
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31323a3a2f34382d3438203d3e203538353532.roa
File: 323430343a666430303a31323a3a2f34382d3438203d3e203538353532.roa (raw, json)
Hash identifier: FXofh6NlLq1APuqOTG5XJhXQr9YC6JsEdIEiPUZg3sI=
Subject key identifier: 09:10:7A:E7:90:82:76:13:E6:F0:EC:6A:E5:A1:19:79:AD:9A:CC:90
Certificate issuer: /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Certificate serial: 76233F475302387CD81FDBF9D67A9E0D92806012
Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31323a3a2f34382d3438203d3e203538353532.roa
Signing time: Sun 03 May 2026 02:36:35 +0000
ROA not before: Sun 03 May 2026 02:31:35 +0000
ROA not after: Sun 02 May 2027 02:36:35 +0000
asID: 58552
IP address blocks: 2404:fd00:12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:23:3f:47:53:02:38:7c:d8:1f:db:f9:d6:7a:9e:0d:92:80:60:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Validity
Not Before: May 3 02:31:35 2026 GMT
Not After : May 2 02:36:35 2027 GMT
Subject: CN=09107AE790827613E6F0EC6AE5A11979AD9ACC90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5d:bc:f1:f2:d5:95:96:99:8f:a1:fb:f3:61:
58:65:1b:34:e0:71:c8:db:fc:92:7a:ce:74:6e:42:
f6:91:48:db:22:c0:a3:83:8a:5d:fb:a9:78:57:bc:
6b:6a:f1:37:de:b6:70:66:94:c9:3c:1c:82:56:dd:
9c:ae:3c:71:b5:1c:10:ef:0e:16:7e:cd:b5:ae:86:
5a:92:dc:dd:44:ee:9d:3b:51:32:64:0a:df:4e:15:
45:ab:c9:1e:4e:11:cd:dc:fa:3f:34:44:64:5c:2d:
e0:3e:33:78:10:d1:c7:32:6a:fb:64:c3:e8:16:17:
46:6e:09:7c:44:91:8a:eb:7a:21:a5:c4:bd:40:05:
e4:fc:a9:30:9f:3f:5f:7a:ab:3e:2e:11:a4:a9:8d:
25:55:56:e9:af:9d:e7:b6:b2:aa:1f:88:90:8b:74:
80:c2:11:f1:8e:89:28:ad:c9:26:6b:f1:c1:0a:5b:
55:75:20:4f:a5:27:f4:ec:64:92:5b:f6:d2:e3:8a:
dd:dc:62:3b:e1:23:d5:24:7a:81:9e:e3:a0:f4:39:
14:18:53:09:c5:c4:df:b4:59:c8:1e:2e:ce:eb:e8:
d4:e2:1e:b4:83:86:d3:41:a6:87:39:86:0a:fd:8e:
ec:0a:61:00:df:ab:21:1d:d7:32:8c:b3:b3:99:3a:
fd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:10:7A:E7:90:82:76:13:E6:F0:EC:6A:E5:A1:19:79:AD:9A:CC:90
X509v3 Authority Key Identifier:
keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31323a3a2f34382d3438203d3e203538353532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:fd00:12::/48
Signature Algorithm: sha256WithRSAEncryption
44:33:84:8f:9a:59:c6:ae:e2:47:23:55:dd:ca:50:a6:0f:39:
2c:cc:18:f8:1c:df:fb:57:ee:d7:44:98:4d:e5:ed:e6:59:0f:
79:4b:25:a7:5a:88:8a:f5:57:08:4b:6a:ba:00:d0:7a:9b:a3:
6a:30:65:c1:17:e1:98:19:78:f6:48:66:1c:90:d0:12:a5:41:
8a:d7:5b:ee:68:49:9f:c5:c1:32:c8:a9:77:a4:cd:75:89:1a:
c4:c2:05:78:da:78:c5:69:46:23:dd:47:62:81:bd:8e:e0:5a:
4f:f6:50:25:81:d2:76:30:92:94:fe:89:cb:66:17:18:15:cf:
88:92:b3:99:f0:3a:84:a9:2b:78:16:e8:4b:88:a8:07:83:3a:
ba:b9:84:0d:36:7a:d3:f3:fe:d1:79:6e:31:c2:58:16:f1:ec:
7e:43:f8:16:d4:8a:82:8c:b1:ae:35:58:d7:ed:36:88:dc:cc:
18:71:5d:c3:12:0d:2b:17:99:79:8a:50:3e:fd:a9:f7:46:2f:
0f:56:28:8c:3a:c0:51:5a:b5:5e:2c:f6:8a:4e:b0:99:76:02:
fe:44:a1:93:46:0f:fb:c0:94:b1:f1:0b:27:13:0c:7e:88:d6:
43:81:6b:66:22:3e:9b:06:71:c9:25:dc:a2:48:bc:a8:79:dd:
62:18:0b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:44 2026 by rpki-client