$ rpki-client -vvf rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/323430313a326334303a323a3a2f34382d3438203d3e203338353233.roa File: 323430313a326334303a323a3a2f34382d3438203d3e203338353233.roa (raw, json) Hash identifier: dioQduQ3RsGsXcF2fvN/JbmBfWyTlyf1+yoiwspl0zk= Subject key identifier: 37:ED:F9:60:74:8F:EE:72:E6:1E:1F:8C:D1:24:E1:EF:4B:4A:EE:B7 Certificate issuer: /CN=1A4531574FEFFD9E221DE0D82CE657853E4CEE3A Certificate serial: 68BCC7C86AAAC28FE56BE1DE9304F53D7540CC31 Authority key identifier: 1A:45:31:57:4F:EF:FD:9E:22:1D:E0:D8:2C:E6:57:85:3E:4C:EE:3A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/323430313a326334303a323a3a2f34382d3438203d3e203338353233.roa Signing time: Sun 03 May 2026 02:25:11 +0000 ROA not before: Sun 03 May 2026 02:20:11 +0000 ROA not after: Sun 02 May 2027 02:25:11 +0000 asID: 38523 IP address blocks: 2401:2c40:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.crl rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:bc:c7:c8:6a:aa:c2:8f:e5:6b:e1:de:93:04:f5:3d:75:40:cc:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A4531574FEFFD9E221DE0D82CE657853E4CEE3A Validity Not Before: May 3 02:20:11 2026 GMT Not After : May 2 02:25:11 2027 GMT Subject: CN=37EDF960748FEE72E61E1F8CD124E1EF4B4AEEB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:56:01:d2:1e:12:ad:25:9e:52:0c:20:60:dd: 2d:d1:d6:b4:0c:f9:1d:a1:e6:d4:09:e0:7b:67:3a: 4f:18:ab:f7:82:b8:5e:b2:02:7b:39:73:a9:b4:8a: 00:34:a5:ed:17:d6:f2:6b:56:f0:7a:b7:36:0a:d7: e5:54:f0:66:b1:81:ab:65:e2:ad:a4:76:d3:ca:be: 6c:c2:51:da:a4:15:5d:af:aa:7f:2c:05:2e:5d:ef: 3e:a1:a2:8a:4e:c2:8a:74:c2:41:5c:8c:cd:bc:d9: 13:82:76:89:32:c3:8f:df:3a:7d:19:3f:ee:54:ef: 51:da:9d:96:5c:80:09:b8:4d:f3:12:d1:fd:01:09: 58:03:37:5b:a6:bb:98:7a:8a:36:ef:a2:bc:c3:20: 74:dd:af:b9:e5:7a:0b:5b:e1:07:12:bb:65:dc:b0: 65:ea:a8:c0:cb:1c:58:18:3b:9c:d1:9f:b3:bd:e5: 9b:11:ba:ee:6b:ec:1c:70:32:7c:a6:0a:bc:e9:16: 60:99:85:eb:e2:a0:cf:e1:9a:39:e1:09:15:1e:93: b3:26:14:3c:14:c0:61:fe:4c:8f:65:a9:e7:2f:ca: 4e:ab:1c:af:eb:55:7e:8f:20:55:df:a3:5f:12:e5: 97:ab:ff:84:88:cf:4e:8d:01:5c:14:82:2e:d9:ba: 65:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:ED:F9:60:74:8F:EE:72:E6:1E:1F:8C:D1:24:E1:EF:4B:4A:EE:B7 X509v3 Authority Key Identifier: keyid:1A:45:31:57:4F:EF:FD:9E:22:1D:E0:D8:2C:E6:57:85:3E:4C:EE:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/323430313a326334303a323a3a2f34382d3438203d3e203338353233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2c40:2::/48 Signature Algorithm: sha256WithRSAEncryption 88:d9:76:b0:fe:fd:30:d5:a2:e9:8e:79:a8:e6:75:12:64:56: e8:2a:39:ea:a7:fe:fc:83:13:aa:97:34:2a:10:58:17:69:9c: 9f:72:81:65:54:1f:2c:b3:c6:a9:4a:37:05:06:21:23:e1:8f: 14:dd:7b:ae:31:05:2a:de:bf:83:bc:0f:17:bd:1b:d6:18:66: 57:61:d9:89:17:44:45:4c:fb:c9:4e:d2:51:0c:fc:f0:8c:93: d6:72:0d:10:36:26:e1:48:62:af:23:64:34:0b:99:dc:27:12: 11:d3:76:c7:ef:ed:78:04:53:95:7e:9b:a7:16:42:24:d1:e0: 7b:29:9f:54:53:0b:b8:34:96:3e:41:a0:9c:8e:2e:27:2b:da: 3c:87:e4:12:1d:1e:9d:00:3a:b4:ce:ca:9c:b7:aa:47:3a:9a: 62:10:74:00:8f:82:33:45:5a:da:d6:ff:3c:f8:58:c9:08:d9: 69:9f:69:b7:20:2a:59:5f:82:8c:81:8f:16:bd:8e:2f:4e:dd: 3a:ce:eb:67:6c:5b:40:8a:c0:ed:80:2d:b7:7e:80:9a:11:1d: 01:69:21:74:ec:63:1d:f5:ec:12:f9:c5:7b:6b:ed:50:ee:c4: ee:80:52:a7:76:f3:0e:3b:9a:34:25:52:1e:18:9a:a4:e9:46: 64:16:d3:1c -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUaLzHyGqqwo/la+HekwT1PXVAzDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0NTMxNTc0RkVGRkQ5RTIyMURFMEQ4MkNFNjU3ODUz RTRDRUUzQTAeFw0yNjA1MDMwMjIwMTFaFw0yNzA1MDIwMjI1MTFaMDMxMTAvBgNV BAMTKDM3RURGOTYwNzQ4RkVFNzJFNjFFMUY4Q0QxMjRFMUVGNEI0QUVFQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4VgHSHhKtJZ5SDCBg3S3R1rQM +R2h5tQJ4HtnOk8Yq/eCuF6yAns5c6m0igA0pe0X1vJrVvB6tzYK1+VU8Gaxgatl 4q2kdtPKvmzCUdqkFV2vqn8sBS5d7z6hoopOwop0wkFcjM282ROCdokyw4/fOn0Z P+5U71HanZZcgAm4TfMS0f0BCVgDN1umu5h6ijbvorzDIHTdr7nlegtb4QcSu2Xc sGXqqMDLHFgYO5zRn7O95ZsRuu5r7BxwMnymCrzpFmCZhevioM/hmjnhCRUek7Mm FDwUwGH+TI9lqecvyk6rHK/rVX6PIFXfo18S5Zer/4SIz06NAVwUgi7ZumUjAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUN+35YHSP7nLmHh+M0STh70tK7rcwHwYDVR0j BBgwFoAUGkUxV0/v/Z4iHeDYLOZXhT5M7jowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU1YTFhNDQtMzM3ZC00ZGI0LTkwZDctNWJkNGYzNzIxNGI4LzAvMUE0NTMxNTc0 RkVGRkQ5RTIyMURFMEQ4MkNFNjU3ODUzRTRDRUUzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQTQ1MzE1NzRGRUZGRDlFMjIxREUwRDgyQ0U2NTc4NTNFNENF RTNBLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzM1NWExYTQ0LTMzN2QtNGRiNC05 MGQ3LTViZDRmMzcyMTRiOC8wLzMyMzQzMDMxM2EzMjYzMzQzMDNhMzIzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEsQAACMA0G CSqGSIb3DQEBCwUAA4IBAQCI2Xaw/v0w1aLpjnmo5nUSZFboKjnqp/78gxOqlzQq EFgXaZyfcoFlVB8ss8apSjcFBiEj4Y8U3XuuMQUq3r+DvA8XvRvWGGZXYdmJF0RF TPvJTtJRDPzwjJPWcg0QNibhSGKvI2Q0C5ncJxIR03bH7+14BFOVfpunFkIk0eB7 KZ9UUwu4NJY+QaCcji4nK9o8h+QSHR6dADq0zsqct6pHOppiEHQAj4IzRVra1v88 +FjJCNlpn2m3ICpZX4KMgY8WvY4vTt06zutnbFtAisDtgC23foCaER0BaSF07GMd 9ewS+cV7a+1Q7sTugFKndvMOO5o0JVIeGJqk6UZkFtMc -----END CERTIFICATE-----Generated at Wed May 13 08:24:41 2026 by rpki-client