
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a653a3a2f34382d3438203d3e203536323436.roa
File: 323430343a666430303a653a3a2f34382d3438203d3e203536323436.roa (raw, json)
Hash identifier: PTem1zW2I2Ay56B6dbeatqAae/kssSaU7bhfGueIDN0=
Subject key identifier: E0:D5:0C:7B:21:BD:5C:1B:BF:3D:A2:8D:69:D6:FA:11:FE:21:72:D2
Certificate issuer: /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Certificate serial: 4FA832850403D00C9E399F077A343D2853C5095A
Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a653a3a2f34382d3438203d3e203536323436.roa
Signing time: Sun 03 May 2026 02:36:35 +0000
ROA not before: Sun 03 May 2026 02:31:35 +0000
ROA not after: Sun 02 May 2027 02:36:35 +0000
asID: 56246
IP address blocks: 2404:fd00:e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:a8:32:85:04:03:d0:0c:9e:39:9f:07:7a:34:3d:28:53:c5:09:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Validity
Not Before: May 3 02:31:35 2026 GMT
Not After : May 2 02:36:35 2027 GMT
Subject: CN=E0D50C7B21BD5C1BBF3DA28D69D6FA11FE2172D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:35:97:a5:9c:c2:f5:a5:d9:22:39:c9:15:04:
4f:a3:63:95:91:f4:64:cd:18:04:a0:b7:4b:e1:a2:
f3:7f:c4:3d:c6:ca:06:fb:52:36:b8:bd:d7:63:3a:
72:f7:4a:e2:39:1a:17:33:7a:5d:37:21:22:3b:da:
15:33:2a:b6:ed:fc:df:a3:d0:34:fa:fe:5f:42:4a:
5f:6e:f5:18:07:dc:d9:86:e0:d0:23:67:70:99:0b:
6a:4d:ce:49:3f:51:b3:7f:98:15:3a:01:3d:2a:72:
4b:e5:91:e0:27:21:e9:8a:e8:18:63:d9:e5:ff:f6:
55:15:b3:eb:96:cd:35:b8:16:a6:fe:96:ff:5a:a9:
0d:78:67:56:d4:d0:f0:34:64:b6:e8:6a:fd:fe:ab:
f1:20:61:4f:bb:72:ef:5a:1d:22:94:a3:b6:6b:22:
c1:23:01:a1:a7:5b:a5:28:95:50:74:cf:d9:4c:5c:
5f:22:93:ea:ef:e9:0d:3d:f4:35:95:79:6e:3f:cb:
b5:4b:91:4c:66:38:28:12:5e:3d:78:b3:c8:e2:03:
25:dc:ee:e6:0e:4f:fd:64:b8:41:c2:1a:e3:d4:03:
c6:4c:3c:9d:f6:d6:c9:80:b7:b1:70:04:8e:72:11:
d4:0d:db:de:5a:a9:e1:9b:f0:d5:d2:f1:d9:ea:00:
49:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D5:0C:7B:21:BD:5C:1B:BF:3D:A2:8D:69:D6:FA:11:FE:21:72:D2
X509v3 Authority Key Identifier:
keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a653a3a2f34382d3438203d3e203536323436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:fd00:e::/48
Signature Algorithm: sha256WithRSAEncryption
44:de:86:0f:3e:7d:a7:f7:92:1c:b9:7a:a7:3f:9b:e0:08:9a:
56:b4:b6:d2:3e:4c:e2:f0:4e:ac:b0:3f:12:96:03:cf:b7:46:
c8:26:47:e8:c7:b6:30:cb:25:00:ab:fd:33:dd:85:ff:35:fb:
f4:a5:15:21:f2:4c:6d:f3:ed:6c:30:36:d7:ea:00:fc:9a:5a:
5b:cd:fe:05:b9:f9:2a:ca:db:bb:11:56:96:fb:37:9a:10:c0:
4d:8b:63:c4:9e:6f:6e:0f:7a:59:4e:a9:ad:fb:7a:4e:d6:2d:
73:f9:7c:4a:7b:20:bf:6c:a9:07:ac:c0:4e:ba:4b:d7:91:47:
86:16:12:e5:50:29:61:b2:92:cd:0d:f0:c4:ce:d7:ee:12:d7:
50:5e:2a:09:8a:37:b8:91:f5:a2:55:84:51:7d:d8:e5:0d:92:
04:0b:1e:58:d5:72:f8:81:bc:6f:82:0b:15:27:4c:9e:e8:10:
49:fb:35:5a:31:03:5b:e3:db:af:0d:65:d0:ca:46:2a:9e:65:
c5:23:d2:87:05:0d:0b:e1:79:84:ca:3d:14:e9:04:a6:3c:7f:
84:f8:25:2c:34:bd:7c:45:d1:3e:bd:07:19:f2:d8:53:c4:63:
0a:db:0c:cf:20:e4:3c:46:ee:c4:35:4c:0a:5b:64:94:98:4b:
54:65:ee:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:47:40 2026 by rpki-client