
$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a313a3a2f34382d3438203d3e20313430343133.roa
File: 323430363a313363303a313a3a2f34382d3438203d3e20313430343133.roa (raw, json)
Hash identifier: UtXQmjBeC5CTnscxuxaYsgnMztecD0FiHkFt7rcC/rg=
Subject key identifier: A3:7C:D5:C6:1F:EC:B5:55:70:0E:FD:6B:92:8C:21:A2:BF:9A:A5:C6
Certificate issuer: /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
Certificate serial: 5C55A69C66A95AC8416970E7F17841148E574C62
Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a313a3a2f34382d3438203d3e20313430343133.roa
Signing time: Sun 05 Apr 2026 16:00:02 +0000
ROA not before: Sun 05 Apr 2026 15:55:02 +0000
ROA not after: Sun 04 Apr 2027 16:00:02 +0000
asID: 140413
IP address blocks: 2406:13c0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl
rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 21:56:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:55:a6:9c:66:a9:5a:c8:41:69:70:e7:f1:78:41:14:8e:57:4c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
Validity
Not Before: Apr 5 15:55:02 2026 GMT
Not After : Apr 4 16:00:02 2027 GMT
Subject: CN=A37CD5C61FECB555700EFD6B928C21A2BF9AA5C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:2f:93:93:27:79:f8:b7:ae:e3:37:fb:d4:
f8:c9:f4:40:83:ff:b1:70:7d:79:ff:90:e5:9d:ac:
0b:72:ec:44:1b:37:96:43:3a:fc:04:d1:6d:f5:15:
8d:75:d0:48:9d:f1:11:30:f7:53:1f:73:69:17:63:
6d:27:b8:d1:55:b8:3a:2d:ef:f7:a2:27:83:90:ee:
f0:70:80:eb:4f:fa:c3:22:32:b0:59:f7:07:f5:3e:
5e:f1:7d:33:cc:0f:a4:ea:95:e6:41:81:17:49:7d:
66:86:29:ca:c2:f1:35:49:3e:37:9c:d6:6d:8b:39:
d0:8a:42:af:d6:2d:69:6a:ff:b1:95:1b:91:a6:71:
31:d5:e5:b3:69:35:2c:75:73:15:d4:78:80:ef:40:
39:cb:a7:a1:2b:50:27:a4:25:ab:27:c9:85:f8:e0:
f6:05:77:19:14:11:c2:fe:cc:ed:65:46:9b:4e:7d:
eb:9f:17:6f:6e:32:bf:cd:4b:0e:d7:e8:d8:72:74:
f9:19:77:a5:a8:f5:7a:67:3c:da:3d:b8:44:8b:c6:
48:d1:19:1c:59:f2:a5:90:a8:be:55:64:d3:c8:10:
95:b3:b0:c5:f0:7e:d9:43:86:4b:8a:97:33:ec:7a:
53:f9:f7:42:e6:2d:22:43:0d:e9:74:7a:39:d1:74:
85:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7C:D5:C6:1F:EC:B5:55:70:0E:FD:6B:92:8C:21:A2:BF:9A:A5:C6
X509v3 Authority Key Identifier:
keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a313a3a2f34382d3438203d3e20313430343133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:13c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
6a:0c:c2:ee:18:fd:3e:a9:4c:35:c2:e0:59:77:23:ec:82:9a:
a1:e8:e4:88:44:44:95:da:4f:15:0d:71:10:13:6e:61:09:fb:
4e:2d:22:0b:7a:16:21:40:5b:83:7e:af:ac:89:6e:6b:f2:39:
99:13:e0:92:2e:eb:66:e2:b0:e2:c8:a5:87:41:a7:98:6b:11:
3f:33:b9:16:f1:a8:da:0a:7b:57:19:32:ea:2d:53:e2:0a:63:
cf:10:11:23:2d:e9:32:ec:01:1f:1c:92:a6:bc:17:61:96:2e:
7f:48:c4:75:17:50:55:86:6e:80:79:9c:c9:4d:93:85:e5:c6:
fa:d9:3b:7b:c2:93:33:e4:56:f4:86:58:68:80:c9:f7:b3:cc:
4c:94:4d:37:e0:b8:f4:c8:d4:43:26:ac:74:4b:5d:9a:5a:71:
c9:40:6e:e3:71:38:f6:be:ff:41:da:ee:79:42:7c:db:44:66:
ed:84:fe:49:69:cf:ce:17:4d:95:bc:12:81:81:49:f8:04:05:
f1:0e:ca:3f:56:90:39:31:89:9c:56:95:bd:81:a9:ca:89:cf:
03:77:3d:b9:ae:2b:f9:2e:ba:8f:b8:ed:e2:71:cd:24:94:4e:
2d:47:2e:8b:02:0d:ec:2d:38:d5:3d:d4:66:d7:67:df:05:97:
9e:f8:c1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:19:58 2026 by rpki-client