
$ rpki-client -vvf rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3133302e302f32342d3234203d3e203338353133.roa
File: 3132352e3231332e3133302e302f32342d3234203d3e203338353133.roa (raw, json)
Hash identifier: XIMmqKtvzDRBukYNyJnKPO2gKd7GkkA781Y0tXGj4Pc=
Subject key identifier: D1:29:94:99:9E:FE:1F:89:38:B9:1B:87:A7:DC:8A:25:8D:30:36:C4
Certificate issuer: /CN=C5528B1880D1A3C409F79997E426F977596B3E01
Certificate serial: 4293BBB96E50DF7ED1D74A0C44A1E9BAE81A88A8
Authority key identifier: C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3133302e302f32342d3234203d3e203338353133.roa
Signing time: Sun 03 May 2026 02:34:08 +0000
ROA not before: Sun 03 May 2026 02:29:08 +0000
ROA not after: Sun 02 May 2027 02:34:08 +0000
asID: 38513
IP address blocks: 125.213.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:93:bb:b9:6e:50:df:7e:d1:d7:4a:0c:44:a1:e9:ba:e8:1a:88:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5528B1880D1A3C409F79997E426F977596B3E01
Validity
Not Before: May 3 02:29:08 2026 GMT
Not After : May 2 02:34:08 2027 GMT
Subject: CN=D12994999EFE1F8938B91B87A7DC8A258D3036C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f4:ff:b9:27:08:e9:b8:f0:fd:15:23:45:db:
88:24:5e:a4:36:43:0c:44:b7:7e:23:44:de:ec:a6:
cf:13:f0:39:62:65:1e:4a:de:22:1d:82:20:20:98:
27:4e:be:df:2c:50:2b:2e:09:16:75:30:62:37:a2:
c5:b6:08:4d:05:11:ac:5f:ef:b0:88:86:dc:8a:c0:
23:9f:7e:9d:52:b0:b5:d9:66:92:38:9c:2c:72:d8:
0c:5d:e4:c7:ae:c1:9c:c4:38:2f:5a:99:c5:5f:c6:
bc:97:85:c6:51:6e:4e:d8:34:b7:22:5c:75:60:30:
d8:c9:45:85:ce:e2:16:8e:b8:9e:cc:76:b5:08:72:
09:c3:b8:45:0f:d5:fb:37:24:ab:a3:f5:6d:12:23:
cf:c0:ba:7b:93:d0:a1:29:95:72:dd:5f:df:87:8c:
67:f6:35:03:b8:43:3b:88:bd:45:ea:4f:76:1a:95:
04:cc:b3:43:2d:fd:e1:3b:66:92:d7:49:7f:84:f0:
49:1e:78:e4:40:3e:4f:8a:21:b9:4b:df:61:1c:73:
25:39:71:da:a1:69:d6:3a:91:1d:bf:4f:e3:90:ae:
e1:ce:8d:1f:e4:82:e5:9c:40:16:d2:97:ee:77:6a:
4c:7d:9c:7a:18:8e:0f:fa:b6:f5:3e:8a:f8:fb:b6:
19:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:29:94:99:9E:FE:1F:89:38:B9:1B:87:A7:DC:8A:25:8D:30:36:C4
X509v3 Authority Key Identifier:
keyid:C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3133302e302f32342d3234203d3e203338353133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
125.213.130.0/24
Signature Algorithm: sha256WithRSAEncryption
77:52:52:bd:60:28:ed:19:50:c0:32:68:48:b0:e7:6f:b3:0d:
f8:b0:63:8f:53:46:0d:57:7c:50:5d:39:c4:f8:28:80:b0:46:
fc:0b:a0:fa:cc:82:96:32:46:50:ef:6d:cc:f1:25:8f:44:3c:
1a:83:8b:f6:eb:88:32:b4:3f:c0:47:26:b1:3d:a1:62:ba:1b:
22:d1:d2:99:7f:5f:19:92:e7:97:03:31:9b:24:79:71:a7:b5:
1e:1c:6a:6d:0b:96:ed:42:fa:4a:2c:e7:b6:f7:13:43:64:6b:
29:51:09:4a:2b:f9:be:d8:1e:d3:c7:c6:59:a6:32:8a:4e:4d:
37:2a:02:16:4f:df:96:c4:14:0e:2b:f7:a7:af:c0:79:5c:96:
7e:fc:19:03:00:c9:28:0c:dc:4f:5a:ae:de:49:df:cf:86:2c:
59:8b:20:19:f8:e8:b8:0a:c1:fd:79:04:9e:1b:97:6f:3a:c9:
67:dc:30:97:42:35:68:05:d1:b9:9d:6b:86:27:65:48:33:a2:
9e:f8:c3:f0:c5:1f:e0:62:7e:62:d2:1e:6e:04:d3:29:ed:52:
ff:f4:66:db:e8:f8:e1:ee:22:4b:7e:5b:f1:f5:2f:df:84:a2:
a6:9f:dd:f5:d0:b2:8e:f9:6f:df:34:a8:b5:85:39:4f:78:eb:
76:24:b2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:36:49 2026 by rpki-client