
$ rpki-client -vvf repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/323430363a343634303a3a2f33322d3332203d3e20313430343637.roa
File: 323430363a343634303a3a2f33322d3332203d3e20313430343637.roa (raw, json)
Hash identifier: QGKtavih0+s5gXHFp46nHoGFZ6NC2NvnCwfjyI4NIwM=
Subject key identifier: C6:94:B2:B7:C3:03:43:F7:E1:C6:DD:2C:B4:2C:E1:C4:F2:47:25:C0
Certificate issuer: /CN=47CBAD1A648715C5E867F1A2ED3558688608EE19
Certificate serial: 6A1002D7BD6006887EF688732066C84D74F18189
Authority key identifier: 47:CB:AD:1A:64:87:15:C5:E8:67:F1:A2:ED:35:58:68:86:08:EE:19
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/323430363a343634303a3a2f33322d3332203d3e20313430343637.roa
Signing time: Mon 06 Apr 2026 09:00:00 +0000
ROA not before: Mon 06 Apr 2026 08:55:00 +0000
ROA not after: Mon 05 Apr 2027 09:00:00 +0000
asID: 140467
IP address blocks: 2406:4640::/32 maxlen: 32
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.crl
rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 03:09:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:10:02:d7:bd:60:06:88:7e:f6:88:73:20:66:c8:4d:74:f1:81:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47CBAD1A648715C5E867F1A2ED3558688608EE19
Validity
Not Before: Apr 6 08:55:00 2026 GMT
Not After : Apr 5 09:00:00 2027 GMT
Subject: CN=C694B2B7C30343F7E1C6DD2CB42CE1C4F24725C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:70:c1:78:b3:9b:59:3d:2b:7e:92:81:d5:f5:
c2:e4:f4:ae:3d:95:37:d9:0e:88:d6:5b:a4:61:a9:
31:31:e7:3a:e5:7c:05:ca:84:bd:68:97:ee:1e:2d:
26:1a:e1:b5:17:28:24:6e:65:e6:1c:d4:ec:99:3d:
63:4d:62:24:04:aa:1f:5d:f6:b4:24:57:6b:94:7a:
3e:2d:a1:ef:be:60:29:2e:3b:41:7f:2e:98:49:bd:
98:df:34:1c:ab:de:3c:3b:b5:b5:44:f0:15:90:0c:
20:12:5a:75:ea:a3:7f:8f:5d:3a:2f:d7:0f:f3:c4:
45:7d:08:cd:a6:73:9d:d1:5f:27:cd:0c:e7:ea:48:
aa:98:15:ce:ae:d8:17:6e:90:bf:57:8d:9e:6a:b2:
6b:d6:d5:b9:d3:47:3f:4d:33:b8:ac:02:e4:a4:57:
16:e1:ca:9b:aa:2a:81:b2:7f:54:72:1d:ec:07:bb:
f8:ff:15:d3:9b:f7:a4:7e:0b:1f:28:64:30:ab:a3:
42:87:63:0d:cc:5b:c1:0b:81:55:0a:18:8f:47:14:
d7:54:67:2c:ef:f8:27:60:0a:2b:fd:2b:4f:22:ec:
c4:f6:de:c1:c6:53:fe:e7:36:a9:06:86:0c:52:d6:
0b:ca:6b:bc:a1:7f:e4:8c:e6:1a:3e:24:9a:1e:b1:
fb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:94:B2:B7:C3:03:43:F7:E1:C6:DD:2C:B4:2C:E1:C4:F2:47:25:C0
X509v3 Authority Key Identifier:
keyid:47:CB:AD:1A:64:87:15:C5:E8:67:F1:A2:ED:35:58:68:86:08:EE:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/323430363a343634303a3a2f33322d3332203d3e20313430343637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:4640::/32
Signature Algorithm: sha256WithRSAEncryption
08:3c:3c:76:0b:92:0e:61:46:66:93:f0:57:70:9e:0c:34:c8:
3b:02:79:23:cc:a7:db:0c:3a:a0:4d:46:8b:f8:32:6a:e2:78:
d8:46:59:5c:f4:7a:38:eb:3c:a1:51:8d:41:e1:38:17:d8:8e:
d0:26:7f:50:72:33:d6:78:f7:05:52:ab:02:bf:35:6f:5c:3b:
30:9a:b5:56:dd:95:45:35:52:c6:17:f1:1f:0b:45:ce:34:ce:
17:6a:c9:69:ec:3e:68:28:60:34:e6:45:4c:f2:2c:b1:42:cd:
8f:96:81:36:24:88:ba:7b:30:15:ed:39:3d:86:38:19:bb:38:
cd:96:83:58:ab:5f:3a:c8:3d:ba:04:11:e4:f3:5e:dc:95:74:
9b:f1:af:ea:4b:e4:55:4b:a2:83:e5:e5:76:fd:e3:30:71:5f:
d2:5e:cd:ed:32:d8:8f:d8:26:4a:a9:6f:0e:43:06:e2:3f:49:
54:2c:da:22:0e:88:be:53:c4:05:f9:4a:9d:b7:78:e0:b9:6e:
e8:18:ba:f4:51:94:71:a3:7a:5e:14:83:93:9f:45:db:ec:23:
15:99:42:41:d6:33:98:bb:1f:3b:64:de:55:cf:b5:c7:71:2c:
c3:a2:89:df:2e:6b:c7:53:ca:eb:81:b4:5e:a1:1e:2c:a5:e2:
15:2b:a9:29
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUahAC171gBoh+9ohzIGbITXTxgYkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdDQkFEMUE2NDg3MTVDNUU4NjdGMUEyRUQzNTU4Njg4
NjA4RUUxOTAeFw0yNjA0MDYwODU1MDBaFw0yNzA0MDUwOTAwMDBaMDMxMTAvBgNV
BAMTKEM2OTRCMkI3QzMwMzQzRjdFMUM2REQyQ0I0MkNFMUM0RjI0NzI1QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQcMF4s5tZPSt+koHV9cLk9K49
lTfZDojWW6RhqTEx5zrlfAXKhL1ol+4eLSYa4bUXKCRuZeYc1OyZPWNNYiQEqh9d
9rQkV2uUej4toe++YCkuO0F/LphJvZjfNByr3jw7tbVE8BWQDCASWnXqo3+PXTov
1w/zxEV9CM2mc53RXyfNDOfqSKqYFc6u2BdukL9XjZ5qsmvW1bnTRz9NM7isAuSk
VxbhypuqKoGyf1RyHewHu/j/FdOb96R+Cx8oZDCro0KHYw3MW8ELgVUKGI9HFNdU
Zyzv+CdgCiv9K08i7MT23sHGU/7nNqkGhgxS1gvKa7yhf+SM5ho+JJoesfv1AgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUxpSyt8MDQ/fhxt0stCzhxPJHJcAwHwYDVR0j
BBgwFoAUR8utGmSHFcXoZ/Gi7TVYaIYI7hkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NDk1NjUwNS1kNmIzLTQzZGMtOTA3MC1kNGRiZGI3Y2Y5NjMvMC80N0NCQUQxQTY0
ODcxNUM1RTg2N0YxQTJFRDM1NTg2ODg2MDhFRTE5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDdDQkFEMUE2NDg3MTVDNUU4NjdGMUEyRUQzNTU4Njg4NjA4
RUUxOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M0OTU2NTA1LWQ2YjMtNDNkYy05
MDcwLWQ0ZGJkYjdjZjk2My8wLzMyMzQzMDM2M2EzNDM2MzQzMDNhM2EyZjMzMzIy
ZDMzMzIyMDNkM2UyMDMxMzQzMDM0MzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQGRkAwDQYJKoZI
hvcNAQELBQADggEBAAg8PHYLkg5hRmaT8Fdwngw0yDsCeSPMp9sMOqBNRov4Mmri
eNhGWVz0ejjrPKFRjUHhOBfYjtAmf1ByM9Z49wVSqwK/NW9cOzCatVbdlUU1UsYX
8R8LRc40zhdqyWnsPmgoYDTmRUzyLLFCzY+WgTYkiLp7MBXtOT2GOBm7OM2Wg1ir
XzrIPboEEeTzXtyVdJvxr+pL5FVLooPl5Xb94zBxX9Jeze0y2I/YJkqpbw5DBuI/
SVQs2iIOiL5TxAX5Sp23eOC5bugYuvRRlHGjel4Ug5OfRdvsIxWZQkHWM5i7Hztk
3lXPtcdxLMOiid8ua8dTyuuBtF6hHiyl4hUrqSk=
-----END CERTIFICATE-----
Generated at Sat Apr 18 05:00:53 2026 by rpki-client