$ rpki-client -vvf rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/323430373a613163303a3a2f33322d3332203d3e20313432333135.roa File: 323430373a613163303a3a2f33322d3332203d3e20313432333135.roa (raw, json) Hash identifier: pMseYXhaROm6EYmzpm8l2beM5snzhmulBoKAFnDhIs8= Subject key identifier: CB:65:50:EF:CE:86:F9:6E:C9:AA:0E:02:AF:59:59:37:42:AB:BD:54 Certificate issuer: /CN=38F5CCFB43C14A0A6D836EE754A8073545066216 Certificate serial: 72D6594A1232FB67E5EB68C8D97FD0CD4251F2F1 Authority key identifier: 38:F5:CC:FB:43:C1:4A:0A:6D:83:6E:E7:54:A8:07:35:45:06:62:16 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38F5CCFB43C14A0A6D836EE754A8073545066216.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/323430373a613163303a3a2f33322d3332203d3e20313432333135.roa Signing time: Sun 03 May 2026 02:13:13 +0000 ROA not before: Sun 03 May 2026 02:08:13 +0000 ROA not after: Sun 02 May 2027 02:13:13 +0000 asID: 142315 IP address blocks: 2407:a1c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.crl rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38F5CCFB43C14A0A6D836EE754A8073545066216.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:06:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:d6:59:4a:12:32:fb:67:e5:eb:68:c8:d9:7f:d0:cd:42:51:f2:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38F5CCFB43C14A0A6D836EE754A8073545066216 Validity Not Before: May 3 02:08:13 2026 GMT Not After : May 2 02:13:13 2027 GMT Subject: CN=CB6550EFCE86F96EC9AA0E02AF59593742ABBD54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:21:7e:c7:cc:22:d6:35:91:83:b1:8a:47:1f: 5a:35:93:fe:46:4b:a6:9d:e8:b5:02:a5:ff:76:ca: 7d:01:aa:79:cd:31:b3:0f:6f:b8:9e:de:32:09:a8: ce:6e:ae:36:cc:33:19:ec:11:b1:94:87:69:02:6a: 47:21:a0:22:2d:0e:31:96:f8:44:b1:0a:74:ce:6b: 72:f7:a7:61:c0:c7:6a:d0:76:fa:ea:b7:13:ac:9f: 99:7c:ce:8d:9e:ab:ea:eb:cc:f5:ef:b8:1e:6d:bf: 96:1c:87:3c:7d:2b:10:4a:3e:c7:a6:d7:f3:6c:23: e7:82:9e:2e:80:0a:b4:75:b5:aa:3f:84:de:6b:8b: 1f:7d:32:ae:86:d2:00:04:22:57:a8:a3:6f:57:01: 09:64:ca:ce:a4:d3:02:43:89:68:3c:bb:d9:10:ca: ec:af:21:20:60:6b:a2:be:1a:ee:c5:a4:75:83:f8: ee:b6:b1:93:4f:c5:97:f3:7a:87:a2:45:1f:b8:e7: 83:4a:fc:91:4c:3d:9b:e9:f2:f3:b3:6c:f7:32:61: 96:5b:42:ca:7d:2b:23:ac:a3:ff:ca:11:95:bf:f6: 65:1c:6e:77:b1:b4:53:e9:1e:70:a8:7e:15:a4:e9: c6:12:00:eb:1f:7d:29:d0:ca:d0:1f:d2:0d:e2:94: 86:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:65:50:EF:CE:86:F9:6E:C9:AA:0E:02:AF:59:59:37:42:AB:BD:54 X509v3 Authority Key Identifier: keyid:38:F5:CC:FB:43:C1:4A:0A:6D:83:6E:E7:54:A8:07:35:45:06:62:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38F5CCFB43C14A0A6D836EE754A8073545066216.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/323430373a613163303a3a2f33322d3332203d3e20313432333135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:a1c0::/32 Signature Algorithm: sha256WithRSAEncryption 2a:c5:fb:ba:78:56:4f:f0:c5:3b:f4:a3:ff:86:65:a3:88:26: aa:75:c3:b0:bc:91:6e:d8:08:80:03:2d:c8:03:a4:f4:af:c5: cb:71:65:c0:22:62:1b:2b:d0:37:58:7a:b9:a0:06:1e:f6:6a: 12:6e:52:19:c8:1a:7a:cb:66:cc:a4:9a:c4:af:fd:ad:f0:e0: fd:3f:6c:31:65:92:1f:e6:18:26:59:ba:d0:d0:56:12:25:90: b5:b8:49:56:a4:69:03:ac:07:ff:45:34:20:9f:5a:ce:b0:12: d8:ca:6b:6f:40:22:b6:ce:db:8a:95:f7:49:1a:1b:33:51:a7: 40:bc:61:40:4e:7b:f0:ed:9d:66:c4:b9:a6:1b:78:6c:4a:95: 3e:57:76:99:ec:e3:20:c4:4c:a6:8f:5b:62:af:81:e5:9f:ca: 86:1f:8b:aa:8d:8a:76:0a:cf:a3:2d:9c:df:af:35:df:ad:42: 97:df:8d:07:8e:54:6f:cb:6e:a0:5f:39:d8:5d:78:b5:80:f3: f5:1f:5e:df:9a:33:59:10:e6:ac:25:cf:e2:31:92:bd:a6:7f: a1:f6:2e:21:b7:14:90:30:7d:8a:c2:7d:e9:7b:f4:35:d1:c4: c4:1c:ad:8e:e7:fb:83:41:1f:08:e4:d2:78:08:a5:f7:33:79: bb:31:fd:8b -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUctZZShIy+2fl62jI2X/QzUJR8vEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGNUNDRkI0M0MxNEEwQTZEODM2RUU3NTRBODA3MzU0 NTA2NjIxNjAeFw0yNjA1MDMwMjA4MTNaFw0yNzA1MDIwMjEzMTNaMDMxMTAvBgNV BAMTKENCNjU1MEVGQ0U4NkY5NkVDOUFBMEUwMkFGNTk1OTM3NDJBQkJENTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfIX7HzCLWNZGDsYpHH1o1k/5G S6ad6LUCpf92yn0BqnnNMbMPb7ie3jIJqM5urjbMMxnsEbGUh2kCakchoCItDjGW +ESxCnTOa3L3p2HAx2rQdvrqtxOsn5l8zo2eq+rrzPXvuB5tv5Ychzx9KxBKPsem 1/NsI+eCni6ACrR1tao/hN5rix99Mq6G0gAEIleoo29XAQlkys6k0wJDiWg8u9kQ yuyvISBga6K+Gu7FpHWD+O62sZNPxZfzeoeiRR+454NK/JFMPZvp8vOzbPcyYZZb Qsp9KyOso//KEZW/9mUcbnextFPpHnCofhWk6cYSAOsffSnQytAf0g3ilIYhAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUy2VQ786G+W7Jqg4Cr1lZN0KrvVQwHwYDVR0j BBgwFoAUOPXM+0PBSgptg27nVKgHNUUGYhYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGRkMDc4ZmUtMDkzMC00NWRjLWI0MDMtM2NlNGU4NjNmOGI1LzAvMzhGNUNDRkI0 M0MxNEEwQTZEODM2RUU3NTRBODA3MzU0NTA2NjIxNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOEY1Q0NGQjQzQzE0QTBBNkQ4MzZFRTc1NEE4MDczNTQ1MDY2 MjE2LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBkZDA3OGZlLTA5MzAtNDVkYy1i NDAzLTNjZTRlODYzZjhiNS8wLzMyMzQzMDM3M2E2MTMxNjMzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzQzMjMzMzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQHocAwDQYJKoZI hvcNAQELBQADggEBACrF+7p4Vk/wxTv0o/+GZaOIJqp1w7C8kW7YCIADLcgDpPSv xctxZcAiYhsr0DdYermgBh72ahJuUhnIGnrLZsykmsSv/a3w4P0/bDFlkh/mGCZZ utDQVhIlkLW4SVakaQOsB/9FNCCfWs6wEtjKa29AIrbO24qV90kaGzNRp0C8YUBO e/DtnWbEuaYbeGxKlT5Xdpns4yDETKaPW2KvgeWfyoYfi6qNinYKz6MtnN+vNd+t QpffjQeOVG/LbqBfOdhdeLWA8/UfXt+aM1kQ5qwlz+Ixkr2mf6H2LiG3FJAwfYrC fel79DXRxMQcrY7n+4NBHwjk0ngIpfczebsx/Ys= -----END CERTIFICATE-----Generated at Wed May 13 07:14:40 2026 by rpki-client