$ rpki-client -vvf rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a343030303a3a2f33362d3438203d3e20313430343233.roa File: 323430363a323063303a343030303a3a2f33362d3438203d3e20313430343233.roa (raw, json) Hash identifier: iZZJuDZmrr2/afqUVlF00pjMyB1vpVxxKIJA2IakLy4= Subject key identifier: FB:E4:25:B3:63:4D:FB:E5:A4:CE:8E:D0:14:CF:9C:A0:FC:78:ED:4F Certificate issuer: /CN=5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73 Certificate serial: 32137FE25A67A2D09E82F54034EEFBC807623BE2 Authority key identifier: 5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a343030303a3a2f33362d3438203d3e20313430343233.roa Signing time: Sun 03 May 2026 02:16:40 +0000 ROA not before: Sun 03 May 2026 02:11:40 +0000 ROA not after: Sun 02 May 2027 02:16:40 +0000 asID: 140423 IP address blocks: 2406:20c0:4000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.crl rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:13:7f:e2:5a:67:a2:d0:9e:82:f5:40:34:ee:fb:c8:07:62:3b:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73 Validity Not Before: May 3 02:11:40 2026 GMT Not After : May 2 02:16:40 2027 GMT Subject: CN=FBE425B3634DFBE5A4CE8ED014CF9CA0FC78ED4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:96:02:19:63:1f:3d:71:e5:db:ad:3d:08:bb: a4:a8:0c:10:3a:89:52:1e:f3:67:ac:43:85:d7:71: e0:32:29:04:0a:3b:9c:ee:9b:59:96:8d:9b:fb:45: 35:15:11:7f:fe:ca:0f:4a:de:69:6b:07:64:15:54: f1:af:0e:b2:8d:4b:ca:44:84:78:f8:93:8b:b7:56: 42:72:1b:a6:3a:5e:2f:4d:4d:f9:81:b7:62:09:49: 28:26:32:04:61:2b:7d:b4:1a:6f:3e:ee:f5:b8:d8: 3d:b6:5c:3f:70:ba:c9:c1:c0:65:0e:9c:9a:2a:17: 9a:48:d0:8d:6d:d1:c8:67:9a:6f:01:7d:0f:c5:01: c4:c1:06:3c:20:d4:cb:b2:ca:29:f0:46:55:ae:94: 44:77:74:aa:e6:5f:49:dd:29:b7:ba:85:05:13:24: 3f:6c:05:75:84:41:e2:bb:cc:d9:df:b3:37:6e:7a: 3a:17:90:e8:57:b0:4e:32:72:0f:53:b4:f5:ca:4d: d6:e3:b8:64:55:f1:19:bc:7f:fd:f7:09:f9:f9:f3: 6c:e2:0a:15:bd:04:e1:27:a9:8e:72:ab:10:b9:19: c5:e4:86:b8:01:fa:c6:40:b3:77:0d:ca:7c:6d:3a: 62:c5:30:5c:1e:e0:14:9c:3c:e4:4c:d0:4a:b2:93: d9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E4:25:B3:63:4D:FB:E5:A4:CE:8E:D0:14:CF:9C:A0:FC:78:ED:4F X509v3 Authority Key Identifier: keyid:5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a343030303a3a2f33362d3438203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:20c0:4000::/36 Signature Algorithm: sha256WithRSAEncryption ad:16:71:5f:be:4d:46:4d:97:51:b0:48:86:cf:a4:62:2a:93: b1:57:bc:2f:80:ab:f5:ea:b3:fb:e0:e7:14:fb:c7:5d:12:b2: de:e8:00:10:ab:75:2f:b9:c7:8b:1a:78:85:2b:c2:0a:9e:56: 13:00:df:7e:5a:67:2e:82:d4:82:62:2a:f1:86:1f:35:ed:3d: b6:79:3e:7a:95:1b:93:b8:21:42:cf:89:b8:7b:ff:b8:1b:2f: 17:ee:37:45:bf:7a:e2:1a:5c:00:b6:a1:ff:d3:82:00:6b:d8: 98:8a:8d:09:70:07:d5:40:9a:7f:fb:88:90:1c:6a:ae:98:42: 7c:a4:cc:75:20:c1:fb:e7:72:15:2e:be:9a:e9:ea:77:dd:6c: 55:cb:c5:b0:3d:c7:27:96:b3:23:ae:5c:92:5c:7f:28:f4:b4: a9:ff:7b:e2:53:4d:e9:de:86:97:47:09:83:92:13:9b:d2:74: 2f:9d:c1:dd:ad:c8:81:c6:6a:9e:be:4e:7c:ed:ab:11:36:8c: 19:ae:e6:14:9b:86:e5:2d:f2:9c:e9:c0:56:15:93:cb:b4:c8: 2c:b7:e7:c3:e5:4a:b6:a3:23:11:5f:2a:f2:08:bb:57:ad:74: bf:02:17:00:b4:a4:e1:0c:fc:ff:ed:e5:cb:6b:aa:b6:5d:14: 19:78:14:16 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUMhN/4lpnotCegvVANO77yAdiO+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQyNzJFRjFGRjVGOTk2MDNERkMyQTJCOUM1QUIxQThC RjMyMkU3MzAeFw0yNjA1MDMwMjExNDBaFw0yNzA1MDIwMjE2NDBaMDMxMTAvBgNV BAMTKEZCRTQyNUIzNjM0REZCRTVBNENFOEVEMDE0Q0Y5Q0EwRkM3OEVENEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQlgIZYx89ceXbrT0Iu6SoDBA6 iVIe82esQ4XXceAyKQQKO5zum1mWjZv7RTUVEX/+yg9K3mlrB2QVVPGvDrKNS8pE hHj4k4u3VkJyG6Y6Xi9NTfmBt2IJSSgmMgRhK320Gm8+7vW42D22XD9wusnBwGUO nJoqF5pI0I1t0chnmm8BfQ/FAcTBBjwg1MuyyinwRlWulER3dKrmX0ndKbe6hQUT JD9sBXWEQeK7zNnfszduejoXkOhXsE4ycg9TtPXKTdbjuGRV8Rm8f/33Cfn582zi ChW9BOEnqY5yqxC5GcXkhrgB+sZAs3cNynxtOmLFMFwe4BScPORM0Eqyk9lbAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQU++Qls2NN++Wkzo7QFM+coPx47U8wHwYDVR0j BBgwFoAUXScu8f9fmWA9/CornFqxqL8yLnMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTlhMDAzNjktNjg0MC00YTk1LTg5YjEtYTQ4NTE4Zjk4ZGM3LzAvNUQyNzJFRjFG RjVGOTk2MDNERkMyQTJCOUM1QUIxQThCRjMyMkU3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDI3MkVGMUZGNUY5OTYwM0RGQzJBMkI5QzVBQjFBOEJGMzIy RTczLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04 OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhMzQzMDMwMzAz YTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BiDAQDANBgkqhkiG9w0BAQsFAAOCAQEArRZxX75NRk2XUbBIhs+kYiqTsVe8L4Cr 9eqz++DnFPvHXRKy3ugAEKt1L7nHixp4hSvCCp5WEwDfflpnLoLUgmIq8YYfNe09 tnk+epUbk7ghQs+JuHv/uBsvF+43Rb964hpcALah/9OCAGvYmIqNCXAH1UCaf/uI kBxqrphCfKTMdSDB++dyFS6+munqd91sVcvFsD3HJ5azI65cklx/KPS0qf974lNN 6d6Gl0cJg5ITm9J0L53B3a3IgcZqnr5OfO2rETaMGa7mFJuG5S3ynOnAVhWTy7TI LLfnw+VKtqMjEV8q8gi7V610vwIXALSk4Qz8/+3ly2uqtl0UGXgUFg== -----END CERTIFICATE-----Generated at Wed May 13 15:36:50 2026 by rpki-client