
$ rpki-client -vvf rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a3a2f33342d3334203d3e20313331373439.roa
File: 323430323a626538303a3a2f33342d3334203d3e20313331373439.roa (raw, json)
Hash identifier: XYH3WtUdslBTF725L3cOP4xs8XuxcDg3daKQgahU/wE=
Subject key identifier: 72:4F:6B:22:71:0D:98:FA:59:53:9B:17:86:26:A3:5D:CF:A9:E3:D0
Certificate issuer: /CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9
Certificate serial: 26AA4BDA9F8380C7038AB6481BFAFE332D17A22F
Authority key identifier: F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a3a2f33342d3334203d3e20313331373439.roa
Signing time: Sun 03 May 2026 02:23:44 +0000
ROA not before: Sun 03 May 2026 02:18:44 +0000
ROA not after: Sun 02 May 2027 02:23:44 +0000
asID: 131749
IP address blocks: 2402:be80::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl
rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 08 May 2026 13:54:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:aa:4b:da:9f:83:80:c7:03:8a:b6:48:1b:fa:fe:33:2d:17:a2:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9
Validity
Not Before: May 3 02:18:44 2026 GMT
Not After : May 2 02:23:44 2027 GMT
Subject: CN=724F6B22710D98FA59539B178626A35DCFA9E3D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b7:90:33:20:8b:6e:8f:55:71:24:4c:af:4c:
7a:a4:fb:be:05:3e:ee:57:17:9a:c7:86:da:bb:7c:
1d:ec:f8:5e:d4:7a:29:38:56:b1:b5:26:f8:6e:23:
5b:01:e2:91:bf:fd:a9:fa:31:8f:d0:e7:b5:c5:09:
ac:8f:91:07:26:f9:30:52:60:3a:74:ed:af:b8:a7:
52:58:ef:c2:5b:83:75:4c:ea:ff:7f:87:59:64:ee:
9b:75:c8:96:c4:1b:86:9f:b2:fe:97:bb:12:e5:2e:
61:f2:8d:66:9e:c2:d1:d0:90:fe:fd:3b:52:68:7b:
5f:86:9a:0d:3f:9f:0f:7d:3b:7f:c6:5b:92:65:bc:
df:12:d2:3a:ef:b6:14:17:e6:15:19:0a:f7:32:1d:
e6:7d:26:e0:80:aa:70:8f:d0:32:38:7d:df:29:8a:
9d:2d:d5:0f:d4:49:c4:c6:5b:4a:59:63:b1:42:63:
04:07:5a:95:b8:de:ed:23:7d:4b:ac:7d:b7:8a:34:
87:33:14:2f:cc:c0:22:44:ae:dc:52:03:41:95:9a:
8e:c9:15:2e:f2:9c:c6:e3:97:6a:b8:4f:b9:15:f0:
7a:38:4b:e2:2b:f5:c8:f8:e2:f9:42:0d:b7:05:0d:
c8:33:ef:92:f9:53:f2:9e:f5:01:db:9a:eb:43:1a:
d8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4F:6B:22:71:0D:98:FA:59:53:9B:17:86:26:A3:5D:CF:A9:E3:D0
X509v3 Authority Key Identifier:
keyid:F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a3a2f33342d3334203d3e20313331373439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:be80::/34
Signature Algorithm: sha256WithRSAEncryption
95:fc:e2:2a:63:d9:79:4c:44:0e:36:46:2a:b1:53:04:02:54:
32:0a:04:48:84:08:e4:cd:6c:f2:c7:33:8d:5a:44:44:ba:6e:
25:b9:fe:ba:41:9a:31:7b:3f:1a:af:d1:fe:a7:e5:46:f2:17:
2b:bc:f8:1f:ac:d5:b9:f9:d3:f3:6a:be:54:33:bf:7b:49:ff:
7a:e4:d0:ee:6b:0e:7f:7b:a8:26:60:f7:4c:de:46:6d:64:1c:
93:06:cf:e6:83:c8:a8:d3:44:54:f8:a6:12:fb:6c:a9:45:79:
a2:17:ab:ba:11:44:b7:b7:c7:db:6d:88:82:f4:87:07:b1:76:
3e:d2:67:47:3a:ca:a1:49:3e:5f:33:31:0a:31:f5:e1:b8:a7:
d3:81:56:ef:6b:f2:ae:07:e0:e9:63:0c:8b:c5:00:94:6b:a8:
7b:ed:66:12:e4:cc:6c:e8:0f:b7:c2:b5:d4:23:23:13:92:1b:
f1:d5:87:4d:db:85:f7:3c:68:de:fe:16:ba:74:a2:9f:73:ad:
37:ed:ac:d0:d2:31:75:ae:36:20:f4:31:dc:c6:9c:20:7e:17:
69:43:13:71:5a:8d:54:90:ea:1d:9e:0f:30:4d:3e:f2:c5:ae:
78:ac:95:32:75:b9:c9:79:24:07:99:b4:c1:25:d7:d4:d1:dd:
fd:52:4e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 07:11:16 2026 by rpki-client