
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/323430333a396634303a3a2f33322d3438203d3e20313338303734.roa
File: 323430333a396634303a3a2f33322d3438203d3e20313338303734.roa (raw, json)
Hash identifier: K+7+KqgCp4d18TVZTPxmAsUlKSyTdPx9xS3oBJGcNok=
Subject key identifier: 56:6B:AD:9F:06:AE:0F:57:F9:57:FC:C8:9B:F6:83:C0:61:73:0B:51
Certificate issuer: /CN=0446D571B5FD57D22786B0872C74829904EAAB9F
Certificate serial: 261F48098336F9168F2FF557E8E5AE6F79F87359
Authority key identifier: 04:46:D5:71:B5:FD:57:D2:27:86:B0:87:2C:74:82:99:04:EA:AB:9F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/323430333a396634303a3a2f33322d3438203d3e20313338303734.roa
Signing time: Sun 03 May 2026 02:17:26 +0000
ROA not before: Sun 03 May 2026 02:12:26 +0000
ROA not after: Sun 02 May 2027 02:17:26 +0000
asID: 138074
IP address blocks: 2403:9f40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.crl
rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 10:39:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:1f:48:09:83:36:f9:16:8f:2f:f5:57:e8:e5:ae:6f:79:f8:73:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0446D571B5FD57D22786B0872C74829904EAAB9F
Validity
Not Before: May 3 02:12:26 2026 GMT
Not After : May 2 02:17:26 2027 GMT
Subject: CN=566BAD9F06AE0F57F957FCC89BF683C061730B51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:86:f9:9e:d5:cb:0c:3c:ad:b5:0e:31:95:4b:
e7:37:a0:1a:7d:06:da:fb:ec:b4:a9:5c:c1:83:bc:
68:0d:b5:b1:42:21:17:f8:e9:1e:c6:29:c6:83:a1:
f6:cc:a8:57:93:6d:01:54:e5:34:01:34:6e:19:29:
9f:24:12:0c:72:61:25:95:e6:a8:04:c8:9b:68:19:
33:39:dd:76:06:98:b0:d8:71:ce:93:4b:4a:3b:74:
7f:9f:78:a8:03:ce:b6:ea:60:6c:a1:74:d1:df:f9:
41:6c:a3:0e:b8:df:7b:14:a1:09:71:3d:95:92:fb:
a1:86:2f:41:67:02:d7:0c:0d:0b:9e:47:5f:56:e4:
7e:1c:84:a9:0a:78:65:93:a1:0a:c9:22:57:a3:57:
9a:9b:69:e3:7f:ec:7a:8f:22:cd:24:46:78:05:9b:
a1:83:fb:90:90:b9:f8:69:b2:aa:34:ad:aa:03:80:
9b:28:9d:1f:c5:11:44:94:99:20:61:40:a1:c0:8d:
36:95:e1:34:63:69:8f:db:d2:05:b7:09:c2:76:08:
65:23:b9:ac:23:42:8b:f7:68:34:87:6f:68:cd:f8:
dd:fa:c3:9b:85:39:e6:d0:ef:8a:b4:db:dd:d6:0e:
0c:df:3c:92:1a:a4:25:ab:43:05:77:39:0e:73:a5:
a1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6B:AD:9F:06:AE:0F:57:F9:57:FC:C8:9B:F6:83:C0:61:73:0B:51
X509v3 Authority Key Identifier:
keyid:04:46:D5:71:B5:FD:57:D2:27:86:B0:87:2C:74:82:99:04:EA:AB:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/323430333a396634303a3a2f33322d3438203d3e20313338303734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:9f40::/32
Signature Algorithm: sha256WithRSAEncryption
43:67:7e:7f:97:a2:fa:b1:9b:38:14:f2:c7:37:83:ee:de:3b:
1a:4a:92:93:dc:ff:af:60:7e:0a:e9:41:2c:99:e3:19:1f:d8:
07:23:6b:87:15:ad:61:fc:98:c2:a0:52:e4:63:c7:98:cc:a0:
78:72:54:4f:c4:03:3f:de:6e:e8:2f:4a:13:9b:5b:86:bc:d3:
e7:31:6d:94:90:98:a9:a3:ee:87:68:cf:8e:e3:63:42:e0:11:
90:94:55:ec:2e:ab:3d:64:c3:1b:5b:97:f0:6b:88:b6:42:04:
dc:c6:7f:5d:ed:2f:35:ba:c9:b2:3f:d8:2e:c2:6e:ae:33:6c:
e3:e4:52:9c:65:f4:37:ae:fd:b2:ca:a0:f2:f4:67:6c:c1:90:
3b:9a:9b:a6:a4:b6:a7:55:a4:77:dc:ee:7c:77:a6:77:2f:bc:
05:77:1a:d4:fa:61:4c:ea:d9:6d:40:39:af:e2:26:cc:c4:44:
d2:de:12:b7:4a:b2:8f:68:55:ec:46:52:00:1f:5a:16:41:f5:
25:8f:13:39:56:51:74:be:50:3c:47:0f:69:23:90:89:0b:29:
c0:8e:6d:2c:71:ed:5a:69:9b:e0:34:3c:3f:90:56:4b:e9:ea:
d8:1f:e8:67:29:14:9d:7e:4f:85:40:66:55:af:c4:e7:8e:c5:
4e:13:2c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 03:30:33 2026 by rpki-client