
$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/323430343a3162303a3a2f33322d3438203d3e203138303539.roa
File: 323430343a3162303a3a2f33322d3438203d3e203138303539.roa (raw, json)
Hash identifier: JIPQE9Yp6EXTuvj5hGyK6yCCncxpk4xa/81cEI6X0+c=
Subject key identifier: 25:30:E5:EA:8C:8C:B0:63:64:07:BD:76:47:D5:B6:A6:46:FD:DD:CB
Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial: 7FC284DBEBE9D67EA3BAC76BC14E59290CD41BC8
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/323430343a3162303a3a2f33322d3438203d3e203138303539.roa
Signing time: Fri 20 Feb 2026 11:00:01 +0000
ROA not before: Fri 20 Feb 2026 10:55:01 +0000
ROA not after: Fri 19 Feb 2027 11:00:01 +0000
asID: 18059
IP address blocks: 2404:1b0::/32 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 14:25:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:c2:84:db:eb:e9:d6:7e:a3:ba:c7:6b:c1:4e:59:29:0c:d4:1b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Validity
Not Before: Feb 20 10:55:01 2026 GMT
Not After : Feb 19 11:00:01 2027 GMT
Subject: CN=2530E5EA8C8CB0636407BD7647D5B6A646FDDDCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:51:8d:7e:fe:4e:b6:fb:78:f1:71:67:9d:4e:
7a:5b:49:56:e8:8b:ea:4b:45:a2:ae:b9:9e:4e:74:
98:5a:67:f5:41:45:97:1d:78:60:ba:52:11:8a:8a:
ef:8e:b4:9f:e4:44:0f:97:67:7d:97:8f:e3:a5:84:
c6:00:8c:b8:a8:e0:d7:f4:6f:64:fd:39:e6:ab:ca:
76:01:b0:40:50:9a:7f:e0:7d:05:78:1a:e0:51:ec:
80:ef:ce:3b:75:8d:69:1d:88:d7:f1:c0:9e:1f:93:
10:06:92:f3:35:d6:a3:69:08:35:22:ad:0f:c0:52:
fe:0c:b2:46:c1:55:22:28:cc:49:bc:19:bf:af:4f:
df:50:a4:46:98:17:96:ff:ee:f9:9f:6e:9b:55:8e:
e1:6e:db:60:c7:62:26:6f:9f:4e:c1:82:e8:67:c7:
a8:d0:7f:4e:1f:04:c2:07:7f:e2:db:a8:56:a0:aa:
af:94:bb:e6:4e:4f:f3:91:5b:de:f0:54:a2:d9:63:
e9:0a:78:e8:37:0b:56:c2:4c:36:12:d3:e8:c2:30:
1a:61:be:15:2c:ea:85:ed:08:bf:4c:32:9f:db:2a:
da:be:90:0f:fb:db:1d:4f:11:c5:9e:7f:af:bf:ce:
1f:0b:4a:45:e2:e4:b8:72:bb:2f:4f:da:c0:b5:5c:
f6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:30:E5:EA:8C:8C:B0:63:64:07:BD:76:47:D5:B6:A6:46:FD:DD:CB
X509v3 Authority Key Identifier:
keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/323430343a3162303a3a2f33322d3438203d3e203138303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:1b0::/32
Signature Algorithm: sha256WithRSAEncryption
5b:74:3a:6d:51:61:b1:9e:79:4d:38:1f:fa:cf:d0:dc:64:e8:
db:cd:b4:c4:ce:a5:c9:62:17:33:93:82:95:01:dd:70:e3:56:
5f:d7:1e:c9:da:2b:3b:cf:21:45:be:52:99:27:10:dc:0a:75:
f7:6e:e0:8e:25:e8:67:e2:08:de:5e:3b:08:86:c3:e2:e4:cf:
3d:c3:9f:9a:26:21:a8:c5:e6:7b:de:7a:72:92:1e:bf:4a:db:
d2:83:60:b7:96:cf:ca:ec:20:07:a9:6b:98:8a:e9:44:2f:19:
bb:d4:20:fd:99:b1:91:81:46:0d:d6:77:f3:3f:50:16:36:90:
00:8e:03:22:5b:b1:7c:19:ce:8d:30:cb:f6:de:ad:bd:18:3e:
72:9a:9f:15:dc:1b:d6:02:5d:9b:7a:34:7f:3d:5b:53:c9:fb:
d0:41:d6:0a:dc:58:c1:98:eb:03:62:11:b9:46:67:67:65:82:
aa:c5:d2:f1:ed:40:f3:6c:7f:67:39:7d:c6:ba:fc:41:96:34:
a8:d2:06:4d:6f:6a:7d:9c:c1:70:03:b1:c0:5f:ab:3c:3b:16:
34:b9:2d:cf:2e:b8:2f:a4:c7:87:90:3c:2e:72:63:e4:d6:38:
f2:49:86:6b:9e:2f:60:ef:70:eb:ea:e7:66:32:bf:07:37:fc:
8d:92:54:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:44:22 2026 by rpki-client