
$ rpki-client -vvf rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a323a3a2f34382d3438203d3e2034383030.roa
File: 323430303a383030303a323a3a2f34382d3438203d3e2034383030.roa (raw, json)
Hash identifier: GBdfFumQ5DV/1xYnnlyi47x4qk5lERcVl7kr2idNp9c=
Subject key identifier: DD:6B:EC:E6:08:F8:09:30:A7:E3:9E:2F:1C:4B:3F:92:6B:EA:2C:06
Certificate issuer: /CN=C5528B1880D1A3C409F79997E426F977596B3E01
Certificate serial: 64D82FB771CDDF3EBEE4C4D831AFD15A03BA80D8
Authority key identifier: C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a323a3a2f34382d3438203d3e2034383030.roa
Signing time: Sun 03 May 2026 02:34:02 +0000
ROA not before: Sun 03 May 2026 02:29:02 +0000
ROA not after: Sun 02 May 2027 02:34:02 +0000
asID: 4800
IP address blocks: 2400:8000:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:d8:2f:b7:71:cd:df:3e:be:e4:c4:d8:31:af:d1:5a:03:ba:80:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5528B1880D1A3C409F79997E426F977596B3E01
Validity
Not Before: May 3 02:29:02 2026 GMT
Not After : May 2 02:34:02 2027 GMT
Subject: CN=DD6BECE608F80930A7E39E2F1C4B3F926BEA2C06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c1:0d:02:82:2c:0c:6b:8a:23:3e:10:c3:fe:
89:f1:b3:7c:cb:36:f2:06:64:bb:82:5b:99:cb:2a:
85:32:33:e1:65:1d:5b:0b:80:9b:16:86:44:38:0a:
45:53:45:53:6b:11:99:00:f4:2a:23:e8:d0:43:f8:
8b:7b:7a:ee:06:0d:fc:e1:19:12:9e:cc:cd:ee:fc:
6a:a0:69:fd:0b:13:09:28:3d:94:ed:ef:be:80:30:
f7:9e:ac:1b:ce:0c:d3:06:15:cf:88:32:aa:ef:d4:
33:bd:07:1f:7f:e9:c2:89:48:60:03:95:cd:3c:40:
b3:b5:0d:4e:d0:6c:07:36:8f:92:63:7a:3e:f4:96:
02:c5:2f:56:69:a3:6c:4c:ca:b9:1f:af:38:4b:53:
c9:37:24:5a:70:49:74:4d:a0:9b:6c:fd:eb:a1:39:
2d:7c:a9:f4:5c:c5:40:ea:36:6e:b9:1d:18:5c:5f:
65:97:ea:10:91:1b:f1:2c:32:da:a0:5e:c3:b4:3a:
ee:e0:51:9b:77:e8:23:97:e2:f8:9e:d1:8d:08:49:
21:15:e2:fe:7a:1c:ec:40:4b:b6:92:f3:72:82:22:
76:2c:92:23:9e:88:5e:05:ea:d5:fa:a1:60:ea:71:
b4:41:f1:29:df:b3:fb:0d:67:84:ac:cd:60:8e:89:
6a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6B:EC:E6:08:F8:09:30:A7:E3:9E:2F:1C:4B:3F:92:6B:EA:2C:06
X509v3 Authority Key Identifier:
keyid:C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a323a3a2f34382d3438203d3e2034383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8000:2::/48
Signature Algorithm: sha256WithRSAEncryption
28:82:9f:45:b3:1c:00:9d:7f:62:e9:8d:09:23:15:ea:41:31:
a3:8f:e3:03:cb:4d:4a:f0:d4:df:f2:8e:86:ba:76:5f:7f:2b:
d3:84:72:02:b1:6b:77:10:50:ba:6f:90:cd:af:12:7b:ed:48:
82:42:9c:e6:db:34:da:b6:36:47:c4:92:e3:fa:f8:0c:c4:3c:
9d:7f:1e:b6:ae:b7:13:2e:a8:67:6b:fa:70:b2:d8:94:84:43:
8d:61:f2:55:3a:0e:98:b9:28:15:df:b4:c7:42:85:5f:03:9d:
13:19:74:e2:e8:42:fc:84:53:27:a9:da:ce:97:7b:46:a1:d1:
b0:16:84:99:af:18:93:95:b8:29:6e:f0:2d:63:2d:1c:c8:f7:
97:b3:67:13:fe:1c:cd:af:a4:f8:00:b7:93:ba:22:a9:14:4e:
0d:31:8b:c5:8f:aa:f4:da:a2:af:f1:90:e1:e9:1e:36:62:07:
2a:b9:38:5f:08:3b:0f:b6:4b:6b:aa:35:81:9c:a1:cf:a1:f3:
88:ce:dc:5d:b7:32:84:6d:d8:6a:43:14:4d:43:32:cb:44:fa:
58:cd:11:fb:83:9c:8c:a2:49:c8:f0:34:6c:44:1d:68:33:46:
83:3b:29:25:01:28:73:f5:74:d6:73:71:e8:0b:b2:4e:e2:9a:
76:60:aa:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:03:59 2026 by rpki-client