
$ rpki-client -vvf rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3139372e302f32342d3234203d3e20313333383431.roa
File: 3132332e3233312e3139372e302f32342d3234203d3e20313333383431.roa (raw, json)
Hash identifier: QSUXaKgtOpsCAJhn4I0b/ra4wfYKk11U0gz7p01iOHg=
Subject key identifier: 9B:FD:84:50:96:31:C0:74:C8:73:23:A0:E2:61:04:8E:5C:95:ED:04
Certificate issuer: /CN=C5528B1880D1A3C409F79997E426F977596B3E01
Certificate serial: 13A415DE21C147951D14492C07A562E5E821E3DF
Authority key identifier: C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3139372e302f32342d3234203d3e20313333383431.roa
Signing time: Sun 03 May 2026 02:34:10 +0000
ROA not before: Sun 03 May 2026 02:29:10 +0000
ROA not after: Sun 02 May 2027 02:34:10 +0000
asID: 133841
IP address blocks: 123.231.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:a4:15:de:21:c1:47:95:1d:14:49:2c:07:a5:62:e5:e8:21:e3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5528B1880D1A3C409F79997E426F977596B3E01
Validity
Not Before: May 3 02:29:10 2026 GMT
Not After : May 2 02:34:10 2027 GMT
Subject: CN=9BFD84509631C074C87323A0E261048E5C95ED04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:04:c7:88:54:8a:01:69:f8:44:5a:9a:d3:bc:
3c:e3:c8:f1:ff:64:c0:01:ea:14:e9:e9:b0:7e:56:
f0:7a:fc:e7:18:53:bc:73:d1:be:cf:56:9e:ee:de:
bc:d2:6a:41:54:12:12:74:f2:a5:fa:0b:e3:cb:b0:
bb:0a:9f:14:af:e9:8e:62:f1:02:47:e6:6e:73:af:
31:af:fa:a7:08:88:14:0b:2a:d3:be:b2:e4:df:28:
ec:14:29:9f:e7:73:be:99:19:6d:ab:99:52:3b:69:
0f:d4:d7:c9:3b:72:5d:b1:32:2d:fa:8f:42:21:bc:
42:2c:c1:96:03:bb:84:9f:85:b9:dd:75:1c:2b:51:
af:c8:ff:36:c8:50:ce:88:c7:b4:d9:7c:47:31:51:
6f:49:85:06:15:31:52:41:9d:3a:97:ab:97:1e:8d:
a7:c7:1b:0c:ca:46:09:a9:e7:32:e6:cd:7c:20:45:
2f:9b:e7:6f:87:45:dc:47:4c:0b:ab:ee:3b:94:e6:
79:3c:6a:a2:3d:a0:ba:4b:57:1e:71:77:d9:db:67:
3f:ff:f5:8b:a7:d2:62:88:00:04:a0:6f:e0:f7:9a:
98:5c:d2:ff:b6:a9:ad:2c:42:17:cb:af:7d:81:9f:
86:f1:8c:f6:ff:ac:03:b0:f7:05:03:67:d9:9c:36:
e9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FD:84:50:96:31:C0:74:C8:73:23:A0:E2:61:04:8E:5C:95:ED:04
X509v3 Authority Key Identifier:
keyid:C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3139372e302f32342d3234203d3e20313333383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.231.197.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:e9:83:a1:91:26:23:a9:ac:24:b2:fc:fa:7d:a9:45:22:1b:
6c:f8:d2:c9:19:96:1b:b5:3c:db:d8:9e:c0:bc:37:ae:94:92:
f4:97:ee:07:90:79:d9:cc:92:b2:9c:61:22:a3:ab:45:20:49:
c9:a2:5e:4f:ba:40:6c:58:27:8b:c8:98:3f:85:37:2e:b5:74:
8c:37:3a:b0:7d:2b:92:5c:61:d1:ea:3e:b6:a8:dc:5e:95:d5:
9e:16:be:f5:31:d3:36:fc:e7:b8:a0:0e:fa:14:bd:29:c0:a4:
51:ec:14:b2:a1:38:8d:2d:6f:b3:9e:27:8f:cc:87:cb:43:4b:
53:ad:ec:3d:9c:c6:f5:07:78:33:8e:a2:80:4c:de:4e:4b:55:
eb:95:90:94:1b:10:8c:a8:c0:d3:fe:87:10:10:b0:8e:95:ae:
74:27:a1:95:39:57:83:ec:f2:4a:e7:c0:0a:ff:63:79:64:12:
fc:59:10:f2:0d:fe:96:1d:79:17:ab:61:a9:7d:4e:1d:11:c6:
32:77:85:9f:63:25:e0:6e:e1:82:a8:b9:b5:31:f9:5d:ba:bf:
f1:0f:ef:95:4a:9e:54:0d:c5:6b:75:13:97:4f:70:be:0f:73:
a1:a7:ea:78:e0:ea:41:96:74:84:54:1d:05:32:c0:2a:ec:32:
e3:0e:36:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:12:25 2026 by rpki-client