
$ rpki-client -vvf repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/323030313a6466303a373434303a3a2f34382d3438203d3e20313331313132.roa
File: 323030313a6466303a373434303a3a2f34382d3438203d3e20313331313132.roa (raw, json)
Hash identifier: KkIhRaLs3sWTl521rsd4vYL4F4GrP12Jx5XSNhBN/i4=
Subject key identifier: 8A:9F:85:9B:F7:63:0F:0E:BC:81:36:3E:6C:47:41:B1:4D:B4:67:5A
Certificate issuer: /CN=EC62A94970E56AC9FE8B828A542B7EDBA3D116D5
Certificate serial: 58921A0C64F6F115CCF36E5AD76F0F797964932F
Authority key identifier: EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/323030313a6466303a373434303a3a2f34382d3438203d3e20313331313132.roa
Signing time: Fri 20 Feb 2026 04:09:19 +0000
ROA not before: Fri 20 Feb 2026 04:04:19 +0000
ROA not after: Fri 19 Feb 2027 04:09:19 +0000
asID: 131112
IP address blocks: 2001:df0:7440::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl
rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 12:25:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:92:1a:0c:64:f6:f1:15:cc:f3:6e:5a:d7:6f:0f:79:79:64:93:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC62A94970E56AC9FE8B828A542B7EDBA3D116D5
Validity
Not Before: Feb 20 04:04:19 2026 GMT
Not After : Feb 19 04:09:19 2027 GMT
Subject: CN=8A9F859BF7630F0EBC81363E6C4741B14DB4675A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:48:4a:0d:5f:7c:14:da:10:c1:2c:f3:31:
22:9c:aa:2c:e7:9a:6b:b7:9d:f7:b1:91:48:71:07:
c3:fe:80:49:87:b5:bd:d1:60:4e:ef:7f:91:fa:d3:
4d:43:f0:ad:f4:e9:85:d9:c1:2d:e1:a0:80:b0:0b:
19:66:89:c3:bd:7a:c6:5a:f0:2a:15:16:15:65:e3:
d9:ef:a9:ad:76:80:dd:c0:ef:d1:03:17:ee:05:c2:
58:ff:a7:e6:bd:c7:8a:77:4a:ce:1c:bc:87:9a:b0:
d9:8d:a5:e1:02:8e:5f:bb:ca:4b:49:a6:fa:42:10:
7e:d0:09:b5:8f:11:4f:d6:5d:ff:1e:59:03:28:10:
91:41:20:c4:eb:45:11:fd:d0:7e:e0:ae:8b:1b:76:
17:f4:33:51:c0:cc:1d:fe:2c:4e:6a:52:bf:25:91:
34:ed:0b:fd:fc:97:2f:67:75:56:3c:29:2a:7b:74:
38:59:e9:6c:00:7b:52:3e:2e:bf:68:96:04:39:eb:
10:e0:11:29:68:38:e0:8b:e7:d5:fa:81:a4:89:6f:
2f:85:4e:f1:0c:0f:28:cf:11:2a:a4:51:16:a3:c1:
39:19:45:89:6e:ed:3a:09:65:1d:ef:e7:02:13:9f:
e3:84:5d:31:f4:13:4b:2f:5a:3b:89:4b:2c:3d:af:
8a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9F:85:9B:F7:63:0F:0E:BC:81:36:3E:6C:47:41:B1:4D:B4:67:5A
X509v3 Authority Key Identifier:
keyid:EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/323030313a6466303a373434303a3a2f34382d3438203d3e20313331313132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:7440::/48
Signature Algorithm: sha256WithRSAEncryption
84:e2:1f:91:7a:8e:81:58:ae:f0:7c:51:fe:07:c6:cb:2f:a4:
e4:7a:a1:6e:41:9d:ac:52:1e:26:9d:77:7d:7d:cb:7a:7b:55:
6b:a7:99:4e:1f:7f:c1:dc:37:43:37:83:29:e4:90:2d:74:e3:
29:cc:37:e8:9f:0c:d1:45:08:9b:8b:52:fa:5d:53:c0:8a:1f:
72:3d:da:27:e3:d9:6f:54:f9:dd:5a:65:f3:78:68:f1:65:77:
12:94:78:6f:71:e9:34:7c:aa:be:c2:24:6b:42:31:52:82:7d:
44:44:c6:34:1e:9e:1f:b7:48:0f:5c:82:ae:48:3f:ff:16:09:
14:2d:fb:4d:a9:a6:78:57:f0:83:26:a3:69:21:32:60:e1:2c:
41:86:40:d4:34:c7:c8:fa:77:db:55:97:e0:06:f9:fa:20:cd:
8c:d0:6e:9c:c9:5e:f4:a6:e0:4e:41:e7:b2:36:c0:ae:9d:67:
3f:0c:b9:f4:24:e6:d4:59:60:94:0c:da:69:e4:da:8e:32:b9:
57:1f:25:a7:da:a6:b8:72:5c:6f:ba:3a:05:2c:8b:9a:8a:16:
10:93:b7:4d:7b:14:15:82:61:f9:3d:dc:0d:5c:1c:cc:90:4d:
cc:7b:69:6b:c7:e3:dd:85:c4:c8:b2:94:8a:73:32:47:d6:f9:
b7:cc:1a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:01:02 2026 by rpki-client