
$ rpki-client -vvf rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a313a3a2f34382d3438203d3e2034383030.roa
File: 323430303a383030303a313a3a2f34382d3438203d3e2034383030.roa (raw, json)
Hash identifier: JAhud4JQc0HOWwyApfakeInDoA5OYatFllUDLMr7Pyc=
Subject key identifier: 5F:29:C2:03:93:C2:CA:83:60:EB:72:96:5B:81:61:5C:E6:A7:3F:29
Certificate issuer: /CN=C5528B1880D1A3C409F79997E426F977596B3E01
Certificate serial: 7D67E32F1F84F567712CFE8BFEED190A66B81BC0
Authority key identifier: C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a313a3a2f34382d3438203d3e2034383030.roa
Signing time: Sun 03 May 2026 02:33:59 +0000
ROA not before: Sun 03 May 2026 02:28:59 +0000
ROA not after: Sun 02 May 2027 02:33:59 +0000
asID: 4800
IP address blocks: 2400:8000:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:67:e3:2f:1f:84:f5:67:71:2c:fe:8b:fe:ed:19:0a:66:b8:1b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5528B1880D1A3C409F79997E426F977596B3E01
Validity
Not Before: May 3 02:28:59 2026 GMT
Not After : May 2 02:33:59 2027 GMT
Subject: CN=5F29C20393C2CA8360EB72965B81615CE6A73F29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:48:ca:cb:5f:93:b8:ac:c8:ca:ed:69:57:16:
b7:1e:d0:82:b9:6c:72:fd:3c:d7:d1:51:69:01:47:
5f:50:fd:b3:2c:99:eb:1c:f2:c8:64:cd:fe:41:db:
da:91:76:6a:de:8c:fe:0e:4f:e0:a7:78:1a:83:c5:
27:15:bf:20:16:e2:7c:44:0c:9e:b4:1b:47:6a:5b:
34:ff:44:12:c3:c3:68:ba:45:00:3f:ed:8f:cb:f4:
b4:7b:38:3a:a2:fe:e2:b6:cf:f2:5e:db:8f:c7:75:
ab:26:85:4a:d1:41:b1:94:0a:fd:b3:16:fd:c0:00:
e6:98:3c:98:41:40:1b:61:f7:ec:7d:d8:e5:51:55:
d1:c2:32:61:07:36:5c:7f:b8:c5:01:c1:f3:7c:44:
2c:14:83:1b:59:a5:41:27:55:31:35:d1:69:52:4f:
08:1a:a1:29:d0:e5:2f:3d:58:44:29:ec:68:59:be:
09:31:21:5e:02:cd:bd:18:90:f6:e9:7c:b7:be:d0:
2d:30:2d:61:33:cb:de:01:14:ad:f1:45:13:3c:fc:
c8:5b:ac:76:cc:d0:ca:f6:61:fe:c4:5d:c4:af:07:
72:ea:82:84:60:ef:89:53:0e:1b:f2:27:5e:bb:1c:
12:3a:dc:b2:23:00:dd:bb:a8:b7:94:5e:2b:f5:f3:
4a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:29:C2:03:93:C2:CA:83:60:EB:72:96:5B:81:61:5C:E6:A7:3F:29
X509v3 Authority Key Identifier:
keyid:C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a313a3a2f34382d3438203d3e2034383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8000:1::/48
Signature Algorithm: sha256WithRSAEncryption
be:d6:34:65:ec:f1:01:c1:b8:11:25:3a:7c:77:6f:50:db:3b:
cd:20:07:72:21:0c:63:be:18:88:88:c4:b3:2b:19:85:5b:85:
14:d4:dc:aa:a7:8b:27:e0:d5:7c:f4:15:3b:17:36:89:82:97:
2c:75:74:f6:bc:00:e9:b2:fd:32:87:a6:74:57:57:44:68:25:
67:94:3b:68:04:92:50:f8:3a:1c:72:ff:7c:f7:16:cd:ed:e5:
df:74:e4:0c:4d:3c:73:61:26:e1:5c:7e:d9:53:dd:d2:84:e8:
06:be:f3:e1:88:fd:d3:3d:bf:06:9b:10:c5:5f:92:fe:33:07:
26:56:2f:98:7e:65:54:82:75:9b:ab:1a:83:f1:ed:7f:88:ed:
5d:b2:50:6b:e8:d2:a6:c5:48:5e:16:e8:0d:2f:14:7e:34:cb:
ac:04:2b:55:5d:aa:13:9e:81:a6:0f:bf:5e:f1:dd:a0:47:3a:
0f:59:a0:21:2f:80:82:d2:a4:11:ba:0a:65:7d:f4:92:b9:6e:
c7:6a:95:4e:e6:1d:b2:a7:85:0e:ae:8a:7f:41:95:17:ad:3c:
50:d8:9f:9c:e8:95:a1:1d:08:90:44:ae:72:30:21:27:e4:1e:
77:4a:41:35:3c:ae:97:42:51:ff:88:29:2f:9a:b6:fc:5e:d8:
b1:d7:31:73
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUfWfjLx+E9WdxLP6L/u0ZCma4G8AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzU1MjhCMTg4MEQxQTNDNDA5Rjc5OTk3RTQyNkY5Nzc1
OTZCM0UwMTAeFw0yNjA1MDMwMjI4NTlaFw0yNzA1MDIwMjMzNTlaMDMxMTAvBgNV
BAMTKDVGMjlDMjAzOTNDMkNBODM2MEVCNzI5NjVCODE2MTVDRTZBNzNGMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRSMrLX5O4rMjK7WlXFrce0IK5
bHL9PNfRUWkBR19Q/bMsmesc8shkzf5B29qRdmrejP4OT+CneBqDxScVvyAW4nxE
DJ60G0dqWzT/RBLDw2i6RQA/7Y/L9LR7ODqi/uK2z/Je24/HdasmhUrRQbGUCv2z
Fv3AAOaYPJhBQBth9+x92OVRVdHCMmEHNlx/uMUBwfN8RCwUgxtZpUEnVTE10WlS
TwgaoSnQ5S89WEQp7GhZvgkxIV4Czb0YkPbpfLe+0C0wLWEzy94BFK3xRRM8/Mhb
rHbM0Mr2Yf7EXcSvB3LqgoRg74lTDhvyJ167HBI63LIjAN27qLeUXiv180qrAgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQUXynCA5PCyoNg63KWW4FhXOanPykwHwYDVR0j
BBgwFoAUxVKLGIDRo8QJ95mX5Cb5d1lrPgEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTVjZTM2ZGUtZjkyMS00Mjc0LTg0OTctMjk4N2Q5MDk1NDNlLzAvQzU1MjhCMTg4
MEQxQTNDNDA5Rjc5OTk3RTQyNkY5Nzc1OTZCM0UwMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DNTUyOEIxODgwRDFBM0M0MDlGNzk5OTdFNDI2Rjk3NzU5NkIz
RTAxLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzU1Y2UzNmRlLWY5MjEtNDI3NC04
NDk3LTI5ODdkOTA5NTQzZS8wLzMyMzQzMDMwM2EzODMwMzAzMDNhMzEzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzNDM4MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQAgAAAATANBgkq
hkiG9w0BAQsFAAOCAQEAvtY0ZezxAcG4ESU6fHdvUNs7zSAHciEMY74YiIjEsysZ
hVuFFNTcqqeLJ+DVfPQVOxc2iYKXLHV09rwA6bL9MoemdFdXRGglZ5Q7aASSUPg6
HHL/fPcWze3l33TkDE08c2Em4Vx+2VPd0oToBr7z4Yj90z2/BpsQxV+S/jMHJlYv
mH5lVIJ1m6sag/Htf4jtXbJQa+jSpsVIXhboDS8UfjTLrAQrVV2qE56Bpg+/XvHd
oEc6D1mgIS+AgtKkEboKZX30krlux2qVTuYdsqeFDq6Kf0GVF608UNifnOiVoR0I
kESucjAhJ+Qed0pBNTyul0JR/4gpL5q2/F7Ysdcxcw==
-----END CERTIFICATE-----
Generated at Wed May 13 14:58:19 2026 by rpki-client