
$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386630303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a386630303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: q2l9KZlvSxi1WCmkxiGUTFlpjDX5NS1cysH9BoeBH4Q=
Subject key identifier: C4:66:D2:B1:BE:AC:AA:0F:81:A9:C0:DA:9E:F7:22:E8:B6:9C:46:DF
Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial: 23070660A0B6E86268EC404892C2ABC55A28D887
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386630303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Sat 28 Feb 2026 17:00:00 +0000
ROA not before: Sat 28 Feb 2026 16:55:00 +0000
ROA not after: Sat 27 Feb 2027 17:00:00 +0000
asID: 133798
IP address blocks: 2402:5680:8f00::/44 maxlen: 44
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 02:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:07:06:60:a0:b6:e8:62:68:ec:40:48:92:c2:ab:c5:5a:28:d8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Validity
Not Before: Feb 28 16:55:00 2026 GMT
Not After : Feb 27 17:00:00 2027 GMT
Subject: CN=C466D2B1BEACAA0F81A9C0DA9EF722E8B69C46DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5c:bd:aa:17:a6:0d:dc:7e:a0:3f:39:9b:da:
1e:16:f3:b3:7b:9d:5c:9f:10:cf:02:26:ba:5a:6b:
b6:69:98:5e:d4:15:4a:09:08:1a:1b:cd:6f:cc:d7:
0c:74:2a:49:4e:11:17:41:2b:d4:63:de:3c:b6:5c:
37:24:16:06:c9:49:34:63:64:69:a0:8c:eb:81:a4:
fa:fb:cb:d1:f0:d0:f8:23:94:80:56:bf:de:ac:b4:
4b:41:ab:e6:49:26:aa:b2:98:ce:f5:bb:16:4c:93:
80:03:05:bd:b6:da:2f:de:4a:69:37:69:92:da:7c:
e3:30:cf:2d:6f:49:db:da:01:4e:2f:78:6f:71:ea:
81:21:a2:68:6e:ad:96:d1:fa:64:5e:03:a6:86:35:
54:b6:7b:61:68:db:82:e8:3d:1a:58:ec:04:de:61:
47:d1:a5:ec:d2:a4:f9:4e:70:ef:f9:a5:11:01:58:
88:58:93:57:cb:6b:6e:e8:e2:33:e4:27:a8:0a:18:
37:6e:e0:aa:a4:2a:82:46:92:99:7b:8c:17:98:7a:
cc:ee:df:6c:25:e1:80:46:ac:9a:e2:df:98:b4:d1:
15:7a:77:df:c8:30:16:a4:f4:7f:ce:31:2c:a5:33:
8a:49:ea:4d:58:6e:a6:4f:5a:b3:51:e2:bc:43:3a:
be:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:66:D2:B1:BE:AC:AA:0F:81:A9:C0:DA:9E:F7:22:E8:B6:9C:46:DF
X509v3 Authority Key Identifier:
keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386630303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:8f00::/44
Signature Algorithm: sha256WithRSAEncryption
09:c5:07:4d:f9:4e:31:37:f4:c8:14:4a:e0:5c:c0:3f:16:9c:
ce:7d:b8:a7:8c:3c:6b:3a:67:30:c9:67:8f:a9:bc:b6:8d:ad:
30:41:29:f2:97:d4:c9:75:c8:5a:0b:d7:37:89:4b:40:36:06:
ec:1f:f1:86:14:94:63:d0:a3:d6:2b:b5:45:83:79:f8:24:2b:
43:2a:a8:90:91:b5:a8:7c:5d:69:8d:f8:7d:00:1f:15:d7:46:
a0:1d:7b:e9:8e:52:cb:bb:28:af:e6:4d:7b:aa:93:9c:af:c1:
68:80:72:d3:bf:2c:ad:6d:37:4d:e4:03:75:fb:1f:07:66:e4:
ca:07:cb:b2:16:11:47:c0:f8:ce:0a:71:21:be:d2:fb:8b:84:
cb:98:2c:cc:c4:f6:63:89:e5:ba:ab:ac:60:ec:0e:bc:f8:fc:
82:39:08:d4:99:f4:f8:59:dd:b3:db:49:c2:bf:a7:a1:a5:14:
c4:1d:d7:2e:d8:25:7f:67:a0:0c:e0:af:3d:b8:26:cb:85:12:
be:57:8b:10:53:c9:29:47:92:26:1d:bc:34:4a:53:e5:6f:01:
07:cb:2d:57:f8:df:d8:55:d7:69:77:65:6a:57:ad:d6:37:aa:
99:c7:fd:ca:d8:44:9a:b3:e0:d1:c2:50:ad:6b:dc:48:e5:99:
a9:8f:06:ac
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUIwcGYKC26GJo7EBIksKrxVoo2IcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4
NEMxNkIzOTAeFw0yNjAyMjgxNjU1MDBaFw0yNzAyMjcxNzAwMDBaMDMxMTAvBgNV
BAMTKEM0NjZEMkIxQkVBQ0FBMEY4MUE5QzBEQTlFRjcyMkU4QjY5QzQ2REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8XL2qF6YN3H6gPzmb2h4W87N7
nVyfEM8CJrpaa7ZpmF7UFUoJCBobzW/M1wx0KklOERdBK9Rj3jy2XDckFgbJSTRj
ZGmgjOuBpPr7y9Hw0PgjlIBWv96stEtBq+ZJJqqymM71uxZMk4ADBb222i/eSmk3
aZLafOMwzy1vSdvaAU4veG9x6oEhomhurZbR+mReA6aGNVS2e2Fo24LoPRpY7ATe
YUfRpezSpPlOcO/5pREBWIhYk1fLa27o4jPkJ6gKGDdu4KqkKoJGkpl7jBeYeszu
32wl4YBGrJri35i00RV6d9/IMBak9H/OMSylM4pJ6k1YbqZPWrNR4rxDOr5/AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUxGbSsb6sqg+BqcDanvci6LacRt8wHwYDVR0j
BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1
RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx
NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h
NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzg2NjMwMzAz
YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk
AlaAjwAwDQYJKoZIhvcNAQELBQADggEBAAnFB035TjE39MgUSuBcwD8WnM59uKeM
PGs6ZzDJZ4+pvLaNrTBBKfKX1Ml1yFoL1zeJS0A2Buwf8YYUlGPQo9YrtUWDefgk
K0MqqJCRtah8XWmN+H0AHxXXRqAde+mOUsu7KK/mTXuqk5yvwWiActO/LK1tN03k
A3X7Hwdm5MoHy7IWEUfA+M4KcSG+0vuLhMuYLMzE9mOJ5bqrrGDsDrz4/II5CNSZ
9PhZ3bPbScK/p6GlFMQd1y7YJX9noAzgrz24JsuFEr5XixBTySlHkiYdvDRKU+Vv
AQfLLVf439hV12l3ZWpXrdY3qpnH/crYRJqz4NHCUK1r3EjlmamPBqw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:58:41 2026 by rpki-client