$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/323430323a333263303a3a2f33322d3332203d3e20313332363337.roa File: 323430323a333263303a3a2f33322d3332203d3e20313332363337.roa (raw, json) Hash identifier: gCsatGRm4KYeS4xTuGnz+oT2rG5lR5XCvd8UnIJR5JU= Subject key identifier: E9:DF:8E:AE:4E:23:16:CD:63:FB:E6:E7:B8:11:C5:04:8F:F5:95:C8 Certificate issuer: /CN=2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835 Certificate serial: 7052FD26DF98EEA5AFEFE49F2299B10D98394D92 Authority key identifier: 2D:4E:F7:6F:F5:F1:DE:08:B9:FB:7C:AE:D4:9A:F7:AD:4C:60:18:35 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/323430323a333263303a3a2f33322d3332203d3e20313332363337.roa Signing time: Sun 03 May 2026 02:22:34 +0000 ROA not before: Sun 03 May 2026 02:17:34 +0000 ROA not after: Sun 02 May 2027 02:22:34 +0000 asID: 132637 IP address blocks: 2402:32c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.crl rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:52:fd:26:df:98:ee:a5:af:ef:e4:9f:22:99:b1:0d:98:39:4d:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835 Validity Not Before: May 3 02:17:34 2026 GMT Not After : May 2 02:22:34 2027 GMT Subject: CN=E9DF8EAE4E2316CD63FBE6E7B811C5048FF595C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2c:ce:8a:78:f7:43:fe:0e:06:a3:c6:03:44: 8d:3d:f9:b3:eb:9b:1c:a6:b9:eb:44:c8:06:b3:3e: b0:7a:f4:69:e6:34:14:77:29:3b:91:3c:37:9f:fc: 85:8c:c3:b7:5d:88:1c:23:3b:d1:e2:fa:a8:ed:86: 5b:bc:c8:1a:23:2c:3f:1b:62:a8:b4:dd:12:ce:6b: ef:8a:75:d6:54:cd:a0:d9:fc:54:82:55:fb:dc:d9: a2:e0:33:56:43:90:52:af:d3:50:e1:ec:41:c0:d7: 44:d6:2f:a4:7a:2f:f0:0b:72:87:d2:07:b0:71:0d: 9f:83:f8:17:96:67:65:7b:dc:24:09:18:eb:67:ac: ae:61:ee:aa:e9:5b:b2:7a:26:1f:ac:c0:a6:4c:27: 9d:27:39:3d:dc:98:31:53:38:2d:1e:f2:c0:78:99: e5:e5:df:90:bd:c7:1f:19:14:92:ee:cf:cd:3b:8e: 91:50:39:1d:5d:0a:ed:78:cb:49:f6:11:af:fe:6f: b2:32:ce:45:4c:ee:76:60:62:95:49:d6:ab:0a:c0: 87:ef:3d:81:d1:01:60:ef:97:52:cc:f1:21:bb:89: ea:9b:09:7c:1d:6f:6b:3d:9d:a6:63:86:0c:72:ae: fc:2f:f5:82:91:ab:38:60:d1:65:89:ab:1a:9f:24: d8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:DF:8E:AE:4E:23:16:CD:63:FB:E6:E7:B8:11:C5:04:8F:F5:95:C8 X509v3 Authority Key Identifier: keyid:2D:4E:F7:6F:F5:F1:DE:08:B9:FB:7C:AE:D4:9A:F7:AD:4C:60:18:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/323430323a333263303a3a2f33322d3332203d3e20313332363337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:32c0::/32 Signature Algorithm: sha256WithRSAEncryption 50:46:b7:b1:02:3c:6c:47:86:4d:1e:ec:96:d3:ca:72:9b:16: 06:67:b8:d5:17:73:0a:de:46:ec:55:e3:d1:64:0e:7c:31:8b: 02:bc:db:a6:8c:2d:ed:49:72:5d:1f:20:80:aa:c2:d1:13:e0: 95:d9:33:29:4a:63:89:68:80:03:35:a0:63:56:9b:3b:e9:78: 51:9e:73:53:07:35:01:c6:e8:cf:00:f5:78:0e:ff:d3:16:cb: b3:ec:27:cd:b4:c4:b3:a6:81:88:89:09:d4:e5:6c:d0:db:b9: 06:62:e2:be:68:58:f2:30:0d:29:3e:85:ae:89:e6:cc:d2:57: 1f:a0:56:48:f4:62:c5:f6:82:8e:ca:40:fc:2a:b5:34:59:6c: 39:c6:eb:d2:3b:5f:58:63:d9:f3:17:fa:e9:2f:e2:30:9e:fe: df:e9:c7:35:95:54:81:cb:38:21:27:32:e0:14:88:9e:32:f1: 7f:3a:62:c7:d3:16:86:79:57:7c:a5:0c:73:56:63:c9:33:65: f6:f8:a7:3c:03:e1:1a:78:fe:8c:e3:42:6f:48:0d:12:50:b0: 48:16:62:e5:b4:ee:f4:f1:79:40:15:99:aa:38:9c:06:69:d2: 42:35:2c:ee:89:3f:cf:09:a7:98:59:75:11:95:13:d1:cb:c8: 8e:24:45:8f -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUcFL9Jt+Y7qWv7+SfIpmxDZg5TZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ0RUY3NkZGNUYxREUwOEI5RkI3Q0FFRDQ5QUY3QUQ0 QzYwMTgzNTAeFw0yNjA1MDMwMjE3MzRaFw0yNzA1MDIwMjIyMzRaMDMxMTAvBgNV BAMTKEU5REY4RUFFNEUyMzE2Q0Q2M0ZCRTZFN0I4MTFDNTA0OEZGNTk1QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzLM6KePdD/g4Go8YDRI09+bPr mxymuetEyAazPrB69GnmNBR3KTuRPDef/IWMw7ddiBwjO9Hi+qjthlu8yBojLD8b Yqi03RLOa++KddZUzaDZ/FSCVfvc2aLgM1ZDkFKv01Dh7EHA10TWL6R6L/ALcofS B7BxDZ+D+BeWZ2V73CQJGOtnrK5h7qrpW7J6Jh+swKZMJ50nOT3cmDFTOC0e8sB4 meXl35C9xx8ZFJLuz807jpFQOR1dCu14y0n2Ea/+b7IyzkVM7nZgYpVJ1qsKwIfv PYHRAWDvl1LM8SG7ieqbCXwdb2s9naZjhgxyrvwv9YKRqzhg0WWJqxqfJNizAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQU6d+Ork4jFs1j++bnuBHFBI/1lcgwHwYDVR0j BBgwFoAULU73b/Xx3gi5+3yu1Jr3rUxgGDUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQwOTI3ZTYtOGEwYS00ZmE3LTg5NjktOWZiOWQ2OTQzOTdjLzAvMkQ0RUY3NkZG NUYxREUwOEI5RkI3Q0FFRDQ5QUY3QUQ0QzYwMTgzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRDRFRjc2RkY1RjFERTA4QjlGQjdDQUVENDlBRjdBRDRDNjAx ODM1LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJkMDkyN2U2LThhMGEtNGZhNy04 OTY5LTlmYjlkNjk0Mzk3Yy8wLzMyMzQzMDMyM2EzMzMyNjMzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzMjM2MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQCMsAwDQYJKoZI hvcNAQELBQADggEBAFBGt7ECPGxHhk0e7JbTynKbFgZnuNUXcwreRuxV49FkDnwx iwK826aMLe1Jcl0fIICqwtET4JXZMylKY4logAM1oGNWmzvpeFGec1MHNQHG6M8A 9XgO/9MWy7PsJ820xLOmgYiJCdTlbNDbuQZi4r5oWPIwDSk+ha6J5szSVx+gVkj0 YsX2go7KQPwqtTRZbDnG69I7X1hj2fMX+ukv4jCe/t/pxzWVVIHLOCEnMuAUiJ4y 8X86YsfTFoZ5V3ylDHNWY8kzZfb4pzwD4Rp4/ozjQm9IDRJQsEgWYuW07vTxeUAV mao4nAZp0kI1LO6JP88Jp5hZdRGVE9HLyI4kRY8= -----END CERTIFICATE-----Generated at Wed May 13 06:55:17 2026 by rpki-client