
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/323430353a396434303a3a2f33322d3438203d3e203538343935.roa
File: 323430353a396434303a3a2f33322d3438203d3e203538343935.roa (raw, json)
Hash identifier: skUK10knkCBShybDHpDUtmDu/rajXkD3RG/uOlM7FK4=
Subject key identifier: 81:95:52:52:17:97:DA:A4:AB:E5:10:C3:5D:55:52:75:BD:21:8C:AD
Certificate issuer: /CN=BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6
Certificate serial: 6F6A6DC473FAC017C67A919E89FC00AC7C6C7C91
Authority key identifier: BC:8F:0F:9F:71:05:90:73:ED:E2:3B:9C:AD:97:D9:AF:50:7F:55:D6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/323430353a396434303a3a2f33322d3438203d3e203538343935.roa
Signing time: Sun 03 May 2026 02:14:44 +0000
ROA not before: Sun 03 May 2026 02:09:44 +0000
ROA not after: Sun 02 May 2027 02:14:44 +0000
asID: 58495
IP address blocks: 2405:9d40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.crl
rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 07 May 2026 23:12:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:6a:6d:c4:73:fa:c0:17:c6:7a:91:9e:89:fc:00:ac:7c:6c:7c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6
Validity
Not Before: May 3 02:09:44 2026 GMT
Not After : May 2 02:14:44 2027 GMT
Subject: CN=819552521797DAA4ABE510C35D555275BD218CAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cb:b7:7e:d6:4f:d5:d0:ab:df:38:6d:a1:ea:
d5:b6:f6:8d:5a:61:74:18:e6:4c:97:11:69:5a:e5:
2a:b3:f0:4e:1c:a4:36:56:0f:7c:68:b8:08:d4:5a:
21:d8:85:41:a9:91:79:c5:00:e0:ff:c6:1e:e7:cc:
60:9f:08:43:70:80:a6:0c:9e:1b:6a:a6:bf:ac:00:
4a:9d:09:c6:d4:df:42:62:29:0a:9e:b5:0b:92:79:
63:e6:c1:73:06:f3:4d:71:df:dc:31:a0:15:89:92:
56:f5:34:6b:00:5a:7f:7a:93:ad:5a:9b:43:de:16:
ca:23:5e:73:cc:25:d5:d1:b0:4d:f2:a5:bf:3c:8c:
47:bc:25:24:1e:1b:48:fb:41:ff:5e:10:89:4c:7c:
4c:a3:c6:8e:c6:ca:17:3e:26:af:d2:a9:18:95:37:
58:60:0e:f2:53:69:68:ad:71:f3:47:31:b2:4d:22:
3b:4e:42:f9:b4:27:4e:dd:1c:82:3b:34:d0:6b:c4:
c4:d8:e0:f9:80:dd:be:c7:a6:9d:6e:23:cd:27:a4:
13:9e:1c:0b:01:4c:4e:78:8e:b2:4a:95:b1:ed:f6:
76:7b:48:ca:27:dc:10:57:df:7c:1d:16:6f:2d:83:
f5:8c:08:b5:7a:16:41:38:b3:89:b5:b8:0b:de:78:
16:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:95:52:52:17:97:DA:A4:AB:E5:10:C3:5D:55:52:75:BD:21:8C:AD
X509v3 Authority Key Identifier:
keyid:BC:8F:0F:9F:71:05:90:73:ED:E2:3B:9C:AD:97:D9:AF:50:7F:55:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/323430353a396434303a3a2f33322d3438203d3e203538343935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:9d40::/32
Signature Algorithm: sha256WithRSAEncryption
28:f9:a9:8a:fa:73:78:19:aa:67:35:3e:8f:1e:6b:0b:ff:28:
21:69:c4:f1:23:61:c8:ed:8e:44:35:b2:52:23:d1:ee:8c:8d:
fa:a4:d2:27:50:e2:a8:f2:49:51:91:27:c5:c8:1d:d5:66:30:
7d:d8:62:24:32:34:1d:60:79:1e:f8:af:23:95:e2:46:ee:8a:
e6:cb:1a:ee:dc:4e:9f:9c:09:a7:5f:63:1e:48:7a:9c:62:ce:
ea:94:f6:3c:16:d2:e6:70:11:6c:3e:0c:ce:9f:dd:cf:e4:ef:
6f:bf:f0:d7:22:f0:2b:48:76:d0:f2:e0:28:d2:54:6f:9b:9a:
16:62:f4:8b:67:3c:9d:24:b4:c3:fc:6e:0d:26:07:e4:2a:8b:
5d:3c:90:2c:6e:ec:43:19:3c:2c:13:ad:75:40:00:10:a6:68:
32:7c:9e:70:da:02:52:4f:a7:5f:87:a1:d0:90:ff:7d:87:d2:
9e:a3:39:db:41:cd:08:62:33:a7:47:c5:07:59:e1:7a:21:f8:
df:21:82:03:93:c4:02:5a:69:a2:dd:4a:db:8e:1b:7f:40:55:
4f:c5:6e:47:39:77:f1:98:72:5f:ba:77:87:ed:a5:54:ea:fc:
3d:eb:6a:14:ce:ba:7d:0b:fc:e0:ec:01:3c:3f:20:d4:af:f0:
1a:bd:97:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:12:31 2026 by rpki-client