:b8:a6:65:30:
bd:1e:c7:6c:40:43:de:02:1a:74:f8:96:4f:9c:5a:d4:74:d3:
9c:20:b6:1d:2b:33:55:42:e3:57:3d:e3:67:ec:06:a8:9a:81:
af:66:b1:5c:7f:5a:d9:27:25:19:bd:9c:70:eb:df:8d:f0:98:
3d:4c:c8:c4:3d:43:31:00:f1:b4:3b:36:28:3c:df:73:03:a9:
a5:ed:db:56:34:28:94:88:48:a3:f1:61:ab:2a:3d:b7:2d:36:
6c:90:2f:24:8f:a7:6f:9c:8c:fb:ea:bb:6b:a4:51:fa:0d:a1:
0e:19:41:54:e9:5a:79:b8:fd:8e:03:10:05:72:2d:92:14:d9:
77:af:b3:a3:7d:ac:d4:78:1c:03:a8:c7:79:4c:8f:fe:5f:1b:
6b:94:c8:e0:14:7f:69:86:f9:22:af:eb:42:44:3a:82:4f:fa:
8a:11:0c:13:e0:f9:e0:4f:75:b7:b3:63:6e:94:64:32:cd:62:
a8:68:03:53:e3:6a:f2:a4:01:58:de:71:cc:89:97:0c:c5:3a:
38:88:9a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:36:12 2026 by rpki-client