$ rpki-client -vvf rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030363a3a2f34382d3438203d3e203233363739.roa File: 323430313a323930303a383030363a3a2f34382d3438203d3e203233363739.roa (raw, json) Hash identifier: KwVHAuNZS5hjG8BPC6xD6wK32wNahhaU82SQWFQA8j8= Subject key identifier: 5E:C1:E4:D1:7E:04:71:F3:27:A4:A4:2F:2B:E9:43:A4:CB:BF:34:43 Certificate issuer: /CN=D09EA95FF10C0166C2954C997A8A4989BD890A87 Certificate serial: 5C0BC74B931D82157B1CBF8D2E3BF85335799005 Authority key identifier: D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030363a3a2f34382d3438203d3e203233363739.roa Signing time: Sun 03 May 2026 02:18:48 +0000 ROA not before: Sun 03 May 2026 02:13:48 +0000 ROA not after: Sun 02 May 2027 02:18:48 +0000 asID: 23679 IP address blocks: 2401:2900:8006::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:0b:c7:4b:93:1d:82:15:7b:1c:bf:8d:2e:3b:f8:53:35:79:90:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D09EA95FF10C0166C2954C997A8A4989BD890A87 Validity Not Before: May 3 02:13:48 2026 GMT Not After : May 2 02:18:48 2027 GMT Subject: CN=5EC1E4D17E0471F327A4A42F2BE943A4CBBF3443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2c:b3:cc:f4:b8:00:a6:cf:54:87:7c:b7:fa: 48:a6:55:fb:60:92:4f:a0:67:e5:81:6a:cc:f8:cb: a1:42:0d:90:29:60:34:5b:77:15:53:fa:16:2a:58: 9c:98:53:f9:12:45:f8:7b:1f:8c:a9:dd:3b:34:3a: ff:c0:d3:56:34:da:52:6d:5c:bb:5c:30:00:2d:c7: 17:6f:df:8a:66:35:d1:e3:92:6e:cc:0e:c0:b2:6c: 12:ad:3e:4b:2e:33:9b:31:ab:e4:6f:08:57:16:2e: be:91:99:2c:e6:35:c1:58:bb:99:58:10:3d:32:05: 24:49:aa:75:b3:5e:d5:c2:2c:73:31:a4:2d:a1:1f: 01:2e:d0:75:fe:31:b4:66:5e:c9:95:ed:1a:08:53: c8:d5:54:02:fa:13:53:00:28:46:19:fb:f7:7c:fb: 5d:34:61:f6:e1:74:19:79:0b:2d:fd:d9:55:2d:2e: 98:a5:20:71:02:0b:87:cb:35:58:3e:63:0f:53:93: e5:b4:5c:b3:dd:25:aa:4f:af:13:2e:52:72:a2:cf: e2:0b:2f:4f:b0:c2:90:0c:55:cd:b6:64:4e:50:9d: f5:88:76:29:19:6d:3d:f0:d4:5e:81:3e:a7:4e:a6: 2f:5a:2f:68:12:84:27:85:30:af:7c:21:62:1d:b7: 07:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C1:E4:D1:7E:04:71:F3:27:A4:A4:2F:2B:E9:43:A4:CB:BF:34:43 X509v3 Authority Key Identifier: keyid:D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030363a3a2f34382d3438203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2900:8006::/48 Signature Algorithm: sha256WithRSAEncryption 5c:73:88:31:33:d8:0b:b5:fd:d2:eb:19:de:29:95:aa:da:62: 08:f1:90:25:bc:bb:37:53:87:32:c7:68:98:f5:89:85:79:6d: b6:af:78:09:3e:8c:a7:bc:5b:b7:06:46:d6:02:fc:71:2c:2c: 8a:76:c8:4e:a6:6d:1a:f2:3f:07:e0:8f:a1:f1:3a:d7:be:b8: 7f:c4:63:9c:88:2a:80:09:59:b1:2e:7e:df:df:64:02:52:88: dc:9d:4d:8a:36:6e:ca:0f:09:3e:be:9d:4a:0c:89:ce:41:10: 5e:85:bb:01:80:8a:51:3d:ea:10:2b:0e:e2:a0:1f:49:2a:95: 7a:98:f0:8d:01:bd:c8:5e:21:00:5a:01:3a:c5:1e:7e:c1:c4: 59:07:82:de:b4:26:4f:9a:08:07:bc:a1:34:48:9b:08:c4:3d: 3e:59:56:49:fc:53:eb:1a:7f:31:df:b9:6e:1c:70:0f:a5:af: 4f:cd:21:1c:88:9a:c1:e2:f5:cf:52:26:10:ca:70:ae:49:6a: b4:2b:69:4a:5d:d1:fd:5a:dc:be:bc:39:9e:fa:d6:ae:e2:d2: c8:6b:6f:4d:ba:af:fa:e6:88:d6:5d:7c:46:62:bd:61:83:bf: e1:48:3c:1a:ed:1a:a9:ca:81:3a:87:32:01:4a:5f:8c:03:5d: 3d:6e:ec:f1 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUXAvHS5MdghV7HL+NLjv4UzV5kAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA5RUE5NUZGMTBDMDE2NkMyOTU0Qzk5N0E4QTQ5ODlC RDg5MEE4NzAeFw0yNjA1MDMwMjEzNDhaFw0yNzA1MDIwMjE4NDhaMDMxMTAvBgNV BAMTKDVFQzFFNEQxN0UwNDcxRjMyN0E0QTQyRjJCRTk0M0E0Q0JCRjM0NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrLLPM9LgAps9Uh3y3+kimVftg kk+gZ+WBasz4y6FCDZApYDRbdxVT+hYqWJyYU/kSRfh7H4yp3Ts0Ov/A01Y02lJt XLtcMAAtxxdv34pmNdHjkm7MDsCybBKtPksuM5sxq+RvCFcWLr6RmSzmNcFYu5lY ED0yBSRJqnWzXtXCLHMxpC2hHwEu0HX+MbRmXsmV7RoIU8jVVAL6E1MAKEYZ+/d8 +100YfbhdBl5Cy392VUtLpilIHECC4fLNVg+Yw9Tk+W0XLPdJapPrxMuUnKiz+IL L0+wwpAMVc22ZE5QnfWIdikZbT3w1F6BPqdOpi9aL2gShCeFMK98IWIdtwfXAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUXsHk0X4EcfMnpKQvK+lDpMu/NEMwHwYDVR0j BBgwFoAU0J6pX/EMAWbClUyZeopJib2JCocwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAxNDMyY2MtM2JjOS00ODU4LWI1MDYtMjE4YWFiMGIwODljLzAvRDA5RUE5NUZG MTBDMDE2NkMyOTU0Qzk5N0E4QTQ5ODlCRDg5MEE4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMDlFQTk1RkYxMEMwMTY2QzI5NTRDOTk3QThBNDk4OUJEODkw QTg3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhMzgzMDMwMzYz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMzMzYzNzM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEp AIAGMA0GCSqGSIb3DQEBCwUAA4IBAQBcc4gxM9gLtf3S6xneKZWq2mII8ZAlvLs3 U4cyx2iY9YmFeW22r3gJPoynvFu3BkbWAvxxLCyKdshOpm0a8j8H4I+h8TrXvrh/ xGOciCqACVmxLn7f32QCUojcnU2KNm7KDwk+vp1KDInOQRBehbsBgIpRPeoQKw7i oB9JKpV6mPCNAb3IXiEAWgE6xR5+wcRZB4LetCZPmggHvKE0SJsIxD0+WVZJ/FPr Gn8x37luHHAPpa9PzSEciJrB4vXPUiYQynCuSWq0K2lKXdH9Wty+vDme+tau4tLI a29Nuq/65ojWXXxGYr1hg7/hSDwa7RqpyoE6hzIBSl+MA109buzx -----END CERTIFICATE-----Generated at Wed May 13 13:34:11 2026 by rpki-client