$ rpki-client -vvf rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa File: 323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa (raw, json) Hash identifier: rWbxH2hGryRmSB5HYIpvciYR1+m4YkNKhkM3GZ73zEs= Subject key identifier: 1F:3E:28:AA:EE:79:63:2E:9B:70:AA:7A:48:47:AB:28:0C:D5:10:A6 Certificate issuer: /CN=42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1 Certificate serial: 59182FF28099D3B734A3DA92C536FB5ABAA59AF1 Authority key identifier: 42:BC:C9:3C:15:AC:4D:18:51:A2:24:0C:9F:7B:E2:F9:C9:F5:1E:F1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa Signing time: Sun 03 May 2026 02:12:51 +0000 ROA not before: Sun 03 May 2026 02:07:51 +0000 ROA not after: Sun 02 May 2027 02:12:51 +0000 asID: 137330 IP address blocks: 2402:aa40:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.crl rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:18:2f:f2:80:99:d3:b7:34:a3:da:92:c5:36:fb:5a:ba:a5:9a:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1 Validity Not Before: May 3 02:07:51 2026 GMT Not After : May 2 02:12:51 2027 GMT Subject: CN=1F3E28AAEE79632E9B70AA7A4847AB280CD510A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b5:df:54:70:8e:8a:d7:bb:ff:40:9a:7f:5d: 02:72:5e:ff:98:14:e1:72:27:e5:e3:50:d8:5c:a6: ee:cd:a5:ec:f3:7c:7a:54:2f:50:ae:90:77:d6:f4: 38:2b:a4:2b:8b:18:19:34:e8:a2:86:36:31:7a:30: 43:3f:7a:7f:47:19:82:4c:17:72:fd:3f:14:50:26: ec:15:1e:a1:e6:09:3f:36:83:0c:3f:9d:d0:2c:a0: 30:85:da:8c:73:47:ab:59:26:90:c1:8c:31:5c:85: aa:90:31:12:0b:51:46:4a:1d:24:c5:3b:35:0f:e9: 34:fc:7f:e5:65:fc:d1:ba:0f:18:82:84:38:28:a7: a5:11:98:d0:1e:bd:41:d4:88:20:87:23:01:bf:2f: a2:7b:51:4f:a0:41:ac:49:45:5c:f3:14:62:2f:32: ec:83:43:06:db:82:d4:cb:53:fe:e0:4b:d1:9a:41: c9:b1:3e:f5:a8:c3:7a:a7:08:b9:87:c8:fa:9d:47: 89:73:01:2e:9a:df:47:c5:33:23:53:a3:34:30:b9: e9:47:06:33:0b:52:74:2b:0e:b5:9c:b5:65:00:c0: 32:42:fa:e7:74:82:86:5c:52:30:8b:9a:3e:31:7d: 8f:ed:62:ea:24:51:f5:af:e0:6b:5b:46:96:9d:77: 48:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:3E:28:AA:EE:79:63:2E:9B:70:AA:7A:48:47:AB:28:0C:D5:10:A6 X509v3 Authority Key Identifier: keyid:42:BC:C9:3C:15:AC:4D:18:51:A2:24:0C:9F:7B:E2:F9:C9:F5:1E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:aa40:3::/48 Signature Algorithm: sha256WithRSAEncryption 97:b7:49:30:f4:1f:d9:49:9a:9e:61:74:cf:9e:f4:d5:b4:b9: 61:d4:b5:3e:92:2a:99:96:ca:d0:16:53:9b:ad:93:e1:f8:39: 48:7a:4f:95:36:e2:db:45:5f:71:5d:aa:df:a0:20:29:fa:64: 14:da:a1:d2:e0:14:81:c4:a7:2f:c3:65:a8:fb:84:d5:c0:38: a2:93:39:9a:4f:e4:1f:c6:eb:72:bb:58:23:94:bf:eb:64:61: 9c:91:31:91:dc:70:3e:51:a0:10:18:e2:b9:28:9f:ed:6e:38: 0e:b8:dc:09:97:61:af:b1:09:bf:00:a3:72:b8:fd:7b:96:3a: 43:de:ba:22:1c:9a:81:5b:62:35:9e:42:e4:26:c0:e0:84:0b: d1:1d:c2:46:20:7d:78:f4:a0:48:a9:ce:79:1b:87:d6:96:d6: 4a:e6:46:f4:04:0a:fa:35:22:13:35:ca:2c:58:d1:88:65:1a: c3:05:f1:c4:e2:5b:85:96:5a:73:3d:a0:8a:78:d3:20:3d:c7: 89:74:7a:18:29:c7:08:ca:84:c1:8f:eb:99:44:33:0b:f7:4a: 5c:fd:bf:f5:86:5a:a9:50:4e:2f:47:91:df:86:50:a3:dd:b5: dc:6a:74:12:49:6e:0a:60:7c:ff:10:80:8d:51:e6:f8:90:1b: 4c:b7:32:5a -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUWRgv8oCZ07c0o9qSxTb7WrqlmvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJCQ0M5M0MxNUFDNEQxODUxQTIyNDBDOUY3QkUyRjlD OUY1MUVGMTAeFw0yNjA1MDMwMjA3NTFaFw0yNzA1MDIwMjEyNTFaMDMxMTAvBgNV BAMTKDFGM0UyOEFBRUU3OTYzMkU5QjcwQUE3QTQ4NDdBQjI4MENENTEwQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZtd9UcI6K17v/QJp/XQJyXv+Y FOFyJ+XjUNhcpu7NpezzfHpUL1CukHfW9DgrpCuLGBk06KKGNjF6MEM/en9HGYJM F3L9PxRQJuwVHqHmCT82gww/ndAsoDCF2oxzR6tZJpDBjDFchaqQMRILUUZKHSTF OzUP6TT8f+Vl/NG6DxiChDgop6URmNAevUHUiCCHIwG/L6J7UU+gQaxJRVzzFGIv MuyDQwbbgtTLU/7gS9GaQcmxPvWow3qnCLmHyPqdR4lzAS6a30fFMyNTozQwuelH BjMLUnQrDrWctWUAwDJC+ud0goZcUjCLmj4xfY/tYuokUfWv4GtbRpadd0h7AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUHz4oqu55Yy6bcKp6SEerKAzVEKYwHwYDVR0j BBgwFoAUQrzJPBWsTRhRoiQMn3vi+cn1HvEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGMzNGZmMDgtZDIxZi00MjBiLTg3ZGYtNTMxMDNiNmRjMjUzLzAvNDJCQ0M5M0Mx NUFDNEQxODUxQTIyNDBDOUY3QkUyRjlDOUY1MUVGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MkJDQzkzQzE1QUM0RDE4NTFBMjI0MEM5RjdCRTJGOUM5RjUx RUYxLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04 N2RmLTUzMTAzYjZkYzI1My8wLzMyMzQzMDMyM2E2MTYxMzQzMDNhMzMzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzczMzMzMzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAqpAAAMw DQYJKoZIhvcNAQELBQADggEBAJe3STD0H9lJmp5hdM+e9NW0uWHUtT6SKpmWytAW U5utk+H4OUh6T5U24ttFX3Fdqt+gICn6ZBTaodLgFIHEpy/DZaj7hNXAOKKTOZpP 5B/G63K7WCOUv+tkYZyRMZHccD5RoBAY4rkon+1uOA643AmXYa+xCb8Ao3K4/XuW OkPeuiIcmoFbYjWeQuQmwOCEC9EdwkYgfXj0oEipznkbh9aW1krmRvQECvo1IhM1 yixY0YhlGsMF8cTiW4WWWnM9oIp40yA9x4l0ehgpxwjKhMGP65lEMwv3Slz9v/WG WqlQTi9Hkd+GUKPdtdxqdBJJbgpgfP8QgI1R5viQG0y3Mlo= -----END CERTIFICATE-----Generated at Wed May 13 13:27:44 2026 by rpki-client