
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31303a3a2f34382d3438203d3e203538333839.roa
File: 323430343a666430303a31303a3a2f34382d3438203d3e203538333839.roa (raw, json)
Hash identifier: VD/YZRu+SZJJgFWsF6oUWsb568uyfrosRvaCuTvqBPY=
Subject key identifier: B9:3D:35:64:66:CF:67:2E:46:A7:0A:BC:31:C9:02:1D:1B:57:92:5A
Certificate issuer: /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Certificate serial: 7E50DA84AA44CF74FA52C7F2E7B1219E6BA12C08
Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31303a3a2f34382d3438203d3e203538333839.roa
Signing time: Sun 03 May 2026 02:36:30 +0000
ROA not before: Sun 03 May 2026 02:31:30 +0000
ROA not after: Sun 02 May 2027 02:36:30 +0000
asID: 58389
IP address blocks: 2404:fd00:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:50:da:84:aa:44:cf:74:fa:52:c7:f2:e7:b1:21:9e:6b:a1:2c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Validity
Not Before: May 3 02:31:30 2026 GMT
Not After : May 2 02:36:30 2027 GMT
Subject: CN=B93D356466CF672E46A70ABC31C9021D1B57925A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a0:7f:5a:df:d5:d1:3d:74:6d:d0:51:c9:b9:
3a:af:35:8b:22:03:5b:a8:a7:17:25:8f:d0:9a:91:
a0:65:29:c3:49:eb:01:61:d4:9e:48:f6:7b:87:f8:
73:f0:75:b0:ff:cf:43:2f:d9:88:5a:78:ed:25:26:
f6:de:35:04:02:14:04:63:e1:b3:d5:9c:3d:b4:d8:
fe:08:68:14:d9:ef:6c:20:84:6e:3b:92:53:2e:10:
dc:62:d4:9a:ff:93:0f:05:ce:d5:d9:a3:f4:e3:56:
89:96:76:c7:e6:c6:e1:8a:5b:65:9d:a4:2a:9e:62:
dc:1d:ce:98:4a:8d:a1:1c:fe:42:2d:1c:79:bb:54:
d4:e7:2c:ad:f0:96:a5:29:89:e6:4d:91:18:92:79:
10:20:3d:cf:21:4f:e4:31:16:97:75:6f:91:ec:24:
87:65:1f:13:90:4f:26:6e:20:54:c7:db:45:59:fd:
62:45:2e:3d:42:e9:27:72:1e:c4:4a:d3:03:77:aa:
5f:8d:89:38:5d:1a:ef:28:fc:2f:17:00:97:e7:a4:
4d:cd:24:82:bf:d3:72:2a:6d:db:07:e4:55:2b:85:
3a:5d:1a:fe:d7:22:96:03:44:d5:38:e3:6a:48:50:
b3:93:a9:21:6f:af:07:71:69:07:95:61:6b:da:92:
b5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3D:35:64:66:CF:67:2E:46:A7:0A:BC:31:C9:02:1D:1B:57:92:5A
X509v3 Authority Key Identifier:
keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31303a3a2f34382d3438203d3e203538333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:fd00:10::/48
Signature Algorithm: sha256WithRSAEncryption
4e:84:9f:df:96:0a:4d:30:26:b4:87:4a:03:58:2e:fb:12:a3:
ce:b2:6f:ac:63:04:3f:7b:af:44:94:16:28:39:7e:0e:b6:2e:
92:e7:23:a4:f7:32:13:4c:7e:d7:ab:b1:33:d3:cc:47:04:70:
58:7e:ba:34:84:67:09:c0:89:20:4f:ec:45:d2:33:e3:cc:5b:
f1:b9:03:a9:7c:06:b7:06:e3:46:fa:34:f0:07:b6:db:92:35:
93:f5:3b:91:49:a4:18:68:0f:b3:f6:94:12:b0:be:38:4a:0d:
4a:40:d8:31:61:37:82:a0:65:45:c2:ad:31:36:a6:f9:91:f4:
05:ee:de:0e:59:82:31:48:a4:8a:3c:1d:cd:38:cb:bf:26:66:
eb:ed:b0:75:80:46:df:84:2a:12:9a:f3:9a:c7:41:04:85:70:
0f:51:5a:83:ac:0d:a8:a0:4e:1b:1b:71:08:58:49:a9:77:8e:
58:f4:7e:be:5a:11:b5:80:6d:a3:b1:97:08:e1:2e:75:16:2d:
56:cd:9e:e8:8e:65:47:b0:86:74:88:dd:fb:a0:91:98:11:7e:
66:27:d8:f6:30:18:77:ae:ac:01:13:8c:d3:a1:5e:ce:25:99:
14:a4:71:8f:61:de:ab:d4:4e:b0:38:5e:e6:a4:d0:a0:de:94:
87:2d:27:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:51:54 2026 by rpki-client