
$ rpki-client -vvf rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa
File: 323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa (raw, json)
Hash identifier: esq0SPO+hAIrG7YQPAU2RMpBG0FEhngieVqoN2H1Z00=
Subject key identifier: 3E:A2:1B:B7:D9:F2:15:8A:DD:5E:D4:95:62:73:77:CC:3A:B3:ED:6D
Certificate issuer: /CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9
Certificate serial: 6C057F2F08D04C484DCB71795814DAC563EF6246
Authority key identifier: F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa
Signing time: Sun 03 May 2026 02:23:40 +0000
ROA not before: Sun 03 May 2026 02:18:40 +0000
ROA not after: Sun 02 May 2027 02:23:40 +0000
asID: 131749
IP address blocks: 2402:be80:a000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl
rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 08 May 2026 13:54:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:05:7f:2f:08:d0:4c:48:4d:cb:71:79:58:14:da:c5:63:ef:62:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9
Validity
Not Before: May 3 02:18:40 2026 GMT
Not After : May 2 02:23:40 2027 GMT
Subject: CN=3EA21BB7D9F2158ADD5ED495627377CC3AB3ED6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:29:7b:2d:62:02:7b:54:0a:f0:80:06:39:98:
51:4d:30:c8:88:f0:20:b0:18:d4:db:fe:f2:e4:fa:
ea:5e:ec:b4:7b:a8:53:2d:cb:4e:fd:e9:a5:ae:85:
3d:83:3b:2c:b7:15:6b:eb:3d:a2:ca:fd:ae:2f:1e:
c4:8b:15:0d:46:d0:e8:3c:e1:26:7e:21:9f:c2:f8:
cd:0c:5e:73:3e:04:0c:05:de:82:77:40:21:ad:6f:
dc:f4:5e:13:c9:7a:7b:3f:c8:6d:1f:60:a7:c2:bb:
76:75:0b:a7:6e:27:89:57:92:4a:98:a5:60:5c:60:
f9:5a:92:c1:53:d9:39:7d:4b:db:b7:65:6f:8a:3e:
8d:88:16:9b:1e:32:cf:a3:30:16:7b:fb:73:70:08:
7e:12:99:f8:b6:40:07:bd:ee:00:56:b2:8d:07:62:
d3:ec:a6:7d:3b:af:6a:ad:c9:ab:ce:e5:a6:b2:23:
aa:6a:63:9c:2a:ba:ea:c8:27:92:36:e2:81:37:1d:
e9:c9:aa:84:5f:4d:25:e9:3c:25:51:23:6b:af:f7:
ca:6b:33:46:2d:22:35:73:bd:16:5a:c5:75:63:22:
c2:20:ea:77:52:c4:a1:7b:ce:2f:92:e2:f4:f9:21:
50:03:f5:1f:96:f0:85:3d:69:8e:04:48:af:0a:a8:
f0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A2:1B:B7:D9:F2:15:8A:DD:5E:D4:95:62:73:77:CC:3A:B3:ED:6D
X509v3 Authority Key Identifier:
keyid:F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:be80:a000::/35
Signature Algorithm: sha256WithRSAEncryption
3f:7a:14:aa:3c:e3:cd:78:ae:32:37:d0:10:ea:5b:3d:d2:2b:
f4:f8:23:a4:2f:dd:e4:be:3f:0c:68:3c:bb:ea:34:2b:c2:6d:
35:17:e8:8b:50:b0:72:b5:3d:34:3a:17:9b:53:4f:09:cf:d2:
a6:2c:5e:30:ae:c7:d0:f2:0b:0a:3d:b4:12:cb:81:b1:7f:84:
a3:48:6e:bb:8c:95:8f:57:52:10:6c:67:b4:af:87:2e:f1:b4:
94:ef:5d:de:89:a7:5c:d2:1e:a2:05:25:3e:49:5b:2c:ab:14:
df:70:d7:e6:eb:fe:71:ef:37:6f:07:5e:0a:34:06:20:63:76:
21:ef:a7:0a:c8:68:b5:a0:d3:5d:fb:31:4f:a0:a3:6a:5e:1f:
0f:2a:e7:56:71:da:5a:47:f5:4b:a4:52:ca:13:8a:b1:8d:bc:
70:37:24:da:14:55:f8:10:9b:79:c8:f3:47:7f:e3:8b:b2:b3:
ea:1e:e6:e3:cb:03:5e:25:40:70:d5:8f:f9:99:b9:9b:18:f8:
3e:f8:f3:3c:5c:c7:a0:b0:80:99:f1:fa:b8:46:04:c8:78:43:
c4:23:ee:f5:62:f1:63:19:70:87:d5:af:56:78:c9:80:8f:65:
71:d7:29:4b:dd:20:80:74:24:aa:8c:b9:59:3b:8e:92:51:b2:
a6:e9:0b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 07:11:55 2026 by rpki-client