
$ rpki-client -vvf rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a383a3a2f34382d3438203d3e2034383030.roa
File: 323430303a383030303a383a3a2f34382d3438203d3e2034383030.roa (raw, json)
Hash identifier: sFIKspn12oUVHMGbLxwOULA11WrS73eFtedLiDBByg0=
Subject key identifier: FB:05:EF:3A:40:82:4C:0C:70:50:B2:4E:46:FC:FC:0D:B7:0A:30:06
Certificate issuer: /CN=C5528B1880D1A3C409F79997E426F977596B3E01
Certificate serial: 12220AF9288CA182858C2E09005EFBBC13D2228B
Authority key identifier: C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a383a3a2f34382d3438203d3e2034383030.roa
Signing time: Sun 03 May 2026 02:34:01 +0000
ROA not before: Sun 03 May 2026 02:29:01 +0000
ROA not after: Sun 02 May 2027 02:34:01 +0000
asID: 4800
IP address blocks: 2400:8000:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:22:0a:f9:28:8c:a1:82:85:8c:2e:09:00:5e:fb:bc:13:d2:22:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5528B1880D1A3C409F79997E426F977596B3E01
Validity
Not Before: May 3 02:29:01 2026 GMT
Not After : May 2 02:34:01 2027 GMT
Subject: CN=FB05EF3A40824C0C7050B24E46FCFC0DB70A3006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:45:eb:13:3e:32:ae:f1:49:e4:27:9e:7c:0e:
1a:29:4f:20:7a:06:68:2b:12:75:b7:c6:86:eb:ae:
ca:57:77:3e:c7:55:30:73:b5:f9:1d:8d:ae:e8:a5:
44:1d:b5:d4:cb:9f:35:cc:a4:d5:38:48:53:e0:9c:
5b:c1:61:1c:21:20:38:dc:e9:cb:c3:bc:11:1c:60:
c1:73:e5:7a:87:7b:22:2f:d4:33:12:33:40:cf:ee:
c2:c0:94:66:20:3b:90:49:d4:b3:fe:7e:54:f6:28:
9c:4b:2f:90:b8:93:ce:d5:27:f9:8f:ba:54:03:58:
0b:99:89:00:85:b6:06:19:d7:00:d3:12:d5:3a:d2:
31:46:5f:7c:7f:77:a8:86:f6:28:81:88:4d:c8:3f:
85:a4:7f:fe:17:1b:ec:99:9a:4f:dc:be:51:ac:37:
15:64:4b:be:77:b1:e5:a0:27:60:31:d2:50:89:c8:
5b:ae:01:0d:f0:92:77:54:38:eb:74:50:61:ce:01:
f0:b2:35:da:18:9b:fc:4d:b5:95:7c:77:59:2b:7c:
7b:31:06:0f:22:64:74:5d:66:ef:4a:2c:89:42:c1:
b7:25:19:e1:60:39:22:2f:98:8e:39:17:92:e4:fb:
fd:78:c8:02:5f:c3:76:5b:0e:eb:e2:1f:1a:c7:e0:
93:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:05:EF:3A:40:82:4C:0C:70:50:B2:4E:46:FC:FC:0D:B7:0A:30:06
X509v3 Authority Key Identifier:
keyid:C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a383a3a2f34382d3438203d3e2034383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8000:8::/48
Signature Algorithm: sha256WithRSAEncryption
02:0e:74:44:6d:09:b4:67:42:bc:3b:14:4f:72:aa:80:1f:f4:
66:4f:e3:c1:45:64:7d:b5:a9:41:af:a9:93:cd:c1:7c:64:94:
e9:54:2c:e3:61:e4:15:35:87:91:61:91:e4:ab:a8:26:b7:ec:
da:15:48:71:7f:8d:c4:e2:5f:6d:4e:c1:31:0d:37:0a:8d:c6:
f4:dd:9e:24:e5:7d:a1:5c:d3:b1:2c:d3:84:5d:df:f8:9e:ce:
b3:47:8b:e8:90:c0:09:7e:5a:43:db:4e:0a:6a:f3:14:af:14:
9a:23:f1:c9:72:71:85:d5:05:62:97:b0:2f:4b:ea:1b:e8:db:
02:da:a9:ec:d0:99:a1:11:3f:d7:b5:ba:59:15:ce:7c:20:8d:
74:c4:7e:56:60:61:9e:6d:c2:28:a4:da:2e:e5:49:bf:fe:1d:
57:60:f9:f5:32:fc:5b:e1:a3:95:cc:71:6b:a7:91:0b:35:1d:
cc:79:9a:22:fa:4d:06:b8:ee:55:b4:73:e7:19:b7:d5:7e:39:
a8:73:80:6d:a5:ad:25:15:fb:10:67:a3:b5:76:7c:df:84:e9:
08:dc:1f:a7:c4:0c:11:5f:ca:ae:f3:bd:6e:32:66:5f:c0:00:
6d:7c:6c:93:ef:40:7d:e2:6a:26:ec:41:b3:35:60:3b:4f:6d:
86:10:12:c6
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUEiIK+SiMoYKFjC4JAF77vBPSIoswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzU1MjhCMTg4MEQxQTNDNDA5Rjc5OTk3RTQyNkY5Nzc1
OTZCM0UwMTAeFw0yNjA1MDMwMjI5MDFaFw0yNzA1MDIwMjM0MDFaMDMxMTAvBgNV
BAMTKEZCMDVFRjNBNDA4MjRDMEM3MDUwQjI0RTQ2RkNGQzBEQjcwQTMwMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnResTPjKu8UnkJ558DhopTyB6
BmgrEnW3xobrrspXdz7HVTBztfkdja7opUQdtdTLnzXMpNU4SFPgnFvBYRwhIDjc
6cvDvBEcYMFz5XqHeyIv1DMSM0DP7sLAlGYgO5BJ1LP+flT2KJxLL5C4k87VJ/mP
ulQDWAuZiQCFtgYZ1wDTEtU60jFGX3x/d6iG9iiBiE3IP4Wkf/4XG+yZmk/cvlGs
NxVkS753seWgJ2Ax0lCJyFuuAQ3wkndUOOt0UGHOAfCyNdoYm/xNtZV8d1krfHsx
Bg8iZHRdZu9KLIlCwbclGeFgOSIvmI45F5Lk+/14yAJfw3ZbDuviHxrH4JP1AgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQU+wXvOkCCTAxwULJORvz8DbcKMAYwHwYDVR0j
BBgwFoAUxVKLGIDRo8QJ95mX5Cb5d1lrPgEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTVjZTM2ZGUtZjkyMS00Mjc0LTg0OTctMjk4N2Q5MDk1NDNlLzAvQzU1MjhCMTg4
MEQxQTNDNDA5Rjc5OTk3RTQyNkY5Nzc1OTZCM0UwMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DNTUyOEIxODgwRDFBM0M0MDlGNzk5OTdFNDI2Rjk3NzU5NkIz
RTAxLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzU1Y2UzNmRlLWY5MjEtNDI3NC04
NDk3LTI5ODdkOTA5NTQzZS8wLzMyMzQzMDMwM2EzODMwMzAzMDNhMzgzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzNDM4MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQAgAAACDANBgkq
hkiG9w0BAQsFAAOCAQEAAg50RG0JtGdCvDsUT3KqgB/0Zk/jwUVkfbWpQa+pk83B
fGSU6VQs42HkFTWHkWGR5KuoJrfs2hVIcX+NxOJfbU7BMQ03Co3G9N2eJOV9oVzT
sSzThF3f+J7Os0eL6JDACX5aQ9tOCmrzFK8UmiPxyXJxhdUFYpewL0vqG+jbAtqp
7NCZoRE/17W6WRXOfCCNdMR+VmBhnm3CKKTaLuVJv/4dV2D59TL8W+Gjlcxxa6eR
CzUdzHmaIvpNBrjuVbRz5xm31X45qHOAbaWtJRX7EGejtXZ834TpCNwfp8QMEV/K
rvO9bjJmX8AAbXxsk+9AfeJqJuxBszVgO09thhASxg==
-----END CERTIFICATE-----
Generated at Wed May 13 15:24:37 2026 by rpki-client