
$ rpki-client -vvf repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/323030313a6466323a356434303a3a2f34382d3438203d3e20313530393832.roa
File: 323030313a6466323a356434303a3a2f34382d3438203d3e20313530393832.roa (raw, json)
Hash identifier: xlxWynyg4hfKziS2fdPWIlDySNvIWbbHvXpQyS625Nc=
Subject key identifier: 7F:2A:BC:84:26:22:87:29:C1:4E:34:7B:E4:20:E9:A4:F9:B0:92:62
Certificate issuer: /CN=D456F5EAD8D734455DAEF896A9055409FF4A078F
Certificate serial: 34AAADF21F078DFF3038C0E0A39612201A1080AA
Authority key identifier: D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/323030313a6466323a356434303a3a2f34382d3438203d3e20313530393832.roa
Signing time: Fri 20 Feb 2026 08:00:00 +0000
ROA not before: Fri 20 Feb 2026 07:55:00 +0000
ROA not after: Fri 19 Feb 2027 08:00:00 +0000
asID: 150982
IP address blocks: 2001:df2:5d40::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl
rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:aa:ad:f2:1f:07:8d:ff:30:38:c0:e0:a3:96:12:20:1a:10:80:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D456F5EAD8D734455DAEF896A9055409FF4A078F
Validity
Not Before: Feb 20 07:55:00 2026 GMT
Not After : Feb 19 08:00:00 2027 GMT
Subject: CN=7F2ABC8426228729C14E347BE420E9A4F9B09262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:14:af:cd:2a:57:29:15:0d:9c:1c:03:7c:6c:
80:8b:a1:9a:15:c8:b1:60:6d:e6:d7:57:a5:b2:18:
d3:7c:3c:51:d0:48:e5:94:f1:7d:d0:26:8f:2b:bd:
eb:72:ad:e7:74:47:ae:39:c8:8b:21:4d:df:9f:b8:
6e:cb:03:3c:b6:45:8e:89:b7:58:99:bf:37:ab:d3:
90:c7:ef:7a:56:d6:f7:8c:55:68:17:41:6b:72:eb:
9a:f7:10:9a:60:a5:72:63:f3:3c:3b:e9:cb:e9:80:
de:8f:eb:4f:b7:77:48:8a:42:e6:01:52:01:6c:2c:
d6:32:3e:d2:ae:90:c0:a4:32:56:df:93:d5:97:9f:
39:3a:2e:c5:95:a2:be:a8:2b:27:46:2a:72:76:a0:
ea:d7:69:6b:71:21:47:86:a0:c3:cb:51:54:87:55:
13:fa:1c:78:ac:35:b3:66:0a:3e:f9:68:21:81:9a:
fc:a7:2b:c5:97:3c:26:62:52:b7:2c:8a:c7:f7:39:
c1:f8:b0:a6:13:68:f3:8c:47:ec:3f:f3:8d:6c:a8:
6c:63:e6:16:05:e3:29:05:00:66:fa:9b:d6:ae:18:
93:bb:6a:a8:76:3c:cd:7a:75:a9:e1:09:08:77:6a:
c3:29:cb:39:87:a6:95:6e:46:59:4c:21:ee:be:4a:
eb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2A:BC:84:26:22:87:29:C1:4E:34:7B:E4:20:E9:A4:F9:B0:92:62
X509v3 Authority Key Identifier:
keyid:D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/323030313a6466323a356434303a3a2f34382d3438203d3e20313530393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:5d40::/48
Signature Algorithm: sha256WithRSAEncryption
88:e1:ba:69:01:ce:4b:0b:ea:63:ac:42:f9:52:bd:72:8a:d9:
a1:61:d7:5d:e7:f9:24:65:fe:0b:4c:56:fd:3e:b9:67:c5:0e:
b0:d1:0e:aa:51:45:93:31:3b:4c:b9:08:93:aa:4e:cb:1f:e9:
bd:26:35:ad:4b:c3:9f:6f:f9:0c:f8:f3:53:15:21:73:33:6f:
67:6e:f8:b9:1d:68:c6:93:b0:f1:22:97:76:48:74:8a:f0:1e:
9c:39:1d:05:f4:eb:e8:be:55:9d:8d:78:6f:45:98:e3:9a:4a:
5e:ca:7c:80:f4:ca:6f:40:95:eb:de:5a:0d:16:d6:96:c6:d3:
5d:b7:f3:71:a1:1a:af:5b:44:18:27:7c:63:b8:7b:2d:54:2f:
8f:da:7f:da:80:92:53:f9:2b:89:b9:5b:86:ba:9d:b1:75:82:
d6:c5:d4:1e:68:2b:54:e5:52:a1:5a:10:86:ae:44:68:4f:53:
05:96:d1:90:3d:4c:4a:e6:d9:ed:32:29:7f:8d:47:53:60:aa:
13:04:2c:2c:26:a4:7e:40:cc:44:58:e2:ef:8a:46:8d:4d:84:
34:58:f2:73:0e:a8:54:d8:ef:92:a6:3e:1c:e0:09:33:70:8b:
c9:02:26:ea:73:50:a0:54:70:88:6a:dc:27:ef:3b:57:af:c8:
84:12:fb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:16:27 2026 by rpki-client