
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/323430313a383234303a3a2f33322d3438203d3e203233393438.roa
File: 323430313a383234303a3a2f33322d3438203d3e203233393438.roa (raw, json)
Hash identifier: Gi2ONY8mEqjV4p8QVbCmIDUHi04BcqMbjuq5K46oGb0=
Subject key identifier: 55:22:5A:9E:F7:65:ED:7C:5E:14:B2:1B:6F:12:8D:3B:2A:86:7B:69
Certificate issuer: /CN=7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E
Certificate serial: 49329E78FBD0BD890F6ABD8AFE6638C1882770BB
Authority key identifier: 7B:33:EF:49:B9:12:AE:F2:A1:A5:17:C2:CA:C9:3D:0E:75:01:CE:6E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/323430313a383234303a3a2f33322d3438203d3e203233393438.roa
Signing time: Sun 03 May 2026 03:04:51 +0000
ROA not before: Sun 03 May 2026 02:59:51 +0000
ROA not after: Sun 02 May 2027 03:04:51 +0000
asID: 23948
IP address blocks: 2401:8240::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl
rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 08 May 2026 00:52:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:32:9e:78:fb:d0:bd:89:0f:6a:bd:8a:fe:66:38:c1:88:27:70:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E
Validity
Not Before: May 3 02:59:51 2026 GMT
Not After : May 2 03:04:51 2027 GMT
Subject: CN=55225A9EF765ED7C5E14B21B6F128D3B2A867B69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8b:93:ac:59:f5:18:20:14:9f:b8:ac:62:ea:
8f:40:3f:4c:e8:f4:4d:76:e0:e8:fb:50:b6:a9:1c:
80:a3:29:a4:f6:9b:9e:12:e7:e5:de:89:6b:8c:9c:
83:0c:90:13:ee:19:0f:c2:6c:23:4f:56:87:93:97:
d1:08:e8:8a:54:63:95:16:cf:91:68:26:ff:5c:5c:
fa:c9:f6:58:02:d9:4b:98:6a:4a:f4:87:7d:4a:f0:
05:3c:d5:88:4f:54:5f:0e:16:cc:e5:8a:e0:91:2b:
77:08:1b:81:a3:bd:ad:d4:f6:d7:67:67:15:01:c8:
98:ec:7a:d9:5d:46:97:a5:3c:1f:53:8b:ce:91:64:
6b:7d:a4:2d:e1:fa:2f:c6:b4:2a:6a:24:7b:04:05:
a6:d9:9c:56:e9:17:2b:ce:21:7b:3f:bf:4f:95:09:
b7:5b:43:6a:eb:0d:74:53:df:17:4c:68:48:20:59:
8f:58:0c:18:ee:a7:84:28:fc:83:a7:bf:0f:0f:fb:
0b:8e:4d:94:bc:2b:4d:12:73:9a:c8:4f:87:14:45:
5e:44:c8:d7:01:8c:03:52:aa:74:a5:39:85:21:0e:
7b:12:83:c6:40:a2:0b:7d:09:00:47:ee:50:05:a4:
d4:37:34:11:04:e5:e5:36:a0:a5:ad:55:47:14:6b:
9a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:22:5A:9E:F7:65:ED:7C:5E:14:B2:1B:6F:12:8D:3B:2A:86:7B:69
X509v3 Authority Key Identifier:
keyid:7B:33:EF:49:B9:12:AE:F2:A1:A5:17:C2:CA:C9:3D:0E:75:01:CE:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/323430313a383234303a3a2f33322d3438203d3e203233393438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:8240::/32
Signature Algorithm: sha256WithRSAEncryption
ac:61:bd:57:dd:a6:41:48:24:55:1c:a8:5d:1f:02:20:81:7c:
3e:51:4f:6d:95:de:32:2a:33:fd:41:22:56:4d:f3:4b:0b:b9:
51:fd:ea:f0:67:cb:06:c7:23:49:d6:3a:f6:60:8f:7c:bd:dc:
fb:9e:65:b1:74:22:0e:37:76:60:64:25:a1:86:17:1d:47:31:
bd:aa:d2:36:ab:2f:43:2b:af:ad:27:ac:c8:a4:fd:1b:dc:04:
42:a7:81:bb:a6:0a:ff:fe:5c:f2:ba:da:ae:b6:a9:44:46:83:
a3:96:0d:0a:0c:12:9a:9f:b6:62:40:33:53:a0:80:b5:12:40:
6a:11:f3:20:4e:6a:01:37:ad:73:6f:d3:a9:61:60:17:c3:68:
43:6b:85:c9:2c:93:7f:6d:f8:e6:92:fc:17:ff:08:d8:1f:be:
a6:69:b5:0d:2c:8c:83:63:3f:e8:77:ad:21:e1:f5:fd:37:02:
a7:9a:51:18:ec:a4:39:b1:b3:ef:d1:7e:1c:06:a9:52:bd:1f:
53:3b:c7:71:b9:db:05:ff:d6:68:8b:02:a4:09:d8:ec:87:8d:
e5:03:fc:ff:98:c3:3b:ac:60:c8:86:e7:dc:9f:4b:75:55:e5:
92:1f:6c:9f:b1:83:5c:dc:a4:47:1b:6c:40:23:3b:5e:c2:3b:
4f:53:ed:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:12:30 2026 by rpki-client