
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130363a3a2f34382d3438203d3e203233363739.roa
File: 323430313a323930303a3130363a3a2f34382d3438203d3e203233363739.roa (raw, json)
Hash identifier: dWsl0JiLG4GfBA/avasRR8LKwSzdwLCYDE9Sg2x+5ws=
Subject key identifier: 26:F1:35:74:FF:C8:FC:0C:00:43:4D:BD:E9:DE:89:AA:F9:21:07:6B
Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial: 582B930D0200B1F36C5B2B204B2DF6DFCB274E03
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130363a3a2f34382d3438203d3e203233363739.roa
Signing time: Fri 27 Feb 2026 12:00:02 +0000
ROA not before: Fri 27 Feb 2026 11:55:02 +0000
ROA not after: Fri 26 Feb 2027 12:00:02 +0000
asID: 23679
IP address blocks: 2401:2900:106::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 20:41:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:2b:93:0d:02:00:b1:f3:6c:5b:2b:20:4b:2d:f6:df:cb:27:4e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Validity
Not Before: Feb 27 11:55:02 2026 GMT
Not After : Feb 26 12:00:02 2027 GMT
Subject: CN=26F13574FFC8FC0C00434DBDE9DE89AAF921076B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8a:18:8a:ae:f1:29:b2:c3:e6:66:06:6f:87:
25:15:64:d0:e8:37:77:4c:f1:80:db:64:ef:3e:d4:
de:e1:f4:dd:ae:c5:c4:a5:0f:cf:22:0c:ed:83:a0:
36:99:5f:9d:7e:b6:71:3d:e5:8a:49:1d:3c:dd:af:
a2:87:af:7f:a3:eb:ae:d9:b8:ff:0b:04:7d:f5:bd:
f8:7d:f3:f2:7c:bc:12:e1:67:9f:79:28:3f:9f:39:
2a:1b:b5:83:a5:86:82:b8:6a:7c:9e:fc:6d:66:d2:
7b:48:47:80:07:2e:66:4e:17:35:ad:30:89:28:8a:
a9:e9:f6:5f:e9:c8:8a:66:9a:f0:2d:06:f0:26:fb:
21:89:03:42:9f:ab:2f:0f:fb:34:11:8a:9c:c8:40:
32:b2:64:d4:68:90:86:66:03:2c:c8:12:85:59:18:
16:77:1d:86:c8:b9:7b:c1:56:20:86:e7:9d:d1:32:
63:af:02:a8:25:05:fe:14:f4:a4:02:c3:14:bd:bf:
35:52:4d:aa:1f:7d:64:f2:d6:93:a6:27:9b:54:72:
5e:37:d9:2d:75:c5:36:48:3e:b2:5e:3e:f2:09:f2:
96:07:c4:12:d5:67:bb:78:58:9b:c9:bf:97:08:97:
8b:ab:89:ac:fe:6b:ae:a3:be:73:3c:f1:6b:61:db:
d7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F1:35:74:FF:C8:FC:0C:00:43:4D:BD:E9:DE:89:AA:F9:21:07:6B
X509v3 Authority Key Identifier:
keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130363a3a2f34382d3438203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:2900:106::/48
Signature Algorithm: sha256WithRSAEncryption
c8:64:9c:16:ab:39:4d:8a:2c:e0:7f:e9:a7:92:06:53:dd:35:
ff:0d:a2:0b:60:41:d9:b9:d7:b6:46:f8:7b:b0:38:b5:fd:7b:
66:f6:8a:45:6e:d8:08:e9:b7:fd:8f:6e:19:0e:4e:25:48:da:
4b:ae:74:95:35:b5:63:1e:33:f1:49:e4:38:ad:af:eb:2e:ef:
5b:49:6e:45:c6:e5:e6:da:c6:3b:b0:09:3a:df:71:98:87:28:
00:d5:42:bd:cc:39:36:f4:8a:3e:05:68:d5:72:d8:aa:97:41:
4e:6d:cc:87:59:5d:20:1a:9e:e8:1c:ca:46:09:e9:a0:9e:ea:
1f:49:51:1c:58:82:d4:b3:49:fb:95:7a:9e:a6:e1:ac:60:bc:
a4:ba:90:54:5d:72:3d:b1:20:98:b2:ad:e0:e3:9d:f3:ef:b6:
37:90:65:1e:43:4a:a7:0c:1f:3e:e6:e6:f5:19:32:35:8f:33:
9a:c7:57:f3:4e:34:24:72:3a:7c:65:ab:27:9f:58:49:06:9c:
ea:dc:f3:74:6f:78:fe:27:0f:3d:b1:b8:fc:65:c6:54:6b:8b:
8a:97:70:79:7d:32:28:d7:1c:0f:66:0f:46:4d:9a:20:39:94:
a8:c7:6c:14:5e:f4:25:00:e4:45:53:0f:34:d8:82:45:7e:c2:
03:b1:7b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:57:46 2026 by rpki-client