
$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/323430363a393330303a3a2f33322d3438203d3e203338353036.roa
File: 323430363a393330303a3a2f33322d3438203d3e203338353036.roa (raw, json)
Hash identifier: Oz2Qeiz5xyOTL/MwYfZrBtOVufZJPKw0poJngZ0glFA=
Subject key identifier: D3:21:FE:3E:44:B9:27:C0:57:13:A1:0A:E1:C1:E7:A1:15:10:C3:D4
Certificate issuer: /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Certificate serial: 0CCA90BCD2D8B609F2F9D4ECB9BFC1341675EC38
Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/323430363a393330303a3a2f33322d3438203d3e203338353036.roa
Signing time: Sat 18 Apr 2026 09:00:53 +0000
ROA not before: Sat 18 Apr 2026 08:55:53 +0000
ROA not after: Sat 17 Apr 2027 09:00:53 +0000
asID: 38506
IP address blocks: 2406:9300::/32 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl
rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Apr 2026 09:12:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:ca:90:bc:d2:d8:b6:09:f2:f9:d4:ec:b9:bf:c1:34:16:75:ec:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Validity
Not Before: Apr 18 08:55:53 2026 GMT
Not After : Apr 17 09:00:53 2027 GMT
Subject: CN=D321FE3E44B927C05713A10AE1C1E7A11510C3D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9c:d3:55:e4:48:ac:48:ff:26:dd:ec:91:f4:
f1:3c:68:c0:5a:ab:ee:5c:2c:dd:21:95:73:54:4f:
81:bd:eb:24:06:b6:5b:6b:6d:0b:1e:a9:37:c2:65:
64:23:57:a8:87:fc:6e:4f:a6:a2:66:52:5a:f1:62:
7a:7e:f1:03:f6:a1:3f:06:54:00:34:03:45:c7:10:
f8:37:02:40:7e:69:a3:43:2f:4e:13:96:57:d6:01:
7e:a2:a7:69:34:53:a0:ed:0e:c6:81:67:e1:b3:bc:
6a:a0:a5:09:f6:af:2a:a8:c5:b0:86:e9:b1:ee:2e:
39:84:ed:ed:7c:85:ed:a3:ef:2d:3c:e0:2d:3d:7a:
e4:4a:57:47:ba:08:d6:33:74:db:be:5b:c4:88:7d:
39:05:9f:dd:b0:b8:93:4e:63:0d:31:16:85:25:d7:
c6:69:4e:e4:fc:49:bb:61:ff:8c:9f:87:31:7e:b3:
c0:fa:74:51:a0:f5:15:75:94:c1:03:58:7e:23:d0:
82:2f:23:9c:96:7f:a4:e0:c2:48:ee:f0:dc:10:5b:
23:a0:8b:a8:8d:ef:1e:f2:71:24:d1:6e:ba:64:4f:
f5:b9:1f:0e:48:e3:ee:1b:7e:b4:6c:b1:64:c5:35:
6b:39:73:02:8e:62:9e:da:e6:65:d2:4b:22:cb:b1:
ed:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:21:FE:3E:44:B9:27:C0:57:13:A1:0A:E1:C1:E7:A1:15:10:C3:D4
X509v3 Authority Key Identifier:
keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/323430363a393330303a3a2f33322d3438203d3e203338353036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:9300::/32
Signature Algorithm: sha256WithRSAEncryption
6f:ba:48:0a:84:6d:1b:32:ca:0b:cc:0b:12:85:54:ee:80:6c:
eb:e1:dd:2d:ef:42:4e:a3:9f:85:4e:f6:01:1d:dd:3c:f4:f0:
40:c6:86:4b:75:53:59:72:5d:d4:70:61:85:90:69:95:67:c8:
f5:44:7d:86:86:4d:f6:72:d9:e3:55:b7:68:cc:18:a7:03:ce:
2c:c1:7a:95:05:7b:bd:b3:19:13:2d:b6:f0:dd:7e:71:3f:cc:
05:b8:4f:07:29:8c:8d:fc:30:d5:d0:44:d9:1d:53:32:a7:29:
8a:ca:37:66:50:40:ac:02:20:a5:ed:e4:c6:ce:8b:8a:16:fb:
cb:82:76:dc:f3:11:ac:9f:34:98:2c:be:4f:1b:5e:c8:73:22:
5e:3e:a5:4f:19:a7:34:16:57:54:4b:d5:78:1c:47:c9:37:94:
e2:6a:6a:2f:49:9f:5f:10:9c:df:5e:20:6e:34:27:ee:e9:fc:
13:3c:2b:30:11:fb:91:7f:72:cd:35:08:09:9b:bf:82:dd:f8:
2c:22:29:48:ef:23:83:75:47:7b:1d:5b:b6:0a:bd:64:9f:e1:
16:17:98:7b:65:1f:28:1e:fe:8a:ed:d7:e6:da:fc:b0:2b:8d:
83:2b:94:19:3c:c8:b3:90:91:2e:ef:ea:eb:c7:df:99:59:01:
ad:08:5e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 00:24:12 2026 by rpki-client