
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/323430343a3162383a3a2f33322d3332203d3e2039373934.roa
File: 323430343a3162383a3a2f33322d3332203d3e2039373934.roa (raw, json)
Hash identifier: a6AsSR2z3cNuumgS8T/l7weunqXhAc0ZnY5yuJhhOI4=
Subject key identifier: 1D:EA:95:7C:1A:F9:8D:35:7B:55:A6:3C:CC:85:D4:6D:21:AB:66:DD
Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial: 4FAF488A003A2805502198AA627F4C6DC546006F
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/323430343a3162383a3a2f33322d3332203d3e2039373934.roa
Signing time: Sun 03 May 2026 03:17:24 +0000
ROA not before: Sun 03 May 2026 03:12:24 +0000
ROA not after: Sun 02 May 2027 03:17:24 +0000
asID: 9794
IP address blocks: 2404:1b8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:40:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:af:48:8a:00:3a:28:05:50:21:98:aa:62:7f:4c:6d:c5:46:00:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Validity
Not Before: May 3 03:12:24 2026 GMT
Not After : May 2 03:17:24 2027 GMT
Subject: CN=1DEA957C1AF98D357B55A63CCC85D46D21AB66DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7f:1d:1b:2d:fe:7b:9a:5a:6e:bd:7e:c1:70:
ba:a9:d8:cf:c1:5e:24:61:77:70:db:b0:ff:e6:3f:
5d:56:46:de:26:c7:6e:22:1a:a9:36:ab:39:bb:18:
8f:9d:5f:e9:e5:aa:97:cb:0a:60:eb:45:71:08:49:
8f:63:60:d5:89:fe:f4:5b:43:5b:21:b1:97:bd:77:
88:22:45:8b:08:62:17:4a:b6:4d:2d:5d:f7:d3:f2:
41:a7:2d:27:7d:df:e6:fe:13:00:08:46:ed:6d:38:
67:55:b4:37:6d:67:48:62:a6:c7:d3:d6:66:77:f4:
a6:57:3f:1d:b7:07:90:1f:8b:61:99:d1:8f:94:27:
48:06:65:05:ef:d2:b0:08:fb:cf:af:63:c6:0b:26:
a9:3c:9e:10:17:a4:16:a4:90:0d:35:41:1a:68:56:
4c:7f:16:03:d2:03:c6:a8:1c:89:16:d6:71:0f:bd:
a3:d3:88:b8:1a:db:20:1d:98:7b:a4:05:a3:c5:b3:
66:db:6d:0f:00:73:3f:cc:a4:40:52:bb:cd:18:eb:
22:5f:af:f1:2b:3c:5e:c3:fc:18:e8:79:c5:f0:71:
33:d0:4b:b2:e7:88:ca:2a:45:66:0a:13:61:8d:6c:
15:77:b3:39:70:55:80:6b:09:28:f3:d4:28:76:8b:
3f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EA:95:7C:1A:F9:8D:35:7B:55:A6:3C:CC:85:D4:6D:21:AB:66:DD
X509v3 Authority Key Identifier:
keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/323430343a3162383a3a2f33322d3332203d3e2039373934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:1b8::/32
Signature Algorithm: sha256WithRSAEncryption
9e:26:45:8e:7f:ec:fb:91:3e:b3:e2:5f:24:2e:c1:cc:a4:e2:
01:58:45:94:14:82:b7:f7:c3:7c:f3:bd:92:27:e0:fc:e8:f3:
74:90:97:4b:9d:c8:6f:b6:52:8a:d3:0a:27:0f:4c:ee:99:4e:
bd:40:66:68:b1:a8:a4:dc:88:1c:07:6d:67:8b:f2:02:fb:da:
40:0d:ea:1d:e3:43:da:c3:d1:d5:5d:6d:58:dc:43:dc:6a:e9:
8a:ea:76:37:f2:c6:16:75:80:d5:6a:c0:3d:27:88:58:3d:f1:
d8:57:0e:38:03:17:81:5a:75:91:41:43:0d:a6:38:2c:e3:ee:
0c:8a:17:f2:cf:ab:40:0f:cb:4f:97:f9:ad:14:d9:ff:2e:87:
9c:ed:c7:e6:39:b8:49:f6:66:7f:9e:4d:8d:e4:ad:7e:b0:40:
f4:f6:21:12:2d:eb:ef:22:2d:17:27:c2:7d:f5:bc:6c:87:08:
b8:1e:99:c9:62:52:60:c2:48:1a:75:e8:00:51:95:d1:f1:9c:
8d:c4:db:94:79:52:99:4f:b1:ca:03:da:37:c0:99:fa:77:43:
8d:c3:b4:f7:cd:06:78:e3:4e:4a:d9:c8:82:ff:35:c8:4b:6a:
28:ba:ad:e7:1f:d8:b8:40:2a:6b:ff:62:27:70:23:85:6c:46:
7a:4c:39:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:29 2026 by rpki-client