
$ rpki-client -vvf repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/323430363a613330303a3a2f33322d3332203d3e203435373036.roa
File: 323430363a613330303a3a2f33322d3332203d3e203435373036.roa (raw, json)
Hash identifier: mSVrT9nxgdbO5zEJl0JNWqbaa5yXAY0zHugt4tIrWAI=
Subject key identifier: 5E:5E:55:88:18:F4:86:26:0D:38:11:49:A5:4F:A4:97:5F:6D:06:E9
Certificate issuer: /CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
Certificate serial: 7753532752D7278F769926C1D26FC12F292903A2
Authority key identifier: 49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/323430363a613330303a3a2f33322d3332203d3e203435373036.roa
Signing time: Mon 02 Jun 2025 01:03:18 +0000
ROA not before: Mon 02 Jun 2025 00:58:18 +0000
ROA not after: Mon 01 Jun 2026 01:03:18 +0000
asID: 45706
IP address blocks: 2406:a300::/32 maxlen: 32
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl
rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 13:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:53:53:27:52:d7:27:8f:76:99:26:c1:d2:6f:c1:2f:29:29:03:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
Validity
Not Before: Jun 2 00:58:18 2025 GMT
Not After : Jun 1 01:03:18 2026 GMT
Subject: CN=5E5E558818F486260D381149A54FA4975F6D06E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ba:40:56:82:82:f7:a0:27:f0:ec:0a:4a:fa:
32:06:02:20:b2:1a:c4:d1:f9:ff:03:13:7d:e2:44:
01:61:65:4c:c3:6c:66:ae:17:c9:a3:c9:95:f8:98:
61:1c:79:c6:5b:52:3d:a9:d4:38:67:4c:fd:4c:ef:
b8:69:7d:2d:6e:f1:25:a2:7c:43:b0:89:38:45:74:
d2:ec:4b:90:fa:99:4a:e5:be:cd:9b:56:25:99:7e:
e7:b1:ee:78:b7:60:fc:fe:ae:b1:4a:91:57:56:78:
36:bb:19:20:60:3a:cf:bf:5d:d2:02:5a:27:ea:20:
e2:07:94:25:44:a1:07:19:40:8a:60:c8:be:a2:99:
1b:80:51:27:4f:09:36:a4:cc:11:49:a3:45:14:56:
32:cc:3f:d8:0b:40:43:a5:a2:25:6c:d5:1b:7c:04:
c6:d4:18:94:8c:07:77:55:23:6a:ef:22:3c:56:52:
55:ad:ed:fa:ad:2a:68:95:de:9e:92:b7:50:1f:e9:
a0:a3:e0:a1:41:c7:07:7a:65:ab:96:4f:44:2b:7b:
13:cc:83:aa:28:e7:b1:c3:2a:e0:de:0b:ba:c7:c7:
25:b3:ab:27:81:63:02:be:d2:ff:5a:43:a8:1b:7b:
59:1e:2b:e0:20:80:d9:0e:28:73:a4:04:91:ab:41:
e5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5E:55:88:18:F4:86:26:0D:38:11:49:A5:4F:A4:97:5F:6D:06:E9
X509v3 Authority Key Identifier:
keyid:49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/323430363a613330303a3a2f33322d3332203d3e203435373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:a300::/32
Signature Algorithm: sha256WithRSAEncryption
4a:70:ee:b0:5c:d9:d3:67:2f:1d:49:2f:e9:b7:70:5d:c7:9d:
ea:bb:07:5f:83:49:e1:e9:be:95:2e:b5:0e:98:e3:a9:5b:9f:
74:e7:2b:8e:71:d3:bb:28:a7:1d:2f:d9:5a:20:12:64:0e:ca:
a9:35:bf:82:63:fe:ec:54:fb:4e:f0:8b:6e:db:20:4d:ae:d4:
f4:a4:e0:19:38:c0:9a:02:3b:4e:b1:cf:db:e4:bc:62:f7:7e:
ad:38:58:86:16:fa:f6:2d:a8:f7:a1:69:10:86:22:79:17:4c:
0e:30:1f:17:78:52:ab:7b:de:ce:3e:5a:35:b0:6f:61:58:a1:
68:1b:e2:19:c3:1b:20:87:c7:10:da:7e:c4:39:82:a9:b9:4d:
ab:47:bf:f9:af:78:1a:58:54:93:cd:05:9b:a7:4b:0a:2c:e3:
d9:cd:09:46:25:55:66:7c:f6:30:d9:86:e1:77:b0:00:7b:07:
fe:d9:4a:35:b2:a2:60:2b:8d:5e:bb:41:88:ca:9c:2a:bd:a1:
5f:ae:8d:d0:79:85:ed:41:3a:8b:7e:03:f8:51:c9:03:07:c8:
a0:1c:6b:7d:0a:c3:e4:94:5e:7b:17:4a:56:b5:04:8c:78:a1:
1c:c8:95:01:20:1a:a5:35:6d:96:77:e4:d9:50:cd:cd:26:0d:
ca:c9:4c:bd
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUd1NTJ1LXJ492mSbB0m/BLykpA6IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDkwQjNGQkNDNkYwRkM2NTc4NTA5NkExNTNEQzg3QkM1
MDU3QUNFNTAeFw0yNTA2MDIwMDU4MThaFw0yNjA2MDEwMTAzMThaMDMxMTAvBgNV
BAMTKDVFNUU1NTg4MThGNDg2MjYwRDM4MTE0OUE1NEZBNDk3NUY2RDA2RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxukBWgoL3oCfw7ApK+jIGAiCy
GsTR+f8DE33iRAFhZUzDbGauF8mjyZX4mGEcecZbUj2p1DhnTP1M77hpfS1u8SWi
fEOwiThFdNLsS5D6mUrlvs2bViWZfuex7ni3YPz+rrFKkVdWeDa7GSBgOs+/XdIC
WifqIOIHlCVEoQcZQIpgyL6imRuAUSdPCTakzBFJo0UUVjLMP9gLQEOloiVs1Rt8
BMbUGJSMB3dVI2rvIjxWUlWt7fqtKmiV3p6St1Af6aCj4KFBxwd6ZauWT0QrexPM
g6oo57HDKuDeC7rHxyWzqyeBYwK+0v9aQ6gbe1keK+AggNkOKHOkBJGrQeW7AgMB
AAGjggIxMIICLTAdBgNVHQ4EFgQUXl5ViBj0hiYNOBFJpU+kl19tBukwHwYDVR0j
BBgwFoAUSQs/vMbw/GV4UJahU9yHvFBXrOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
N2NkNjhmNC02OWE1LTQ3NWYtYWVlNC0zZWY0YjhkMzAyZGQvMC80OTBCM0ZCQ0M2
RjBGQzY1Nzg1MDk2QTE1M0RDODdCQzUwNTdBQ0U1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDkwQjNGQkNDNkYwRkM2NTc4NTA5NkExNTNEQzg3QkM1MDU3
QUNFNS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc3Y2Q2OGY0LTY5YTUtNDc1Zi1h
ZWU0LTNlZjRiOGQzMDJkZC8wLzMyMzQzMDM2M2E2MTMzMzAzMDNhM2EyZjMzMzIy
ZDMzMzIyMDNkM2UyMDM0MzUzNzMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBqMAMA0GCSqGSIb3
DQEBCwUAA4IBAQBKcO6wXNnTZy8dSS/pt3Bdx53quwdfg0nh6b6VLrUOmOOpW590
5yuOcdO7KKcdL9laIBJkDsqpNb+CY/7sVPtO8Itu2yBNrtT0pOAZOMCaAjtOsc/b
5Lxi936tOFiGFvr2Laj3oWkQhiJ5F0wOMB8XeFKre97OPlo1sG9hWKFoG+IZwxsg
h8cQ2n7EOYKpuU2rR7/5r3gaWFSTzQWbp0sKLOPZzQlGJVVmfPYw2Ybhd7AAewf+
2Uo1sqJgK41eu0GIypwqvaFfro3QeYXtQTqLfgP4UckDB8igHGt9CsPklF57F0pW
tQSMeKEcyJUBIBqlNW2Wd+TZUM3NJg3KyUy9
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:54:45 2025 by rpki-client