
$ rpki-client -vvf rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3132382e302f32342d3234203d3e203338353133.roa
File: 3132352e3231332e3132382e302f32342d3234203d3e203338353133.roa (raw, json)
Hash identifier: q2jksXlJwwtBSWXAUcRDeu2FxcGVOFAwiSWmsF2gKVc=
Subject key identifier: 20:19:15:F6:E0:6E:4A:79:25:77:70:64:30:57:3E:13:6E:08:37:AA
Certificate issuer: /CN=C5528B1880D1A3C409F79997E426F977596B3E01
Certificate serial: 5ED051EE8412D5477071D92F0E1F87E4B8D8E868
Authority key identifier: C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3132382e302f32342d3234203d3e203338353133.roa
Signing time: Sun 03 May 2026 02:34:00 +0000
ROA not before: Sun 03 May 2026 02:29:00 +0000
ROA not after: Sun 02 May 2027 02:34:00 +0000
asID: 38513
IP address blocks: 125.213.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:d0:51:ee:84:12:d5:47:70:71:d9:2f:0e:1f:87:e4:b8:d8:e8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5528B1880D1A3C409F79997E426F977596B3E01
Validity
Not Before: May 3 02:29:00 2026 GMT
Not After : May 2 02:34:00 2027 GMT
Subject: CN=201915F6E06E4A792577706430573E136E0837AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:7e:32:9d:52:19:49:84:ed:d7:e5:fb:b5:
46:0a:cb:7d:a3:60:bd:29:0e:f9:88:59:84:61:7d:
6b:ab:a6:2e:f9:16:85:49:15:2a:12:06:88:ab:e5:
94:d8:76:f8:dc:ec:e7:99:6a:a0:bc:f9:57:51:f0:
4f:d4:11:c8:3b:24:90:b2:25:8c:52:01:95:52:b9:
86:e4:30:4b:45:fa:79:7a:db:22:c2:92:7e:29:a9:
5f:d1:ac:e9:fc:cb:85:29:cc:7b:36:8d:6e:3c:f7:
45:1a:c3:d5:35:81:4f:bb:1d:0d:77:27:a0:0a:4c:
18:c5:98:8e:4f:6a:dc:cb:98:cd:74:7b:7b:af:bf:
70:73:49:39:c5:ff:d2:53:35:8c:82:17:0a:c9:16:
46:52:35:73:40:04:b3:5f:6d:48:43:a0:cb:c4:8a:
6b:3f:4d:17:39:20:6e:f5:5e:0b:15:0f:81:0d:09:
cf:a3:ff:bc:67:32:5f:92:a0:79:de:be:8e:af:21:
4d:0d:2c:f3:13:0e:6d:8c:8b:e1:d1:6a:01:cc:36:
be:52:62:ba:89:e8:38:80:63:34:f3:e0:31:66:3d:
c3:00:38:c1:71:72:1e:05:0c:2f:62:47:86:e5:2b:
7d:7c:05:aa:e6:cc:28:a8:af:50:83:c9:94:c0:ba:
2b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:19:15:F6:E0:6E:4A:79:25:77:70:64:30:57:3E:13:6E:08:37:AA
X509v3 Authority Key Identifier:
keyid:C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3132382e302f32342d3234203d3e203338353133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
125.213.128.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:1b:cb:58:f9:be:49:49:8a:e4:53:bd:11:7d:37:92:45:43:
b4:96:a8:97:4d:8a:df:e3:07:66:69:29:2c:07:21:35:4a:63:
b3:70:ff:98:bd:a9:27:89:8d:bc:95:68:31:a3:70:ee:4e:ff:
3d:89:a8:98:4a:d7:a1:5b:29:78:c8:7e:39:21:ca:11:2e:fd:
c6:88:f7:22:d4:2f:f9:33:fe:c0:6f:2f:11:69:33:4f:1f:84:
26:30:6b:0f:26:5d:a6:3a:6a:83:9b:65:db:56:e5:f6:7e:ef:
53:49:35:27:60:d6:70:ef:6e:58:80:ab:cd:5b:a3:7d:32:10:
37:32:66:d9:a4:79:1c:d5:09:2f:01:5e:e5:e2:af:9d:dd:3c:
1d:fd:f3:fb:25:43:4d:e1:3e:a9:3f:98:83:fa:5f:2c:64:50:
35:3e:41:72:c6:c0:24:26:19:5c:59:8e:39:a8:09:c9:67:78:
ef:72:e4:a2:87:f3:e1:eb:7b:df:70:17:fe:83:54:dc:b8:6f:
0e:c9:09:c9:e6:97:cf:ac:b7:fd:0b:45:0c:59:a2:97:cf:ed:
23:20:88:1b:83:97:08:b8:46:07:e6:a3:e9:a8:ff:47:33:07:
08:8f:85:e5:e6:e9:47:df:11:9a:23:2f:c8:56:02:e8:86:63:
02:fe:cc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:35:45 2026 by rpki-client