
$ rpki-client -vvf rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa
File: 323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa (raw, json)
Hash identifier: eOdt05IAfcrKKZUnC2uIX6d/C9w0dr4HU6UCs9176ek=
Subject key identifier: 4B:0D:E0:D6:70:5D:12:65:E2:FE:6E:7A:39:DF:28:8A:61:E3:F4:FD
Certificate issuer: /CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
Certificate serial: 51B70FB53E281D52D4F90B0CACEA27394AC3A3B5
Authority key identifier: 59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa
Signing time: Sun 03 May 2026 02:21:04 +0000
ROA not before: Sun 03 May 2026 02:16:04 +0000
ROA not after: Sun 02 May 2027 02:21:04 +0000
asID: 149953
IP address blocks: 2001:df1:1c40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl
rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 07 May 2026 19:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:b7:0f:b5:3e:28:1d:52:d4:f9:0b:0c:ac:ea:27:39:4a:c3:a3:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
Validity
Not Before: May 3 02:16:04 2026 GMT
Not After : May 2 02:21:04 2027 GMT
Subject: CN=4B0DE0D6705D1265E2FE6E7A39DF288A61E3F4FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:25:cc:86:da:26:3e:0d:47:7b:be:8f:53:6b:
62:f1:f9:de:9c:74:c6:77:42:5e:aa:71:09:cb:33:
7a:4c:e8:0f:e7:bb:03:bc:3e:46:e6:bc:cf:61:83:
9b:5a:43:1c:91:55:98:00:dd:ff:00:60:5a:de:7a:
b0:d5:c3:df:eb:e1:26:52:be:89:de:94:fa:ee:0e:
e4:64:e3:60:b1:c3:0e:1e:f0:a6:ca:ed:fd:6a:ae:
f2:ce:2b:17:08:6e:f9:42:ea:04:b7:01:95:17:2b:
64:90:11:fc:8a:0d:7a:d6:ac:14:b0:ca:86:cd:69:
76:53:d8:b6:c2:76:e7:48:0f:96:96:52:9d:7d:b0:
a6:3c:37:ef:25:5e:47:3b:3e:d6:42:df:29:3c:c4:
f2:ed:27:37:ca:ad:29:fc:7b:f1:0a:2b:bb:c2:2c:
f8:ea:69:81:ba:9b:fb:e7:58:a5:28:c0:22:c0:68:
24:38:f4:3f:cb:d1:4c:e8:8a:4e:46:4d:ee:0b:ee:
40:2f:aa:88:81:49:66:a0:5a:c3:77:50:6b:ea:fd:
fe:e4:de:ac:86:e0:85:ba:ed:e9:66:8d:70:0a:07:
5e:e9:68:e0:f2:ef:ac:30:8b:0e:7f:21:37:15:64:
8e:6e:0e:00:8c:f6:c4:4b:45:0d:ed:38:6d:0b:b8:
74:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0D:E0:D6:70:5D:12:65:E2:FE:6E:7A:39:DF:28:8A:61:E3:F4:FD
X509v3 Authority Key Identifier:
keyid:59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df1:1c40::/48
Signature Algorithm: sha256WithRSAEncryption
25:ec:cc:e5:c2:30:31:6f:4b:4c:fd:6c:c6:ba:fe:71:55:f4:
4f:5b:47:00:61:f8:f8:4d:25:12:ad:76:e0:a2:ad:3a:87:92:
99:e6:e2:8f:44:99:d4:fc:29:56:07:da:49:f3:0a:28:96:52:
3c:46:2e:9a:ba:cf:af:3f:c3:ca:2f:dd:ef:15:19:d3:f8:e5:
37:31:d1:9a:e5:b9:80:4d:7d:00:be:a3:ec:21:61:1d:20:14:
b4:c3:3b:24:be:11:e6:83:d2:4c:cd:20:31:06:15:99:ba:21:
15:cb:95:40:63:1f:3d:a3:17:e6:76:5e:f9:fd:a6:25:56:eb:
52:c0:c0:df:3c:a6:45:cf:ec:8a:a4:02:2b:c3:73:e4:49:78:
a4:32:bb:43:70:55:b8:74:2b:39:0c:5d:3e:7d:c5:3a:6d:69:
eb:7c:9a:59:34:ee:46:c7:72:68:2f:d7:68:26:91:c8:e7:77:
18:3c:92:92:d2:a8:52:58:15:04:e1:32:fe:73:2d:01:91:6b:
ed:c0:08:6b:ed:30:bc:db:ba:82:c0:f5:48:d7:53:b8:aa:a2:
0c:dc:b4:42:60:77:50:0d:2a:69:80:9a:db:8d:f5:87:d5:e3:
7b:36:b4:43:ac:84:58:3a:c8:bf:e2:a1:f6:4c:86:8a:7b:61:
19:52:80:05
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUUbcPtT4oHVLU+QsMrOonOUrDo7UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTk1QURFOTVDRDM5NzEyNjQ1Mzc5MzRDN0E0MDYxRTJG
Q0E2Q0NDMjAeFw0yNjA1MDMwMjE2MDRaFw0yNzA1MDIwMjIxMDRaMDMxMTAvBgNV
BAMTKDRCMERFMEQ2NzA1RDEyNjVFMkZFNkU3QTM5REYyODhBNjFFM0Y0RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuJcyG2iY+DUd7vo9Ta2Lx+d6c
dMZ3Ql6qcQnLM3pM6A/nuwO8PkbmvM9hg5taQxyRVZgA3f8AYFreerDVw9/r4SZS
vonelPruDuRk42Cxww4e8KbK7f1qrvLOKxcIbvlC6gS3AZUXK2SQEfyKDXrWrBSw
yobNaXZT2LbCdudID5aWUp19sKY8N+8lXkc7PtZC3yk8xPLtJzfKrSn8e/EKK7vC
LPjqaYG6m/vnWKUowCLAaCQ49D/L0Uzoik5GTe4L7kAvqoiBSWagWsN3UGvq/f7k
3qyG4IW67elmjXAKB17paODy76wwiw5/ITcVZI5uDgCM9sRLRQ3tOG0LuHS5AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUSw3g1nBdEmXi/m56Od8oimHj9P0wHwYDVR0j
BBgwFoAUWVrelc05cSZFN5NMekBh4vymzMIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjdkOWQ3Y2ItNmNmYi00ZGUwLTlkYWEtZDIyMmI3YTg5MDcyLzAvNTk1QURFOTVD
RDM5NzEyNjQ1Mzc5MzRDN0E0MDYxRTJGQ0E2Q0NDMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81OTVBREU5NUNEMzk3MTI2NDUzNzkzNEM3QTQwNjFFMkZDQTZD
Q0MyLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzI3ZDlkN2NiLTZjZmItNGRlMC05
ZGFhLWQyMjJiN2E4OTA3Mi8wLzMyMzAzMDMxM2E2NDY2MzEzYTMxNjMzNDMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDM5MzkzNTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN
8RxAMA0GCSqGSIb3DQEBCwUAA4IBAQAl7MzlwjAxb0tM/WzGuv5xVfRPW0cAYfj4
TSUSrXbgoq06h5KZ5uKPRJnU/ClWB9pJ8woollI8Ri6aus+vP8PKL93vFRnT+OU3
MdGa5bmATX0AvqPsIWEdIBS0wzskvhHmg9JMzSAxBhWZuiEVy5VAYx89oxfmdl75
/aYlVutSwMDfPKZFz+yKpAIrw3PkSXikMrtDcFW4dCs5DF0+fcU6bWnrfJpZNO5G
x3JoL9doJpHI53cYPJKS0qhSWBUE4TL+cy0BkWvtwAhr7TC827qCwPVI11O4qqIM
3LRCYHdQDSppgJrbjfWH1eN7NrRDrIRYOsi/4qH2TIaKe2EZUoAF
-----END CERTIFICATE-----
Generated at Thu May 7 05:38:31 2026 by rpki-client