
$ rpki-client -vvf rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3132382e302f31372d3234203d3e2034383030.roa
File: 3132332e3233312e3132382e302f31372d3234203d3e2034383030.roa (raw, json)
Hash identifier: 11WIVRJKlIe1G6ph/l2ojd2a/Iec8TvbdWCKImaRqpY=
Subject key identifier: B6:9E:FF:7A:0E:A5:30:05:40:8B:8E:32:C2:E5:A0:69:C5:3B:29:E9
Certificate issuer: /CN=C5528B1880D1A3C409F79997E426F977596B3E01
Certificate serial: 75ECC3AE327E3B3F22A4249B6A0764A4D2249BC6
Authority key identifier: C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3132382e302f31372d3234203d3e2034383030.roa
Signing time: Sun 03 May 2026 02:34:05 +0000
ROA not before: Sun 03 May 2026 02:29:05 +0000
ROA not after: Sun 02 May 2027 02:34:05 +0000
asID: 4800
IP address blocks: 123.231.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:ec:c3:ae:32:7e:3b:3f:22:a4:24:9b:6a:07:64:a4:d2:24:9b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5528B1880D1A3C409F79997E426F977596B3E01
Validity
Not Before: May 3 02:29:05 2026 GMT
Not After : May 2 02:34:05 2027 GMT
Subject: CN=B69EFF7A0EA53005408B8E32C2E5A069C53B29E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9f:1c:fc:fa:fe:ca:f1:3f:4c:55:4f:2b:81:
f0:15:aa:ff:7e:d9:b8:8b:f9:18:4c:76:32:7c:83:
c6:3d:49:80:23:9e:cc:16:0c:26:48:76:c2:64:b3:
9b:e2:7e:42:1a:04:2d:bf:f1:54:f3:87:af:b5:5e:
11:6c:5c:ce:a7:c9:db:30:2f:7e:31:a3:68:d8:91:
bf:0c:a9:2d:19:3a:2c:79:ad:aa:31:b9:b7:02:7b:
c8:a1:9c:ee:34:42:03:6d:9b:8a:c6:eb:58:96:a1:
6a:54:eb:09:bf:75:2e:55:f8:21:f6:94:40:a9:be:
67:f9:e8:c8:b4:f4:42:ed:c9:90:ef:f5:fb:66:88:
bd:91:85:da:ba:21:0f:8b:f6:09:e9:d2:2f:4b:eb:
cc:f2:07:44:23:b3:85:c8:7c:be:cc:da:8c:50:6c:
6a:65:4a:53:43:a6:2d:5c:91:35:de:f8:f2:00:a5:
6b:7c:a6:c6:40:38:02:59:dd:38:5c:b1:b4:66:85:
28:ce:28:c8:7c:25:94:3f:d0:27:b8:6c:9a:8d:53:
bd:45:c5:bb:cd:fe:26:12:ab:ed:bd:d1:88:c7:76:
8c:21:ce:05:37:20:62:5e:a4:89:bd:90:a9:0f:19:
30:49:34:2b:fd:d0:05:81:96:d9:c5:d8:ac:cd:cd:
c6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9E:FF:7A:0E:A5:30:05:40:8B:8E:32:C2:E5:A0:69:C5:3B:29:E9
X509v3 Authority Key Identifier:
keyid:C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3132382e302f31372d3234203d3e2034383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.231.128.0/17
Signature Algorithm: sha256WithRSAEncryption
a7:4f:e6:4e:76:8e:e6:42:78:4d:e3:cd:ac:01:ad:b1:bf:48:
e1:55:49:b7:62:3e:7c:42:05:3f:5a:bf:b5:da:8f:8f:aa:e5:
b5:e5:41:6b:7e:e7:62:4e:19:06:bb:29:59:b0:50:74:31:4d:
a2:97:76:e1:9d:74:ca:d8:d3:98:24:ed:be:2e:a7:3b:16:00:
d9:db:f0:3c:26:85:ff:b9:91:77:a9:29:5e:b9:53:2b:6a:1e:
31:e8:2c:55:6d:72:f0:25:3c:9b:e3:a0:0f:7f:1b:4a:28:c2:
4a:d1:c6:9d:51:d0:a9:3e:55:a0:ff:28:17:08:00:e0:a4:01:
76:14:ad:95:8b:42:dc:8a:fa:00:53:94:01:88:db:c0:58:2d:
58:52:8f:48:bd:63:3d:af:03:25:97:f8:cd:9f:35:9e:2e:c7:
11:ae:17:19:9d:a1:b4:c3:07:a3:b6:53:68:c5:a5:16:eb:c4:
da:14:75:09:06:16:84:58:ce:87:1f:b9:f8:85:f7:5a:d4:5f:
37:6b:c3:63:71:f1:61:6f:f5:7c:5f:cb:ee:ec:bb:59:3e:b4:
95:1a:de:ed:90:7b:1e:2a:f0:51:c3:a9:02:ac:ed:8c:26:ef:
27:00:ba:b0:6b:7f:28:75:cb:9e:eb:e7:61:1a:00:71:75:ac:
11:64:e6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:43:13 2026 by rpki-client