
$ rpki-client -vvf rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa
File: 323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa (raw, json)
Hash identifier: svAi0R5XEu9X4Ys1yfCbCgtQxluGGulsPQVUUn8ta/o=
Subject key identifier: F6:9B:21:17:A7:0A:80:59:89:54:97:13:6C:7C:1A:B7:C2:FC:35:09
Certificate issuer: /CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9
Certificate serial: 4189E7FB6F7059E3321DFC9DEF7C3879EBA967EB
Authority key identifier: F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa
Signing time: Sun 03 May 2026 02:23:43 +0000
ROA not before: Sun 03 May 2026 02:18:43 +0000
ROA not after: Sun 02 May 2027 02:23:43 +0000
asID: 131749
IP address blocks: 2402:be80:d9ab::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl
rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 08 May 2026 13:54:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:89:e7:fb:6f:70:59:e3:32:1d:fc:9d:ef:7c:38:79:eb:a9:67:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9
Validity
Not Before: May 3 02:18:43 2026 GMT
Not After : May 2 02:23:43 2027 GMT
Subject: CN=F69B2117A70A8059895497136C7C1AB7C2FC3509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3c:af:6f:50:91:c2:9b:df:9b:b3:74:31:93:
d3:c7:c1:48:d4:c4:46:30:d6:32:85:0d:74:56:39:
ec:9d:77:45:97:2a:72:e9:cb:bf:1c:d9:58:a4:6c:
28:86:93:b7:98:9d:b0:b2:e8:e8:06:cb:06:94:98:
2a:b3:6e:3a:1c:15:98:48:a2:d6:c6:bc:d5:ad:e1:
7b:d1:1b:2c:bf:97:93:aa:d5:60:a9:20:ac:df:d2:
32:54:e1:ad:2d:74:56:1d:ab:23:01:23:07:fb:2a:
1f:18:58:a8:ca:6f:0b:e2:f0:1e:6d:4f:39:fc:a0:
8f:70:67:e6:95:40:aa:4b:13:78:03:3a:56:de:a4:
e4:d5:1d:0b:ae:d2:85:d1:49:44:36:3f:da:71:94:
5e:3f:90:f3:62:81:46:9f:32:51:5f:5e:24:ab:23:
e2:69:b6:60:db:c2:ca:69:c0:fc:95:02:eb:4d:87:
3d:ab:f1:0b:4a:ba:57:26:71:a7:22:ad:2c:24:2c:
2d:db:d6:75:c3:7a:fa:78:b1:24:bb:69:8e:3b:4d:
e3:2f:0d:96:17:ed:a9:80:c7:ea:1d:ce:42:25:a3:
ba:3b:ab:c7:56:59:76:ca:bb:99:31:d5:5e:8a:ab:
0e:be:46:55:d7:2f:2a:06:39:8e:2f:55:76:d3:aa:
87:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9B:21:17:A7:0A:80:59:89:54:97:13:6C:7C:1A:B7:C2:FC:35:09
X509v3 Authority Key Identifier:
keyid:F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:be80:d9ab::/48
Signature Algorithm: sha256WithRSAEncryption
6b:39:10:51:eb:47:44:04:a8:0b:5e:6f:dc:b9:8e:cf:3b:fe:
58:e6:f2:16:b5:48:a6:de:24:7a:74:39:cd:67:1e:a7:0a:c7:
e6:3d:f6:49:7d:55:e0:54:15:92:b2:f4:6c:e9:d2:47:05:74:
0d:c0:69:15:c9:47:79:e9:45:f8:e4:58:25:c4:21:08:c0:7b:
05:14:3f:0c:93:9e:c9:4f:70:28:c8:d8:09:71:c2:fe:a6:76:
94:ad:dd:a4:f2:d0:34:71:54:35:dc:e0:fc:4a:97:23:ee:a5:
46:d5:73:f0:b8:cd:d7:66:56:35:5d:7c:53:58:ff:b8:43:c0:
82:d3:4e:6a:67:dc:aa:be:83:32:de:ee:12:5f:f4:8b:52:1d:
18:ab:f5:40:ef:4c:4a:c7:b5:3b:a0:bd:38:97:81:c3:ea:77:
2a:a4:b0:dd:3d:a5:d7:73:97:3e:58:f7:7f:d6:0a:dc:26:fb:
2f:5d:78:ba:71:6f:a4:e6:2d:57:35:06:dc:f6:8a:fc:9a:77:
45:0b:e9:a8:dc:f3:14:28:0a:3a:16:ed:a3:36:39:70:2c:aa:
73:fc:72:a9:9c:34:17:3e:cf:dc:2a:39:6e:e8:45:d4:46:b1:
2f:d1:7c:e4:d3:cc:9d:da:85:4e:d0:1e:ff:a7:d3:b0:b0:8d:
bf:66:5a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 07:13:03 2026 by rpki-client