
$ rpki-client -vvf repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/323430373a623463303a31323a3a2f34382d3438203d3e20313432333636.roa
File: 323430373a623463303a31323a3a2f34382d3438203d3e20313432333636.roa (raw, json)
Hash identifier: dLUk598OVsRWYpo9Rt0FiE4NjdaT5f3ByqhZNTLgQFU=
Subject key identifier: F8:2E:0D:EB:E8:2C:C3:1A:CF:06:8F:FE:AC:8B:58:C0:8F:B1:42:FF
Certificate issuer: /CN=0110A7C2C5E7B74C89B036FFF78974619577D31C
Certificate serial: 56BF7269B927FA31B768F505BDE63DC165FA92C1
Authority key identifier: 01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/323430373a623463303a31323a3a2f34382d3438203d3e20313432333636.roa
Signing time: Sat 18 Apr 2026 10:00:01 +0000
ROA not before: Sat 18 Apr 2026 09:55:01 +0000
ROA not after: Sat 17 Apr 2027 10:00:01 +0000
asID: 142366
IP address blocks: 2407:b4c0:12::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl
rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 14:51:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:bf:72:69:b9:27:fa:31:b7:68:f5:05:bd:e6:3d:c1:65:fa:92:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0110A7C2C5E7B74C89B036FFF78974619577D31C
Validity
Not Before: Apr 18 09:55:01 2026 GMT
Not After : Apr 17 10:00:01 2027 GMT
Subject: CN=F82E0DEBE82CC31ACF068FFEAC8B58C08FB142FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:28:73:a1:86:ee:12:7a:ba:40:4b:c0:1f:63:
c1:0f:a5:aa:1c:f6:96:8e:8d:de:1a:18:17:43:a1:
6e:fc:b9:25:8c:b2:f9:2d:5d:b7:85:07:b0:3c:56:
65:a7:cf:99:ae:50:d5:d5:cf:55:a6:53:66:63:e8:
fb:ad:f8:c9:16:b3:59:c1:23:6f:9c:77:68:4e:21:
41:a1:c8:ab:de:e7:5b:b6:50:ef:a3:4d:a8:e4:24:
79:0a:dc:48:50:0c:59:e1:1e:d7:38:01:44:a2:2b:
db:ee:cb:77:c8:b4:9d:75:26:79:bd:71:39:60:fd:
6a:7a:ec:84:7e:1e:55:73:48:48:7d:a0:aa:34:bc:
01:89:d6:3f:7a:20:8b:5e:d6:46:d3:7c:8c:bc:c2:
df:4b:e6:8f:dd:d3:a0:ca:bd:99:4f:56:65:9f:c5:
7e:5f:a3:c1:d0:44:3c:b5:33:3a:8d:ed:0c:d8:8b:
0d:f8:23:49:b2:3f:91:82:ef:95:58:93:92:db:e4:
33:c8:f8:4d:10:f9:47:57:fc:0b:ba:64:ee:95:28:
19:16:f2:d5:ca:78:31:d2:28:fc:71:df:9a:ff:37:
4c:8c:19:72:a4:78:5e:25:32:fe:64:97:5c:05:af:
e5:6d:27:b3:84:6a:4c:d6:d3:27:59:ba:1c:6d:75:
61:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2E:0D:EB:E8:2C:C3:1A:CF:06:8F:FE:AC:8B:58:C0:8F:B1:42:FF
X509v3 Authority Key Identifier:
keyid:01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/323430373a623463303a31323a3a2f34382d3438203d3e20313432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2407:b4c0:12::/48
Signature Algorithm: sha256WithRSAEncryption
84:6a:69:1c:f4:ff:60:fc:cf:b3:54:3c:b6:e4:7a:5a:8c:2a:
ad:bc:f0:e0:49:65:37:c7:b9:5f:eb:db:e4:32:5e:62:d1:60:
51:d3:28:fd:b2:22:b2:b3:86:0e:28:0f:c4:9f:f6:3e:06:7a:
73:a8:82:e1:d4:6d:7a:bd:ba:26:1d:12:c9:12:dd:7a:14:0f:
38:e2:18:37:34:f0:1a:bb:2a:73:ba:ef:f5:3b:68:2d:c6:11:
d6:ae:4d:6a:7f:cd:c7:4d:63:f2:fc:1c:a2:35:04:7c:3a:8e:
b7:e7:bd:32:a9:54:19:f6:ef:79:8f:b9:e2:98:1d:b3:81:10:
a0:e0:f4:65:09:df:f9:30:d6:c5:a0:e9:03:03:a6:8b:f4:7e:
d8:45:73:c2:c2:1e:ed:3b:5d:ce:ef:9b:aa:45:6b:11:87:9b:
5c:21:35:45:a7:4c:a0:72:20:ee:5f:5d:7d:78:cd:1e:21:e3:
9d:9e:3e:13:12:f9:c9:ee:e5:09:90:93:14:8c:1c:c1:2b:07:
8f:ab:71:a8:6f:b6:74:7e:bf:4c:cb:40:b6:a4:2f:3e:6d:a8:
79:87:07:2c:0e:71:bf:29:99:8d:77:2a:56:70:aa:6d:ca:a0:
23:62:25:0a:e9:a2:13:56:77:29:d1:06:76:d3:c6:61:7c:97:
e7:e3:cc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:51:24 2026 by rpki-client