
$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030333a3a2f34382d3438203d3e203137373237.roa
File: 323430343a633030303a633030333a3a2f34382d3438203d3e203137373237.roa (raw, json)
Hash identifier: puzGlCfZiYZzsDXa2++iuupVw9DJwD/gjYjQ++4M5vU=
Subject key identifier: 41:2F:F1:5C:BB:1D:C0:77:4C:FA:58:1C:AA:CA:E0:7F:85:0C:F9:49
Certificate issuer: /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Certificate serial: 210414703CB362F8556F96AE4212F77F67A3A655
Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030333a3a2f34382d3438203d3e203137373237.roa
Signing time: Sun 03 May 2026 02:38:41 +0000
ROA not before: Sun 03 May 2026 02:33:41 +0000
ROA not after: Sun 02 May 2027 02:38:41 +0000
asID: 17727
IP address blocks: 2404:c000:c003::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 07 May 2026 23:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:04:14:70:3c:b3:62:f8:55:6f:96:ae:42:12:f7:7f:67:a3:a6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Validity
Not Before: May 3 02:33:41 2026 GMT
Not After : May 2 02:38:41 2027 GMT
Subject: CN=412FF15CBB1DC0774CFA581CAACAE07F850CF949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ba:ba:c1:48:09:e6:59:07:6f:b3:6d:0b:a6:
f2:7a:ad:40:06:4d:f8:ba:82:2e:a4:49:04:75:de:
26:55:f5:ab:13:25:13:b7:f2:70:4b:58:28:1f:8b:
d7:a7:e1:a4:c6:b8:c4:46:17:ba:af:74:04:c7:2a:
9e:b6:65:fc:57:e0:04:5c:46:d4:40:af:4b:57:cf:
fb:89:fc:d6:9f:26:10:4f:fb:3a:f7:a4:55:d1:82:
55:e7:d8:f6:d9:00:89:c8:e0:27:fa:00:3d:f9:14:
dc:4e:16:de:bd:96:c6:f9:20:f0:05:7e:cc:d8:aa:
c6:58:46:f7:42:3a:9c:8b:bd:00:1b:30:38:be:30:
48:19:34:7e:a0:3c:56:ae:fb:d2:f1:de:c9:1d:f6:
a4:f5:22:b7:cb:c3:87:2d:28:df:cc:cd:97:d0:90:
4a:34:de:98:0d:19:9f:05:dd:9a:f7:f9:8d:ba:c1:
5f:dd:56:83:84:e0:e6:ed:f9:fc:8b:d0:b7:52:e2:
f5:18:05:28:47:d5:fc:d3:51:33:93:b9:b3:f5:5d:
3a:c2:a7:e2:03:b5:c8:ec:32:c5:9d:c6:65:21:a5:
9b:e6:f0:63:21:ca:46:97:5f:29:2b:4b:d6:db:41:
e4:05:ad:1f:20:69:22:c2:bc:6e:09:a4:d5:7c:52:
3c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2F:F1:5C:BB:1D:C0:77:4C:FA:58:1C:AA:CA:E0:7F:85:0C:F9:49
X509v3 Authority Key Identifier:
keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030333a3a2f34382d3438203d3e203137373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:c000:c003::/48
Signature Algorithm: sha256WithRSAEncryption
33:51:a1:0f:9f:10:4d:0f:98:a5:e6:6d:04:2b:d1:cb:d3:eb:
a9:a5:f4:26:41:cd:e6:21:c1:3f:01:42:00:b4:38:47:30:ff:
0a:1f:c6:71:01:bf:47:27:5d:98:9a:ac:b6:f4:a7:a8:56:c6:
83:13:2c:01:34:4c:77:7e:d4:b7:4e:98:78:ce:f7:5d:d5:f9:
25:c3:57:0e:2f:c5:f1:3f:b6:69:97:9c:1c:eb:a1:08:48:c8:
bf:d0:97:17:0a:52:1d:bd:d8:77:af:4a:b0:0b:1e:16:38:b3:
10:00:b3:c5:c8:ef:70:07:1b:89:1d:a3:a0:c1:1a:17:0d:9d:
93:b0:74:9b:8f:d0:aa:ee:aa:8f:57:b9:8f:20:7b:00:96:f2:
54:e3:64:00:1e:00:37:d4:f9:e5:d2:a8:d8:66:c5:92:9f:f7:
ad:96:09:4e:76:5a:05:04:20:75:b2:3d:9d:11:6d:32:08:39:
44:be:be:80:86:57:03:1b:c6:59:13:0d:ce:08:f4:17:e3:95:
a8:db:6c:f7:c7:4f:d5:0f:19:2c:2b:fe:9a:bd:1b:08:d4:57:
28:e8:17:72:eb:13:87:2f:51:89:84:0b:ee:f2:d9:99:4a:23:
9a:3a:0f:f3:7e:d1:3d:6c:b9:47:17:56:db:df:08:97:38:c1:
ac:49:49:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:32:35 2026 by rpki-client