
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a32373a3a2f34382d3438203d3e203536323436.roa
File: 323430343a666430303a32373a3a2f34382d3438203d3e203536323436.roa (raw, json)
Hash identifier: yOnLX5r8obc5lvjN4HLaKlz/pTRrZIg98RBFHd9BC9M=
Subject key identifier: 95:9C:95:F3:98:55:DA:25:90:00:23:6C:A9:EB:45:F5:9B:1C:B5:A4
Certificate issuer: /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Certificate serial: 547C0E3028F4173EEBBA31058501632068AB0DEE
Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a32373a3a2f34382d3438203d3e203536323436.roa
Signing time: Sun 03 May 2026 02:36:41 +0000
ROA not before: Sun 03 May 2026 02:31:41 +0000
ROA not after: Sun 02 May 2027 02:36:41 +0000
asID: 56246
IP address blocks: 2404:fd00:27::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:7c:0e:30:28:f4:17:3e:eb:ba:31:05:85:01:63:20:68:ab:0d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Validity
Not Before: May 3 02:31:41 2026 GMT
Not After : May 2 02:36:41 2027 GMT
Subject: CN=959C95F39855DA259000236CA9EB45F59B1CB5A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:80:4a:16:ed:fc:90:05:8e:eb:a0:16:f3:d8:
77:35:d0:eb:02:0c:68:b5:bd:1e:75:d2:7c:61:25:
fe:d0:31:28:4d:b6:31:10:49:fb:ea:99:d0:ea:43:
db:55:44:9f:e3:98:61:2f:36:72:d8:8a:11:22:bf:
52:b5:7a:6b:0e:25:b4:01:25:0a:ed:2f:d5:75:f8:
fc:5a:60:db:50:74:81:9f:c0:9b:7a:df:7c:e0:09:
a5:84:ee:85:37:de:66:08:1e:9c:c5:35:17:21:90:
3a:08:78:79:3c:72:6a:fd:c7:e4:86:5b:04:62:6a:
96:d9:4e:3b:cd:ea:33:45:98:87:d9:c3:7b:60:57:
b9:8b:35:0f:71:1b:57:ce:46:1f:fc:87:b3:13:a4:
7a:89:a8:53:50:2b:47:d1:43:b1:04:63:4c:0e:41:
a5:5b:fd:38:8e:3a:81:2b:69:5e:6d:2a:ca:20:e5:
b6:d3:27:d0:4a:45:a4:3e:60:49:6f:49:0a:8c:d8:
73:33:57:63:74:31:f1:55:2d:77:92:04:f0:a9:b1:
92:3b:ec:1b:62:60:b4:3b:12:47:81:5c:b2:2c:d7:
b5:70:df:86:c9:1d:67:94:21:f0:4a:83:ec:c0:f0:
cc:54:6f:be:56:2f:29:7d:0c:4c:4b:5c:af:82:08:
d1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9C:95:F3:98:55:DA:25:90:00:23:6C:A9:EB:45:F5:9B:1C:B5:A4
X509v3 Authority Key Identifier:
keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a32373a3a2f34382d3438203d3e203536323436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:fd00:27::/48
Signature Algorithm: sha256WithRSAEncryption
4a:ff:c9:88:29:5c:87:cd:e7:40:d4:9d:aa:f2:43:23:9b:5e:
63:18:da:97:66:37:02:0d:29:b2:bc:4a:97:1e:07:94:91:03:
50:2e:61:3e:95:81:ae:04:1c:48:5b:14:f9:50:b8:b5:bc:ed:
bd:0a:d0:35:95:0a:fe:8a:eb:89:3f:90:8d:88:70:14:7f:97:
ad:12:77:03:51:6c:fe:95:9b:5b:39:ba:ac:e2:be:9f:6e:0e:
6c:d5:1b:6f:b0:e0:27:ab:ba:aa:83:8a:a3:c3:69:38:00:bb:
2e:98:10:e6:54:e0:4f:16:dd:b7:0c:73:33:f6:78:4a:e0:b3:
70:16:70:1b:75:aa:1a:33:e0:d5:34:5a:77:c2:38:81:ef:a6:
58:5e:ff:75:be:b8:c9:c1:79:96:41:22:15:0a:e4:5e:16:a8:
01:7b:4e:e2:17:bf:de:c8:24:5d:6d:b9:e4:3d:b7:d1:b4:61:
60:35:72:4d:3a:7e:68:4c:13:76:44:b7:4a:70:77:54:a5:6c:
c2:71:a1:a2:63:dc:f2:ad:88:cb:26:b4:29:e2:56:c3:18:3e:
da:84:89:84:42:6b:85:83:b3:08:60:45:82:14:51:b0:91:53:
32:7a:1b:b1:18:52:89:b9:55:04:e1:06:3e:23:9c:d1:1c:b2:
e3:ba:aa:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:56:30 2026 by rpki-client