
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/323030313a6466303a3237333a3a2f34382d3438203d3e20313431393835.roa
File: 323030313a6466303a3237333a3a2f34382d3438203d3e20313431393835.roa (raw, json)
Hash identifier: xS3CYv6HlOigS6V1ToXrtXoIA2pH/yBeJ3+U9/cCmQA=
Subject key identifier: F6:EE:5D:88:71:3E:FD:71:D6:15:6C:22:2F:82:AC:3A:5A:2E:A0:86
Certificate issuer: /CN=A08BAF2D88514EC041A87F092E6B6A521F3349F3
Certificate serial: 5B2CD31C12723712F90AC6A93945349F3214BE1B
Authority key identifier: A0:8B:AF:2D:88:51:4E:C0:41:A8:7F:09:2E:6B:6A:52:1F:33:49:F3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/323030313a6466303a3237333a3a2f34382d3438203d3e20313431393835.roa
Signing time: Sun 06 Sep 2026 03:13:55 +0000
ROA not before: Sun 06 Sep 2026 03:08:55 +0000
ROA not after: Sun 05 Sep 2027 03:13:55 +0000
asID: 141985
IP address blocks: 2001:df0:273::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl
rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 02:13:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:2c:d3:1c:12:72:37:12:f9:0a:c6:a9:39:45:34:9f:32:14:be:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A08BAF2D88514EC041A87F092E6B6A521F3349F3
Validity
Not Before: Sep 6 03:08:55 2026 GMT
Not After : Sep 5 03:13:55 2027 GMT
Subject: CN=F6EE5D88713EFD71D6156C222F82AC3A5A2EA086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bb:e3:7f:59:04:8b:80:a1:35:e6:5f:81:0e:
0c:0b:8c:c8:c1:f6:1f:99:1a:14:c6:fa:a7:ab:65:
c5:d6:9b:a8:5c:da:0e:01:e1:43:d1:8b:a4:b2:54:
c6:3b:c1:ca:7c:7b:3a:d0:ed:39:a3:6b:38:4a:da:
33:3f:25:b6:3c:21:08:03:79:9f:96:c8:37:be:f5:
cb:1c:76:3c:16:9a:d3:2e:cd:4b:dc:ad:9b:2e:fb:
8c:f7:d7:97:07:1c:7f:7d:d2:50:bc:f6:6e:2c:b1:
10:0e:26:d2:ba:9f:db:0a:9a:2d:3a:b9:a8:34:5a:
95:e4:0c:f4:92:13:bf:6e:7a:90:65:d4:98:33:50:
5f:fa:22:66:f5:cf:3a:57:f2:d8:80:0f:96:fe:a0:
d0:60:8a:40:e2:86:94:10:bb:b9:a3:e8:51:6d:4f:
36:94:d3:b7:e3:cd:79:86:7f:c4:a7:40:91:02:2f:
98:e1:a9:42:8e:51:8c:8a:f5:39:f7:0b:a1:a6:ec:
98:70:50:8d:52:69:a1:8d:19:cb:0c:c1:7e:17:fd:
72:f2:87:29:05:37:e4:2c:d7:bd:be:f9:f6:a3:db:
f4:ea:66:2d:b8:98:05:b6:ca:ad:fb:94:50:91:eb:
6c:7b:22:11:56:b5:0d:73:51:2c:77:fc:79:4e:81:
04:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EE:5D:88:71:3E:FD:71:D6:15:6C:22:2F:82:AC:3A:5A:2E:A0:86
X509v3 Authority Key Identifier:
keyid:A0:8B:AF:2D:88:51:4E:C0:41:A8:7F:09:2E:6B:6A:52:1F:33:49:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/323030313a6466303a3237333a3a2f34382d3438203d3e20313431393835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:273::/48
Signature Algorithm: sha256WithRSAEncryption
9d:7a:14:c5:8e:9e:a0:a3:0b:a0:a2:13:6b:65:25:08:2a:54:
ff:c8:df:ab:73:d0:0a:b2:20:95:13:b2:c4:5e:89:86:0a:13:
f6:3c:0b:30:21:f3:11:0b:71:f7:25:71:fe:cd:b1:6a:9e:02:
89:fe:42:ac:76:b4:16:63:a7:02:18:66:0b:81:ce:c2:6d:7e:
cd:27:a4:ce:ef:47:fc:8e:e0:9e:26:27:59:77:21:aa:53:35:
f4:be:ce:81:e0:f7:3c:be:9c:45:30:06:01:68:61:c1:c4:91:
d0:ef:e5:42:a8:a8:2c:8e:f8:1a:36:89:a7:4d:92:c7:25:67:
a7:bf:17:c8:9e:70:6e:dc:fc:18:7e:e9:a1:1a:bc:b5:cb:62:
6a:dc:23:de:85:a9:ea:35:81:d0:1e:74:19:c5:95:28:b5:8b:
bc:76:2a:c9:0b:e3:0b:d4:2b:54:24:7a:c4:ca:b7:46:19:83:
68:28:2e:88:3c:84:8d:49:f7:d2:3b:7e:5c:91:92:a7:9d:e2:
4f:fb:10:6e:a9:31:88:80:c3:d8:26:c3:0e:18:3a:fc:3e:97:
fe:bb:9d:0f:56:95:e3:36:8b:91:54:a2:86:9f:96:5a:8d:09:
00:93:18:88:64:48:c8:9d:53:07:d8:60:e6:be:49:5a:1e:0d:
65:5c:92:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 12:16:52 2026 by rpki-client