
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31663a3a2f34382d3438203d3e203538353532.roa
File: 323430343a666430303a31663a3a2f34382d3438203d3e203538353532.roa (raw, json)
Hash identifier: 6q1VjN7Z8uN3MkEvcT0TT8kGrPRYny8XlH/qXonOjQ8=
Subject key identifier: 38:41:91:33:27:22:F5:64:56:A9:94:88:03:05:BC:E5:10:C6:6F:E4
Certificate issuer: /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Certificate serial: 0EE36F71C54DB157AC11327EA70F2456E01ACD33
Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31663a3a2f34382d3438203d3e203538353532.roa
Signing time: Sun 03 May 2026 02:36:25 +0000
ROA not before: Sun 03 May 2026 02:31:25 +0000
ROA not after: Sun 02 May 2027 02:36:25 +0000
asID: 58552
IP address blocks: 2404:fd00:1f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:e3:6f:71:c5:4d:b1:57:ac:11:32:7e:a7:0f:24:56:e0:1a:cd:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Validity
Not Before: May 3 02:31:25 2026 GMT
Not After : May 2 02:36:25 2027 GMT
Subject: CN=384191332722F56456A994880305BCE510C66FE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:71:3f:89:6c:44:85:e8:43:1b:b5:33:7d:74:
41:3f:cf:3d:ab:27:a1:74:aa:1d:5e:2f:e1:b4:07:
35:fb:2d:7a:41:e6:07:78:76:5c:e8:44:8e:45:76:
c7:51:ce:50:81:0c:22:58:1f:97:33:ef:6f:16:c8:
1b:3f:47:b4:09:1f:51:51:12:e2:91:41:26:2d:74:
29:c8:f7:b4:bc:70:85:a7:19:1c:1f:59:41:57:b9:
73:67:0c:1f:a5:53:06:16:5b:35:61:4d:23:16:e7:
d7:b4:ff:dc:2d:38:6c:79:05:1a:69:22:0c:24:15:
c0:db:a4:61:de:99:ce:a0:e3:a8:60:87:28:32:73:
65:94:f2:2d:94:c9:bb:8b:f7:85:94:a7:63:ff:ee:
03:66:47:4e:28:0e:2d:b8:13:3b:60:4e:dc:fe:17:
9d:eb:04:47:33:f4:e5:6f:e7:6c:19:cc:19:1e:97:
de:16:9d:18:d6:34:a2:10:57:6d:41:f5:90:0b:cc:
33:b2:7a:7a:9b:0a:e1:ff:3b:4c:e0:17:da:ab:67:
87:9e:06:12:39:ed:46:7a:cd:bf:22:8b:84:71:bb:
1c:d7:e1:8b:e0:27:f8:ea:ae:8d:7f:8d:2c:5d:a5:
ac:d1:08:af:c1:20:1f:91:55:26:49:81:5d:dc:09:
4f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:41:91:33:27:22:F5:64:56:A9:94:88:03:05:BC:E5:10:C6:6F:E4
X509v3 Authority Key Identifier:
keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31663a3a2f34382d3438203d3e203538353532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:fd00:1f::/48
Signature Algorithm: sha256WithRSAEncryption
c2:43:ff:49:6b:1b:ba:bf:1a:54:bd:ac:a1:5f:64:7c:09:c0:
26:4d:06:6f:ae:37:e5:d9:e3:b4:12:50:cd:a3:18:46:d1:60:
b8:16:ad:93:65:bc:75:f2:dd:6a:ef:46:55:40:28:91:30:ac:
87:17:2b:21:5f:4b:42:55:85:c3:46:0f:6a:ae:e5:91:13:d5:
b1:db:ec:80:a4:b9:ab:08:b0:51:6d:9b:38:6e:03:7e:c6:d3:
6a:3c:bf:81:20:01:77:c4:14:0e:0e:10:57:b4:58:c9:4b:b3:
13:a1:92:68:10:32:92:cc:6a:92:7f:58:3b:08:4a:ad:e4:b3:
e0:3f:ee:da:8a:06:4d:51:88:92:31:a0:73:c7:bb:8d:15:d3:
0e:7d:47:d2:ae:08:12:88:ec:96:a0:3b:40:96:2b:3a:dc:50:
b6:51:3f:34:a3:62:01:2d:e8:4d:99:b7:4d:ea:cb:15:3f:95:
4e:3e:7b:3a:7c:2b:76:cd:69:10:26:c4:f4:3c:c3:5e:30:4b:
46:d1:6d:8e:a6:45:6e:4b:6e:fc:e4:0e:a7:46:0c:ee:56:3e:
43:ac:2f:cf:2c:49:46:35:53:2b:50:42:2b:33:ff:46:e3:67:
f1:db:7f:74:ea:4a:4b:bf:a6:c6:0f:d2:f1:9b:75:3e:d0:3b:
8d:2a:a0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:24:29 2026 by rpki-client