
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/323430313a346661303a3a2f33322d3438203d3e20313431393539.roa
File: 323430313a346661303a3a2f33322d3438203d3e20313431393539.roa (raw, json)
Hash identifier: YSkaXkoDpu4xkOc0DMYpS2KAoSxyKN+Gksem+MM/1ic=
Subject key identifier: 8A:16:34:37:15:91:C0:56:4E:00:70:EE:03:16:6A:7B:36:B9:AA:52
Certificate issuer: /CN=B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709
Certificate serial: 646CDE2FB5CDE28DB45C86445C29DA658CB33EA4
Authority key identifier: B3:16:C6:3D:2D:A1:38:7D:19:1A:7E:A6:DC:0B:59:C5:EC:D2:D7:09
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/323430313a346661303a3a2f33322d3438203d3e20313431393539.roa
Signing time: Thu 27 Aug 2026 05:51:46 +0000
ROA not before: Thu 27 Aug 2026 05:46:46 +0000
ROA not after: Thu 26 Aug 2027 05:51:46 +0000
asID: 141959
IP address blocks: 2401:4fa0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.crl
rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 10:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:6c:de:2f:b5:cd:e2:8d:b4:5c:86:44:5c:29:da:65:8c:b3:3e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709
Validity
Not Before: Aug 27 05:46:46 2026 GMT
Not After : Aug 26 05:51:46 2027 GMT
Subject: CN=8A1634371591C0564E0070EE03166A7B36B9AA52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:88:54:00:83:cc:9c:3d:91:84:15:fb:63:98:
8a:e2:63:8a:d4:61:ac:28:5e:78:02:f6:dc:06:f4:
89:3d:cd:e9:43:22:29:7c:b8:8f:66:df:31:d3:4d:
bd:e1:37:d9:46:5c:a2:c2:02:e3:6e:4d:86:33:fc:
7d:27:14:92:60:f1:65:b9:b8:cb:29:c4:9a:00:e4:
0d:19:d2:1f:36:a3:e2:4a:81:5a:92:2c:79:bd:f7:
1a:4b:06:7b:1f:2c:97:65:f9:19:c3:2b:5d:34:61:
d6:26:cc:ee:b3:8a:7b:43:4f:4a:49:4f:1a:2f:09:
23:f6:13:08:a1:8f:db:64:77:67:92:db:5a:54:2f:
38:85:b1:79:66:26:b7:f3:12:4f:a8:a2:d1:8f:99:
00:d3:bd:6c:a8:a4:1d:f1:5c:31:13:cf:92:ee:bd:
c8:54:b8:c5:61:c9:6f:21:5c:c7:46:c9:b8:40:cb:
ae:93:04:47:fa:ca:c3:a9:fc:61:7c:6b:76:a2:90:
ef:70:7b:e5:72:e4:44:08:8f:3f:39:86:5a:db:a0:
4f:57:57:9a:74:1d:e9:4d:61:44:f0:1b:95:29:db:
06:85:c2:e9:e1:f9:69:81:c2:a5:ff:1e:c1:43:0b:
58:41:4e:f7:c6:40:b5:3c:c7:60:5b:da:74:39:55:
ff:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:16:34:37:15:91:C0:56:4E:00:70:EE:03:16:6A:7B:36:B9:AA:52
X509v3 Authority Key Identifier:
keyid:B3:16:C6:3D:2D:A1:38:7D:19:1A:7E:A6:DC:0B:59:C5:EC:D2:D7:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/323430313a346661303a3a2f33322d3438203d3e20313431393539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:4fa0::/32
Signature Algorithm: sha256WithRSAEncryption
1d:f0:a3:6f:74:b6:94:bd:2b:97:d5:1f:86:86:19:1b:75:3e:
50:89:a2:93:33:22:03:6f:cc:47:ed:76:c6:6e:72:72:fa:1c:
74:16:f2:11:66:96:7d:3e:14:62:58:e7:79:21:71:fa:71:06:
aa:56:f8:0c:31:71:4f:35:f0:de:60:37:83:99:27:71:69:c8:
8e:fb:2e:c2:8f:5e:b2:e2:2e:da:5b:5a:13:3d:ab:ee:9b:44:
e7:32:2a:ff:0e:10:b0:5f:02:a2:e7:0d:e8:e6:fa:24:4d:f8:
d7:f7:c1:00:50:5b:87:cf:45:43:dc:c7:41:aa:21:74:a2:5b:
54:9e:71:81:b9:e5:17:0f:ce:bb:24:bb:7a:48:fa:5c:b0:61:
93:c0:c8:01:87:cd:7f:f2:56:84:d2:c2:00:70:61:97:cb:de:
1a:b0:80:6c:5b:81:e5:fb:34:a2:c0:92:ef:95:6f:d1:c5:5c:
1c:03:d3:e2:dc:4c:da:a6:89:b5:4f:4e:a8:19:6a:75:11:54:
fc:31:d8:8c:3c:48:87:37:39:90:a7:57:94:21:92:69:39:12:
23:80:63:3c:4a:2d:f0:c0:3f:2d:d4:9a:cf:f5:ac:f6:f6:5c:
eb:ef:82:55:b3:18:e6:ef:e3:81:d8:ac:43:12:c0:6d:85:bd:
49:e9:44:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 03:12:10 2026 by rpki-client