
$ rpki-client -vvf repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a3a2f33322d3332203d3e20313339343139.roa
File: 323430353a363734303a3a2f33322d3332203d3e20313339343139.roa (raw, json)
Hash identifier: pqhQD3CBfzEo8QJY3EX8U5yRFUjwJXcQZwDlQZgUPvc=
Subject key identifier: 69:06:DA:34:FA:51:45:E0:34:D0:8C:6C:A7:91:45:26:F5:C0:2D:BF
Certificate issuer: /CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E
Certificate serial: 7B821FC09EEAA4C973D20787E73968F73B0472E1
Authority key identifier: 48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a3a2f33322d3332203d3e20313339343139.roa
Signing time: Fri 17 Apr 2026 14:00:00 +0000
ROA not before: Fri 17 Apr 2026 13:55:00 +0000
ROA not after: Fri 16 Apr 2027 14:00:00 +0000
asID: 139419
IP address blocks: 2405:6740::/32 maxlen: 32
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl
rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 17:21:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:82:1f:c0:9e:ea:a4:c9:73:d2:07:87:e7:39:68:f7:3b:04:72:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E
Validity
Not Before: Apr 17 13:55:00 2026 GMT
Not After : Apr 16 14:00:00 2027 GMT
Subject: CN=6906DA34FA5145E034D08C6CA7914526F5C02DBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:48:79:fb:80:26:97:a8:c2:a1:c5:8f:35:3d:
55:00:c8:c6:ed:40:c8:37:ae:62:4e:f4:75:8f:f5:
06:55:dd:35:a7:4a:1a:32:d8:bf:74:72:f6:a9:0f:
03:24:1e:3e:38:39:8f:1a:c3:16:b2:7f:f6:48:26:
bf:4b:c3:27:1d:03:a9:23:31:15:60:76:a0:48:ac:
8c:09:85:99:b8:c9:86:66:b0:2b:a5:5e:8c:7e:51:
05:5c:4a:4b:73:6f:9b:4a:11:8a:81:ee:d3:c8:95:
15:db:a6:bb:7f:89:31:35:53:aa:a3:7b:07:6b:b3:
3f:7f:8f:9a:77:d3:bd:f7:78:57:f5:00:76:09:13:
14:e0:cc:f1:19:d3:5f:fe:e8:2e:0d:6e:02:f5:2e:
05:27:77:cb:70:4f:29:a3:6d:36:eb:4b:94:d7:ab:
68:82:8b:6a:f7:35:a8:84:61:28:51:5c:30:38:8e:
ed:da:ae:70:70:87:db:92:b7:c6:a4:78:87:e9:65:
16:39:1a:30:c8:40:87:fd:c7:1c:5f:8f:2e:00:aa:
9f:7e:01:c9:6c:64:45:e1:38:52:7c:74:4e:53:42:
e7:6d:3a:cd:5e:5d:a6:df:9d:93:f7:87:c1:d9:8f:
f3:b8:8a:9e:68:66:8b:e4:41:cb:52:8e:4d:75:bf:
3d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:06:DA:34:FA:51:45:E0:34:D0:8C:6C:A7:91:45:26:F5:C0:2D:BF
X509v3 Authority Key Identifier:
keyid:48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a3a2f33322d3332203d3e20313339343139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:6740::/32
Signature Algorithm: sha256WithRSAEncryption
99:05:5d:15:fb:19:c0:3b:28:cb:07:a1:e4:dd:47:44:2b:aa:
f3:30:84:50:43:34:1b:7d:2d:47:08:96:65:51:88:14:94:86:
0c:6d:bf:b9:25:af:dd:fe:a2:b1:37:ac:1a:fd:94:3d:7c:b8:
a9:99:07:1f:fb:24:bc:5e:e4:bb:5e:a9:af:85:9f:93:f1:8e:
1d:e4:54:7c:a2:8c:05:00:0f:66:31:f8:67:57:43:4c:ef:3d:
e4:73:ad:00:b9:ff:13:d1:59:6e:1a:31:fc:d8:a0:08:10:a0:
4f:55:74:82:58:a9:e3:b2:8c:ef:d7:bb:71:7f:60:5f:89:64:
46:18:b3:a0:1d:17:28:b9:da:38:a9:f0:06:e3:fa:ff:ae:4e:
b8:b9:c0:32:db:f7:4f:36:eb:52:17:dc:84:5c:9e:54:37:e1:
c5:f7:80:d7:43:0a:98:3b:ae:a6:0b:95:30:a2:02:5b:11:45:
0e:7b:39:63:d2:20:98:af:0f:93:1d:d1:b0:bd:53:bb:6f:95:
98:ce:d1:98:29:1e:4a:85:a2:9e:a0:ef:2c:6e:9c:dc:e4:dc:
da:74:38:c1:d1:2e:3f:8c:37:43:a6:7c:b9:ec:a9:53:67:e1:
e5:ac:37:a1:a6:aa:d3:24:52:90:ba:cf:11:c0:b4:7a:cf:bf:
c5:bc:a4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:13:49 2026 by rpki-client