
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31643a3a2f34382d3438203d3e203536323436.roa
File: 323430343a666430303a31643a3a2f34382d3438203d3e203536323436.roa (raw, json)
Hash identifier: GtD33l2NBdn6FG7LFnaDQwvhplDFO7FiyTXBKHltnbg=
Subject key identifier: 35:5C:39:55:73:02:15:04:CA:3F:79:45:1B:55:B0:D9:8C:06:D1:33
Certificate issuer: /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Certificate serial: 04FCEC439F0A278141EED6F9B42A0FA4C2C176C9
Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31643a3a2f34382d3438203d3e203536323436.roa
Signing time: Sun 03 May 2026 02:36:31 +0000
ROA not before: Sun 03 May 2026 02:31:31 +0000
ROA not after: Sun 02 May 2027 02:36:31 +0000
asID: 56246
IP address blocks: 2404:fd00:1d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:fc:ec:43:9f:0a:27:81:41:ee:d6:f9:b4:2a:0f:a4:c2:c1:76:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Validity
Not Before: May 3 02:31:31 2026 GMT
Not After : May 2 02:36:31 2027 GMT
Subject: CN=355C395573021504CA3F79451B55B0D98C06D133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:3a:18:a1:59:23:0d:14:a9:49:a4:b7:77:
43:77:bb:38:29:ee:73:3c:90:61:8d:d3:ac:ac:38:
aa:f8:3d:7a:36:6e:42:d5:89:66:d9:54:fe:43:b1:
ca:56:25:f1:c5:65:3f:87:83:dc:ac:75:72:cf:bd:
f4:f3:6a:bb:de:41:57:80:94:44:db:15:fd:3e:87:
69:fc:f3:45:3b:23:0e:0e:8f:31:bb:ae:32:9e:65:
fa:67:61:85:a2:66:77:f0:f0:32:b4:07:7d:36:96:
be:34:6b:57:ee:67:33:e1:36:09:4f:16:96:5c:c7:
9b:c0:13:ec:20:a4:23:6f:56:af:7c:ce:7d:dc:b9:
df:7e:36:d4:aa:3e:3d:d4:1e:04:40:ce:01:ea:83:
43:55:15:07:3e:5c:34:ca:36:2a:f5:f7:d8:a5:cf:
00:10:b6:d1:10:e0:db:85:e0:71:99:a6:f1:2e:a4:
74:cf:68:9a:7c:ba:cb:3d:86:56:35:6e:55:67:12:
fc:ae:ce:30:ba:25:3b:46:93:54:f9:29:ae:a7:4a:
47:03:c4:30:f0:e0:0d:87:1d:2b:8b:a6:e2:0b:de:
d9:fc:f3:fd:8c:ba:ec:6e:de:5c:e2:1c:08:9e:d0:
55:02:47:72:54:8a:b1:1d:d6:ba:53:47:b0:c8:2f:
06:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5C:39:55:73:02:15:04:CA:3F:79:45:1B:55:B0:D9:8C:06:D1:33
X509v3 Authority Key Identifier:
keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31643a3a2f34382d3438203d3e203536323436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:fd00:1d::/48
Signature Algorithm: sha256WithRSAEncryption
8e:8e:fa:70:5a:65:d6:48:f5:bd:6d:9a:6d:74:5b:1b:7f:9d:
6e:07:00:aa:42:be:88:c1:d9:ac:1e:6e:6f:4a:45:b5:7b:0f:
f2:54:83:39:1a:1e:0d:53:0b:9a:d1:b5:89:52:ba:dd:84:ac:
e4:79:18:03:d1:d2:b8:da:81:23:c9:99:8b:58:d4:18:a1:a6:
77:ee:ca:59:8b:c0:55:df:27:6e:a0:ad:29:50:2a:2e:85:74:
1d:87:a2:87:db:d0:4d:b7:88:76:84:59:04:4b:70:fc:3d:2d:
8f:ad:98:c6:5c:aa:c2:14:bb:af:2c:82:14:a3:9d:8c:cd:54:
fa:c4:40:c3:cf:34:fe:b5:50:b9:66:5f:8d:1f:51:5f:f8:d6:
17:56:96:ed:2b:51:15:f8:88:3d:2b:c0:63:e9:e6:ef:99:c2:
63:a0:16:ef:cf:58:a7:84:c7:ba:7d:df:26:a2:b6:ef:c0:71:
9f:24:e4:a6:80:76:da:bb:61:18:ff:7a:d3:73:f0:a0:7b:17:
71:e3:d2:a5:55:05:fa:f0:27:63:78:4f:0a:6f:d1:33:a1:a8:
38:13:2e:c2:6a:00:a1:83:be:7c:66:d9:04:b7:ec:83:fa:84:
20:9f:3b:29:fd:d1:a0:b5:ef:e7:90:bd:07:4f:d5:87:28:27:
16:89:b5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:48:47 2026 by rpki-client