
$ rpki-client -vvf rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138332e39312e36342e302f31392d3234203d3e2034383030.roa
File: 3138332e39312e36342e302f31392d3234203d3e2034383030.roa (raw, json)
Hash identifier: tM+4rXxsNzn2Xt+XM8Ks+1Tdp/f/87KXQ0KFIbK7uGs=
Subject key identifier: 20:98:33:4E:11:FB:3B:C4:57:BB:39:D6:E1:E9:1E:BB:75:E7:A2:08
Certificate issuer: /CN=C5528B1880D1A3C409F79997E426F977596B3E01
Certificate serial: 59CAD943E9B75088055CF96A3365E5026C012F7E
Authority key identifier: C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138332e39312e36342e302f31392d3234203d3e2034383030.roa
Signing time: Sun 03 May 2026 02:33:59 +0000
ROA not before: Sun 03 May 2026 02:28:59 +0000
ROA not after: Sun 02 May 2027 02:33:59 +0000
asID: 4800
IP address blocks: 183.91.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:ca:d9:43:e9:b7:50:88:05:5c:f9:6a:33:65:e5:02:6c:01:2f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5528B1880D1A3C409F79997E426F977596B3E01
Validity
Not Before: May 3 02:28:59 2026 GMT
Not After : May 2 02:33:59 2027 GMT
Subject: CN=2098334E11FB3BC457BB39D6E1E91EBB75E7A208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e0:0b:d0:fc:19:29:73:64:7d:ca:d8:64:2c:
27:53:25:45:f4:57:72:be:e1:8d:82:b0:b4:da:5f:
20:f6:57:10:dc:7b:31:b0:dd:b7:10:37:1c:0a:13:
d4:32:d6:00:9e:f0:24:9f:d1:8b:e6:69:75:2f:8d:
a6:98:52:5f:75:9c:aa:4e:99:15:6e:91:b6:76:dd:
03:8f:9b:c0:e5:43:2b:81:e0:c2:f9:2d:5f:55:ee:
9e:5b:53:1e:bc:96:0f:49:f8:7f:f6:db:1e:aa:a1:
eb:03:3f:22:c6:78:ca:36:86:d5:f0:d1:fb:49:5f:
75:ff:2f:5d:2f:86:38:4f:73:d3:9f:98:95:a8:88:
a8:a3:9a:84:92:a3:ae:a0:ed:1d:1c:ac:eb:47:1c:
a3:ce:00:ca:30:20:1d:c1:8a:37:54:ee:18:8c:76:
c2:ec:ff:0a:f6:6c:10:ed:f7:fe:1d:00:5e:dd:d9:
8f:64:be:90:22:c1:06:22:60:8a:a8:c5:87:dc:c5:
ae:b6:d8:3e:cd:62:35:f9:3a:3f:65:76:b0:14:56:
5e:12:ad:a8:a3:7b:f9:92:f6:c2:0c:94:50:6e:dc:
e6:33:f5:d8:54:33:33:9d:0c:5e:a8:d6:04:50:c4:
b2:aa:d0:fd:b5:87:fd:19:54:8b:0d:f6:2f:71:68:
21:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:98:33:4E:11:FB:3B:C4:57:BB:39:D6:E1:E9:1E:BB:75:E7:A2:08
X509v3 Authority Key Identifier:
keyid:C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138332e39312e36342e302f31392d3234203d3e2034383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
183.91.64.0/19
Signature Algorithm: sha256WithRSAEncryption
ca:b7:82:cf:56:18:28:7e:6e:fc:93:5d:90:f4:80:2b:d1:d1:
e6:45:ea:19:59:6f:34:6b:68:53:7d:f9:81:02:93:6e:42:d9:
98:fc:e3:ec:e8:cf:b9:10:74:e4:78:9e:cf:c7:5a:84:08:c3:
b8:cd:37:f6:98:35:bc:61:b0:5a:ad:6b:d3:dc:37:ff:f8:74:
39:bc:be:2d:ae:5f:9e:df:9d:53:68:85:dd:ea:cf:4a:9a:47:
72:be:12:52:62:4c:1a:cd:40:35:a3:96:23:7f:22:76:da:36:
6f:af:a2:41:27:2b:4f:d3:06:f8:33:d2:fa:83:b3:6f:5a:0b:
df:8d:35:53:03:dd:37:3b:fd:79:77:25:21:d5:cf:38:d2:9b:
b2:17:ba:81:ad:58:25:45:75:d5:ef:14:ec:e4:e1:99:22:fe:
08:42:4b:cb:36:16:e3:2a:88:b0:1c:3c:62:f0:e9:29:43:e3:
76:39:32:be:53:28:62:35:ab:48:8f:91:3b:02:b8:77:6f:cb:
44:94:3b:c5:df:50:6f:ef:9b:5f:d8:04:b0:89:9a:dc:b8:3e:
9f:49:ed:98:ce:1f:a9:ed:63:cc:81:bb:7e:05:09:67:28:03:
78:62:30:8e:67:f0:ed:fe:41:dc:0b:66:fc:b4:ca:b8:37:d4:
de:6a:36:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:47:31 2026 by rpki-client