
$ rpki-client -vvf repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a3a2f33362d3336203d3e20313338383837.roa
File: 323430353a6334303a3a2f33362d3336203d3e20313338383837.roa (raw, json)
Hash identifier: SS4K8qdSGfEDlM3oZRUiu+VbHpcc7YoQDiXs5sMME30=
Subject key identifier: D3:D1:5A:27:CF:7F:07:C2:1F:E0:D5:F6:B3:FA:5D:15:C1:8F:6C:C3
Certificate issuer: /CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
Certificate serial: 245CF9C96B406455B6689A247D314C9825A7343E
Authority key identifier: 80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a3a2f33362d3336203d3e20313338383837.roa
Signing time: Thu 02 Apr 2026 11:00:01 +0000
ROA not before: Thu 02 Apr 2026 10:55:01 +0000
ROA not after: Thu 01 Apr 2027 11:00:01 +0000
asID: 138887
IP address blocks: 2405:c40::/36 maxlen: 36
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl
rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 12:25:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:5c:f9:c9:6b:40:64:55:b6:68:9a:24:7d:31:4c:98:25:a7:34:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
Validity
Not Before: Apr 2 10:55:01 2026 GMT
Not After : Apr 1 11:00:01 2027 GMT
Subject: CN=D3D15A27CF7F07C21FE0D5F6B3FA5D15C18F6CC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:01:49:ac:bb:b1:2e:c5:32:78:10:f9:6c:35:
c0:22:ad:57:af:d3:59:9b:a2:e5:d0:7a:b6:77:52:
9c:81:98:79:eb:00:a6:2c:4e:c3:c5:fb:79:bd:f1:
ca:29:24:4b:16:77:46:bd:f2:50:7d:8c:86:1a:aa:
f8:64:50:3c:0a:f5:f4:78:b7:5f:13:c9:a4:15:0c:
02:3e:6d:47:d8:23:92:c2:9b:f1:ea:6d:ae:08:a5:
89:67:1c:ed:d0:14:8a:6c:61:37:c2:6f:4b:48:b7:
fe:3b:1c:c0:c1:b7:0f:2f:8b:46:27:e5:9b:35:08:
9c:70:e6:95:dc:32:8e:2d:d4:76:41:79:5c:58:39:
e4:a0:c6:d0:03:fb:e3:df:35:a7:65:79:1d:5f:7f:
70:29:f1:9e:28:2a:3a:97:bb:29:17:e2:38:d4:66:
49:af:c3:aa:4e:4a:a8:15:5f:6f:53:4a:81:e8:88:
ea:f4:be:09:ec:05:2e:15:60:d5:79:4c:30:ee:b8:
8c:fc:58:3a:1e:55:a7:7f:49:2e:e7:0a:08:fb:45:
3a:40:1e:c1:7e:57:e5:7c:6f:4c:3c:47:ff:a0:aa:
7c:5f:50:17:5b:45:b9:b0:49:28:00:d6:cf:c7:38:
23:de:bf:96:04:03:6e:0f:aa:95:d5:4c:6e:bd:ca:
ab:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D1:5A:27:CF:7F:07:C2:1F:E0:D5:F6:B3:FA:5D:15:C1:8F:6C:C3
X509v3 Authority Key Identifier:
keyid:80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a3a2f33362d3336203d3e20313338383837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:c40::/36
Signature Algorithm: sha256WithRSAEncryption
7e:eb:fb:03:b2:3e:71:9c:61:bd:1d:55:14:9c:a6:04:fe:c8:
2e:94:0a:c0:9f:c5:bf:49:29:a5:21:7c:f5:1c:03:38:67:b0:
5f:3a:4b:a7:3b:fc:ad:33:d8:56:98:54:6c:03:4f:78:4c:71:
01:f1:22:03:f7:1b:bb:68:a4:c5:c0:e4:e3:c8:2d:91:98:37:
fc:da:ea:ab:ff:ed:67:4b:e1:ba:ef:d2:ed:44:b6:95:e6:37:
32:68:7d:e3:e8:8b:fc:91:ba:2f:9d:c2:2a:86:47:14:a4:f8:
65:2d:d6:c9:50:be:29:3f:77:5e:ba:f5:de:2e:50:93:36:98:
a6:ef:2b:9c:7b:e0:00:a5:38:01:c6:c6:c0:f9:08:47:40:1f:
18:b2:15:10:0f:9f:f8:67:bb:ba:49:71:0c:d7:4f:9d:61:ee:
1a:6b:f3:0a:bf:78:37:28:04:53:6d:e4:06:cf:2a:57:06:bb:
9b:94:ce:b8:61:82:19:24:55:3e:3e:10:97:f3:62:48:f0:bf:
79:e9:73:8b:92:38:5c:96:1e:8f:e2:2c:69:aa:dc:67:dc:ad:
e8:41:9e:08:a8:c2:da:79:d4:c7:24:34:49:03:eb:98:49:8b:
ef:76:c6:3b:91:61:87:0d:b1:64:db:42:3f:89:f7:2a:50:4a:
80:4e:d5:e6
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUJFz5yWtAZFW2aJokfTFMmCWnND4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBGOUVENTkyOTBBRDc3REUyODU2RUNGRDgzNDBFMjhG
Rjg1OEUzRDAeFw0yNjA0MDIxMDU1MDFaFw0yNzA0MDExMTAwMDFaMDMxMTAvBgNV
BAMTKEQzRDE1QTI3Q0Y3RjA3QzIxRkUwRDVGNkIzRkE1RDE1QzE4RjZDQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHAUmsu7EuxTJ4EPlsNcAirVev
01mbouXQerZ3UpyBmHnrAKYsTsPF+3m98copJEsWd0a98lB9jIYaqvhkUDwK9fR4
t18TyaQVDAI+bUfYI5LCm/Hqba4IpYlnHO3QFIpsYTfCb0tIt/47HMDBtw8vi0Yn
5Zs1CJxw5pXcMo4t1HZBeVxYOeSgxtAD++PfNadleR1ff3Ap8Z4oKjqXuykX4jjU
Zkmvw6pOSqgVX29TSoHoiOr0vgnsBS4VYNV5TDDuuIz8WDoeVad/SS7nCgj7RTpA
HsF+V+V8b0w8R/+gqnxfUBdbRbmwSSgA1s/HOCPev5YEA24PqpXVTG69yqunAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU09FaJ89/B8If4NX2s/pdFcGPbMMwHwYDVR0j
BBgwFoAUgPntWSkK133ihW7P2DQOKP+Fjj0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MDdjODhkYS0yYjU2LTQ4N2UtOWVmZS01NzExNzBiMTAyODYvMC84MEY5RUQ1OTI5
MEFENzdERTI4NTZFQ0ZEODM0MEUyOEZGODU4RTNELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODBGOUVENTkyOTBBRDc3REUyODU2RUNGRDgzNDBFMjhGRjg1
OEUzRC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MwN2M4OGRhLTJiNTYtNDg3ZS05
ZWZlLTU3MTE3MGIxMDI4Ni8wLzMyMzQzMDM1M2E2MzM0MzAzYTNhMmYzMzM2MmQz
MzM2MjAzZDNlMjAzMTMzMzgzODM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQkBQxAADANBgkqhkiG
9w0BAQsFAAOCAQEAfuv7A7I+cZxhvR1VFJymBP7ILpQKwJ/Fv0kppSF89RwDOGew
XzpLpzv8rTPYVphUbANPeExxAfEiA/cbu2ikxcDk48gtkZg3/Nrqq//tZ0vhuu/S
7US2leY3Mmh94+iL/JG6L53CKoZHFKT4ZS3WyVC+KT93Xrr13i5QkzaYpu8rnHvg
AKU4AcbGwPkIR0AfGLIVEA+f+Ge7uklxDNdPnWHuGmvzCr94NygEU23kBs8qVwa7
m5TOuGGCGSRVPj4Ql/NiSPC/eelzi5I4XJYej+IsaarcZ9yt6EGeCKjC2nnUxyQ0
SQPrmEmL73bGO5Fhhw2xZNtCP4n3KlBKgE7V5g==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:24:33 2026 by rpki-client