
$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030303a3a2f34372d3437203d3e203137373237.roa
File: 323430343a633030303a633030303a3a2f34372d3437203d3e203137373237.roa (raw, json)
Hash identifier: XzKUzDNBEbw7wSbfyK8c55lGgNibygdHfHXl1vcok0I=
Subject key identifier: EE:68:C0:E5:92:BE:C7:05:54:3D:73:74:F6:52:96:BA:70:80:D1:DB
Certificate issuer: /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Certificate serial: 265247004A427E01377CE7CC4EB495B1215B54B2
Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030303a3a2f34372d3437203d3e203137373237.roa
Signing time: Sun 03 May 2026 02:38:24 +0000
ROA not before: Sun 03 May 2026 02:33:24 +0000
ROA not after: Sun 02 May 2027 02:38:24 +0000
asID: 17727
IP address blocks: 2404:c000:c000::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 07 May 2026 23:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:52:47:00:4a:42:7e:01:37:7c:e7:cc:4e:b4:95:b1:21:5b:54:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Validity
Not Before: May 3 02:33:24 2026 GMT
Not After : May 2 02:38:24 2027 GMT
Subject: CN=EE68C0E592BEC705543D7374F65296BA7080D1DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8f:20:99:e0:a0:3d:ad:d4:09:a7:95:31:ef:
38:b3:d8:50:43:08:be:f7:9c:fe:6e:23:40:97:60:
0f:9e:02:61:cc:a6:42:c1:c7:1c:14:41:01:02:a9:
02:30:0e:ff:77:4c:e1:b8:43:c9:a2:7e:ea:7a:7f:
62:90:57:6a:92:02:e1:c3:8d:73:a8:d0:34:e9:e5:
ba:fa:a2:4b:ef:88:11:8b:82:98:9a:76:ed:a6:e0:
65:55:ac:95:fc:88:b0:b2:2e:5d:5b:a0:16:c9:5e:
48:16:dc:a4:ad:79:4a:98:86:82:3f:61:7e:04:26:
cb:2e:47:2c:ae:3e:23:f5:d1:06:09:29:51:91:62:
cd:18:64:92:d4:b0:11:60:df:4e:74:3c:a1:78:a7:
30:e1:73:a7:45:65:00:55:8c:67:f5:fd:76:d4:19:
0d:26:a3:49:ba:e5:8e:e9:42:6c:12:5f:28:75:cd:
a3:d3:af:22:99:3b:b3:90:20:6b:6c:bc:32:2a:36:
29:6c:03:5c:ee:57:e7:03:47:ea:0f:bb:32:ad:f0:
7c:78:69:f5:06:96:cf:20:c2:df:12:07:c8:96:6d:
14:4d:20:9a:ff:3d:72:76:ed:87:7e:e5:1d:d8:8c:
36:a1:4e:81:be:7a:34:43:4a:bc:ea:ee:73:09:53:
37:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:68:C0:E5:92:BE:C7:05:54:3D:73:74:F6:52:96:BA:70:80:D1:DB
X509v3 Authority Key Identifier:
keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030303a3a2f34372d3437203d3e203137373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:c000:c000::/47
Signature Algorithm: sha256WithRSAEncryption
07:18:1b:84:9b:8c:d0:0b:53:7f:83:67:45:d1:1b:ae:d7:da:
18:8d:60:81:52:cd:80:e3:b5:2d:13:cb:2d:44:45:b5:78:35:
2a:8c:96:82:91:46:34:7c:7d:d7:fa:08:fa:43:9b:45:52:45:
87:41:58:53:ce:69:16:dd:fc:83:54:f9:b1:b2:61:73:ac:9c:
3d:28:ed:d7:89:7b:97:c7:3a:2a:69:b3:a2:4e:c5:19:e7:ab:
5e:f9:66:64:a1:cb:37:af:c6:c0:c1:f0:26:82:69:16:53:7d:
f7:43:0a:08:4c:9f:59:f1:ef:32:36:52:ef:e0:7e:e1:4e:af:
ab:60:bb:d8:39:3d:35:05:13:71:14:2b:43:c4:e2:b8:0c:08:
86:a2:2d:e2:93:04:65:c0:32:db:6c:ea:f2:1f:ec:b3:e5:46:
27:9b:95:be:72:f1:b8:4d:c3:d6:28:4f:7e:ca:03:9b:50:43:
6d:b1:a2:87:ce:16:e5:ac:a6:26:53:d0:9e:cc:3f:bb:4c:fd:
51:0d:6d:fb:14:35:85:21:e1:c5:fe:29:ca:05:f5:ff:bd:33:
f6:ae:46:b9:15:d6:15:31:f8:e6:63:53:ff:0a:0c:41:f8:33:
2e:7d:a1:90:31:47:e6:a9:5c:7b:ab:66:41:fb:d2:ac:f4:0f:
52:1b:70:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:31:45 2026 by rpki-client