
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/323430363a373663303a3a2f33322d3438203d3e203538383231.roa
File: 323430363a373663303a3a2f33322d3438203d3e203538383231.roa (raw, json)
Hash identifier: pcqtzLzNaNYPks2/OHv2K1hXp8EkBWXZ157lBF+eG6I=
Subject key identifier: C1:10:44:F0:9C:51:19:BD:D8:40:90:65:EB:5E:2C:83:69:D5:BE:05
Certificate issuer: /CN=0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE
Certificate serial: 14134D819B3726CFF5CFCD4606FF9A362215862F
Authority key identifier: 0B:FD:6A:DC:BC:F7:45:7C:05:C7:FA:91:A6:95:87:58:C6:CE:CB:BE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/323430363a373663303a3a2f33322d3438203d3e203538383231.roa
Signing time: Sun 03 May 2026 03:19:37 +0000
ROA not before: Sun 03 May 2026 03:14:37 +0000
ROA not after: Sun 02 May 2027 03:19:37 +0000
asID: 58821
IP address blocks: 2406:76c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl
rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:13:4d:81:9b:37:26:cf:f5:cf:cd:46:06:ff:9a:36:22:15:86:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE
Validity
Not Before: May 3 03:14:37 2026 GMT
Not After : May 2 03:19:37 2027 GMT
Subject: CN=C11044F09C5119BDD8409065EB5E2C8369D5BE05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:17:dc:34:63:36:18:ca:14:ea:d6:3f:8c:1d:
5b:e9:9c:14:4e:57:ac:81:04:76:62:d8:92:4b:eb:
09:6d:e9:cb:f4:e3:34:48:a7:5b:62:4c:98:dd:cb:
12:e1:71:83:5b:3a:53:31:4c:92:f2:35:cc:70:60:
97:77:f5:90:7c:3d:a5:6c:99:5e:83:41:fe:dc:cc:
f9:45:b4:5f:8b:a7:ea:01:71:9e:a6:ef:f7:bf:ff:
7b:ec:dd:d8:eb:9b:8a:5f:78:69:16:14:52:5a:e1:
75:29:0d:f9:7f:8c:7d:16:ec:b6:dc:b6:22:e6:6e:
ad:94:bb:c8:c0:d0:6d:ac:d2:fe:39:30:e2:3d:3f:
f5:d0:e9:2c:ee:f2:0d:21:25:ad:9c:27:0d:c3:18:
63:b4:dd:74:f7:e5:fc:fa:45:6d:9a:fd:03:cd:45:
ed:2e:f7:f9:fa:bb:86:03:c7:a1:13:a3:b0:82:0f:
a0:01:3c:02:d8:0e:8c:b8:5e:c1:6a:ca:18:42:8e:
dd:5a:bb:7b:b4:a1:de:5d:53:45:1e:59:02:2a:4e:
eb:64:14:61:3c:ca:aa:3c:0f:9a:27:e2:f0:b9:8f:
fd:10:49:1b:4a:41:54:40:5f:23:cf:9c:97:12:13:
a8:7d:87:b9:ea:1f:10:59:22:78:bb:59:5c:39:8c:
a1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:10:44:F0:9C:51:19:BD:D8:40:90:65:EB:5E:2C:83:69:D5:BE:05
X509v3 Authority Key Identifier:
keyid:0B:FD:6A:DC:BC:F7:45:7C:05:C7:FA:91:A6:95:87:58:C6:CE:CB:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/323430363a373663303a3a2f33322d3438203d3e203538383231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:76c0::/32
Signature Algorithm: sha256WithRSAEncryption
0e:f6:a6:4d:05:03:43:30:c4:dd:5f:e8:3f:69:87:92:23:5c:
a0:c2:ad:d8:ef:b1:e3:57:12:5e:c3:a5:3d:14:d4:80:9e:a3:
ad:54:04:88:94:99:2e:61:77:34:59:ec:c6:ab:52:41:e3:9f:
3c:5b:d7:e9:15:ae:42:82:c1:43:c6:e8:81:b1:ca:fd:3f:64:
33:8b:7f:ef:79:9d:ea:de:dd:bf:a1:d4:d6:72:fb:8d:29:1b:
d7:01:ea:6b:fb:9f:50:70:0c:a4:10:d4:33:df:ae:4b:53:aa:
c7:8a:d2:a3:fc:3a:a3:0d:43:4a:20:33:a5:68:88:49:c4:ad:
4a:11:ba:b5:e5:b2:f9:c2:ab:e5:35:e2:b1:5a:95:34:ab:84:
69:f1:59:3b:d5:58:71:24:00:d4:1f:ff:92:83:ca:c2:8f:5d:
ab:ee:cc:d7:3a:83:28:83:7c:31:6d:d0:01:f3:11:dd:66:2e:
a8:cc:da:0a:3d:34:0e:56:8e:4f:99:34:27:0d:22:19:50:f6:
48:69:59:fc:e1:ad:b2:94:e3:22:78:1b:4c:e7:3c:55:db:90:
65:2b:71:ce:01:07:7c:df:ad:ed:ac:04:51:ee:c9:42:f7:14:
1a:94:76:96:06:fd:00:a6:46:ef:f9:f1:ca:06:25:49:99:48:
27:2a:e3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:48 2026 by rpki-client