$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31383a3a2f34382d3438203d3e20313437313337.roa File: 323430303a343661303a31383a3a2f34382d3438203d3e20313437313337.roa (raw, json) Hash identifier: OzuliA2N8wNt6MGtPujtGB6U6rXsRoWhjjYaeaS0yAs= Subject key identifier: 19:33:82:AC:7F:60:40:5C:D3:C4:8A:D2:41:20:CE:C7:2F:17:D9:F2 Certificate issuer: /CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9 Certificate serial: 60AF9C8B9F80E20F3AA8933942E768BB900D84B2 Authority key identifier: C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31383a3a2f34382d3438203d3e20313437313337.roa Signing time: Sun 03 May 2026 02:26:39 +0000 ROA not before: Sun 03 May 2026 02:21:39 +0000 ROA not after: Sun 02 May 2027 02:26:39 +0000 asID: 147137 IP address blocks: 2400:46a0:18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:af:9c:8b:9f:80:e2:0f:3a:a8:93:39:42:e7:68:bb:90:0d:84:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9 Validity Not Before: May 3 02:21:39 2026 GMT Not After : May 2 02:26:39 2027 GMT Subject: CN=193382AC7F60405CD3C48AD24120CEC72F17D9F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a8:5a:e7:23:57:fa:79:ca:5f:58:54:fd:1a: 47:c1:1e:b8:83:ea:46:8d:8b:d8:45:4b:f8:4a:e0: 88:3e:f8:18:19:3e:bb:57:d1:15:48:b3:1d:3e:77: 2d:a4:30:31:65:60:de:4d:c9:d2:9a:78:fc:5e:b9: 7f:f5:e8:f3:00:69:ce:8c:e1:69:ca:db:7c:a8:0d: 6c:01:bb:ec:80:cb:f0:7b:76:84:e3:c4:a0:cd:b7: b1:26:d5:55:3a:0d:2e:89:45:dd:26:28:c4:d9:6d: db:b8:0e:a3:3d:9e:2a:73:43:33:d1:36:aa:e6:14: f8:33:1e:d7:c2:b3:e9:3a:1f:89:57:71:af:73:46: 6e:54:b7:4a:9c:ff:42:9d:8d:16:e1:58:7f:e2:a6: 02:fc:3a:e0:87:38:a7:b4:cd:5f:ed:a7:d8:62:ea: d0:8d:2d:78:8c:2a:b3:b0:78:04:d8:e2:ad:0a:e6: 43:7f:60:66:b4:b7:20:26:05:91:ff:6f:6a:73:f5: 11:e9:eb:9e:b3:3d:f5:1d:60:d4:2d:ff:b8:ca:82: 99:a1:21:c0:a7:81:55:4d:10:04:35:24:35:a6:09: df:72:7a:8b:65:aa:78:de:d4:8a:77:1f:1b:2a:9d: 7e:a5:da:01:0e:8e:e4:7f:80:ad:d6:db:b4:ed:cc: ca:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:33:82:AC:7F:60:40:5C:D3:C4:8A:D2:41:20:CE:C7:2F:17:D9:F2 X509v3 Authority Key Identifier: keyid:C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31383a3a2f34382d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0:18::/48 Signature Algorithm: sha256WithRSAEncryption 7c:83:d1:a3:c2:f0:59:ad:d3:9c:0f:ca:d7:59:a0:ed:51:be: 78:7f:54:b0:2c:79:76:22:d4:87:4e:c5:2a:39:d4:1b:8b:ac: 60:4d:55:65:95:be:f2:b6:d0:37:95:ea:ef:47:cd:9a:1e:a6: 22:ef:98:be:15:1a:dc:7c:e1:ea:d1:6d:f8:79:99:98:19:38: cc:3e:d5:7a:96:b1:66:35:fe:46:65:61:f1:e5:34:68:5a:a3: ec:0f:64:4f:35:72:13:d7:01:76:33:3b:fa:08:3d:78:55:4a: cd:24:f2:c8:3b:8b:c3:c2:1b:70:6e:f9:93:00:3f:02:61:d3: fe:25:a2:5e:96:16:23:3d:32:28:9f:d0:77:cc:80:c9:25:ad: 11:40:32:90:c0:b1:e1:54:b8:21:bc:e8:11:1c:45:3b:35:48: a9:b8:75:84:84:2a:f6:3a:2c:a0:de:e7:ec:68:fa:a9:5c:d2: 20:2e:25:1e:1f:cc:2c:40:0a:2a:cf:bb:97:27:f2:b9:1c:6c: 68:05:80:32:25:8b:84:c7:1c:54:7c:d5:44:91:67:4c:6e:db: 86:f6:c1:6e:8b:c7:1c:a4:00:68:22:2e:ab:f7:5f:33:55:15: 2a:fc:0d:00:3b:7d:32:bf:03:78:6e:d9:ce:54:ef:a3:e5:1b: d8:bb:e0:f0 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUYK+ci5+A4g86qJM5Qudou5ANhLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBENzAyOEMwRkE2MjgzNDhBRTIyNDVERDBDQzAyRDND NURDQjNGOTAeFw0yNjA1MDMwMjIxMzlaFw0yNzA1MDIwMjI2MzlaMDMxMTAvBgNV BAMTKDE5MzM4MkFDN0Y2MDQwNUNEM0M0OEFEMjQxMjBDRUM3MkYxN0Q5RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGqFrnI1f6ecpfWFT9GkfBHriD 6kaNi9hFS/hK4Ig++BgZPrtX0RVIsx0+dy2kMDFlYN5NydKaePxeuX/16PMAac6M 4WnK23yoDWwBu+yAy/B7doTjxKDNt7Em1VU6DS6JRd0mKMTZbdu4DqM9nipzQzPR NqrmFPgzHtfCs+k6H4lXca9zRm5Ut0qc/0KdjRbhWH/ipgL8OuCHOKe0zV/tp9hi 6tCNLXiMKrOweATY4q0K5kN/YGa0tyAmBZH/b2pz9RHp656zPfUdYNQt/7jKgpmh IcCngVVNEAQ1JDWmCd9yeotlqnje1Ip3HxsqnX6l2gEOjuR/gK3W27TtzMqHAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUGTOCrH9gQFzTxIrSQSDOxy8X2fIwHwYDVR0j BBgwFoAUwNcCjA+mKDSK4iRd0MwC08Xcs/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E2NjVjMzItNmRhZi00NzJiLWJjZTYtMzE3ZDVkNmM3ODllLzAvQzBENzAyOEMw RkE2MjgzNDhBRTIyNDVERDBDQzAyRDNDNURDQjNGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMEQ3MDI4QzBGQTYyODM0OEFFMjI0NUREMENDMDJEM0M1RENC M0Y5LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzEzODNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzNzMxMzMzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQARqAA GDANBgkqhkiG9w0BAQsFAAOCAQEAfIPRo8LwWa3TnA/K11mg7VG+eH9UsCx5diLU h07FKjnUG4usYE1VZZW+8rbQN5Xq70fNmh6mIu+YvhUa3Hzh6tFt+HmZmBk4zD7V epaxZjX+RmVh8eU0aFqj7A9kTzVyE9cBdjM7+gg9eFVKzSTyyDuLw8IbcG75kwA/ AmHT/iWiXpYWIz0yKJ/Qd8yAySWtEUAykMCx4VS4IbzoERxFOzVIqbh1hIQq9jos oN7n7Gj6qVzSIC4lHh/MLEAKKs+7lyfyuRxsaAWAMiWLhMccVHzVRJFnTG7bhvbB bovHHKQAaCIuq/dfM1UVKvwNADt9Mr8DeG7ZzlTvo+Ub2Lvg8A== -----END CERTIFICATE-----Generated at Wed May 13 12:02:17 2026 by rpki-client