
$ rpki-client -vvf rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/323430333a653338303a313030333a3a2f34382d3438203d3e20313334363337.roa
File: 323430333a653338303a313030333a3a2f34382d3438203d3e20313334363337.roa (raw, json)
Hash identifier: fMmCbOIL8nMLpF5EKmFyyb/z/cATeDIy9MshfGEYHeY=
Subject key identifier: 2B:CE:DD:33:56:53:0D:EC:F6:10:92:5F:6F:C4:84:38:2B:3C:5C:53
Certificate issuer: /CN=41E81C122CFE1947633AAA5A517B7923E1A78966
Certificate serial: 4E0AAE81E38610BA3403724F6B3464C621D2406F
Authority key identifier: 41:E8:1C:12:2C:FE:19:47:63:3A:AA:5A:51:7B:79:23:E1:A7:89:66
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41E81C122CFE1947633AAA5A517B7923E1A78966.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/323430333a653338303a313030333a3a2f34382d3438203d3e20313334363337.roa
Signing time: Sun 03 May 2026 02:12:08 +0000
ROA not before: Sun 03 May 2026 02:07:08 +0000
ROA not after: Sun 02 May 2027 02:12:08 +0000
asID: 134637
IP address blocks: 2403:e380:1003::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.crl
rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41E81C122CFE1947633AAA5A517B7923E1A78966.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 10:19:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:0a:ae:81:e3:86:10:ba:34:03:72:4f:6b:34:64:c6:21:d2:40:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41E81C122CFE1947633AAA5A517B7923E1A78966
Validity
Not Before: May 3 02:07:08 2026 GMT
Not After : May 2 02:12:08 2027 GMT
Subject: CN=2BCEDD3356530DECF610925F6FC484382B3C5C53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:47:be:9c:0c:72:01:fb:d4:90:80:08:ad:17:
6d:15:38:0b:07:c7:ca:ae:7f:8d:78:44:51:ca:7b:
17:e3:e0:ef:17:48:85:6e:b4:12:c6:7b:8d:25:a6:
48:4d:1b:2d:4b:1c:78:fa:6c:43:e5:ad:07:0b:91:
47:65:f9:00:85:a2:79:49:6e:4d:bc:ee:9f:df:8a:
9e:6d:e3:ef:31:62:a4:a6:13:91:a5:89:46:91:2a:
6c:6c:39:ab:2b:84:a3:8a:67:ae:8f:a5:1e:29:de:
2b:43:42:dd:47:8d:83:bd:56:6c:b5:4a:9a:1b:12:
7f:66:cd:a0:69:ef:0f:34:81:a9:82:98:c1:03:7e:
20:cd:79:63:fe:c4:62:ee:2c:37:2f:de:26:b1:86:
a2:ba:b9:3d:93:92:81:da:51:8a:7b:22:70:1b:42:
73:65:77:04:98:cf:c4:38:f8:58:dc:ab:8a:4f:69:
96:4a:a6:85:f2:f4:ed:77:a6:84:71:4c:bb:da:61:
52:76:ce:a9:04:86:73:95:d6:de:1f:60:15:cd:b8:
d6:0f:6e:34:e2:35:8c:f2:5b:81:ad:da:16:ec:86:
f1:4a:89:5d:54:40:89:e7:e0:9c:af:1e:35:4d:95:
1f:e8:10:e4:eb:04:d6:11:69:89:3d:ac:20:e5:3f:
e5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CE:DD:33:56:53:0D:EC:F6:10:92:5F:6F:C4:84:38:2B:3C:5C:53
X509v3 Authority Key Identifier:
keyid:41:E8:1C:12:2C:FE:19:47:63:3A:AA:5A:51:7B:79:23:E1:A7:89:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41E81C122CFE1947633AAA5A517B7923E1A78966.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/323430333a653338303a313030333a3a2f34382d3438203d3e20313334363337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:e380:1003::/48
Signature Algorithm: sha256WithRSAEncryption
6d:53:20:e3:55:c4:a9:b3:b1:01:88:0c:05:b2:5a:ee:d9:b7:
e0:c7:41:a4:ad:8f:8f:91:78:10:5a:0c:be:05:0a:10:5e:78:
92:d9:35:39:84:41:33:fc:2a:b5:92:6e:c0:6b:3b:57:57:61:
ca:95:e3:9f:6f:fe:b6:c8:dc:a6:37:f2:92:fa:00:3b:23:93:
be:83:60:7b:fa:9a:e3:2f:6c:79:e4:9e:21:2a:c8:6a:bf:8c:
08:70:ae:b9:91:e1:32:15:5f:41:1d:a6:db:1a:d7:33:ac:19:
eb:91:06:03:40:9d:ab:56:41:eb:00:28:48:26:a5:e1:58:56:
74:4b:b6:12:b3:a3:27:90:f7:16:dc:97:00:84:42:7c:0a:b2:
d7:ce:7a:22:2c:92:aa:05:47:17:65:99:b2:c8:fb:89:f2:a6:
2a:7e:fc:d2:ec:25:fa:95:6f:c2:aa:e5:f8:4f:19:dd:04:f5:
55:32:b7:8c:cf:3a:23:46:cc:d3:7b:05:97:30:a0:c3:50:8c:
f9:3e:6b:28:3d:e8:e7:9b:6e:74:f7:a6:b0:97:9e:c8:a4:da:
d9:58:50:21:0b:b5:ec:fb:4f:6f:8a:58:2a:6b:69:d0:e8:2f:
72:cc:da:ad:d3:be:c0:db:77:7f:f5:5e:4c:ad:e0:74:9c:30:
b1:3b:78:d7
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUTgqugeOGELo0A3JPazRkxiHSQG8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDFFODFDMTIyQ0ZFMTk0NzYzM0FBQTVBNTE3Qjc5MjNF
MUE3ODk2NjAeFw0yNjA1MDMwMjA3MDhaFw0yNzA1MDIwMjEyMDhaMDMxMTAvBgNV
BAMTKDJCQ0VERDMzNTY1MzBERUNGNjEwOTI1RjZGQzQ4NDM4MkIzQzVDNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXR76cDHIB+9SQgAitF20VOAsH
x8quf414RFHKexfj4O8XSIVutBLGe40lpkhNGy1LHHj6bEPlrQcLkUdl+QCFonlJ
bk287p/fip5t4+8xYqSmE5GliUaRKmxsOasrhKOKZ66PpR4p3itDQt1HjYO9Vmy1
SpobEn9mzaBp7w80gamCmMEDfiDNeWP+xGLuLDcv3iaxhqK6uT2TkoHaUYp7InAb
QnNldwSYz8Q4+Fjcq4pPaZZKpoXy9O13poRxTLvaYVJ2zqkEhnOV1t4fYBXNuNYP
bjTiNYzyW4Gt2hbshvFKiV1UQInn4JyvHjVNlR/oEOTrBNYRaYk9rCDlP+UFAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUK87dM1ZTDez2EJJfb8SEOCs8XFMwHwYDVR0j
BBgwFoAUQegcEiz+GUdjOqpaUXt5I+GniWYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDc0ZjIxNGEtYmY1NS00MDQ4LTg0NWQtMjA2NzVmYjVmMmE0LzAvNDFFODFDMTIy
Q0ZFMTk0NzYzM0FBQTVBNTE3Qjc5MjNFMUE3ODk2Ni5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80MUU4MUMxMjJDRkUxOTQ3NjMzQUFBNUE1MTdCNzkyM0UxQTc4
OTY2LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA3NGYyMTRhLWJmNTUtNDA0OC04
NDVkLTIwNjc1ZmI1ZjJhNC8wLzMyMzQzMDMzM2E2NTMzMzgzMDNhMzEzMDMwMzMz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzQzNjMzMzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk
A+OAEAMwDQYJKoZIhvcNAQELBQADggEBAG1TIONVxKmzsQGIDAWyWu7Zt+DHQaSt
j4+ReBBaDL4FChBeeJLZNTmEQTP8KrWSbsBrO1dXYcqV459v/rbI3KY38pL6ADsj
k76DYHv6muMvbHnkniEqyGq/jAhwrrmR4TIVX0Edptsa1zOsGeuRBgNAnatWQesA
KEgmpeFYVnRLthKzoyeQ9xbclwCEQnwKstfOeiIskqoFRxdlmbLI+4nypip+/NLs
JfqVb8Kq5fhPGd0E9VUyt4zPOiNGzNN7BZcwoMNQjPk+ayg96OebbnT3prCXnsik
2tlYUCELtez7T2+KWCpradDoL3LM2q3TvsDbd3/1Xkyt4HScMLE7eNc=
-----END CERTIFICATE-----
Generated at Tue May 5 23:15:54 2026 by rpki-client