
$ rpki-client -vvf rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a323432303a3a2f34382d3438203d3e2034383030.roa
File: 323430303a383030303a323432303a3a2f34382d3438203d3e2034383030.roa (raw, json)
Hash identifier: D3yC7NolqMgijsm8RN1FhQBnmM0H+Utd/4UUZ3puwXo=
Subject key identifier: 94:E5:59:46:32:E7:B0:41:5A:C9:EF:F8:11:D4:5E:10:97:E9:18:6B
Certificate issuer: /CN=C5528B1880D1A3C409F79997E426F977596B3E01
Certificate serial: 4C1AC433441F933B9A307DC3AFE87E1C3913F0FD
Authority key identifier: C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a323432303a3a2f34382d3438203d3e2034383030.roa
Signing time: Sun 03 May 2026 02:33:57 +0000
ROA not before: Sun 03 May 2026 02:28:57 +0000
ROA not after: Sun 02 May 2027 02:33:57 +0000
asID: 4800
IP address blocks: 2400:8000:2420::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:1a:c4:33:44:1f:93:3b:9a:30:7d:c3:af:e8:7e:1c:39:13:f0:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5528B1880D1A3C409F79997E426F977596B3E01
Validity
Not Before: May 3 02:28:57 2026 GMT
Not After : May 2 02:33:57 2027 GMT
Subject: CN=94E5594632E7B0415AC9EFF811D45E1097E9186B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:20:09:87:fe:db:bf:e8:46:07:c8:a5:cf:e2:
6a:5d:d8:68:4f:7b:ff:58:b9:32:bd:7d:a8:b5:73:
13:81:6b:7f:0c:ea:c3:69:26:fc:24:63:66:59:0d:
7f:42:dd:42:b6:f4:78:70:b9:f4:d0:49:9b:31:b6:
2a:c0:94:96:07:da:ff:ea:7b:1b:47:e0:c1:a3:11:
a3:21:d4:83:85:20:ea:8e:a7:26:89:a1:fc:7e:ce:
82:11:47:98:2f:61:11:8e:2a:7c:e2:3c:35:2a:47:
59:b0:2c:28:f5:10:54:20:67:17:72:1b:ae:39:a0:
6b:fb:de:7f:ab:64:98:45:4c:a4:f6:29:d7:7e:2b:
a7:5a:73:de:f4:59:cf:ad:60:94:d2:3a:c9:cc:7d:
fc:f4:85:d1:c3:90:86:68:ab:a0:47:8b:bc:fd:06:
88:c2:2a:95:49:0c:cd:f4:93:ea:98:44:e0:37:57:
bd:13:e5:5d:35:ce:09:9d:01:e2:54:5d:5e:a5:76:
ec:42:38:39:dc:9e:58:e8:b1:f0:02:0c:85:1a:62:
b1:5e:fe:c4:d2:c7:9d:e8:b1:6d:2c:a8:6d:71:70:
79:9d:2a:7a:6a:10:21:7d:a5:cf:f4:a6:eb:87:38:
96:88:4b:61:f1:60:71:7e:f0:39:2a:fe:99:5e:b6:
1e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E5:59:46:32:E7:B0:41:5A:C9:EF:F8:11:D4:5E:10:97:E9:18:6B
X509v3 Authority Key Identifier:
keyid:C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a323432303a3a2f34382d3438203d3e2034383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8000:2420::/48
Signature Algorithm: sha256WithRSAEncryption
70:ff:14:ff:77:81:4b:28:05:b8:c9:44:a0:0f:fe:0a:44:cd:
0b:9a:5e:29:8a:9b:c0:30:54:00:b5:c8:9a:56:b1:27:0b:d2:
fe:16:04:a8:3e:f4:a6:74:60:18:51:67:cb:2d:81:31:4d:09:
e4:4d:e7:ae:c0:e1:f0:5c:bb:fa:f0:51:b7:e6:75:d3:a2:fd:
47:b7:f3:52:6a:96:46:6a:ab:f1:b7:af:a8:07:dc:9c:54:16:
a4:f9:e7:cc:3f:41:64:40:5d:e9:6d:91:a4:10:31:4e:d9:5c:
7c:f7:1f:32:ee:d9:5e:b2:73:5b:97:d4:f0:ef:cc:b1:03:d0:
9c:7c:7d:d4:b0:7c:b9:ff:bc:03:93:c3:16:14:8f:89:f2:80:
77:ae:b0:fc:9a:56:94:bc:67:be:ed:b5:a5:25:16:51:12:87:
cb:cb:58:53:16:01:f5:39:ea:f2:a6:fe:46:38:90:1e:37:2e:
0d:fa:b8:fa:a5:24:64:ad:47:80:8a:f8:3e:d3:6a:2d:74:cd:
a9:81:fd:af:31:96:3c:6c:cb:3d:89:52:5f:20:c9:b4:4e:f3:
13:3c:89:d5:a6:29:dd:82:ac:3c:11:03:0b:5a:7c:25:e6:8a:
91:4f:82:1c:4c:72:a4:e5:df:41:fe:65:c5:19:6f:8e:97:db:
6d:41:b6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:14:13 2026 by rpki-client