
$ rpki-client -vvf rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a343a3a2f34382d3438203d3e2034383030.roa
File: 323430303a383030303a343a3a2f34382d3438203d3e2034383030.roa (raw, json)
Hash identifier: fFE75K3W1S2PF2UEu21NSSWiXUvr4s7t59N8byPr7Uc=
Subject key identifier: 3B:3D:69:FF:7A:7F:86:38:3B:95:3B:89:41:75:10:8B:6C:61:04:60
Certificate issuer: /CN=C5528B1880D1A3C409F79997E426F977596B3E01
Certificate serial: 01C0C701FAE2B044F0C5FD18F014DC8D5BB07F54
Authority key identifier: C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a343a3a2f34382d3438203d3e2034383030.roa
Signing time: Sun 03 May 2026 02:34:00 +0000
ROA not before: Sun 03 May 2026 02:29:00 +0000
ROA not after: Sun 02 May 2027 02:34:00 +0000
asID: 4800
IP address blocks: 2400:8000:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:c0:c7:01:fa:e2:b0:44:f0:c5:fd:18:f0:14:dc:8d:5b:b0:7f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5528B1880D1A3C409F79997E426F977596B3E01
Validity
Not Before: May 3 02:29:00 2026 GMT
Not After : May 2 02:34:00 2027 GMT
Subject: CN=3B3D69FF7A7F86383B953B894175108B6C610460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:69:be:e9:e0:87:aa:3f:d1:27:af:fe:1c:da:
e5:f2:16:8b:31:29:90:3c:36:63:c4:ac:7f:6c:e2:
e0:5c:59:f8:61:d7:d2:ef:51:0b:bb:ec:e6:48:6a:
33:78:e1:c1:8a:69:0e:a8:ee:42:6f:c9:36:62:56:
02:e6:d1:c2:74:d3:11:b8:5c:fc:c1:ca:8f:e0:ee:
dc:6c:09:04:bc:6d:32:ed:35:fb:04:14:2f:1f:76:
09:1e:d9:c6:8f:9b:38:3d:18:b1:04:5b:5f:51:a0:
f8:b5:13:e8:87:ad:ae:6b:33:f6:e3:1c:d9:cf:33:
b3:fd:3a:df:a2:a9:cc:ac:f4:20:51:2e:0b:a3:b1:
f7:a5:23:f8:a1:9a:d6:6f:0c:e4:a5:a3:fe:15:e2:
51:83:2b:10:7f:47:2a:d3:a5:1d:7a:46:a3:a7:ad:
51:53:1a:77:2b:77:e9:86:7f:24:e4:fc:cb:3b:35:
16:96:87:a6:e6:6e:21:68:31:ad:90:3b:81:e5:85:
e4:de:75:08:69:53:d0:d7:60:ce:24:5d:79:de:eb:
b5:c0:59:04:06:fd:a7:20:a0:53:6a:65:f5:59:0a:
12:ad:15:df:f2:b5:97:2f:7d:24:92:4b:20:bc:64:
2c:dd:07:6f:c5:62:dd:32:18:cd:2f:ea:a5:0e:6f:
71:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3D:69:FF:7A:7F:86:38:3B:95:3B:89:41:75:10:8B:6C:61:04:60
X509v3 Authority Key Identifier:
keyid:C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a343a3a2f34382d3438203d3e2034383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8000:4::/48
Signature Algorithm: sha256WithRSAEncryption
4e:ab:3a:92:c3:e3:73:d7:9d:7b:1b:fc:be:c7:13:58:3a:1b:
3e:78:97:40:77:87:18:07:b3:7e:ed:19:6f:43:a7:7b:bd:03:
02:75:31:3e:6f:7c:4a:6d:84:d6:a1:34:16:40:3a:bd:4e:78:
13:73:1d:7b:43:02:15:e7:b1:af:3f:78:0b:84:e7:1c:1a:cd:
aa:f2:08:66:a0:cc:4f:74:76:fb:3e:bc:bf:6a:05:9c:35:a9:
e3:e3:63:8d:6b:a7:5a:4a:80:1d:23:5e:47:3e:3a:bd:4d:9a:
f6:72:16:97:2e:59:5d:1f:22:09:6a:05:63:7e:8f:5d:8a:64:
f7:21:5a:38:41:0d:39:d9:15:47:cf:c5:e4:d9:d4:3c:f5:85:
ca:33:ac:71:cd:c0:54:63:6b:36:07:cf:83:4c:98:bb:d5:5c:
3b:9d:45:bc:50:1a:f7:c1:b0:88:e9:1c:97:12:74:bc:52:16:
04:24:c3:f0:bc:6b:ac:6a:00:21:4a:00:3e:e4:c5:c4:08:30:
26:88:be:60:f2:77:41:40:f8:fd:98:55:a9:94:87:1f:cd:03:
16:b4:00:fa:36:7a:69:91:46:29:46:5c:ec:36:c6:84:7a:51:
25:db:3c:a2:60:13:7b:bf:a6:29:72:31:fc:fe:5a:f6:a7:bb:
12:13:25:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:06:09 2026 by rpki-client