
$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a343a3a2f34382d3438203d3e20313430343133.roa
File: 323430363a313363303a343a3a2f34382d3438203d3e20313430343133.roa (raw, json)
Hash identifier: tgeej1L1oKyTCx21ba/ovq4/j/qADfAjDv/cbeKHpHQ=
Subject key identifier: 25:25:03:5F:A0:E5:E2:8A:AC:05:07:98:A4:2E:CB:9F:D7:BD:D0:07
Certificate issuer: /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
Certificate serial: 1CC5B12A34C475CB397A8E5045E326AAA54B4303
Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a343a3a2f34382d3438203d3e20313430343133.roa
Signing time: Sun 05 Apr 2026 16:00:01 +0000
ROA not before: Sun 05 Apr 2026 15:55:01 +0000
ROA not after: Sun 04 Apr 2027 16:00:01 +0000
asID: 140413
IP address blocks: 2406:13c0:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl
rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 21:56:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:c5:b1:2a:34:c4:75:cb:39:7a:8e:50:45:e3:26:aa:a5:4b:43:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
Validity
Not Before: Apr 5 15:55:01 2026 GMT
Not After : Apr 4 16:00:01 2027 GMT
Subject: CN=2525035FA0E5E28AAC050798A42ECB9FD7BDD007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:33:9a:dc:7c:3c:9b:f2:b6:b4:88:ae:5c:
c1:f1:af:97:40:af:0c:b7:d8:1b:36:a2:cd:46:07:
8f:1d:a2:d5:88:36:95:3c:b9:07:e9:7e:a5:48:3a:
37:f9:56:9f:78:b2:4f:6e:9f:ba:b0:4a:e3:08:8f:
5b:ae:93:e0:33:d9:c9:fd:9c:87:af:01:90:a2:d0:
fb:1c:2a:c1:be:77:b3:83:b9:26:6e:57:13:73:f0:
b9:ea:40:f9:eb:3e:60:d4:4a:ad:f1:a8:a2:1c:8d:
2a:c3:33:4a:31:e0:fb:84:bf:0e:d4:87:19:fc:e8:
45:fd:6d:e0:47:cc:25:7f:5f:31:10:75:85:a5:c7:
e8:12:a5:5c:e1:ff:21:28:25:7b:b1:33:13:a2:a2:
43:74:00:bf:c7:1e:10:6b:47:a1:75:8c:42:45:6c:
ad:f9:74:52:fd:8c:00:c9:c9:6c:ca:d6:9b:22:d6:
d4:ef:90:76:1b:d8:8c:1c:2f:01:bd:68:53:aa:a2:
76:aa:78:ae:d9:54:e0:d8:02:8e:49:83:4d:e5:81:
b0:ab:c7:98:cb:de:71:bc:bd:e7:31:bc:86:df:1f:
ca:c5:41:41:74:38:8e:22:3a:9c:d5:43:9d:29:cb:
cc:cc:b0:bd:97:23:6e:d0:32:38:a4:55:79:27:a0:
69:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:25:03:5F:A0:E5:E2:8A:AC:05:07:98:A4:2E:CB:9F:D7:BD:D0:07
X509v3 Authority Key Identifier:
keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a343a3a2f34382d3438203d3e20313430343133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:13c0:4::/48
Signature Algorithm: sha256WithRSAEncryption
3a:f9:91:74:eb:8e:f9:62:ae:c2:11:81:e2:e3:4e:7b:40:5a:
f0:b5:46:79:12:30:d7:77:18:4e:24:e9:4c:10:2f:db:3c:7a:
d3:02:ac:89:39:35:3e:a9:fe:f6:6c:80:82:09:f5:a8:db:2b:
28:7a:ee:07:0f:57:c3:69:10:a6:ed:75:3e:58:55:73:98:4a:
60:0e:0c:7a:8b:15:91:af:cc:01:fa:1c:2e:6d:25:23:cc:bb:
b3:03:4f:b8:ee:e5:5a:aa:22:a4:d2:34:cf:1d:ca:b7:a7:ec:
8d:27:20:f1:31:18:95:af:55:1f:4d:5d:57:ac:a5:cc:bd:0b:
4f:9f:1b:21:60:39:f1:97:08:e3:d5:11:bd:41:9c:aa:b9:ac:
07:64:d3:43:25:7f:b9:3c:55:46:05:cb:d3:6d:8a:06:d7:be:
2d:8a:fe:17:3f:8a:72:57:8e:3a:b8:ca:b8:8a:ad:9a:be:34:
a8:b5:7f:5a:c6:9f:33:f8:d1:d0:e7:79:4b:50:06:fa:00:a6:
d0:55:7f:ee:96:85:81:16:23:a5:a4:4f:fc:46:53:8e:1f:d8:
4e:db:f1:a3:3e:2c:c6:a5:47:5b:08:75:e8:28:5b:88:56:82:
e5:b1:01:94:dd:7a:d4:46:6d:48:11:90:dc:0a:6d:1a:8a:e7:
a1:7e:79:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:19:58 2026 by rpki-client