$ rpki-client -vvf rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/323430373a613563303a313a3a2f34382d3438203d3e20313432333339.roa File: 323430373a613563303a313a3a2f34382d3438203d3e20313432333339.roa (raw, json) Hash identifier: Qd4itvWRyprHNdVdvUE1w9SaI++oaYLomsgyZaFA/9U= Subject key identifier: A0:E0:90:94:A8:2C:71:5B:8F:3E:F3:13:4F:35:65:13:6C:3B:DB:A3 Certificate issuer: /CN=498FC3DB03528A64214589740CA13E84E4775306 Certificate serial: 1EB7C0496C9BFA39ABB0221E7825ECE6F3EC7536 Authority key identifier: 49:8F:C3:DB:03:52:8A:64:21:45:89:74:0C:A1:3E:84:E4:77:53:06 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/323430373a613563303a313a3a2f34382d3438203d3e20313432333339.roa Signing time: Sun 03 May 2026 02:14:04 +0000 ROA not before: Sun 03 May 2026 02:09:04 +0000 ROA not after: Sun 02 May 2027 02:14:04 +0000 asID: 142339 IP address blocks: 2407:a5c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.crl rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:07:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:b7:c0:49:6c:9b:fa:39:ab:b0:22:1e:78:25:ec:e6:f3:ec:75:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498FC3DB03528A64214589740CA13E84E4775306 Validity Not Before: May 3 02:09:04 2026 GMT Not After : May 2 02:14:04 2027 GMT Subject: CN=A0E09094A82C715B8F3EF3134F3565136C3BDBA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:62:81:e0:42:b0:f7:29:a2:fa:c6:5d:c1:92: 6b:15:8d:d5:aa:f9:4c:b3:02:67:67:30:70:2c:ff: 1d:ff:26:16:18:c7:a4:82:b7:4b:43:bb:79:3b:31: 18:d8:73:4a:58:84:55:43:29:d1:50:91:4f:3d:90: db:e8:ca:27:3b:57:92:c4:4c:65:93:f2:11:fb:a4: 2a:7c:89:a0:42:8f:63:af:df:c5:23:74:35:ed:3d: 96:26:c8:8e:04:4d:8f:12:c3:c1:a9:98:8f:68:8a: 57:e3:59:1f:e7:6a:9d:dc:39:8f:f5:89:fe:52:3c: 57:a5:22:a6:44:45:08:a2:c6:41:55:d3:aa:c9:b0: 76:68:07:10:2b:95:6a:12:aa:56:95:7f:77:1c:39: be:70:a9:72:b7:a2:3c:36:ca:78:9e:cb:49:77:79: 77:5f:21:fe:54:18:94:6a:17:c0:fc:1a:4a:ad:74: c8:0e:6e:06:c4:fe:a5:e2:d9:28:6e:56:23:f0:85: 4a:64:4a:6a:89:a8:23:d9:64:e6:05:67:4f:c0:09: 48:e8:da:9a:8f:2e:97:46:2d:71:96:fa:30:f7:09: 69:7d:52:79:02:73:f2:86:93:a2:d1:70:1f:d2:57: 14:ae:48:5a:bd:d1:71:bc:ff:8c:44:fd:e6:9a:98: eb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E0:90:94:A8:2C:71:5B:8F:3E:F3:13:4F:35:65:13:6C:3B:DB:A3 X509v3 Authority Key Identifier: keyid:49:8F:C3:DB:03:52:8A:64:21:45:89:74:0C:A1:3E:84:E4:77:53:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/323430373a613563303a313a3a2f34382d3438203d3e20313432333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:a5c0:1::/48 Signature Algorithm: sha256WithRSAEncryption 76:b2:18:fb:f9:5a:3f:90:6c:0e:ac:5d:f7:fb:f6:e9:03:d8: 98:9f:6d:06:42:22:46:a9:20:60:4d:01:93:57:71:1e:a6:38: 23:46:e4:32:1b:3c:be:a3:4b:53:9c:4e:be:f3:c9:75:8d:b8: 8c:02:45:4a:84:2b:33:a5:58:5c:9f:c5:c7:42:34:f3:d6:e8: ba:63:26:30:6f:71:61:92:8f:ed:a6:65:e3:bc:b2:9c:4a:20: 55:1a:f5:31:a6:50:4e:1d:49:ae:5c:6b:34:2e:ef:7b:0b:5f: f6:60:8a:db:c2:a3:4c:ed:3f:d3:2b:f8:be:24:dd:37:27:d0: 8a:f3:90:43:e7:b0:c1:a1:b3:70:45:2b:33:f7:bc:6d:c3:51: 29:3c:74:3b:2e:ee:1a:d3:c3:a9:9c:44:42:05:a7:71:d5:36: 11:a4:01:ef:f2:00:54:73:9c:43:0c:59:10:06:ca:b5:19:e9: 2e:3e:96:1c:77:80:8e:49:72:de:3a:a3:c9:7d:ea:4b:ec:b6: d2:94:32:90:61:41:3d:fd:27:c8:fa:cc:1f:0e:b7:dd:6b:c0: 06:f2:bd:d2:10:37:3c:19:98:b0:25:49:0f:37:41:c2:df:b7: 60:78:c1:39:6a:6a:7b:f3:4d:11:3e:21:87:fd:03:c6:9c:a9: fa:47:35:c7 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUHrfASWyb+jmrsCIeeCXs5vPsdTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk4RkMzREIwMzUyOEE2NDIxNDU4OTc0MENBMTNFODRF NDc3NTMwNjAeFw0yNjA1MDMwMjA5MDRaFw0yNzA1MDIwMjE0MDRaMDMxMTAvBgNV BAMTKEEwRTA5MDk0QTgyQzcxNUI4RjNFRjMxMzRGMzU2NTEzNkMzQkRCQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5YoHgQrD3KaL6xl3BkmsVjdWq +UyzAmdnMHAs/x3/JhYYx6SCt0tDu3k7MRjYc0pYhFVDKdFQkU89kNvoyic7V5LE TGWT8hH7pCp8iaBCj2Ov38UjdDXtPZYmyI4ETY8Sw8GpmI9oilfjWR/nap3cOY/1 if5SPFelIqZERQiixkFV06rJsHZoBxArlWoSqlaVf3ccOb5wqXK3ojw2yniey0l3 eXdfIf5UGJRqF8D8GkqtdMgObgbE/qXi2ShuViPwhUpkSmqJqCPZZOYFZ0/ACUjo 2pqPLpdGLXGW+jD3CWl9UnkCc/KGk6LRcB/SVxSuSFq90XG8/4xE/eaamOv3AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUoOCQlKgscVuPPvMTTzVlE2w726MwHwYDVR0j BBgwFoAUSY/D2wNSimQhRYl0DKE+hOR3UwYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTE5MjAyMWUtMzkwNC00MTE1LWFmNWUtM2VkYjcxM2JhYTE0LzAvNDk4RkMzREIw MzUyOEE2NDIxNDU4OTc0MENBMTNFODRFNDc3NTMwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OThGQzNEQjAzNTI4QTY0MjE0NTg5NzQwQ0ExM0U4NEU0Nzc1 MzA2LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzExOTIwMjFlLTM5MDQtNDExNS1h ZjVlLTNlZGI3MTNiYWExNC8wLzMyMzQzMDM3M2E2MTM1NjMzMDNhMzEzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzIzMzMzMzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkB6XAAAEw DQYJKoZIhvcNAQELBQADggEBAHayGPv5Wj+QbA6sXff79ukD2JifbQZCIkapIGBN AZNXcR6mOCNG5DIbPL6jS1OcTr7zyXWNuIwCRUqEKzOlWFyfxcdCNPPW6LpjJjBv cWGSj+2mZeO8spxKIFUa9TGmUE4dSa5cazQu73sLX/ZgitvCo0ztP9Mr+L4k3Tcn 0IrzkEPnsMGhs3BFKzP3vG3DUSk8dDsu7hrTw6mcREIFp3HVNhGkAe/yAFRznEMM WRAGyrUZ6S4+lhx3gI5Jct46o8l96kvsttKUMpBhQT39J8j6zB8Ot91rwAbyvdIQ NzwZmLAlSQ83QcLft2B4wTlqanvzTRE+IYf9A8acqfpHNcc= -----END CERTIFICATE-----Generated at Wed May 13 15:26:34 2026 by rpki-client