$ rpki-client -vvf rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/323430313a326334303a353a3a2f34382d3438203d3e203338353233.roa File: 323430313a326334303a353a3a2f34382d3438203d3e203338353233.roa (raw, json) Hash identifier: Ulhe7SBzoKXa0nbHiYWTSM2UW8Ne9l9FUM0Zzr+5Taw= Subject key identifier: 0E:9B:F8:81:43:79:81:AB:81:E2:81:38:37:F8:1A:82:DB:DF:B9:2E Certificate issuer: /CN=1A4531574FEFFD9E221DE0D82CE657853E4CEE3A Certificate serial: 4CFEDD605A3876481BF94B0F18B5E2B3C2438866 Authority key identifier: 1A:45:31:57:4F:EF:FD:9E:22:1D:E0:D8:2C:E6:57:85:3E:4C:EE:3A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/323430313a326334303a353a3a2f34382d3438203d3e203338353233.roa Signing time: Sun 03 May 2026 02:25:15 +0000 ROA not before: Sun 03 May 2026 02:20:15 +0000 ROA not after: Sun 02 May 2027 02:25:15 +0000 asID: 38523 IP address blocks: 2401:2c40:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.crl rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:fe:dd:60:5a:38:76:48:1b:f9:4b:0f:18:b5:e2:b3:c2:43:88:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A4531574FEFFD9E221DE0D82CE657853E4CEE3A Validity Not Before: May 3 02:20:15 2026 GMT Not After : May 2 02:25:15 2027 GMT Subject: CN=0E9BF881437981AB81E2813837F81A82DBDFB92E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:63:7b:5b:1a:ad:af:d1:61:2f:ca:d3:1d:06: d9:ef:81:0a:05:ca:3c:4f:8c:bc:58:6b:36:ac:1d: 9d:87:7f:75:10:0e:3d:28:27:69:fc:eb:f0:17:d7: 14:b2:b3:46:35:8d:10:4b:69:37:d0:1e:d7:5a:83: ba:0e:16:89:b6:d3:77:e1:3c:77:0a:43:b0:c0:bb: 2b:78:99:ac:f0:95:eb:f8:b0:ac:1a:43:f2:ba:18: 47:9a:d1:78:6a:e8:1e:b4:c0:fb:20:ee:24:8b:8e: af:2e:02:05:2b:ec:e4:78:a2:5c:90:13:9c:68:f5: 56:c8:20:d3:b5:e2:4b:48:08:76:fe:3b:ae:c5:46: 59:19:6e:c1:55:6a:0d:d7:ff:0c:11:fe:50:7c:9e: 14:f7:b5:83:5d:c5:8c:a3:e5:23:3a:4a:11:f9:1e: dc:34:d0:c8:01:ee:77:73:47:db:09:ca:c7:6f:d2: 90:04:ee:f6:89:5b:66:91:9a:f6:f5:ba:e0:04:e3: c6:b0:7a:2f:9a:8e:0f:9a:3e:c4:6c:ba:26:d7:e7: 69:0d:24:ff:92:96:10:e2:b6:b6:f3:72:b5:bb:5f: ce:7d:75:2b:e6:38:2d:b1:b2:91:a8:0e:c6:d1:f4: d7:fd:7c:e4:49:12:a1:b0:49:d4:96:94:98:a7:13: ef:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9B:F8:81:43:79:81:AB:81:E2:81:38:37:F8:1A:82:DB:DF:B9:2E X509v3 Authority Key Identifier: keyid:1A:45:31:57:4F:EF:FD:9E:22:1D:E0:D8:2C:E6:57:85:3E:4C:EE:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/323430313a326334303a353a3a2f34382d3438203d3e203338353233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2c40:5::/48 Signature Algorithm: sha256WithRSAEncryption 45:38:c0:a5:d9:8b:c4:d8:1f:0f:c9:25:72:83:8c:f1:76:de: c8:2d:e0:e0:b5:fd:25:e1:8e:9c:d5:49:3e:e6:f2:99:dc:13: 89:b3:a1:ed:0e:fc:62:87:17:6a:d7:87:77:f2:10:9a:b5:c4: c7:d2:99:45:1e:88:4e:f5:0a:b0:8f:d8:61:48:e9:ee:d2:8b: dd:68:2c:f0:05:05:ad:70:ad:2a:3d:a4:73:80:12:0c:b3:62: 20:34:7e:ae:e2:9a:c1:af:7c:e2:b5:fc:ee:c2:20:fe:ce:dc: 9d:fb:08:c9:6e:68:10:c0:17:e2:77:aa:87:66:dc:d8:c1:94: f3:18:ac:50:15:4a:db:f9:67:ee:d2:9b:56:89:3c:92:f2:2d: c6:e7:17:07:a5:20:62:7f:c1:12:41:64:1f:c7:7a:16:1e:17: 82:b6:18:63:c2:94:d6:ac:89:d6:6a:1e:97:3c:1a:f0:ee:7d: 7b:ce:93:ca:be:be:4a:50:88:f6:21:95:12:cd:d8:c8:7d:4c: f8:a1:d2:f1:e6:fa:1b:7f:cb:b6:46:cf:13:10:1a:5d:91:74: 56:9f:06:a0:b3:73:0a:35:c5:63:7f:a6:ac:e3:06:0b:63:f7: 21:d9:4e:17:50:91:8f:39:b3:08:7d:9f:35:bb:18:98:db:5c: 86:79:75:c6 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUTP7dYFo4dkgb+UsPGLXis8JDiGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0NTMxNTc0RkVGRkQ5RTIyMURFMEQ4MkNFNjU3ODUz RTRDRUUzQTAeFw0yNjA1MDMwMjIwMTVaFw0yNzA1MDIwMjI1MTVaMDMxMTAvBgNV BAMTKDBFOUJGODgxNDM3OTgxQUI4MUUyODEzODM3RjgxQTgyREJERkI5MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTY3tbGq2v0WEvytMdBtnvgQoF yjxPjLxYazasHZ2Hf3UQDj0oJ2n86/AX1xSys0Y1jRBLaTfQHtdag7oOFom203fh PHcKQ7DAuyt4mazwlev4sKwaQ/K6GEea0Xhq6B60wPsg7iSLjq8uAgUr7OR4olyQ E5xo9VbIINO14ktICHb+O67FRlkZbsFVag3X/wwR/lB8nhT3tYNdxYyj5SM6ShH5 Htw00MgB7ndzR9sJysdv0pAE7vaJW2aRmvb1uuAE48awei+ajg+aPsRsuibX52kN JP+SlhDitrbzcrW7X859dSvmOC2xspGoDsbR9Nf9fORJEqGwSdSWlJinE+9/AgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUDpv4gUN5gauB4oE4N/gagtvfuS4wHwYDVR0j BBgwFoAUGkUxV0/v/Z4iHeDYLOZXhT5M7jowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU1YTFhNDQtMzM3ZC00ZGI0LTkwZDctNWJkNGYzNzIxNGI4LzAvMUE0NTMxNTc0 RkVGRkQ5RTIyMURFMEQ4MkNFNjU3ODUzRTRDRUUzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQTQ1MzE1NzRGRUZGRDlFMjIxREUwRDgyQ0U2NTc4NTNFNENF RTNBLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzM1NWExYTQ0LTMzN2QtNGRiNC05 MGQ3LTViZDRmMzcyMTRiOC8wLzMyMzQzMDMxM2EzMjYzMzQzMDNhMzUzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEsQAAFMA0G CSqGSIb3DQEBCwUAA4IBAQBFOMCl2YvE2B8PySVyg4zxdt7ILeDgtf0l4Y6c1Uk+ 5vKZ3BOJs6HtDvxihxdq14d38hCatcTH0plFHohO9Qqwj9hhSOnu0ovdaCzwBQWt cK0qPaRzgBIMs2IgNH6u4prBr3zitfzuwiD+ztyd+wjJbmgQwBfid6qHZtzYwZTz GKxQFUrb+Wfu0ptWiTyS8i3G5xcHpSBif8ESQWQfx3oWHheCthhjwpTWrInWah6X PBrw7n17zpPKvr5KUIj2IZUSzdjIfUz4odLx5vobf8u2Rs8TEBpdkXRWnwags3MK NcVjf6as4wYLY/ch2U4XUJGPObMIfZ81uxiY21yGeXXG -----END CERTIFICATE-----Generated at Wed May 13 09:14:57 2026 by rpki-client