$ rpki-client -vvf rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/323430333a613163303a3a2f33322d3332203d3e20313338303732.roa File: 323430333a613163303a3a2f33322d3332203d3e20313338303732.roa (raw, json) Hash identifier: RlsBI7ppBAoSjD2evBJfAqX7gcSYEF5x+6E+5HMHSz0= Subject key identifier: 02:8D:02:0C:89:29:0F:E7:27:25:1A:97:B3:56:9C:39:FE:5F:0F:03 Certificate issuer: /CN=369A5CE4785D27442508404CAC16E70E3DFBCE22 Certificate serial: 63DB1162A88DD3BA4FAC546D94A66CEA0F92078A Authority key identifier: 36:9A:5C:E4:78:5D:27:44:25:08:40:4C:AC:16:E7:0E:3D:FB:CE:22 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/369A5CE4785D27442508404CAC16E70E3DFBCE22.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/323430333a613163303a3a2f33322d3332203d3e20313338303732.roa Signing time: Sun 03 May 2026 02:20:33 +0000 ROA not before: Sun 03 May 2026 02:15:33 +0000 ROA not after: Sun 02 May 2027 02:20:33 +0000 asID: 138072 IP address blocks: 2403:a1c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/369A5CE4785D27442508404CAC16E70E3DFBCE22.crl rsync://rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/369A5CE4785D27442508404CAC16E70E3DFBCE22.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/369A5CE4785D27442508404CAC16E70E3DFBCE22.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:db:11:62:a8:8d:d3:ba:4f:ac:54:6d:94:a6:6c:ea:0f:92:07:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=369A5CE4785D27442508404CAC16E70E3DFBCE22 Validity Not Before: May 3 02:15:33 2026 GMT Not After : May 2 02:20:33 2027 GMT Subject: CN=028D020C89290FE727251A97B3569C39FE5F0F03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0d:b2:cc:ba:70:77:a6:89:86:af:0a:33:09: 1b:90:0a:a5:2b:a5:47:0f:96:a5:fc:1c:63:a0:44: d9:c8:79:b4:48:ec:a7:fa:54:fb:73:39:c7:45:d3: c0:99:49:da:25:11:36:17:ec:ec:c4:8d:3e:4a:ca: a2:0c:d6:93:28:82:2c:2a:30:bd:64:45:7a:dc:7d: af:e7:66:aa:d7:5d:b1:4c:6b:3f:c2:4a:94:5d:34: bc:fd:af:c9:c7:e9:01:c6:d4:41:51:24:26:42:69: fc:d1:c2:21:5d:e4:2d:8c:12:12:03:a8:0b:bc:03: 8e:ba:80:83:d9:1b:f4:d8:34:67:41:60:2f:34:e8: c5:45:2f:ec:4d:eb:f9:18:f6:11:4e:1d:85:29:90: 75:80:59:da:ce:22:2b:2b:da:ba:98:bd:dd:32:50: 92:55:84:32:5e:48:e8:fb:1e:d4:d0:f1:75:ba:cf: 6d:f4:84:28:cc:bb:1a:e5:77:91:62:f2:0f:34:73: 6b:d6:cd:e6:06:22:ae:e2:81:c6:2b:3f:7a:24:a8: 1d:79:fb:8a:35:01:cb:2f:93:23:02:ef:da:e2:31: 74:d9:de:6b:19:c7:e1:5b:3a:98:2b:8a:d9:57:9d: 16:68:08:02:94:02:88:e0:36:bc:35:bb:ac:3d:61: 75:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:8D:02:0C:89:29:0F:E7:27:25:1A:97:B3:56:9C:39:FE:5F:0F:03 X509v3 Authority Key Identifier: keyid:36:9A:5C:E4:78:5D:27:44:25:08:40:4C:AC:16:E7:0E:3D:FB:CE:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/369A5CE4785D27442508404CAC16E70E3DFBCE22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/369A5CE4785D27442508404CAC16E70E3DFBCE22.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/323430333a613163303a3a2f33322d3332203d3e20313338303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:a1c0::/32 Signature Algorithm: sha256WithRSAEncryption 8d:94:2f:ea:dc:e7:a2:e8:d6:f8:1e:44:32:6f:9e:38:8d:cf: d7:b4:a9:08:5f:43:a3:66:50:ba:b4:90:87:97:b2:20:ab:07: 9b:df:62:8e:81:14:da:fb:89:ba:96:2a:4e:7b:0e:1f:c0:c0: 58:3c:b5:8c:60:cd:51:d4:6b:6e:9a:50:3c:1e:b6:55:2b:26: 37:9c:3c:93:e5:37:6a:9b:ff:aa:f0:1e:f1:62:e1:0e:22:11: a6:e0:b7:11:42:09:8a:a4:02:79:a8:50:ff:bb:df:f6:67:56: 8b:a8:2e:f8:ba:2b:02:f0:45:11:7f:d9:67:5e:b3:73:f9:10: 66:1f:34:8f:9f:60:f7:25:22:dc:91:44:e6:b5:f1:f0:fe:00: 0c:15:e8:5d:c7:e2:59:5f:c2:28:09:18:64:91:00:ba:41:11: e5:34:75:b9:52:c9:1b:4d:9a:82:5a:8a:00:ba:e2:9a:b1:59: d5:9f:b5:56:f5:c8:10:83:67:5d:4c:97:ac:2a:40:45:1b:2a: 90:f1:47:f2:18:eb:94:2b:62:87:32:3b:d0:62:7c:90:14:b1: 89:0f:c5:34:da:e0:a6:9a:3c:0b:e6:b8:23:60:51:9e:d3:b8: d7:82:5e:9f:4f:6d:32:35:ff:8c:d2:22:5b:db:32:05:5a:5a: f6:4e:1b:89 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUY9sRYqiN07pPrFRtlKZs6g+SB4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY5QTVDRTQ3ODVEMjc0NDI1MDg0MDRDQUMxNkU3MEUz REZCQ0UyMjAeFw0yNjA1MDMwMjE1MzNaFw0yNzA1MDIwMjIwMzNaMDMxMTAvBgNV BAMTKDAyOEQwMjBDODkyOTBGRTcyNzI1MUE5N0IzNTY5QzM5RkU1RjBGMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDADbLMunB3pomGrwozCRuQCqUr pUcPlqX8HGOgRNnIebRI7Kf6VPtzOcdF08CZSdolETYX7OzEjT5KyqIM1pMogiwq ML1kRXrcfa/nZqrXXbFMaz/CSpRdNLz9r8nH6QHG1EFRJCZCafzRwiFd5C2MEhID qAu8A466gIPZG/TYNGdBYC806MVFL+xN6/kY9hFOHYUpkHWAWdrOIisr2rqYvd0y UJJVhDJeSOj7HtTQ8XW6z230hCjMuxrld5Fi8g80c2vWzeYGIq7igcYrP3okqB15 +4o1AcsvkyMC79riMXTZ3msZx+FbOpgritlXnRZoCAKUAojgNrw1u6w9YXXNAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUAo0CDIkpD+cnJRqXs1acOf5fDwMwHwYDVR0j BBgwFoAUNppc5HhdJ0QlCEBMrBbnDj37ziIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjYyNjYzOWEtOWExYy00YzBlLWJhMTctZjY3OWYwNTA2Y2JjLzAvMzY5QTVDRTQ3 ODVEMjc0NDI1MDg0MDRDQUMxNkU3MEUzREZCQ0UyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNjlBNUNFNDc4NUQyNzQ0MjUwODQwNENBQzE2RTcwRTNERkJD RTIyLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzI2MjY2MzlhLTlhMWMtNGMwZS1i YTE3LWY2NzlmMDUwNmNiYy8wLzMyMzQzMDMzM2E2MTMxNjMzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzODMwMzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQDocAwDQYJKoZI hvcNAQELBQADggEBAI2UL+rc56Lo1vgeRDJvnjiNz9e0qQhfQ6NmULq0kIeXsiCr B5vfYo6BFNr7ibqWKk57Dh/AwFg8tYxgzVHUa26aUDwetlUrJjecPJPlN2qb/6rw HvFi4Q4iEabgtxFCCYqkAnmoUP+73/ZnVouoLvi6KwLwRRF/2Wdes3P5EGYfNI+f YPclItyRROa18fD+AAwV6F3H4llfwigJGGSRALpBEeU0dblSyRtNmoJaigC64pqx WdWftVb1yBCDZ11Ml6wqQEUbKpDxR/IY65QrYocyO9BifJAUsYkPxTTa4KaaPAvm uCNgUZ7TuNeCXp9PbTI1/4zSIlvbMgVaWvZOG4k= -----END CERTIFICATE-----Generated at Wed May 13 16:15:48 2026 by rpki-client