
$ rpki-client -vvf rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a313030303a3a2f34382d3438203d3e2034383030.roa
File: 323430303a383030303a313030303a3a2f34382d3438203d3e2034383030.roa (raw, json)
Hash identifier: AbuxTitLp5NbH1D9N3SVbU1kKn9cTa0zWEuaoHG9AII=
Subject key identifier: E2:54:C5:77:10:9C:9B:06:F7:1A:F2:10:23:92:3F:A6:8B:01:93:8C
Certificate issuer: /CN=C5528B1880D1A3C409F79997E426F977596B3E01
Certificate serial: 46DB3536E0E96214F1553AE63631FE2FBE4FD7E4
Authority key identifier: C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a313030303a3a2f34382d3438203d3e2034383030.roa
Signing time: Sun 03 May 2026 02:34:12 +0000
ROA not before: Sun 03 May 2026 02:29:12 +0000
ROA not after: Sun 02 May 2027 02:34:12 +0000
asID: 4800
IP address blocks: 2400:8000:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:db:35:36:e0:e9:62:14:f1:55:3a:e6:36:31:fe:2f:be:4f:d7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5528B1880D1A3C409F79997E426F977596B3E01
Validity
Not Before: May 3 02:29:12 2026 GMT
Not After : May 2 02:34:12 2027 GMT
Subject: CN=E254C577109C9B06F71AF21023923FA68B01938C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:ae:58:ff:6c:1c:bf:61:d5:44:d3:a4:cc:
32:12:0b:84:4d:4b:af:17:67:32:33:de:2e:82:af:
53:3b:b4:0b:d4:be:63:1b:ce:30:8c:6f:22:82:1b:
93:79:77:77:e4:6c:7c:45:46:2a:07:54:d0:05:40:
68:78:ce:69:bd:f8:64:50:69:21:19:28:70:c6:81:
bd:0f:ea:6d:92:7c:22:05:36:d3:b5:f4:c6:25:76:
ef:98:2e:da:82:ea:80:81:95:ab:61:5a:9f:ba:89:
74:bf:1a:12:4b:4f:f6:01:05:59:a5:b4:61:03:d0:
33:ab:06:6b:21:41:dd:b0:18:83:95:68:ef:f8:ae:
8d:1b:db:64:fe:0e:4a:b3:39:ee:00:de:b4:dc:12:
31:b6:d7:bd:d8:07:5f:3c:68:01:b0:00:5b:0f:ee:
37:7d:98:36:87:d2:fb:9a:fc:40:7d:9b:74:1c:45:
cd:25:5a:bf:e6:90:2c:f9:5c:d2:19:6a:8e:84:47:
ff:fa:e4:fe:12:22:12:c0:2b:21:e2:db:3b:b8:fe:
63:6c:b0:03:82:bd:cd:0c:df:12:6e:9e:3d:17:11:
9e:b0:6e:ef:ed:61:be:c8:12:16:08:27:58:e2:9d:
15:2e:6e:0a:cd:17:ec:76:3b:16:5f:56:84:a6:8b:
4a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:54:C5:77:10:9C:9B:06:F7:1A:F2:10:23:92:3F:A6:8B:01:93:8C
X509v3 Authority Key Identifier:
keyid:C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a313030303a3a2f34382d3438203d3e2034383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8000:1000::/48
Signature Algorithm: sha256WithRSAEncryption
af:42:f9:8d:eb:c8:f8:c2:a4:99:ff:6e:f7:8f:a0:76:ea:1e:
4d:fe:82:8f:19:9b:a2:9b:86:7a:e6:85:c9:06:4b:19:db:61:
53:45:e7:5b:91:23:a1:6d:b1:dd:f8:1c:40:29:f6:11:0f:c4:
fc:b1:5d:e3:cc:cb:44:fa:49:a0:ec:e2:f6:d2:05:d5:6b:dc:
e5:fc:15:a3:83:65:80:d1:4c:ba:71:ea:82:70:31:f9:66:0e:
2a:4d:3a:74:36:c2:27:41:21:66:63:5a:69:29:22:a4:2c:42:
62:25:3d:9f:d5:f6:02:71:ce:96:1c:4b:d5:b3:60:08:89:f4:
fb:20:8c:3a:b0:75:c0:87:88:fb:10:0e:e1:f9:f9:32:00:f3:
5c:ab:87:a6:c1:1c:87:3e:f4:34:0b:68:6f:4a:19:5c:6f:76:
c8:dd:3f:a7:ed:e1:87:6a:87:11:1e:d0:fd:5e:79:1f:dc:1e:
cb:90:e3:a5:59:f3:04:fe:3a:f4:e7:58:69:df:31:b0:7f:ff:
a4:80:5a:42:de:25:c1:1b:4f:2a:71:bb:3e:ec:be:f8:32:74:
02:8e:f1:70:3a:3f:b6:f9:09:ac:b8:aa:af:6f:c7:f7:f1:56:
df:14:b7:73:e9:26:c1:a4:0b:c2:59:31:af:a2:14:f2:23:08:
04:1a:d0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:41:37 2026 by rpki-client