
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31343a3a2f34382d3438203d3e203538353532.roa
File: 323430343a666430303a31343a3a2f34382d3438203d3e203538353532.roa (raw, json)
Hash identifier: 0/WxLi8RqzS1GfNoxC8XjTNPER2OqtT/gZpFo7/HJo0=
Subject key identifier: C7:9A:18:FC:2C:CD:75:03:D6:53:23:AF:C5:41:35:16:71:AF:3A:E1
Certificate issuer: /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Certificate serial: 6866403A0DF8DD01DCE488BB3A6408F9475A81D7
Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31343a3a2f34382d3438203d3e203538353532.roa
Signing time: Sun 03 May 2026 02:36:24 +0000
ROA not before: Sun 03 May 2026 02:31:24 +0000
ROA not after: Sun 02 May 2027 02:36:24 +0000
asID: 58552
IP address blocks: 2404:fd00:14::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:66:40:3a:0d:f8:dd:01:dc:e4:88:bb:3a:64:08:f9:47:5a:81:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Validity
Not Before: May 3 02:31:24 2026 GMT
Not After : May 2 02:36:24 2027 GMT
Subject: CN=C79A18FC2CCD7503D65323AFC541351671AF3AE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:81:a3:61:8c:51:46:9a:56:68:04:de:ca:c5:
c3:21:f9:ff:7e:48:8f:d6:17:28:e6:f4:97:d5:ee:
fb:92:f2:ce:fe:13:d2:f0:c0:8d:16:33:fb:7c:2e:
46:cd:63:c1:a7:90:55:fe:77:74:87:26:ce:c5:86:
b7:c8:1a:16:f8:90:f0:c7:4c:d4:fc:b5:0f:6f:35:
df:79:74:12:ff:e8:41:0e:3b:cf:c5:95:85:98:b9:
a3:07:32:48:a7:15:27:6d:8a:cc:bc:1d:55:f8:34:
c8:21:f6:62:76:9c:66:cc:12:3d:b8:f5:89:63:50:
07:fb:9b:93:ff:d0:d7:93:7e:97:17:8e:0b:59:f3:
9f:7f:8c:12:17:fd:4f:75:5a:92:83:a5:b8:d2:db:
90:4d:c1:05:c2:2d:5d:57:13:b9:60:18:d0:f1:b3:
7b:63:60:ba:89:31:e0:02:f3:01:ad:7a:7d:78:43:
33:f7:b2:9a:6e:a7:49:9c:3c:3b:76:ec:5b:a3:2b:
f8:a4:47:2f:96:92:73:67:f9:22:75:73:fb:80:a2:
9d:c6:3c:b4:ab:73:c2:b5:f3:85:32:00:1f:b9:41:
71:30:6f:f4:91:06:ed:7e:ab:17:a5:63:0a:95:58:
4c:c1:c5:fb:2a:79:67:ae:1a:07:83:51:32:88:bf:
1f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9A:18:FC:2C:CD:75:03:D6:53:23:AF:C5:41:35:16:71:AF:3A:E1
X509v3 Authority Key Identifier:
keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31343a3a2f34382d3438203d3e203538353532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:fd00:14::/48
Signature Algorithm: sha256WithRSAEncryption
82:45:c9:23:80:f5:3e:0f:53:3f:1a:00:c5:df:f1:cd:04:70:
70:7a:89:07:ad:fa:a5:b8:fb:b8:79:2a:1f:59:93:d9:8b:39:
47:cc:6a:d0:72:56:28:52:a4:b1:54:7f:75:85:7e:ca:31:dc:
37:96:7c:82:8e:e8:77:eb:06:72:b2:ac:5f:65:87:17:24:15:
62:a4:8c:c9:e6:82:49:58:e8:0f:3b:b2:ed:9c:45:d6:cb:c6:
89:14:a3:55:7e:a2:b7:64:37:38:f3:3c:57:62:41:0c:d0:5c:
45:ad:ff:73:80:9d:1a:71:b0:30:a0:b2:f7:d9:a2:44:74:e5:
fb:6b:c7:4d:a1:90:a8:5f:a6:05:2b:9a:87:b7:dc:84:d2:4d:
0f:6b:84:e8:8a:fe:12:26:42:b1:a5:af:a1:ff:e0:b1:2e:27:
65:4a:93:1f:42:38:6e:d4:88:b6:0f:75:ca:a7:d9:57:05:33:
e0:5c:a7:40:d2:cb:91:4e:34:3d:63:9c:87:a9:df:9c:4b:55:
8a:73:3f:e6:79:13:ef:63:47:b4:f4:23:bd:f5:13:1b:13:15:
34:61:56:1c:b0:a5:4a:12:45:fe:78:ef:7f:c9:6c:4c:b5:48:
b3:56:ca:bf:bc:85:58:82:a0:79:f7:87:3c:ea:60:11:f9:d6:
4e:78:6a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:18:53 2026 by rpki-client