
$ rpki-client -vvf rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/323430343a663630303a3a2f33322d3438203d3e203234323037.roa
File: 323430343a663630303a3a2f33322d3438203d3e203234323037.roa (raw, json)
Hash identifier: O3BW4/+vpeYZOrGXcLGA8HAU1zfqrZRISOMkRbThX6s=
Subject key identifier: 15:C0:29:07:8B:C5:A0:5A:14:FD:A3:9D:58:A4:47:A9:2C:CD:EA:36
Certificate issuer: /CN=D67DDCB46CF40B52641F71BF7756DFA29F4159A2
Certificate serial: 55E663F5655A168E8DD7C3C77D59BBDD57C9AB01
Authority key identifier: D6:7D:DC:B4:6C:F4:0B:52:64:1F:71:BF:77:56:DF:A2:9F:41:59:A2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/323430343a663630303a3a2f33322d3438203d3e203234323037.roa
Signing time: Sun 03 May 2026 03:19:20 +0000
ROA not before: Sun 03 May 2026 03:14:20 +0000
ROA not after: Sun 02 May 2027 03:19:20 +0000
asID: 24207
IP address blocks: 2404:f600::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.crl
rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:e6:63:f5:65:5a:16:8e:8d:d7:c3:c7:7d:59:bb:dd:57:c9:ab:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67DDCB46CF40B52641F71BF7756DFA29F4159A2
Validity
Not Before: May 3 03:14:20 2026 GMT
Not After : May 2 03:19:20 2027 GMT
Subject: CN=15C029078BC5A05A14FDA39D58A447A92CCDEA36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:db:99:95:63:42:fa:93:37:67:11:4e:cf:1a:
e6:4e:df:62:dc:ca:5e:34:fa:6a:63:be:ed:cf:49:
29:b7:a6:09:78:02:ce:5c:6b:c4:c8:5f:fc:8a:3c:
3e:1e:3f:8c:d3:53:10:c7:94:7d:6e:4e:f2:8d:9f:
6d:e6:2a:27:3e:61:67:a5:19:5f:33:22:1e:40:aa:
a2:10:9d:af:f1:ac:a1:4c:dd:45:79:e1:93:05:84:
de:7e:13:ad:c3:3a:9c:79:e8:2e:26:1f:19:9c:f1:
92:8c:e6:1d:6b:43:f8:5e:c7:bb:32:1c:fe:a4:f6:
ec:08:c3:db:ef:e9:d6:89:7d:74:79:b0:2b:11:42:
26:08:16:e9:48:db:8d:40:8b:bc:bf:33:44:56:33:
70:40:f5:bb:2d:8b:d5:ac:78:35:b0:0b:8c:d6:ce:
d3:46:21:d3:d4:48:92:4a:3d:d1:ab:76:e1:a1:ad:
7b:f3:e5:97:66:f5:8f:bc:84:bf:ea:fc:3f:33:16:
3c:e5:a2:15:73:c9:bc:e0:5e:7c:bb:07:c2:b0:0b:
2e:69:5c:4f:98:c5:18:e4:d1:13:55:ed:d3:15:b0:
59:64:45:b6:fc:2f:98:3b:41:b6:62:6b:c3:d0:a0:
60:be:14:c0:ed:e0:94:e7:2f:f5:25:1c:13:b4:73:
8b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C0:29:07:8B:C5:A0:5A:14:FD:A3:9D:58:A4:47:A9:2C:CD:EA:36
X509v3 Authority Key Identifier:
keyid:D6:7D:DC:B4:6C:F4:0B:52:64:1F:71:BF:77:56:DF:A2:9F:41:59:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D67DDCB46CF40B52641F71BF7756DFA29F4159A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/323430343a663630303a3a2f33322d3438203d3e203234323037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:f600::/32
Signature Algorithm: sha256WithRSAEncryption
66:8b:16:ee:8d:79:4c:31:30:45:4e:5d:72:44:4e:f4:f9:92:
2a:d8:a9:ea:4a:26:fd:c6:96:a7:77:8d:a7:b4:cb:b7:53:87:
68:69:1d:cc:71:7d:50:a5:f3:1b:ae:2f:81:70:3a:19:6d:39:
9b:8d:06:9c:bf:18:e7:a5:06:6f:da:e2:e4:bf:0f:ff:9c:d2:
31:e0:4f:a3:98:88:44:8f:d7:8a:0a:8c:c7:c3:0d:3c:43:16:
5f:21:cf:41:a3:f9:f9:79:79:6d:d7:f9:bc:04:4c:76:23:a5:
87:d1:ad:62:75:21:5d:2d:9a:f6:b7:6f:a2:af:38:f1:04:7f:
45:a9:82:84:ac:8c:77:33:cb:c4:97:43:90:3b:04:cd:41:86:
89:0d:8b:6c:0a:44:1a:07:9d:a0:34:5f:f3:32:5e:0a:23:81:
76:ae:ce:45:b3:ec:81:31:89:12:cf:47:dd:7a:ba:e3:54:90:
6b:b9:23:f4:49:b9:96:4a:21:66:98:47:85:4e:e7:f9:b0:53:
84:bc:f0:16:91:f2:25:ec:fb:70:d0:36:fb:27:6a:6a:37:31:
f8:6b:b5:1e:65:ec:ac:1f:8d:9d:7d:e0:23:8b:6a:06:c5:9f:
be:18:31:d3:2e:c4:55:6d:2c:8b:39:71:ea:52:4a:b4:76:55:
ed:fe:da:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:36:33 2026 by rpki-client