
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313033313a3a2f34382d3438203d3e203633383539.roa
File: 323430323a383738303a313033313a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier: QV29NHQ6gKTUnh8gl26mnAbhFcTrX7cqcb4Z8q99Km0=
Subject key identifier: C3:B3:04:87:8B:65:B7:11:D9:8C:91:E9:9E:05:45:A7:1E:D3:12:FA
Certificate issuer: /CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Certificate serial: 0236AAAE37D05E7B8F3854518CB295DABF1323E4
Authority key identifier: 63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313033313a3a2f34382d3438203d3e203633383539.roa
Signing time: Sun 03 May 2026 02:27:14 +0000
ROA not before: Sun 03 May 2026 02:22:14 +0000
ROA not after: Sun 02 May 2027 02:27:14 +0000
asID: 63859
IP address blocks: 2402:8780:1031::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:36:aa:ae:37:d0:5e:7b:8f:38:54:51:8c:b2:95:da:bf:13:23:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Validity
Not Before: May 3 02:22:14 2026 GMT
Not After : May 2 02:27:14 2027 GMT
Subject: CN=C3B304878B65B711D98C91E99E0545A71ED312FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2e:d4:ac:e4:fb:36:8c:fc:a8:d0:d4:91:93:
7e:62:54:3f:82:17:78:fa:5b:7f:2d:de:25:87:4b:
fe:c3:0f:ac:f7:f6:5a:13:11:da:a2:6d:0b:cd:43:
82:95:df:9e:43:4c:f2:45:d3:8e:c3:5f:9e:fd:4f:
25:93:87:de:3f:bd:cb:a5:bd:a2:65:48:69:9e:8b:
c2:3f:c2:87:36:3f:47:12:1b:85:86:3b:d6:d4:63:
c8:b6:bc:cd:73:89:69:0e:d6:04:f0:40:ca:82:f4:
07:1f:07:ab:74:58:b4:9e:f3:7f:7b:cc:66:7d:8c:
a6:ba:22:5f:0c:42:32:fd:6d:c2:5a:fd:0b:fc:93:
7d:31:f9:ad:13:6e:b2:ad:df:de:5d:32:0b:c7:43:
c4:e5:c1:81:b2:99:22:46:3a:4a:32:52:3a:a4:77:
38:71:eb:11:89:7f:4a:18:71:ad:45:a3:42:a4:53:
80:d6:fe:f3:ae:27:64:45:b3:bf:5d:57:03:c3:23:
28:c7:cf:99:d8:6d:df:4d:04:9a:50:02:46:f8:e3:
14:f2:d6:3f:99:3b:8e:b3:03:e3:ee:c6:94:e9:b5:
0b:74:16:ee:51:fc:f1:14:1f:35:2a:a9:6d:1b:98:
11:74:a0:f1:88:57:28:96:df:36:10:42:90:d9:52:
4c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B3:04:87:8B:65:B7:11:D9:8C:91:E9:9E:05:45:A7:1E:D3:12:FA
X509v3 Authority Key Identifier:
keyid:63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313033313a3a2f34382d3438203d3e203633383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:8780:1031::/48
Signature Algorithm: sha256WithRSAEncryption
d8:ba:6e:94:6a:c3:c3:b1:ee:6e:c7:fb:ba:5b:97:33:9d:04:
83:f2:42:42:4f:e8:7e:44:16:17:e3:83:f2:15:d7:31:9a:55:
7c:d4:e2:10:a2:6d:f8:f9:e1:c6:1a:74:36:99:b1:d6:4e:3c:
7b:be:5e:00:ac:9d:6a:3a:23:cb:1c:dd:2c:a4:5c:f6:6c:2e:
f7:51:30:60:61:52:05:53:40:e1:09:af:4f:17:6e:36:7a:29:
a5:e3:c4:30:0b:ec:0f:9b:31:14:1b:af:67:98:10:b9:c4:b8:
41:84:f4:a9:cd:5b:8c:93:6b:83:fc:06:8e:37:e9:4c:d6:2a:
0b:9d:d9:fc:2b:35:87:83:fb:d1:fd:f5:24:34:3c:b7:a7:e1:
ec:3f:11:69:ba:4d:9b:94:d1:7f:75:c3:39:5d:55:72:78:0d:
15:9b:b5:b7:33:d1:2e:66:c5:55:29:2e:e9:3e:ba:87:13:b5:
db:4d:63:47:27:3d:a8:62:66:bb:ac:36:3f:f3:b9:be:ef:c4:
59:7e:fe:bc:d4:2d:3f:ac:f9:9c:c0:93:da:73:d9:cf:45:ed:
20:c7:12:bb:54:59:6a:79:18:3d:22:76:8d:6c:c9:7a:e2:53:
44:46:84:6e:cf:20:0c:8c:62:25:15:12:f9:3d:7a:df:04:9e:
9f:a9:7a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:40:44 2026 by rpki-client