
$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a343030303a3a2f34372d3437203d3e203435313437.roa
File: 323430343a633030303a343030303a3a2f34372d3437203d3e203435313437.roa (raw, json)
Hash identifier: Ttc2GYtkRcuSJu93bWjyHMQ6zuXNce79TDuzvliBWus=
Subject key identifier: 1D:1D:5C:E1:43:EF:0C:E5:83:76:D5:84:1F:28:62:68:EC:40:91:36
Certificate issuer: /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Certificate serial: 5E6224FCC7D35282673A076DFB20371C6EF79BCB
Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a343030303a3a2f34372d3437203d3e203435313437.roa
Signing time: Sun 03 May 2026 02:38:28 +0000
ROA not before: Sun 03 May 2026 02:33:28 +0000
ROA not after: Sun 02 May 2027 02:38:28 +0000
asID: 45147
IP address blocks: 2404:c000:4000::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 07 May 2026 23:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:62:24:fc:c7:d3:52:82:67:3a:07:6d:fb:20:37:1c:6e:f7:9b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Validity
Not Before: May 3 02:33:28 2026 GMT
Not After : May 2 02:38:28 2027 GMT
Subject: CN=1D1D5CE143EF0CE58376D5841F286268EC409136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d6:56:83:c9:4e:28:1c:30:0b:aa:df:d9:68:
4e:cb:dc:73:cc:26:f7:fd:f1:74:9f:7f:38:1e:0e:
28:c8:0f:9c:be:6b:4d:41:05:78:d3:99:c5:5c:15:
6a:ac:f7:12:f7:47:a4:3f:60:23:30:47:e7:cb:d9:
b8:3b:7a:fd:34:9f:18:9a:19:5e:18:87:8d:6a:16:
32:f4:a6:23:3a:67:cc:63:91:73:86:49:5f:02:31:
2d:64:63:e9:65:ad:db:59:92:f7:68:bc:f4:58:77:
3f:e1:93:80:a9:51:61:31:81:14:d1:b1:ff:a2:0c:
08:05:23:2b:0f:51:11:42:bb:26:e4:9a:36:71:b7:
1d:ba:be:0a:14:a1:20:eb:e2:5b:11:b7:3a:be:30:
f0:59:f7:2f:ad:83:cf:ca:58:e3:09:25:c8:cc:97:
9c:7d:56:3c:99:cb:cc:3f:3f:7d:b7:d7:35:84:f0:
f8:10:95:fb:17:40:4b:06:1d:4b:1c:40:a8:80:42:
a5:92:07:39:1b:2c:c9:d8:b1:4e:09:fb:be:bb:5c:
0d:b8:d7:3d:26:f4:fc:63:76:44:86:8f:ab:ca:c2:
52:b0:0a:e9:01:1c:3e:2a:14:25:23:0c:d6:c5:5d:
94:bd:66:cb:01:12:fd:e0:e4:ac:a4:f5:66:49:31:
03:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1D:5C:E1:43:EF:0C:E5:83:76:D5:84:1F:28:62:68:EC:40:91:36
X509v3 Authority Key Identifier:
keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a343030303a3a2f34372d3437203d3e203435313437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:c000:4000::/47
Signature Algorithm: sha256WithRSAEncryption
70:05:e7:08:6b:51:96:3b:f7:05:c2:a5:7d:d6:8c:7d:02:e6:
81:0b:18:a0:a7:c0:09:1e:98:51:bd:30:a4:de:82:62:8a:72:
9c:e7:cb:25:93:27:95:47:d8:77:da:c1:ac:6c:a1:58:57:62:
1b:9a:af:f3:dc:99:cc:a8:2c:e6:35:1a:b3:d4:5b:f9:48:8c:
91:18:cc:d3:da:e9:a0:34:fb:97:be:d5:06:b2:ab:fd:87:b4:
9a:f6:a7:a5:ae:47:7e:06:1f:9f:ef:40:f9:e6:bf:00:ac:41:
38:c0:25:ab:60:4a:3c:de:d1:81:86:bc:32:6a:65:d8:f9:56:
34:f6:84:9c:e0:5d:b8:ae:b4:61:e8:68:a3:99:11:e0:5a:75:
3c:44:45:80:3d:6c:69:93:2a:18:9b:50:b3:4b:69:b4:a8:5c:
b5:e0:b7:27:89:e9:a4:88:db:1b:b7:88:2c:6c:40:7e:8d:45:
f1:f2:67:59:d9:83:13:e8:16:ba:93:11:e7:e8:78:de:bd:f5:
41:21:71:e2:81:5e:b7:fa:eb:e8:c3:c1:60:08:80:08:45:c0:
ea:52:84:a7:24:59:9a:a2:ad:21:e2:39:21:5a:d3:2d:6d:ef:
a7:8c:3a:75:c7:43:94:1c:ba:6e:77:f0:9b:a0:ff:96:b8:1b:
6a:90:40:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:12:32 2026 by rpki-client