
$ rpki-client -vvf rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/323430333a653338303a3a2f33322d3332203d3e20313334363337.roa
File: 323430333a653338303a3a2f33322d3332203d3e20313334363337.roa (raw, json)
Hash identifier: h8pC3O5UrBoUEC6ODx88QnSAsLryVqTwUJG85o9TxOg=
Subject key identifier: 7C:E4:37:10:86:B0:47:35:A6:44:24:BB:95:1B:AC:D1:03:AA:E2:F5
Certificate issuer: /CN=41E81C122CFE1947633AAA5A517B7923E1A78966
Certificate serial: 73DCB62789C10BF9B751243AB97903E6593AC2ED
Authority key identifier: 41:E8:1C:12:2C:FE:19:47:63:3A:AA:5A:51:7B:79:23:E1:A7:89:66
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41E81C122CFE1947633AAA5A517B7923E1A78966.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/323430333a653338303a3a2f33322d3332203d3e20313334363337.roa
Signing time: Sun 03 May 2026 02:12:07 +0000
ROA not before: Sun 03 May 2026 02:07:07 +0000
ROA not after: Sun 02 May 2027 02:12:07 +0000
asID: 134637
IP address blocks: 2403:e380::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.crl
rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41E81C122CFE1947633AAA5A517B7923E1A78966.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 10:19:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:dc:b6:27:89:c1:0b:f9:b7:51:24:3a:b9:79:03:e6:59:3a:c2:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41E81C122CFE1947633AAA5A517B7923E1A78966
Validity
Not Before: May 3 02:07:07 2026 GMT
Not After : May 2 02:12:07 2027 GMT
Subject: CN=7CE4371086B04735A64424BB951BACD103AAE2F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b2:72:81:44:55:0e:ca:5f:1d:c2:07:3e:3c:
94:47:6a:e9:7b:e5:c7:91:48:75:e5:ff:7d:ba:6c:
4a:9b:c6:fa:c4:ca:71:15:00:c2:53:5c:62:3a:f3:
e3:9e:1f:8a:e3:d6:f7:e5:04:06:df:e7:f0:13:d7:
47:40:b1:02:12:aa:b7:35:b2:75:cb:a0:8c:61:64:
85:21:63:9a:2c:00:16:e3:6b:e5:79:33:9a:03:ba:
b9:47:63:6b:8f:8b:df:39:4c:59:df:5b:fb:1b:34:
af:77:93:18:08:c3:8e:4f:c4:3c:51:74:0c:da:ba:
76:5b:47:0a:f8:88:29:58:2a:05:38:46:8c:9a:ab:
c7:72:78:76:8f:81:71:e0:8d:b2:7b:7b:c2:0a:99:
07:47:e5:56:56:12:ce:6f:ce:22:d5:39:df:e1:e4:
e4:6e:cf:c2:97:cc:c3:ef:8a:09:c9:ae:8b:9b:77:
a9:d6:6b:a5:f9:21:83:cf:26:5b:b3:0b:a2:02:fd:
0a:ac:23:a3:71:b2:85:4a:0d:b8:f1:9e:9b:4e:96:
d7:0f:52:3a:5b:92:ec:29:3f:5d:0c:ba:88:e5:14:
13:d8:b0:62:db:d9:d2:02:c2:d7:f0:ca:5c:57:0d:
73:85:9b:c6:00:80:e6:f1:c7:c6:32:69:1d:3a:92:
cc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E4:37:10:86:B0:47:35:A6:44:24:BB:95:1B:AC:D1:03:AA:E2:F5
X509v3 Authority Key Identifier:
keyid:41:E8:1C:12:2C:FE:19:47:63:3A:AA:5A:51:7B:79:23:E1:A7:89:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41E81C122CFE1947633AAA5A517B7923E1A78966.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/323430333a653338303a3a2f33322d3332203d3e20313334363337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:e380::/32
Signature Algorithm: sha256WithRSAEncryption
9e:93:88:a7:71:fe:8b:b5:28:82:59:72:b8:17:b4:74:48:f2:
1c:2f:79:17:b8:c4:7e:b5:bc:14:52:c8:c0:5b:60:ef:79:16:
1b:f4:9d:fc:e9:cd:79:34:74:f7:74:33:af:86:91:85:c4:31:
26:5d:2a:08:9a:6d:21:9c:af:d4:4d:76:59:ab:66:75:30:2b:
fe:d1:84:23:a3:46:b3:fc:84:09:d3:9a:ea:dd:76:7c:c6:2d:
31:10:42:a0:2e:f9:9a:b9:0b:72:23:b0:90:17:7f:f4:65:21:
cd:3f:62:3b:02:78:01:cc:a6:30:9a:f8:ec:2e:78:a1:81:c6:
a3:50:fa:ba:00:36:2a:63:0e:6a:da:b4:1a:e1:af:73:1f:f7:
0b:79:8b:a3:31:c3:17:a2:e7:b3:6c:88:0c:c0:e0:cf:6d:0b:
0e:a6:4b:04:d5:90:20:33:5e:ef:8a:47:6c:bc:36:8a:5f:9e:
8d:22:17:17:ba:e9:8a:83:e2:03:a0:71:58:34:38:0c:ce:43:
3e:6d:f7:82:4c:57:a4:51:67:d2:c5:bc:e2:89:24:26:b4:24:
49:1a:e1:42:56:41:03:ab:50:d6:71:94:55:82:48:ff:22:11:
24:93:d5:5a:88:dd:47:e7:d9:b0:4f:6e:a6:af:d9:fe:f3:a9:
4a:68:9e:5c
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUc9y2J4nBC/m3USQ6uXkD5lk6wu0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDFFODFDMTIyQ0ZFMTk0NzYzM0FBQTVBNTE3Qjc5MjNF
MUE3ODk2NjAeFw0yNjA1MDMwMjA3MDdaFw0yNzA1MDIwMjEyMDdaMDMxMTAvBgNV
BAMTKDdDRTQzNzEwODZCMDQ3MzVBNjQ0MjRCQjk1MUJBQ0QxMDNBQUUyRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCosnKBRFUOyl8dwgc+PJRHaul7
5ceRSHXl/326bEqbxvrEynEVAMJTXGI68+OeH4rj1vflBAbf5/AT10dAsQISqrc1
snXLoIxhZIUhY5osABbja+V5M5oDurlHY2uPi985TFnfW/sbNK93kxgIw45PxDxR
dAzaunZbRwr4iClYKgU4Royaq8dyeHaPgXHgjbJ7e8IKmQdH5VZWEs5vziLVOd/h
5ORuz8KXzMPvignJroubd6nWa6X5IYPPJluzC6IC/QqsI6NxsoVKDbjxnptOltcP
UjpbkuwpP10MuojlFBPYsGLb2dICwtfwylxXDXOFm8YAgObxx8YyaR06ksw5AgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUfOQ3EIawRzWmRCS7lRus0QOq4vUwHwYDVR0j
BBgwFoAUQegcEiz+GUdjOqpaUXt5I+GniWYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDc0ZjIxNGEtYmY1NS00MDQ4LTg0NWQtMjA2NzVmYjVmMmE0LzAvNDFFODFDMTIy
Q0ZFMTk0NzYzM0FBQTVBNTE3Qjc5MjNFMUE3ODk2Ni5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80MUU4MUMxMjJDRkUxOTQ3NjMzQUFBNUE1MTdCNzkyM0UxQTc4
OTY2LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA3NGYyMTRhLWJmNTUtNDA0OC04
NDVkLTIwNjc1ZmI1ZjJhNC8wLzMyMzQzMDMzM2E2NTMzMzgzMDNhM2EyZjMzMzIy
ZDMzMzIyMDNkM2UyMDMxMzMzNDM2MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQD44AwDQYJKoZI
hvcNAQELBQADggEBAJ6TiKdx/ou1KIJZcrgXtHRI8hwveRe4xH61vBRSyMBbYO95
Fhv0nfzpzXk0dPd0M6+GkYXEMSZdKgiabSGcr9RNdlmrZnUwK/7RhCOjRrP8hAnT
murddnzGLTEQQqAu+Zq5C3IjsJAXf/RlIc0/YjsCeAHMpjCa+OwueKGBxqNQ+roA
NipjDmratBrhr3Mf9wt5i6Mxwxei57NsiAzA4M9tCw6mSwTVkCAzXu+KR2y8Nopf
no0iFxe66YqD4gOgcVg0OAzOQz5t94JMV6RRZ9LFvOKJJCa0JEka4UJWQQOrUNZx
lFWCSP8iESST1VqI3Ufn2bBPbqav2f7zqUponlw=
-----END CERTIFICATE-----
Generated at Tue May 5 23:15:56 2026 by rpki-client