
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a666163653a3a2f34382d3438203d3e203538353532.roa
File: 323430343a666430303a666163653a3a2f34382d3438203d3e203538353532.roa (raw, json)
Hash identifier: /MsS92AYR+auZmwHQTZhP//FQH8kJRC7n9TR+f3scAg=
Subject key identifier: DB:AB:0C:63:31:42:84:11:FE:D6:B4:0D:3B:9D:3D:4A:C2:EE:96:90
Certificate issuer: /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Certificate serial: 73C3BCE827523E67F2D1FED3E67D066393BD0A3D
Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a666163653a3a2f34382d3438203d3e203538353532.roa
Signing time: Sun 03 May 2026 02:36:25 +0000
ROA not before: Sun 03 May 2026 02:31:25 +0000
ROA not after: Sun 02 May 2027 02:36:25 +0000
asID: 58552
IP address blocks: 2404:fd00:face::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:c3:bc:e8:27:52:3e:67:f2:d1:fe:d3:e6:7d:06:63:93:bd:0a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Validity
Not Before: May 3 02:31:25 2026 GMT
Not After : May 2 02:36:25 2027 GMT
Subject: CN=DBAB0C6331428411FED6B40D3B9D3D4AC2EE9690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:68:34:77:fa:54:7b:af:8c:c7:93:8f:16:e5:
c1:3c:34:2a:5b:7a:e1:a7:1a:75:3d:3b:3b:38:69:
f2:d3:3d:93:59:41:da:13:79:47:47:d5:9c:3c:f2:
13:89:70:68:00:cf:85:13:8e:d5:74:6d:2d:90:52:
86:d9:3b:84:72:3d:6c:21:3d:d9:7e:4d:42:5c:0e:
e5:ea:0d:07:ca:1b:2d:3d:ab:a0:bf:34:44:2b:9f:
79:58:5a:bf:64:81:a4:cd:d1:2e:9a:e6:70:af:97:
72:5d:56:0c:88:e3:21:e1:a7:84:6b:db:9c:19:b7:
3b:44:f8:89:3b:ca:9d:cd:56:81:a5:53:eb:95:19:
84:c1:ec:39:60:b8:e9:ee:a6:e1:78:b4:4e:08:2d:
25:7f:86:e7:50:7d:6a:01:71:47:f9:12:04:26:e0:
ac:f1:01:5d:21:3b:de:d7:37:fb:34:3f:2b:5d:bf:
9e:79:d2:77:ee:ea:12:05:b2:f0:af:87:de:71:7f:
d1:f7:3f:95:e1:ca:b8:b0:9a:55:bf:e5:26:d6:ac:
d2:07:51:32:4d:98:f3:73:1f:13:d5:67:93:00:49:
8f:df:e7:a0:a6:57:41:0b:1c:ce:d4:47:46:f4:13:
44:2e:3b:32:af:3a:79:93:2a:33:ec:d9:50:d6:e6:
c1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AB:0C:63:31:42:84:11:FE:D6:B4:0D:3B:9D:3D:4A:C2:EE:96:90
X509v3 Authority Key Identifier:
keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a666163653a3a2f34382d3438203d3e203538353532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:fd00:face::/48
Signature Algorithm: sha256WithRSAEncryption
9f:c6:20:7b:93:1d:51:66:c8:04:1d:59:84:30:71:f1:d5:eb:
1d:4a:96:e6:a4:d2:e1:41:a2:30:18:37:be:d7:68:8b:46:c4:
94:cb:f9:19:56:fb:6e:00:36:76:ab:a8:d3:25:96:81:09:da:
93:66:b6:76:b2:91:84:0c:ec:ff:7a:22:dd:bf:00:17:d0:00:
5d:20:aa:11:0d:89:33:ac:5d:7c:57:8d:32:32:1f:d7:7b:29:
2b:ab:82:10:91:8f:b9:c5:08:8a:19:6d:52:f0:3d:e4:80:b1:
76:8e:82:cb:06:7b:ff:24:16:f2:cb:2a:ef:8a:b5:78:a0:f2:
2a:2e:de:40:9d:3b:c8:86:ff:a5:88:ad:3c:5b:28:33:d6:cf:
e7:e7:ca:a3:2c:58:ba:ea:04:72:dd:ae:29:a1:07:35:b8:79:
ce:b5:bf:9f:64:a4:9f:6f:e1:51:ea:9c:98:46:33:c0:4a:38:
39:fa:93:c5:52:b7:ff:9c:73:64:a6:1e:77:b2:14:5b:c1:96:
ad:29:5a:ee:e2:bc:0b:1c:32:9c:52:c1:0b:fd:27:e6:22:e9:
77:3e:64:42:9b:cd:ae:16:4e:b7:07:eb:00:9e:90:f7:b2:5a:
97:5a:15:83:a1:01:48:20:5f:99:80:68:dd:b7:3e:56:40:73:
18:f0:36:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:30:10 2026 by rpki-client