
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313037373a3a2f34382d3438203d3e203633383539.roa
File: 323430323a383738303a313037373a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier: BHe0m+lPcGp48MevadQczbSKo8lgsMBfVDuyo6gH4Z8=
Subject key identifier: 86:5D:B4:7C:D8:30:86:6E:CE:D1:45:E2:3E:5D:D5:D4:AA:F1:DD:08
Certificate issuer: /CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Certificate serial: 490C0C82E7A94FC863EC3F18FB14DC3B18A293CB
Authority key identifier: 63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313037373a3a2f34382d3438203d3e203633383539.roa
Signing time: Sun 03 May 2026 02:27:12 +0000
ROA not before: Sun 03 May 2026 02:22:12 +0000
ROA not after: Sun 02 May 2027 02:27:12 +0000
asID: 63859
IP address blocks: 2402:8780:1077::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:0c:0c:82:e7:a9:4f:c8:63:ec:3f:18:fb:14:dc:3b:18:a2:93:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Validity
Not Before: May 3 02:22:12 2026 GMT
Not After : May 2 02:27:12 2027 GMT
Subject: CN=865DB47CD830866ECED145E23E5DD5D4AAF1DD08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:76:78:f8:6e:0d:5c:0b:e1:5e:c4:01:9f:63:
c3:54:29:39:c5:ab:41:4d:86:c1:37:48:0d:6c:83:
52:44:72:08:60:4f:96:31:b5:e6:93:0b:fb:1b:84:
ad:ce:e9:a9:c6:38:f6:f7:95:90:42:63:3c:d4:2e:
b9:47:90:84:e7:1b:4e:45:ad:35:6a:c3:49:7a:78:
a4:f3:9f:38:6d:b4:3e:61:ea:b6:11:aa:dd:44:5a:
af:3f:27:8e:87:11:79:66:c0:12:26:61:6b:8a:77:
97:4e:e1:3c:97:9b:0d:4b:b8:88:f7:d3:cd:d8:5a:
e5:c9:13:42:25:d7:1b:7d:99:4f:2e:41:ff:5d:ee:
bf:24:3e:28:55:1b:0a:1f:c0:eb:a7:3d:02:8c:b7:
2e:12:60:65:4e:15:65:36:89:3f:87:8a:ae:1a:22:
dc:81:e3:e3:4a:7e:33:a2:dc:c9:a5:f0:f4:9d:c7:
eb:d1:74:1f:a0:4a:6c:88:b9:03:89:d8:48:af:a2:
7b:6b:47:35:43:8f:aa:0f:cb:98:37:d4:63:35:bd:
4a:ae:b0:6c:ea:50:a1:71:1e:dd:3e:56:93:66:ac:
73:25:ae:7e:62:24:72:bc:85:fd:9c:48:6d:a8:e0:
68:ab:bc:d1:98:ee:8f:f6:14:a9:11:c2:3b:38:04:
ef:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5D:B4:7C:D8:30:86:6E:CE:D1:45:E2:3E:5D:D5:D4:AA:F1:DD:08
X509v3 Authority Key Identifier:
keyid:63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313037373a3a2f34382d3438203d3e203633383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:8780:1077::/48
Signature Algorithm: sha256WithRSAEncryption
a1:5f:48:b8:63:ac:3a:b5:e3:5f:02:19:2f:8e:97:6f:9b:5e:
f1:76:fa:4e:7e:13:98:cb:fa:03:e5:d5:39:8e:4a:8e:1c:82:
f5:72:ba:a4:d7:41:da:5a:83:5e:4d:ce:be:49:c2:31:8e:b1:
67:f9:1f:a9:45:23:ad:52:c3:4f:1b:47:9d:d0:38:6b:3c:3c:
cc:9e:d7:79:92:31:0d:1c:02:78:c5:e0:01:af:7a:00:67:25:
5e:89:51:d5:c4:7b:96:61:ad:c9:78:b4:78:b1:29:49:1f:71:
c8:9f:27:38:ce:95:ad:83:81:3f:2a:07:5b:28:1d:e3:9c:03:
3b:e9:97:fa:a7:6c:dc:0e:67:61:c0:56:ac:ac:e0:28:3b:76:
84:22:82:fe:6b:73:54:4c:46:fe:0d:dc:30:39:64:5f:57:80:
fd:db:28:61:0c:50:30:47:22:8e:25:97:cb:66:2a:47:3c:63:
13:d3:ed:49:12:9e:d2:80:b6:a1:be:20:45:a5:c8:d2:4f:8b:
20:32:83:09:77:f4:57:a5:d1:5e:ac:c9:2e:c7:fb:5d:5e:eb:
60:b8:c1:8e:be:bd:2d:d5:8a:e4:2b:24:42:94:82:1c:c2:57:
ca:6b:61:9e:81:3e:3b:50:97:dc:d0:43:ef:5b:38:59:e6:c5:
82:1c:65:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:40:43 2026 by rpki-client