
$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/0/323430373a623963303a3a2f33322d3438203d3e203537363935.roa
File: 323430373a623963303a3a2f33322d3438203d3e203537363935.roa (raw, json)
Hash identifier: GJRgAwV+rKI9qKRwvVjQmQmb1Y6MGhE7zB5I5BMHtAw=
Subject key identifier: B0:37:A2:88:6F:28:B8:C9:35:54:25:0E:AC:3E:D0:8F:2F:0F:FC:F6
Certificate issuer: /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
Certificate serial: 15BB29A6668B678AB3C1FCB64D07E36ACCD1FE3B
Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/0/323430373a623963303a3a2f33322d3438203d3e203537363935.roa
Signing time: Sun 06 Sep 2026 22:47:55 +0000
ROA not before: Sun 06 Sep 2026 22:42:55 +0000
ROA not after: Sun 05 Sep 2027 22:47:55 +0000
asID: 57695
IP address blocks: 2407:b9c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl
rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 19:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:bb:29:a6:66:8b:67:8a:b3:c1:fc:b6:4d:07:e3:6a:cc:d1:fe:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121C330000, serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
Validity
Not Before: Sep 6 22:42:55 2026 GMT
Not After : Sep 5 22:47:55 2027 GMT
Subject: CN=B037A2886F28B8C93554250EAC3ED08F2F0FFCF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:dc:88:4f:85:d8:95:dc:0b:38:aa:30:bd:9e:
89:54:19:9a:26:a1:e0:01:92:91:7a:a1:f9:93:08:
c8:41:c8:90:b5:7f:d5:2d:ea:f5:49:de:4e:7b:2d:
a9:57:14:20:27:28:f7:3c:ae:b2:94:a2:9c:9e:30:
61:34:42:ed:46:69:ea:a3:8d:cd:4c:9b:83:40:49:
b3:72:1d:ca:9d:10:cf:7d:29:16:40:51:9e:6d:1e:
14:f8:64:84:4a:8e:ec:e4:60:76:12:1f:b5:3c:47:
d8:c6:88:e5:4a:69:a9:ba:93:d6:4f:17:ae:a2:f8:
f2:c7:02:55:08:7e:cc:1d:e6:88:75:fc:2d:2b:86:
92:39:db:fb:3e:0f:16:7c:65:6e:c7:aa:aa:ac:05:
3c:68:43:ef:3d:c8:6d:a2:a3:b8:cc:e6:c0:f8:e5:
19:10:1d:55:37:9b:9f:ba:7a:b4:4a:9e:c5:68:cd:
6b:ba:c2:ac:96:8f:c8:b2:f7:20:b6:ed:db:d4:01:
38:71:1f:3b:ee:6e:6c:ba:e7:86:0b:ec:37:00:fd:
2d:75:c8:9d:98:a7:53:22:34:20:80:2e:2a:b5:75:
48:f0:51:a6:88:c9:70:4b:56:f6:28:4a:00:8d:44:
66:2e:64:93:b1:73:41:84:24:ec:1e:e4:74:1f:36:
07:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:37:A2:88:6F:28:B8:C9:35:54:25:0E:AC:3E:D0:8F:2F:0F:FC:F6
X509v3 Authority Key Identifier:
keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/323430373a623963303a3a2f33322d3438203d3e203537363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2407:b9c0::/32
Signature Algorithm: sha256WithRSAEncryption
48:83:5d:ef:92:59:fa:a3:7a:e7:f6:10:59:51:41:00:1d:db:
44:ed:3d:67:37:1f:b0:6c:55:f4:14:24:0f:ac:37:10:b6:57:
59:c5:88:41:4f:19:fc:cc:f6:22:f8:33:52:07:b3:6a:78:84:
23:46:ff:14:0d:dc:1a:7d:c7:50:8f:f9:a4:a0:07:b3:bc:00:
bb:3c:43:20:47:5d:22:79:7c:17:ba:c5:f8:d1:8d:71:15:b7:
0b:05:ee:20:a6:c8:c5:ed:ab:4e:09:a3:80:38:fc:2d:12:d2:
6c:8d:a1:fa:f1:26:d5:5e:ef:4b:ab:e9:ef:00:ae:2c:21:da:
20:99:10:60:f1:a1:16:eb:f0:67:0f:45:bf:26:79:0e:ee:f8:
9d:38:31:47:d4:8f:69:3b:7b:fb:97:fe:f2:82:02:49:fa:ca:
f1:b2:b6:70:15:5f:19:0b:0e:19:6a:7f:45:d4:39:8e:a2:1a:
22:50:20:fc:b1:0f:d9:07:c6:2d:aa:f5:68:e2:83:01:14:6c:
63:7c:c6:c7:94:0d:fd:db:69:34:3d:65:9a:c4:98:7e:f7:7d:
a9:91:9c:0a:b5:12:62:db:be:fe:7f:3a:ca:ce:2f:8f:44:f4:
37:ba:e1:c0:44:c7:d2:24:02:ca:b0:f1:4f:15:66:29:aa:f7:
87:f9:cb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:08:12 2026 by rpki-client