
$ rpki-client -vvf rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa
File: 323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa (raw, json)
Hash identifier: X24eGimplx9OKKA54SDn3PccRcDMInDYSFbqOhNXsRk=
Subject key identifier: C3:AD:BC:6C:01:1F:C6:63:C2:D8:2B:C5:D9:E4:2C:9C:54:D8:7E:6B
Certificate issuer: /CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9
Certificate serial: 3F2EF651AA1A46B530DD581D54C0DB9BB528E64C
Authority key identifier: F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa
Signing time: Sun 03 May 2026 02:23:39 +0000
ROA not before: Sun 03 May 2026 02:18:39 +0000
ROA not after: Sun 02 May 2027 02:23:39 +0000
asID: 131749
IP address blocks: 2402:be80:2000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl
rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 08 May 2026 13:54:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:2e:f6:51:aa:1a:46:b5:30:dd:58:1d:54:c0:db:9b:b5:28:e6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9
Validity
Not Before: May 3 02:18:39 2026 GMT
Not After : May 2 02:23:39 2027 GMT
Subject: CN=C3ADBC6C011FC663C2D82BC5D9E42C9C54D87E6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:7c:2a:7b:bc:19:d2:8e:72:4b:fb:34:68:
da:54:2d:52:56:cf:73:21:da:57:65:34:ff:7f:8b:
a6:42:33:73:89:25:b3:a1:d0:87:ee:8e:0c:82:8d:
55:8d:b4:b7:3c:d3:87:1b:f2:5e:77:97:e0:c0:1c:
84:48:55:ce:c4:96:e5:21:8c:a0:fb:21:c2:25:3a:
a0:e0:cd:14:6c:af:2d:8a:f0:60:cd:8b:6d:2b:df:
0d:6a:b2:51:08:09:88:17:57:a0:63:9d:23:7b:1e:
d1:a6:e6:b1:61:c3:d4:b9:ee:0e:5d:30:d8:58:66:
87:81:08:92:81:f5:75:58:0c:fd:c8:8b:3e:23:76:
ae:82:3f:c5:0d:bb:fc:37:93:27:6c:c7:26:f4:4f:
9e:ea:95:78:1b:fc:40:45:ee:a1:f8:10:ad:10:81:
0f:59:8c:2f:a7:08:2f:89:e8:08:a3:87:a9:8b:25:
93:2d:ff:01:8d:30:c2:fd:23:26:e7:91:a6:5c:98:
8a:f0:a2:9a:2e:98:16:62:34:fa:e8:a5:2d:3c:0d:
8b:3e:f9:e9:ff:2c:24:ed:18:6a:4b:81:40:04:db:
2e:32:e0:69:b9:30:9b:9d:05:a2:8a:65:05:bf:d2:
36:35:c4:a5:e0:7b:70:88:71:0b:21:43:51:34:49:
ad:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AD:BC:6C:01:1F:C6:63:C2:D8:2B:C5:D9:E4:2C:9C:54:D8:7E:6B
X509v3 Authority Key Identifier:
keyid:F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:be80:2000::/35
Signature Algorithm: sha256WithRSAEncryption
28:1b:30:7e:92:a6:61:be:51:06:a4:95:f0:88:fa:5c:de:bd:
ce:3f:11:4e:45:90:dc:0e:cb:24:03:52:ff:0c:09:02:3c:4b:
83:0f:49:ec:01:a4:d2:86:11:d5:b3:c4:63:b1:70:a4:cf:a5:
9e:e8:85:87:2a:09:16:b9:6a:8e:cf:39:82:82:1d:9c:45:07:
74:4f:2c:a9:d1:89:05:b3:19:3b:f6:1f:d6:55:19:02:96:6b:
38:02:09:71:9f:95:fd:f5:d2:ea:6b:d5:7a:8f:15:ad:64:70:
bd:76:c9:95:22:cd:03:dd:c5:0e:c9:47:ff:f1:64:ca:ac:98:
03:7f:7c:98:02:ed:0b:74:b5:98:7e:a7:0e:84:0d:b6:08:64:
56:5b:dd:90:1a:53:b3:ac:a7:94:eb:54:7d:ee:54:58:90:6d:
56:ec:0a:49:32:ac:c2:52:d9:a8:4b:d7:32:ec:51:e1:21:47:
34:e4:76:bd:5b:24:1a:f0:96:11:dd:55:27:49:e5:b3:a9:23:
54:b3:f8:a4:a8:cc:c3:86:d8:be:27:3b:63:e1:af:87:4c:cd:
a6:45:7f:f6:3e:83:b9:4f:43:83:bd:1d:49:ae:23:fa:53:11:
73:23:c4:f8:bb:69:b1:26:8b:d5:7e:72:77:00:99:0d:3e:f8:
d2:8a:84:d8
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUPy72UaoaRrUw3VgdVMDbm7Uo5kwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhFQjZGNEU5MURERDQ3RkE4RTA0ODFCNjBENEMxODA4
NkE4MzJDOTAeFw0yNjA1MDMwMjE4MzlaFw0yNzA1MDIwMjIzMzlaMDMxMTAvBgNV
BAMTKEMzQURCQzZDMDExRkM2NjNDMkQ4MkJDNUQ5RTQyQzlDNTREODdFNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy/3wqe7wZ0o5yS/s0aNpULVJW
z3Mh2ldlNP9/i6ZCM3OJJbOh0IfujgyCjVWNtLc804cb8l53l+DAHIRIVc7EluUh
jKD7IcIlOqDgzRRsry2K8GDNi20r3w1qslEICYgXV6BjnSN7HtGm5rFhw9S57g5d
MNhYZoeBCJKB9XVYDP3Iiz4jdq6CP8UNu/w3kydsxyb0T57qlXgb/EBF7qH4EK0Q
gQ9ZjC+nCC+J6Aijh6mLJZMt/wGNMML9IybnkaZcmIrwopoumBZiNPropS08DYs+
+en/LCTtGGpLgUAE2y4y4Gm5MJudBaKKZQW/0jY1xKXge3CIcQshQ1E0Sa27AgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQUw628bAEfxmPC2CvF2eQsnFTYfmswHwYDVR0j
BBgwFoAU+OtvTpHd1H+o4EgbYNTBgIaoMskwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzAwZjRmMzctYzdmYi00N2QwLThhODUtZWNmZDEyYjkxNWY1LzAvRjhFQjZGNEU5
MURERDQ3RkE4RTA0ODFCNjBENEMxODA4NkE4MzJDOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GOEVCNkY0RTkxRERENDdGQThFMDQ4MUI2MEQ0QzE4MDg2QTgz
MkM5LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzMwMGY0ZjM3LWM3ZmItNDdkMC04
YTg1LWVjZmQxMmI5MTVmNS8wLzMyMzQzMDMyM2E2MjY1MzgzMDNhMzIzMDMwMzAz
YTNhMmYzMzM1MmQzMzM1MjAzZDNlMjAzMTMzMzEzNzM0Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUk
Ar6AIDANBgkqhkiG9w0BAQsFAAOCAQEAKBswfpKmYb5RBqSV8Ij6XN69zj8RTkWQ
3A7LJANS/wwJAjxLgw9J7AGk0oYR1bPEY7FwpM+lnuiFhyoJFrlqjs85goIdnEUH
dE8sqdGJBbMZO/Yf1lUZApZrOAIJcZ+V/fXS6mvVeo8VrWRwvXbJlSLNA93FDslH
//FkyqyYA398mALtC3S1mH6nDoQNtghkVlvdkBpTs6ynlOtUfe5UWJBtVuwKSTKs
wlLZqEvXMuxR4SFHNOR2vVskGvCWEd1VJ0nls6kjVLP4pKjMw4bYvic7Y+Gvh0zN
pkV/9j6DuU9Dg70dSa4j+lMRcyPE+LtpsSaL1X5ydwCZDT740oqE2A==
-----END CERTIFICATE-----
Generated at Fri May 8 07:11:30 2026 by rpki-client