
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31383a3a2f34382d3438203d3e203538353532.roa
File: 323430343a666430303a31383a3a2f34382d3438203d3e203538353532.roa (raw, json)
Hash identifier: 9UzfT7LLn0bUwQObFe76BOZbwh+bWGbVpL9IQZJFG/k=
Subject key identifier: F3:97:40:4A:51:BF:2C:E1:34:8E:89:4F:05:63:6B:09:FC:4F:E2:B6
Certificate issuer: /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Certificate serial: 4D81058BBA5AD5BDFEEC768B7BE95E18B7B5895A
Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31383a3a2f34382d3438203d3e203538353532.roa
Signing time: Sun 03 May 2026 02:36:24 +0000
ROA not before: Sun 03 May 2026 02:31:24 +0000
ROA not after: Sun 02 May 2027 02:36:24 +0000
asID: 58552
IP address blocks: 2404:fd00:18::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:81:05:8b:ba:5a:d5:bd:fe:ec:76:8b:7b:e9:5e:18:b7:b5:89:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Validity
Not Before: May 3 02:31:24 2026 GMT
Not After : May 2 02:36:24 2027 GMT
Subject: CN=F397404A51BF2CE1348E894F05636B09FC4FE2B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f3:6c:ed:73:70:72:d2:18:a9:90:a7:42:b4:
19:e4:22:e5:9f:cb:61:b2:c7:e8:20:45:27:43:c9:
45:d3:65:df:9a:d9:45:df:9d:90:67:dd:da:67:69:
dc:79:2e:7f:11:86:22:95:c2:42:bf:0b:6b:30:be:
b8:6a:35:0b:9c:0c:ed:86:aa:db:ca:0f:ad:09:2a:
c4:64:98:2c:0d:39:fa:de:42:99:38:1e:3d:64:e4:
b9:53:0d:bc:db:2c:1a:0a:50:8d:6d:f3:72:a9:07:
e7:69:ca:42:46:94:1c:cf:71:48:53:42:b4:5d:6e:
8c:a7:8b:86:97:d3:a2:ef:fe:b7:8a:a0:c2:33:95:
64:0c:ff:81:75:ca:43:80:e2:54:76:7c:3c:93:32:
4a:48:ea:f6:4d:3e:05:7c:b4:4f:fb:e7:9b:f4:6d:
09:12:18:d7:bb:95:c5:04:24:ad:1e:7d:7e:ec:19:
3e:bb:b6:f3:da:d9:2f:ab:e3:ab:3f:ca:51:a4:05:
a0:71:b6:59:24:32:96:d1:d3:b3:64:f9:e1:5e:ac:
5f:20:a4:07:3c:f4:9c:38:66:05:2e:96:66:8b:a3:
b0:7b:3f:34:4b:36:e9:ba:e0:27:df:54:c7:f7:87:
f5:1c:9a:7c:48:7e:64:eb:c6:b7:92:7b:ab:1a:34:
06:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:97:40:4A:51:BF:2C:E1:34:8E:89:4F:05:63:6B:09:FC:4F:E2:B6
X509v3 Authority Key Identifier:
keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31383a3a2f34382d3438203d3e203538353532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:fd00:18::/48
Signature Algorithm: sha256WithRSAEncryption
c5:c4:14:b1:52:89:a1:9e:19:8c:6e:5c:f0:1a:56:7d:24:c1:
e0:98:6b:06:a3:8b:88:5f:9f:53:79:2e:ed:75:05:36:ab:9a:
58:d6:ba:54:b7:3e:25:d2:31:d4:06:1c:cc:f5:02:cf:ed:05:
4f:f6:3d:72:6b:d5:15:c3:6a:f0:3b:22:d8:c8:04:42:ce:0a:
ab:c7:19:44:45:05:35:ad:2b:08:a3:65:c6:e1:23:83:8f:d3:
30:1f:9a:1f:71:a8:29:9b:13:32:f3:6d:b7:f1:35:21:e0:1f:
3c:08:29:88:bf:fb:2c:94:80:74:d9:d3:89:54:55:fc:9b:58:
64:88:19:f7:21:13:aa:04:90:08:fd:2e:a9:be:fb:5a:e4:16:
20:af:59:6a:26:92:d7:4f:33:a5:5b:e4:37:f4:6d:2c:26:09:
bd:11:04:35:6c:51:05:f6:e8:77:f4:a3:0e:35:b2:4b:08:7b:
1e:9d:3b:23:61:7e:ee:c7:81:a2:61:04:33:35:7b:dd:44:30:
79:c0:23:e0:ec:d8:7e:c8:c1:ed:2e:5c:91:e0:b6:7e:ba:5a:
ce:d7:2a:df:e4:30:c3:49:b9:39:55:c4:53:d3:13:5c:18:d6:
df:96:56:d6:91:f1:94:11:c2:5c:4d:45:16:a9:63:67:d5:b3:
30:33:81:a8
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUTYEFi7pa1b3+7HaLe+leGLe1iVowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBEQjJDNDRFMjZDQTJBMTQ2RUY3MzhEMzlGNTNDQkIw
OTAxREI1MjAeFw0yNjA1MDMwMjMxMjRaFw0yNzA1MDIwMjM2MjRaMDMxMTAvBgNV
BAMTKEYzOTc0MDRBNTFCRjJDRTEzNDhFODk0RjA1NjM2QjA5RkM0RkUyQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm82ztc3By0hipkKdCtBnkIuWf
y2Gyx+ggRSdDyUXTZd+a2UXfnZBn3dpnadx5Ln8RhiKVwkK/C2swvrhqNQucDO2G
qtvKD60JKsRkmCwNOfreQpk4Hj1k5LlTDbzbLBoKUI1t83KpB+dpykJGlBzPcUhT
QrRdboyni4aX06Lv/reKoMIzlWQM/4F1ykOA4lR2fDyTMkpI6vZNPgV8tE/755v0
bQkSGNe7lcUEJK0efX7sGT67tvPa2S+r46s/ylGkBaBxtlkkMpbR07Nk+eFerF8g
pAc89Jw4ZgUulmaLo7B7PzRLNum64CffVMf3h/UcmnxIfmTrxreSe6saNAafAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQU85dASlG/LOE0jolPBWNrCfxP4rYwHwYDVR0j
BBgwFoAUENssROJsoqFG73ONOfU8uwkB21IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWQyMjdkYmUtNGExYy00MGIwLTk0YTYtNzkzYmRiZGEzNzc3LzAvMTBEQjJDNDRF
MjZDQTJBMTQ2RUY3MzhEMzlGNTNDQkIwOTAxREI1Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xMERCMkM0NEUyNkNBMkExNDZFRjczOEQzOUY1M0NCQjA5MDFE
QjUyLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05
NGE2LTc5M2JkYmRhMzc3Ny8wLzMyMzQzMDM0M2E2NjY0MzAzMDNhMzEzODNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzgzNTM1MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBP0AABgw
DQYJKoZIhvcNAQELBQADggEBAMXEFLFSiaGeGYxuXPAaVn0kweCYawaji4hfn1N5
Lu11BTarmljWulS3PiXSMdQGHMz1As/tBU/2PXJr1RXDavA7ItjIBELOCqvHGURF
BTWtKwijZcbhI4OP0zAfmh9xqCmbEzLzbbfxNSHgHzwIKYi/+yyUgHTZ04lUVfyb
WGSIGfchE6oEkAj9Lqm++1rkFiCvWWomktdPM6Vb5Df0bSwmCb0RBDVsUQX26Hf0
ow41sksIex6dOyNhfu7HgaJhBDM1e91EMHnAI+Ds2H7Iwe0uXJHgtn66Ws7XKt/k
MMNJuTlVxFPTE1wY1t+WVtaR8ZQRwlxNRRapY2fVszAzgag=
-----END CERTIFICATE-----
Generated at Wed May 13 06:37:35 2026 by rpki-client