
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a33343a3a2f34382d3438203d3e203538333839.roa
File: 323430343a666430303a33343a3a2f34382d3438203d3e203538333839.roa (raw, json)
Hash identifier: tdKp/PyMQqUMTNRb4e50L2gAqL5v+WSupekjrjhao+U=
Subject key identifier: 4E:36:EF:3F:9E:3C:94:0E:25:14:3B:3E:75:C4:34:A8:1A:F7:F7:3E
Certificate issuer: /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Certificate serial: 1801A077A64FDCFAD4C449A3BAC7381F9846A6AB
Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a33343a3a2f34382d3438203d3e203538333839.roa
Signing time: Sun 03 May 2026 02:36:40 +0000
ROA not before: Sun 03 May 2026 02:31:40 +0000
ROA not after: Sun 02 May 2027 02:36:40 +0000
asID: 58389
IP address blocks: 2404:fd00:34::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:01:a0:77:a6:4f:dc:fa:d4:c4:49:a3:ba:c7:38:1f:98:46:a6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Validity
Not Before: May 3 02:31:40 2026 GMT
Not After : May 2 02:36:40 2027 GMT
Subject: CN=4E36EF3F9E3C940E25143B3E75C434A81AF7F73E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:37:a1:58:20:2a:8b:6d:cb:22:cf:92:8f:ce:
6c:96:6b:9d:ef:32:61:37:28:0b:0c:27:48:1f:10:
a4:7e:94:e4:9a:c4:fb:ad:54:c6:94:0d:5f:6b:b9:
58:fc:18:e0:fa:23:43:4e:f2:21:88:8e:c4:b0:33:
39:18:71:30:37:db:5a:ba:46:e6:78:a6:65:5d:e8:
6b:36:d9:57:46:51:3d:f3:02:4c:35:8c:6c:5b:3b:
58:2d:36:71:52:93:f3:8a:0c:88:3d:bd:6c:8a:34:
27:a8:68:41:fd:f4:eb:ac:bd:c7:c8:41:23:66:a8:
de:64:75:9a:7d:dc:ad:4c:9a:bb:ae:77:ae:a2:df:
ec:4d:ae:ef:bd:b8:d3:0b:9e:e0:99:b4:85:c2:40:
cc:5f:de:09:72:b3:5c:3c:61:44:85:c0:30:9e:58:
d4:5d:2f:96:4f:d7:7c:11:2a:4a:46:e0:8a:96:b9:
fa:95:60:08:64:84:99:69:1a:6e:d0:5c:05:2e:e1:
5b:6f:9a:7c:d9:da:0c:87:92:df:bd:e6:a2:3e:5d:
b3:9a:7e:33:39:75:2b:b7:77:af:43:94:c5:b2:31:
02:b8:f5:45:ee:fe:d3:b1:2f:05:99:e6:db:e1:88:
f3:5d:39:6a:ec:6d:bd:03:c2:37:f0:ce:a5:3a:86:
54:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:36:EF:3F:9E:3C:94:0E:25:14:3B:3E:75:C4:34:A8:1A:F7:F7:3E
X509v3 Authority Key Identifier:
keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a33343a3a2f34382d3438203d3e203538333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:fd00:34::/48
Signature Algorithm: sha256WithRSAEncryption
6f:1e:45:e8:b2:5f:8d:f9:e9:d0:50:ef:d3:8a:d5:e4:00:94:
e9:dd:f1:f2:48:20:08:c9:8b:fb:1b:ec:a9:87:a0:3a:67:d3:
20:07:66:9f:44:9f:db:b2:37:85:eb:1b:cd:a5:a4:ea:fc:4a:
e7:07:39:09:09:69:6a:13:39:37:1c:fe:cf:c0:4d:bc:f0:74:
68:06:01:01:67:25:f9:d7:ca:ec:52:fa:be:0e:eb:56:e9:5d:
b4:9f:26:1a:54:81:63:fd:dc:ef:8e:05:4c:72:17:50:59:a4:
d5:b8:44:88:b9:cd:d3:3a:f2:3c:0d:cf:c1:62:11:30:1e:e0:
45:8f:9d:c1:b6:bc:fd:7d:ff:22:c0:ad:9d:02:91:3f:e6:48:
94:30:c8:d6:8e:01:10:3d:45:e3:62:22:9a:fc:57:56:28:08:
0d:90:f9:c0:83:e1:e6:b3:d6:69:84:15:ae:7e:b3:63:01:d6:
10:a6:a2:9b:57:93:32:15:55:3e:4d:71:95:7c:c6:b6:2e:02:
ab:54:11:f8:9f:92:6a:56:b3:08:2e:52:dd:04:e8:1d:01:42:
ae:a4:1c:e9:4a:5c:44:d5:01:7c:c3:1c:fd:96:06:33:5a:5b:
7f:ed:a8:d3:c7:c9:a7:db:17:06:ba:c0:77:77:6c:22:23:dd:
72:80:28:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:15:06 2026 by rpki-client