
$ rpki-client -vvf rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e37322e302f32342d3234203d3e203338353133.roa
File: 3138322e32332e37322e302f32342d3234203d3e203338353133.roa (raw, json)
Hash identifier: d2wkWP4NTFCxZMxZrrL/t+E+Nxs8rQ3V9zJx3Q4Eo54=
Subject key identifier: B9:E2:EE:6C:79:60:19:8E:8C:58:CE:3E:15:67:2A:CD:B3:31:7F:75
Certificate issuer: /CN=C5528B1880D1A3C409F79997E426F977596B3E01
Certificate serial: 35677E5837F4A3E2AC790399F91EBA3AF3DA5ACA
Authority key identifier: C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e37322e302f32342d3234203d3e203338353133.roa
Signing time: Sun 03 May 2026 02:34:07 +0000
ROA not before: Sun 03 May 2026 02:29:07 +0000
ROA not after: Sun 02 May 2027 02:34:07 +0000
asID: 38513
IP address blocks: 182.23.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:67:7e:58:37:f4:a3:e2:ac:79:03:99:f9:1e:ba:3a:f3:da:5a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5528B1880D1A3C409F79997E426F977596B3E01
Validity
Not Before: May 3 02:29:07 2026 GMT
Not After : May 2 02:34:07 2027 GMT
Subject: CN=B9E2EE6C7960198E8C58CE3E15672ACDB3317F75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:38:5b:20:a4:75:19:d0:c4:9e:48:87:44:06:
eb:c7:dd:76:83:0f:13:ab:cf:82:d8:17:2b:f5:8f:
c3:0f:8c:e2:99:d3:e0:fb:24:18:88:71:bb:79:19:
20:f9:17:0f:72:75:45:88:1e:52:b9:82:05:6c:eb:
ec:b0:d7:1e:1f:6c:e2:5a:2e:22:7d:9d:48:1f:12:
03:9e:e6:d2:81:16:01:e9:f7:33:b3:0b:aa:4b:62:
e6:2b:63:2a:41:91:04:c6:3c:5b:3f:b2:d7:aa:90:
73:2f:14:ff:75:c4:6b:e9:28:2d:cd:b7:d6:d2:2b:
11:3b:db:27:a3:2a:e8:04:1d:b4:6f:b6:a7:b1:82:
42:53:40:ed:e7:0f:24:5a:9b:29:b6:6a:22:f2:da:
96:d0:cf:6c:93:3d:5a:ce:17:ad:75:8b:0f:bc:05:
d5:14:eb:61:46:bc:9c:e1:23:06:9c:0c:ea:2a:10:
ec:ef:e9:fb:28:8b:f5:25:86:2e:25:a7:9a:03:5b:
0b:42:9c:27:3b:46:69:88:a0:61:15:ce:e9:f8:d2:
06:65:55:fc:b9:fd:9c:2b:6c:70:ab:da:21:98:02:
1e:57:b5:60:6e:d1:dd:7c:f5:ec:d2:54:62:d8:46:
1e:71:36:7d:ff:eb:8a:a9:a9:db:d5:6c:37:53:c3:
9f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E2:EE:6C:79:60:19:8E:8C:58:CE:3E:15:67:2A:CD:B3:31:7F:75
X509v3 Authority Key Identifier:
keyid:C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e37322e302f32342d3234203d3e203338353133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.23.72.0/24
Signature Algorithm: sha256WithRSAEncryption
38:af:03:77:10:76:32:45:68:e3:1d:0e:49:20:01:7d:a1:13:
fb:15:4e:c5:d2:60:d9:10:2c:c6:73:74:57:9d:9d:6e:70:75:
bc:82:83:d0:48:fc:c2:e4:3e:9b:a8:37:a7:01:e2:b9:18:96:
0c:0b:53:1d:99:a8:4d:d1:54:3a:48:f5:dc:85:9b:a3:40:c2:
4b:48:94:6c:bf:24:11:60:23:b5:e5:2a:cf:9a:0e:a6:d7:6a:
d3:f0:bb:d0:da:f9:14:d5:df:b5:43:bc:5e:bb:be:2a:fa:d5:
34:02:95:a4:a3:0d:78:d4:ef:51:e6:e1:c3:5f:13:3b:8d:5f:
40:bc:89:5e:78:e1:f5:41:b3:74:01:35:be:f1:58:b5:af:38:
d0:c5:8d:94:ce:45:d8:b2:32:59:ef:f4:32:5b:2b:67:8d:a2:
6c:7b:de:07:8b:ff:08:f7:32:73:72:90:d1:a9:bc:51:df:af:
bd:91:f5:93:9a:57:ec:ae:bf:8b:45:48:50:52:39:f5:c6:15:
d6:34:2d:a4:c5:54:22:75:4d:3c:88:88:37:ce:1f:df:d3:03:
eb:9e:46:ae:18:5b:92:a7:44:ec:23:d8:b8:ea:cb:70:e9:10:
7e:a3:e1:a8:c8:b5:85:0b:b9:96:b6:d4:53:1b:8c:e2:9b:4f:
bf:c9:72:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:46:28 2026 by rpki-client