
$ rpki-client -vvf rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/323430333a393130303a3a2f33322d3332203d3e203435333032.roa
File: 323430333a393130303a3a2f33322d3332203d3e203435333032.roa (raw, json)
Hash identifier: tuVT2WVuoJKqXbVfqOcI1MXvhl8U5VJFAWjVhCi6+7c=
Subject key identifier: 2F:B6:D3:88:ED:15:0F:9D:F1:86:EF:B3:6D:B1:98:E8:45:EC:F4:6D
Certificate issuer: /CN=ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2
Certificate serial: 3D9D2EFDC083E9225BD9CC78C8302DDCBE66D170
Authority key identifier: ED:41:DE:F7:56:30:D6:BC:76:B3:92:AB:AF:C7:A2:0B:95:98:A8:A2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/323430333a393130303a3a2f33322d3332203d3e203435333032.roa
Signing time: Sun 03 May 2026 03:18:59 +0000
ROA not before: Sun 03 May 2026 03:13:59 +0000
ROA not after: Sun 02 May 2027 03:18:59 +0000
asID: 45302
IP address blocks: 2403:9100::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.crl
rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:46:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:9d:2e:fd:c0:83:e9:22:5b:d9:cc:78:c8:30:2d:dc:be:66:d1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2
Validity
Not Before: May 3 03:13:59 2026 GMT
Not After : May 2 03:18:59 2027 GMT
Subject: CN=2FB6D388ED150F9DF186EFB36DB198E845ECF46D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:81:a6:dc:d1:86:64:1d:51:03:ab:7f:83:a6:
6b:e5:5b:98:64:2b:4a:44:97:81:5b:fc:28:b7:ca:
12:71:b7:c9:d2:b0:8a:95:2b:10:14:99:c3:62:75:
ce:91:cd:78:23:c5:d1:e1:a6:58:aa:e1:f3:8a:c4:
5d:15:f7:72:8e:7d:a0:2a:af:45:cb:b5:88:57:8d:
70:67:47:d0:6f:50:20:c2:ea:ba:48:2a:b4:90:c0:
36:60:01:4c:a8:c8:e6:f8:77:28:0f:97:91:94:ca:
cc:21:8a:b5:9f:34:db:a7:bf:34:3c:12:01:1e:76:
34:54:dc:22:6e:03:ae:42:83:01:c6:e0:60:86:f3:
cd:88:2b:6e:19:69:e8:68:ed:ad:57:f3:f8:30:0b:
f3:3d:1f:22:29:de:cb:19:a1:36:2f:76:34:e5:1f:
5a:9f:70:6a:02:70:b4:02:c1:22:37:f3:52:cb:b0:
db:49:6f:91:60:a2:a6:30:76:7d:31:0b:da:61:5b:
f7:f6:23:c2:cd:78:2c:58:33:16:ab:71:99:c7:76:
04:c0:23:cc:fd:db:a2:8c:d8:6c:7d:e4:5f:11:7f:
be:a7:d3:a3:04:c4:15:da:74:c6:f6:52:55:e9:b9:
03:c9:5c:2f:7d:b2:78:55:3f:1b:6a:1a:b1:d5:a7:
98:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B6:D3:88:ED:15:0F:9D:F1:86:EF:B3:6D:B1:98:E8:45:EC:F4:6D
X509v3 Authority Key Identifier:
keyid:ED:41:DE:F7:56:30:D6:BC:76:B3:92:AB:AF:C7:A2:0B:95:98:A8:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/323430333a393130303a3a2f33322d3332203d3e203435333032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:9100::/32
Signature Algorithm: sha256WithRSAEncryption
57:e5:d8:39:f2:23:c8:fc:2f:f9:81:0f:9f:b8:f5:04:5f:3f:
4b:b5:f4:09:fc:ef:3f:1e:50:7b:02:ae:f4:85:ea:da:41:57:
7b:9c:cc:d0:3a:89:15:09:3d:35:11:8f:24:bd:c0:3b:46:f0:
52:86:f4:62:57:22:26:82:55:2f:83:4b:ec:88:0a:03:ea:ef:
39:71:81:fe:29:a2:98:98:7c:67:93:63:14:99:db:9c:00:b7:
a3:68:d5:fd:aa:22:26:47:a3:2e:0f:b8:d4:aa:16:cc:08:7a:
bf:df:52:27:09:7c:10:85:6b:11:15:31:bf:c0:97:a9:2f:d4:
f1:36:e4:61:6a:1a:7a:17:c4:43:1c:03:75:f8:8d:92:f1:04:
29:dd:30:b7:05:4c:6d:4f:af:0c:de:e3:81:ea:70:d1:6c:80:
8f:2f:ba:6e:9b:e5:5d:97:bd:a2:aa:a0:bb:a3:f0:77:12:c3:
54:f7:83:19:74:29:63:a6:76:17:cc:18:7e:61:ce:20:2c:23:
d7:d7:2f:7e:f4:b1:d8:bf:36:2e:1b:71:0d:f2:23:38:62:45:
4d:08:9c:95:dd:39:62:ff:0a:1b:13:10:91:8f:1c:b4:60:62:
9c:ab:bd:97:b7:9c:77:db:58:9b:88:9c:59:59:11:bb:e2:81:
b4:46:71:86
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUPZ0u/cCD6SJb2cx4yDAt3L5m0XAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQ0MURFRjc1NjMwRDZCQzc2QjM5MkFCQUZDN0EyMEI5
NTk4QThBMjAeFw0yNjA1MDMwMzEzNTlaFw0yNzA1MDIwMzE4NTlaMDMxMTAvBgNV
BAMTKDJGQjZEMzg4RUQxNTBGOURGMTg2RUZCMzZEQjE5OEU4NDVFQ0Y0NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkgabc0YZkHVEDq3+DpmvlW5hk
K0pEl4Fb/Ci3yhJxt8nSsIqVKxAUmcNidc6RzXgjxdHhpliq4fOKxF0V93KOfaAq
r0XLtYhXjXBnR9BvUCDC6rpIKrSQwDZgAUyoyOb4dygPl5GUyswhirWfNNunvzQ8
EgEedjRU3CJuA65CgwHG4GCG882IK24Zaeho7a1X8/gwC/M9HyIp3ssZoTYvdjTl
H1qfcGoCcLQCwSI381LLsNtJb5FgoqYwdn0xC9phW/f2I8LNeCxYMxarcZnHdgTA
I8z926KM2Gx95F8Rf76n06MExBXadMb2UlXpuQPJXC99snhVPxtqGrHVp5i5AgMB
AAGjggIxMIICLTAdBgNVHQ4EFgQUL7bTiO0VD53xhu+zbbGY6EXs9G0wHwYDVR0j
BBgwFoAU7UHe91Yw1rx2s5Krr8eiC5WYqKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZmI4ODU4ZTAtZWNmMC00ZTUzLWE0OTAtM2I3YzJkZTE2OTNjLzAvRUQ0MURFRjc1
NjMwRDZCQzc2QjM5MkFCQUZDN0EyMEI5NTk4QThBMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FRDQxREVGNzU2MzBENkJDNzZCMzkyQUJBRkM3QTIwQjk1OThB
OEEyLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ZiODg1OGUwLWVjZjAtNGU1My1h
NDkwLTNiN2MyZGUxNjkzYy8wLzMyMzQzMDMzM2EzOTMxMzAzMDNhM2EyZjMzMzIy
ZDMzMzIyMDNkM2UyMDM0MzUzMzMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkA5EAMA0GCSqGSIb3
DQEBCwUAA4IBAQBX5dg58iPI/C/5gQ+fuPUEXz9LtfQJ/O8/HlB7Aq70heraQVd7
nMzQOokVCT01EY8kvcA7RvBShvRiVyImglUvg0vsiAoD6u85cYH+KaKYmHxnk2MU
mducALejaNX9qiImR6MuD7jUqhbMCHq/31InCXwQhWsRFTG/wJepL9TxNuRhahp6
F8RDHAN1+I2S8QQp3TC3BUxtT68M3uOB6nDRbICPL7pum+Vdl72iqqC7o/B3EsNU
94MZdCljpnYXzBh+Yc4gLCPX1y9+9LHYvzYuG3EN8iM4YkVNCJyV3Tli/wobExCR
jxy0YGKcq72Xt5x321ibiJxZWRG74oG0RnGG
-----END CERTIFICATE-----
Generated at Wed May 13 05:25:34 2026 by rpki-client