
$ rpki-client -vvf rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a633030303a3a2f33362d3336203d3e203538333639.roa
File: 323430333a666438303a633030303a3a2f33362d3336203d3e203538333639.roa (raw, json)
Hash identifier: aKjPPI6IBCFvKrmXrz4fyNebTjp9NH+LiXk+mjpXH3g=
Subject key identifier: 55:46:D2:84:E7:FB:26:B8:B0:A3:8A:AF:05:C0:EF:74:4A:5B:80:7E
Certificate issuer: /CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Certificate serial: 57DBA9CB5EBC5BB9CFE85CDA7D7CA8E040E8EEDD
Authority key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a633030303a3a2f33362d3336203d3e203538333639.roa
Signing time: Sun 03 May 2026 02:15:24 +0000
ROA not before: Sun 03 May 2026 02:10:24 +0000
ROA not after: Sun 02 May 2027 02:15:24 +0000
asID: 58369
IP address blocks: 2403:fd80:c000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:db:a9:cb:5e:bc:5b:b9:cf:e8:5c:da:7d:7c:a8:e0:40:e8:ee:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Validity
Not Before: May 3 02:10:24 2026 GMT
Not After : May 2 02:15:24 2027 GMT
Subject: CN=5546D284E7FB26B8B0A38AAF05C0EF744A5B807E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:14:9f:ff:1f:e3:34:09:3a:bc:08:e3:3f:ac:
8a:da:99:e6:41:d8:4f:ff:05:36:68:c3:85:61:fb:
66:a3:06:80:fb:3b:46:d5:14:ae:3f:bc:34:5d:7d:
d0:aa:f3:28:fe:14:90:e8:0a:56:98:35:26:75:45:
ca:5f:0b:35:2e:a7:a7:f1:c2:bd:22:4b:a3:9d:a9:
0f:ff:4b:10:25:c2:4e:fb:fa:e6:a5:45:7c:2f:72:
1d:58:b9:ab:6d:c2:f9:03:e7:08:55:ca:ec:fc:ea:
44:32:48:8e:b5:34:30:fa:20:db:67:7d:af:2a:49:
54:e4:82:29:22:b7:a3:b0:12:fc:e3:a4:6c:be:bf:
ab:84:43:3e:d8:b8:6a:89:6b:28:d2:f3:3e:01:d5:
46:db:b0:aa:3d:27:3a:17:ae:5a:36:72:32:e0:9f:
fe:20:da:e8:5c:c3:54:84:1e:fb:92:6e:37:58:ea:
f2:1b:31:d2:37:53:03:ed:cb:76:30:d1:75:f6:7c:
7d:ac:3a:81:56:5e:0d:39:f1:c8:c9:f5:be:bc:ce:
8a:37:ad:d3:64:c7:f9:20:63:87:9a:9f:f1:62:75:
7d:89:68:93:54:a1:07:8a:97:dc:f3:b1:18:50:a6:
b9:f5:13:de:da:e1:45:0f:09:1f:4c:7b:8a:b0:db:
f0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:46:D2:84:E7:FB:26:B8:B0:A3:8A:AF:05:C0:EF:74:4A:5B:80:7E
X509v3 Authority Key Identifier:
keyid:4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a633030303a3a2f33362d3336203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:fd80:c000::/36
Signature Algorithm: sha256WithRSAEncryption
7d:8a:da:25:47:22:e1:44:a6:4b:24:07:db:28:fe:c3:a8:65:
fb:94:ea:27:46:a5:32:26:a6:30:3c:df:a8:70:de:76:0b:67:
72:c2:40:13:88:ed:65:58:c6:2d:08:44:a8:01:1e:35:b0:25:
07:58:53:70:bb:ca:ee:14:3f:c0:fd:55:a2:79:8d:73:51:72:
03:fb:db:1d:72:59:67:c5:7e:a8:36:46:7e:8f:21:6f:ce:8a:
b9:8a:2d:84:a8:73:91:c7:35:bf:89:42:63:10:bd:c2:48:4e:
6f:4b:c9:c0:5a:35:78:1e:b2:31:d3:54:cd:f6:f7:28:00:4b:
14:17:9c:98:23:d2:36:0c:2b:4d:6f:8e:9b:5a:20:b4:bc:ee:
0b:0c:68:ad:43:7c:87:37:5c:dd:9a:cf:5e:b2:b7:a3:e4:3c:
f1:0c:04:0c:4e:2e:78:66:8b:d3:7d:29:64:af:0c:26:0d:0a:
11:64:57:25:ed:d3:34:cd:e4:2a:f4:8e:ba:87:9f:15:3a:49:
43:2b:38:ba:49:ee:e4:47:c2:62:08:e7:37:02:26:d6:0c:8d:
ad:70:a7:2d:29:48:ae:ba:5a:f8:83:5d:f4:8f:9f:13:23:ef:
c7:5c:14:d4:bd:6a:0f:a0:42:7f:9b:70:1b:a5:ab:9f:2a:13:
52:0c:c9:3f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUV9upy168W7nP6FzafXyo4EDo7t0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEM1RDUyMzA5NzA2MUZENDIwRUY4OTg3MkVGNTVEN0Q0
MkY5RDUzNzAeFw0yNjA1MDMwMjEwMjRaFw0yNzA1MDIwMjE1MjRaMDMxMTAvBgNV
BAMTKDU1NDZEMjg0RTdGQjI2QjhCMEEzOEFBRjA1QzBFRjc0NEE1QjgwN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8FJ//H+M0CTq8COM/rIrameZB
2E//BTZow4Vh+2ajBoD7O0bVFK4/vDRdfdCq8yj+FJDoClaYNSZ1RcpfCzUup6fx
wr0iS6OdqQ//SxAlwk77+ualRXwvch1YuattwvkD5whVyuz86kQySI61NDD6INtn
fa8qSVTkgikit6OwEvzjpGy+v6uEQz7YuGqJayjS8z4B1UbbsKo9JzoXrlo2cjLg
n/4g2uhcw1SEHvuSbjdY6vIbMdI3UwPty3Yw0XX2fH2sOoFWXg058cjJ9b68zoo3
rdNkx/kgY4ean/FidX2JaJNUoQeKl9zzsRhQprn1E97a4UUPCR9Me4qw2/CZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUVUbShOf7Jriwo4qvBcDvdEpbgH4wHwYDVR0j
BBgwFoAUTF1SMJcGH9Qg74mHLvVdfUL51TcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTZhODExODItN2NlYi00NjVjLWE1YjUtYTE0ZWM3MzliZjk5LzAvNEM1RDUyMzA5
NzA2MUZENDIwRUY4OTg3MkVGNTVEN0Q0MkY5RDUzNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80QzVENTIzMDk3MDYxRkQ0MjBFRjg5ODcyRUY1NUQ3RDQyRjlE
NTM3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE2YTgxMTgyLTdjZWItNDY1Yy1h
NWI1LWExNGVjNzM5YmY5OS8wLzMyMzQzMDMzM2E2NjY0MzgzMDNhNjMzMDMwMzAz
YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzNTM4MzMzNjM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJAP9
gMAwDQYJKoZIhvcNAQELBQADggEBAH2K2iVHIuFEpkskB9so/sOoZfuU6idGpTIm
pjA836hw3nYLZ3LCQBOI7WVYxi0IRKgBHjWwJQdYU3C7yu4UP8D9VaJ5jXNRcgP7
2x1yWWfFfqg2Rn6PIW/OirmKLYSoc5HHNb+JQmMQvcJITm9LycBaNXgesjHTVM32
9ygASxQXnJgj0jYMK01vjptaILS87gsMaK1DfIc3XN2az16yt6PkPPEMBAxOLnhm
i9N9KWSvDCYNChFkVyXt0zTN5Cr0jrqHnxU6SUMrOLpJ7uRHwmII5zcCJtYMja1w
py0pSK66WviDXfSPnxMj78dcFNS9ag+gQn+bcBulq58qE1IMyT8=
-----END CERTIFICATE-----
Generated at Wed May 13 12:21:23 2026 by rpki-client