
$ rpki-client -vvf repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a3a2f33322d3332203d3e20313337333239.roa
File: 323430323a343834303a3a2f33322d3332203d3e20313337333239.roa (raw, json)
Hash identifier: zufByR9+Lmly1YSvgIZUa3PW/RoGXsGP+KhBtPvRIbc=
Subject key identifier: D6:D3:FA:37:96:9B:35:1E:E6:3E:A1:E6:62:C5:30:F7:0B:D9:2F:5F
Certificate issuer: /CN=19093F7761A9E337D03405604750BFD4ADC2121E
Certificate serial: 3643895FDEB9D3B6D0EBEB656CFD68F41BABB221
Authority key identifier: 19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a3a2f33322d3332203d3e20313337333239.roa
Signing time: Tue 10 Feb 2026 16:00:02 +0000
ROA not before: Tue 10 Feb 2026 15:55:02 +0000
ROA not after: Tue 09 Feb 2027 16:00:02 +0000
asID: 137329
IP address blocks: 2402:4840::/32 maxlen: 32
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl
rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 02:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:43:89:5f:de:b9:d3:b6:d0:eb:eb:65:6c:fd:68:f4:1b:ab:b2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19093F7761A9E337D03405604750BFD4ADC2121E
Validity
Not Before: Feb 10 15:55:02 2026 GMT
Not After : Feb 9 16:00:02 2027 GMT
Subject: CN=D6D3FA37969B351EE63EA1E662C530F70BD92F5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:c8:c6:9c:87:0f:be:94:b8:12:da:d8:3b:
4c:84:46:37:91:89:43:a2:4a:35:a6:ab:03:44:69:
51:50:29:8d:27:be:45:b3:34:4f:29:b6:48:87:a3:
ea:a8:06:e0:ec:f9:9b:cc:c0:be:8b:a4:53:8a:a2:
8c:16:ca:e5:62:34:d6:c3:99:cc:62:97:ab:30:f1:
40:0e:05:95:b1:f4:34:5b:ac:73:cd:01:f0:80:bc:
a9:80:0b:43:67:aa:d1:df:65:56:a1:a0:c8:5d:e1:
03:ec:4d:b1:c7:30:b5:d1:cd:c1:21:ba:2f:aa:1e:
2e:9b:3f:35:f6:25:30:0c:f8:7c:d4:d8:b8:05:e7:
ed:02:b5:9b:8b:c4:e1:63:1b:a5:c6:fa:d0:02:db:
28:31:c9:c1:37:96:49:cf:30:3d:12:1e:bf:d8:72:
16:b8:ff:16:ec:08:6d:9b:11:5a:ec:8c:eb:a9:f5:
81:d8:2e:a3:bd:04:2a:ea:0e:45:fe:4e:74:1b:be:
49:71:7d:c8:0f:eb:7b:6c:11:3d:08:bc:83:0e:fa:
66:d0:3f:45:83:22:5a:9b:fc:53:f3:00:f1:5d:b0:
a2:d3:f7:7e:a3:98:91:f0:d9:68:78:58:d8:d0:62:
aa:8b:a5:04:48:a6:26:5f:a0:1b:0c:8c:8b:d9:d4:
a2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D3:FA:37:96:9B:35:1E:E6:3E:A1:E6:62:C5:30:F7:0B:D9:2F:5F
X509v3 Authority Key Identifier:
keyid:19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a3a2f33322d3332203d3e20313337333239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:4840::/32
Signature Algorithm: sha256WithRSAEncryption
37:12:8e:54:ef:c4:31:17:59:84:38:f1:3b:dc:4c:62:cf:3e:
5f:d0:d9:82:d3:37:06:ba:8f:62:ab:ce:12:98:09:4d:0b:60:
94:08:cb:3e:1f:33:3b:27:73:9a:da:70:7e:c0:7d:bf:d7:a4:
05:13:a9:c6:e7:32:22:20:22:39:58:ed:ec:f1:e0:b5:93:bc:
1d:b8:71:25:71:37:4f:ea:3b:cc:47:56:3a:5c:c2:8f:cf:ba:
0a:d4:bf:e8:fa:57:0d:cc:21:f9:b4:17:27:0c:ad:e1:81:8f:
8b:de:22:e6:c0:1d:07:5d:5c:47:38:98:fb:b9:c3:95:c9:46:
fa:de:20:62:a1:19:35:a6:c1:f1:f4:2c:12:d1:b5:32:57:3d:
b6:c3:2b:a6:a5:f9:f1:d5:62:f2:82:68:58:8c:fe:a1:45:c8:
cf:9f:ca:dd:96:78:42:1d:be:a7:65:39:5a:e1:54:27:9c:ea:
2a:97:73:c1:5a:f1:35:cf:c6:e1:77:0a:fe:c4:ce:38:a2:05:
bb:f1:e1:d3:2b:88:4c:0d:c2:a9:3e:f9:46:74:8f:f0:c1:cf:
a2:a3:5b:aa:04:19:b4:02:24:09:32:54:8c:91:33:b1:41:33:
30:e0:a9:62:08:27:76:01:42:57:4d:b5:82:23:1b:fe:91:5f:
b2:30:28:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:44:07 2026 by rpki-client