
$ rpki-client -vvf rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa
File: 323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa (raw, json)
Hash identifier: eR32X6TB9dCvTyEj8xcbUe0oCJGcSbLwWM78VEF/mIM=
Subject key identifier: A1:79:FC:C2:F0:8C:E2:36:EE:6F:02:22:0A:85:0B:8A:81:DA:80:A4
Certificate issuer: /CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
Certificate serial: 1E4903D1DEF2A83AB49E09F5A394620E56B07410
Authority key identifier: 59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa
Signing time: Sun 03 May 2026 02:21:03 +0000
ROA not before: Sun 03 May 2026 02:16:03 +0000
ROA not after: Sun 02 May 2027 02:21:03 +0000
asID: 50104
IP address blocks: 2001:df1:1c40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl
rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 07 May 2026 19:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:49:03:d1:de:f2:a8:3a:b4:9e:09:f5:a3:94:62:0e:56:b0:74:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
Validity
Not Before: May 3 02:16:03 2026 GMT
Not After : May 2 02:21:03 2027 GMT
Subject: CN=A179FCC2F08CE236EE6F02220A850B8A81DA80A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:18:46:a0:07:b2:71:4c:e7:af:7d:5c:6e:a9:
09:9c:15:d2:c2:a8:7a:b2:58:f3:9d:cb:82:fd:df:
a5:92:0a:ea:3a:4a:91:7f:bd:8f:74:43:d9:c8:ef:
1d:bc:ad:ef:f8:b5:64:15:8f:b7:71:33:f9:89:a3:
48:34:d6:45:f6:51:1b:fa:36:f9:02:c6:d8:39:d4:
0f:0d:29:2f:4d:6e:40:f8:d4:83:eb:06:95:29:85:
f2:c4:c7:20:47:a7:5b:08:24:d1:b0:c6:f9:c0:50:
b5:61:35:13:f0:15:bf:ba:71:66:0f:0f:cf:f1:be:
23:14:b9:54:b8:41:78:4a:c1:2a:8f:f0:62:17:87:
cf:12:23:08:3b:cf:a6:32:67:de:65:06:32:c6:86:
58:e5:bd:54:3e:0b:47:e8:6e:64:4a:9c:6e:e3:8a:
b6:92:6e:d9:5c:93:de:57:6b:a2:23:d5:46:2e:fc:
d9:de:bc:2a:cb:ed:a0:c1:ac:c6:3e:e4:74:b0:07:
f8:ac:e1:88:ff:b7:7c:57:ad:d7:3d:c3:d5:55:d2:
ac:6b:1e:21:61:fc:8f:ea:d3:fb:d1:2c:0a:ff:22:
f4:44:a7:e4:ee:83:91:28:a7:7a:9c:38:92:ee:9d:
b2:48:05:22:76:32:ff:53:eb:e9:36:3c:a8:10:07:
c5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:79:FC:C2:F0:8C:E2:36:EE:6F:02:22:0A:85:0B:8A:81:DA:80:A4
X509v3 Authority Key Identifier:
keyid:59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df1:1c40::/48
Signature Algorithm: sha256WithRSAEncryption
24:bc:4b:df:05:6f:08:8e:a8:a4:62:d8:3a:de:ed:20:bf:82:
64:c8:a5:e9:4a:5b:11:78:3f:77:71:13:56:c7:54:e0:e2:47:
6f:e6:32:c9:69:8c:3a:de:fc:f0:b1:4a:ad:61:99:4d:33:68:
b4:3c:96:25:2b:30:aa:f5:84:30:3b:b9:e4:44:73:43:69:ae:
cf:f9:76:8c:16:a3:b4:ae:a4:d3:b7:d0:8e:ff:4a:bc:c9:74:
ac:46:b7:04:b5:5d:b3:ce:e8:cb:93:6b:2d:5e:95:c7:6c:76:
11:db:79:e5:0f:b6:cf:5f:71:99:f5:7d:f7:4c:a1:9a:cc:dc:
a7:4a:36:7d:a9:28:45:17:06:39:2f:65:45:d0:5f:71:a6:cf:
ce:2c:03:97:c3:91:5b:1a:e6:7b:9f:f7:95:63:f5:f8:dd:c0:
98:83:86:5d:b4:cb:59:c1:c9:af:7e:ba:23:c9:46:6b:06:45:
03:f1:7e:cd:49:b3:35:52:fa:88:04:35:85:c1:3e:e7:36:85:
ad:c8:ef:94:ca:e3:f8:76:e6:e8:86:62:f6:61:73:5d:c5:77:
6e:a9:5e:b5:b2:1b:6d:90:61:1c:c6:4f:20:d8:5e:15:e6:c0:
f0:79:a0:14:24:7b:65:03:0b:65:7c:5e:df:fc:94:7b:0b:5e:
ed:02:dd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 05:38:05 2026 by rpki-client