
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/323430353a363634303a3a2f33322d3332203d3e20313336383639.roa
File: 323430353a363634303a3a2f33322d3332203d3e20313336383639.roa (raw, json)
Hash identifier: Qac1NFCuO071cWw4+WZWjSfpfRZO6+EbQ4cltXf7Eyg=
Subject key identifier: DC:01:B1:B2:05:62:F4:F1:04:DC:A2:F4:3F:56:C6:A8:37:46:3C:FB
Certificate issuer: /CN=AB5711486023F8F0DBFED38BC7FD7BC91735FFCD
Certificate serial: 2027599F40CC52251B65F1A3687D3ED964C1A4E6
Authority key identifier: AB:57:11:48:60:23:F8:F0:DB:FE:D3:8B:C7:FD:7B:C9:17:35:FF:CD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/323430353a363634303a3a2f33322d3332203d3e20313336383639.roa
Signing time: Mon 05 Oct 2026 09:36:08 +0000
ROA not before: Mon 05 Oct 2026 09:31:08 +0000
ROA not after: Mon 04 Oct 2027 09:36:08 +0000
asID: 136869
IP address blocks: 2405:6640::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.crl
rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 12:57:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:27:59:9f:40:cc:52:25:1b:65:f1:a3:68:7d:3e:d9:64:c1:a4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB5711486023F8F0DBFED38BC7FD7BC91735FFCD
Validity
Not Before: Oct 5 09:31:08 2026 GMT
Not After : Oct 4 09:36:08 2027 GMT
Subject: CN=DC01B1B20562F4F104DCA2F43F56C6A837463CFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4b:4b:7e:10:a2:81:fb:a2:cb:41:a8:25:0a:
44:80:48:72:f1:f2:71:a4:b0:3c:9f:cf:4d:a5:c4:
bb:e0:c3:e8:62:51:df:26:ab:13:3d:e5:62:b8:42:
6a:a9:16:97:b6:22:27:6f:48:8e:a3:47:80:94:82:
fe:51:48:80:73:69:24:0f:2f:08:30:5d:af:07:43:
38:ea:02:d3:96:30:eb:dd:e1:47:da:82:d1:66:39:
01:89:63:42:f8:9f:a0:65:f7:99:d0:5c:26:51:47:
a3:b6:d4:14:e0:16:ad:89:95:2e:b1:7a:36:2c:48:
91:66:3f:a2:4a:e0:4a:0c:11:ef:fe:97:31:a7:ca:
7e:ac:86:55:85:40:04:63:b5:0b:a4:38:6c:1b:20:
a2:0e:2f:39:d7:aa:fe:d4:0b:15:9d:da:65:e5:9f:
e2:d1:9b:f2:7d:e6:4a:16:fc:c9:fc:e3:bb:72:7b:
49:0a:7a:73:04:02:e4:90:18:ee:04:4b:99:ec:d9:
a4:bf:59:39:19:64:66:ba:b9:51:78:1c:0f:5d:d7:
94:55:89:6b:c1:60:f1:ec:ac:02:6d:96:1a:e9:d7:
77:e7:19:96:a3:85:d3:2e:04:01:6e:fd:b7:10:e3:
90:10:9c:ee:6e:4a:18:cd:b8:ea:69:22:7c:92:02:
e6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:01:B1:B2:05:62:F4:F1:04:DC:A2:F4:3F:56:C6:A8:37:46:3C:FB
X509v3 Authority Key Identifier:
keyid:AB:57:11:48:60:23:F8:F0:DB:FE:D3:8B:C7:FD:7B:C9:17:35:FF:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/323430353a363634303a3a2f33322d3332203d3e20313336383639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:6640::/32
Signature Algorithm: sha256WithRSAEncryption
20:7c:6d:82:82:1e:46:07:d1:51:15:ef:fc:28:b9:d4:71:66:
9a:f6:7d:ca:3c:d0:00:ab:06:84:83:0a:d2:e3:be:e2:c0:f8:
85:97:b2:c4:69:83:7a:d9:78:94:0a:b9:46:fe:07:df:1f:58:
08:a4:79:3c:58:eb:07:8d:da:2b:af:69:6a:59:74:de:3e:28:
9f:c0:10:b6:69:16:7d:e8:ee:78:bb:20:6f:6e:27:4f:bc:5f:
8f:29:91:4d:6b:a2:38:c2:fb:6f:5c:bd:86:95:ba:43:b5:52:
60:6f:50:76:60:1f:92:75:54:5b:09:dc:b6:16:9b:90:04:13:
45:ee:39:1d:a3:4a:2e:7d:44:7a:7d:2a:b5:68:59:95:7c:42:
6d:99:d7:33:ef:b1:7e:16:2a:b1:6a:75:c1:bc:6a:b5:f0:4f:
08:04:a4:8f:1b:4d:9d:9d:a6:7f:8c:96:de:c0:16:c6:4a:80:
df:7d:5e:3d:1e:2c:49:db:2e:ef:7f:fd:92:d5:01:16:bd:f8:
f5:04:d8:fb:6e:2b:1a:b1:d2:06:ef:a2:8e:a3:9c:85:ac:df:
14:79:c0:ce:55:30:f7:db:07:51:17:ae:8e:ff:f2:ce:0c:4d:
9d:68:d7:d2:ee:4e:cf:4b:e9:a6:cf:cb:f2:8d:40:00:18:a6:
ac:d6:39:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:58:33 2026 by rpki-client