
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/323430333a666630303a3a2f33322d3438203d3e203234353335.roa
File: 323430333a666630303a3a2f33322d3438203d3e203234353335.roa (raw, json)
Hash identifier: +qKLLz9ehRuOchJ8m6wI99oYtklf5Gx9ixqGHWMAzMw=
Subject key identifier: 14:A3:DC:83:04:AE:5D:4B:25:0B:2E:CD:23:B0:17:15:35:DB:71:7D
Certificate issuer: /CN=5FF85953C6850E359467A581C3FE1AC78E529F2F
Certificate serial: 1275846D6160A30EB0D2D11126C6B697F72D4AB9
Authority key identifier: 5F:F8:59:53:C6:85:0E:35:94:67:A5:81:C3:FE:1A:C7:8E:52:9F:2F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/323430333a666630303a3a2f33322d3438203d3e203234353335.roa
Signing time: Sun 03 May 2026 02:23:08 +0000
ROA not before: Sun 03 May 2026 02:18:08 +0000
ROA not after: Sun 02 May 2027 02:23:08 +0000
asID: 24535
IP address blocks: 2403:ff00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.crl
rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 05:29:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:75:84:6d:61:60:a3:0e:b0:d2:d1:11:26:c6:b6:97:f7:2d:4a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FF85953C6850E359467A581C3FE1AC78E529F2F
Validity
Not Before: May 3 02:18:08 2026 GMT
Not After : May 2 02:23:08 2027 GMT
Subject: CN=14A3DC8304AE5D4B250B2ECD23B0171535DB717D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8f:ca:06:87:42:6f:dd:12:98:4d:6f:7d:84:
7f:51:d1:73:66:b9:bd:f9:0e:db:f7:01:00:75:6b:
53:11:82:64:af:c1:91:4c:3d:1f:75:c7:1e:78:c4:
00:5b:41:3e:89:11:49:50:93:33:c4:9a:08:a3:bd:
f4:72:c9:71:59:97:d3:1a:d6:b1:52:1d:ba:b1:ba:
dd:aa:2d:20:8e:e8:b2:10:0a:a7:35:fa:ee:12:ca:
bf:4c:14:df:6a:fb:66:12:2d:2f:21:3c:33:ac:87:
9b:1e:ec:8f:b4:19:10:4d:ea:6a:58:72:5f:c1:35:
6d:a0:6d:9a:b5:e3:ae:fa:40:a8:84:43:9b:b4:a2:
77:eb:72:2b:f2:21:3e:7a:51:15:27:fa:3f:50:74:
6b:21:8a:b8:19:67:9d:9b:7c:99:8a:c9:a5:5d:06:
9c:17:62:da:9f:d8:16:ca:ee:3f:27:ea:ff:7a:6d:
73:37:28:e1:a5:ce:c4:48:d8:8d:49:67:cc:ba:75:
17:10:3d:6b:c2:3d:17:9a:80:ab:51:4a:4b:89:6a:
8e:a8:c2:6e:ed:24:45:b5:46:62:28:6c:85:a5:b8:
3e:02:cb:ac:b9:8c:95:4a:f0:8b:cc:c1:30:56:eb:
78:3a:72:72:ec:43:53:ba:4f:4f:55:d1:34:f2:df:
b8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A3:DC:83:04:AE:5D:4B:25:0B:2E:CD:23:B0:17:15:35:DB:71:7D
X509v3 Authority Key Identifier:
keyid:5F:F8:59:53:C6:85:0E:35:94:67:A5:81:C3:FE:1A:C7:8E:52:9F:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/323430333a666630303a3a2f33322d3438203d3e203234353335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:ff00::/32
Signature Algorithm: sha256WithRSAEncryption
26:e5:ae:43:a0:dc:04:3b:c4:42:34:dc:6a:c3:eb:ca:b0:23:
75:01:fa:22:19:4e:2d:57:c3:92:be:95:98:50:35:4f:d2:c7:
59:3a:44:f1:5f:bc:57:fe:2f:97:d1:98:d3:6a:5e:0b:8d:91:
c7:94:aa:3d:93:78:3c:ad:12:30:84:7c:3b:22:21:57:a2:03:
b9:83:30:4b:a0:25:06:63:79:44:d2:f7:ea:f3:ae:7a:d1:36:
4b:57:d0:46:60:97:b3:b7:9e:87:15:a3:c3:a9:dd:4a:9c:b2:
27:8d:9b:02:82:be:e9:34:87:6b:a5:47:88:84:82:32:30:1c:
a3:29:cc:34:ad:ae:a1:12:fe:ec:98:d0:c8:69:3f:44:7e:3c:
55:80:5c:0a:6c:c0:c9:57:48:92:65:23:78:c9:8d:ab:d0:37:
fb:13:53:23:41:a8:38:97:79:a2:70:85:6d:41:21:d5:b4:1f:
3d:75:bc:c7:bf:d8:52:88:da:28:1c:2d:e0:b9:e9:e9:77:d5:
17:48:48:ed:6e:e0:f9:7d:2b:d6:f2:63:c9:f4:fd:6a:bc:6a:
24:43:aa:65:d3:7d:59:ad:5d:f0:b3:30:ff:35:b4:a0:22:55:
ef:a4:ef:87:4c:60:4f:0b:fb:79:77:50:26:f5:10:3f:8d:6a:
6e:46:ac:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 16:10:59 2026 by rpki-client