
$ rpki-client -vvf rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a3a2f33362d3336203d3e203538333639.roa
File: 323430333a666438303a3a2f33362d3336203d3e203538333639.roa (raw, json)
Hash identifier: dbCsmaSulaCClKYEywNT9MsalAWEg2Sso6sAFb6+LZc=
Subject key identifier: 57:8C:8A:BB:52:38:89:EB:52:44:9B:A1:21:D6:0F:B8:D5:84:17:E5
Certificate issuer: /CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Certificate serial: 60B67B218B4419F927B39AE1445CE597CDAABA1D
Authority key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a3a2f33362d3336203d3e203538333639.roa
Signing time: Sun 03 May 2026 02:15:29 +0000
ROA not before: Sun 03 May 2026 02:10:29 +0000
ROA not after: Sun 02 May 2027 02:15:29 +0000
asID: 58369
IP address blocks: 2403:fd80::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:b6:7b:21:8b:44:19:f9:27:b3:9a:e1:44:5c:e5:97:cd:aa:ba:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Validity
Not Before: May 3 02:10:29 2026 GMT
Not After : May 2 02:15:29 2027 GMT
Subject: CN=578C8ABB523889EB52449BA121D60FB8D58417E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1e:49:d4:f4:00:9d:6c:fc:f0:10:be:af:0b:
09:28:67:1d:c9:e0:05:e1:7f:29:bb:b6:7d:65:64:
0b:99:e8:79:46:33:0b:4a:d0:69:31:1c:e1:87:ca:
63:c4:fa:60:5b:39:ec:2a:73:ae:b0:fa:47:8a:d5:
f1:81:c1:32:9d:6d:56:7e:01:5f:9e:ef:f6:1c:23:
f8:00:57:b4:6a:28:6b:4e:fb:70:cc:70:41:54:e7:
be:cb:b2:62:50:ee:e3:3e:ae:89:80:21:cd:70:f7:
67:ef:7c:f4:70:7f:e4:fc:80:52:95:b4:21:0f:67:
d7:e6:63:eb:3c:57:bc:bd:b0:c2:a9:58:cc:46:c6:
d5:c7:ae:63:07:28:8a:13:d9:07:e8:6d:fd:0c:b8:
af:c1:9e:f0:8f:30:38:08:ad:75:c2:d5:b5:3d:82:
5f:c4:ca:fc:f5:f1:a7:03:6d:fd:e4:ca:a2:68:fa:
5e:64:2b:cd:49:93:51:41:fc:74:7a:6e:d7:16:e9:
0e:fa:47:6e:7a:0c:db:3f:a9:70:da:f3:80:47:3f:
04:79:9a:87:73:25:63:b5:b6:8c:c3:da:a4:1f:09:
30:02:db:03:81:3e:6c:b8:68:fb:3c:ac:3f:a0:63:
82:0a:bd:68:8e:14:0e:b5:74:b1:79:e7:33:a5:4f:
54:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8C:8A:BB:52:38:89:EB:52:44:9B:A1:21:D6:0F:B8:D5:84:17:E5
X509v3 Authority Key Identifier:
keyid:4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a3a2f33362d3336203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:fd80::/36
Signature Algorithm: sha256WithRSAEncryption
d7:50:a2:b3:41:b7:6d:bc:5c:68:b5:d2:e4:f9:3f:2d:80:21:
4c:e1:9c:87:4a:33:27:d3:3c:cb:fa:67:4d:92:f4:83:19:24:
d1:f2:66:a4:fe:e4:71:cf:b6:73:83:1c:80:49:36:14:7d:72:
4c:47:9f:ec:78:f3:dc:2c:b5:be:4a:c3:d8:d6:21:4e:32:e4:
e8:24:a1:3d:92:c5:99:93:d3:a9:4e:ba:d2:29:93:4a:3a:69:
f7:18:d0:34:89:58:aa:3a:b3:ec:b5:f5:bc:65:61:8a:ec:ea:
97:d9:13:dc:4a:8e:a1:f5:da:35:dd:77:e9:32:37:ca:fe:93:
af:41:2a:c6:48:4e:db:c2:39:20:80:78:f3:48:30:cf:ba:c8:
e2:e8:dd:c6:99:e4:bf:66:74:03:3a:e8:c2:94:21:7e:ca:95:
28:66:fd:d0:53:ea:a5:e8:62:ab:19:cf:24:35:56:cf:57:35:
74:e1:93:cc:7b:7d:36:71:6d:79:35:ba:07:66:4c:46:61:02:
e2:65:9d:91:eb:c2:8d:c3:aa:a9:e9:45:11:97:36:39:23:ca:
d3:da:b9:79:30:ab:c6:6e:69:4a:3e:2d:25:2b:5d:f5:6c:39:
73:48:49:b2:a8:96:28:80:f0:62:43:5e:24:32:e1:17:f2:b4:
1e:84:1d:d2
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUYLZ7IYtEGfkns5rhRFzll82quh0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEM1RDUyMzA5NzA2MUZENDIwRUY4OTg3MkVGNTVEN0Q0
MkY5RDUzNzAeFw0yNjA1MDMwMjEwMjlaFw0yNzA1MDIwMjE1MjlaMDMxMTAvBgNV
BAMTKDU3OEM4QUJCNTIzODg5RUI1MjQ0OUJBMTIxRDYwRkI4RDU4NDE3RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBHknU9ACdbPzwEL6vCwkoZx3J
4AXhfym7tn1lZAuZ6HlGMwtK0GkxHOGHymPE+mBbOewqc66w+keK1fGBwTKdbVZ+
AV+e7/YcI/gAV7RqKGtO+3DMcEFU577LsmJQ7uM+romAIc1w92fvfPRwf+T8gFKV
tCEPZ9fmY+s8V7y9sMKpWMxGxtXHrmMHKIoT2Qfobf0MuK/BnvCPMDgIrXXC1bU9
gl/Eyvz18acDbf3kyqJo+l5kK81Jk1FB/HR6btcW6Q76R256DNs/qXDa84BHPwR5
modzJWO1tozD2qQfCTAC2wOBPmy4aPs8rD+gY4IKvWiOFA61dLF55zOlT1S5AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUV4yKu1I4ietSRJuhIdYPuNWEF+UwHwYDVR0j
BBgwFoAUTF1SMJcGH9Qg74mHLvVdfUL51TcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTZhODExODItN2NlYi00NjVjLWE1YjUtYTE0ZWM3MzliZjk5LzAvNEM1RDUyMzA5
NzA2MUZENDIwRUY4OTg3MkVGNTVEN0Q0MkY5RDUzNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80QzVENTIzMDk3MDYxRkQ0MjBFRjg5ODcyRUY1NUQ3RDQyRjlE
NTM3LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE2YTgxMTgyLTdjZWItNDY1Yy1h
NWI1LWExNGVjNzM5YmY5OS8wLzMyMzQzMDMzM2E2NjY0MzgzMDNhM2EyZjMzMzYy
ZDMzMzYyMDNkM2UyMDM1MzgzMzM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQkA/2AADANBgkqhkiG
9w0BAQsFAAOCAQEA11Cis0G3bbxcaLXS5Pk/LYAhTOGch0ozJ9M8y/pnTZL0gxkk
0fJmpP7kcc+2c4McgEk2FH1yTEef7Hjz3Cy1vkrD2NYhTjLk6CShPZLFmZPTqU66
0imTSjpp9xjQNIlYqjqz7LX1vGVhiuzql9kT3EqOofXaNd136TI3yv6Tr0EqxkhO
28I5IIB480gwz7rI4ujdxpnkv2Z0AzrowpQhfsqVKGb90FPqpehiqxnPJDVWz1c1
dOGTzHt9NnFteTW6B2ZMRmEC4mWdkevCjcOqqelFEZc2OSPK09q5eTCrxm5pSj4t
JStd9Ww5c0hJsqiWKIDwYkNeJDLhF/K0HoQd0g==
-----END CERTIFICATE-----
Generated at Wed May 13 06:37:32 2026 by rpki-client