$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31393a3a2f34382d3438203d3e20313437313337.roa File: 323430303a343661303a31393a3a2f34382d3438203d3e20313437313337.roa (raw, json) Hash identifier: sk3ZxSGwRUSHyuGSOaKTetRq+YknC9DBGmC5NH67SNI= Subject key identifier: 7E:38:5D:B1:04:8C:D9:E4:63:2C:91:47:1A:05:88:C4:EE:70:EC:5D Certificate issuer: /CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9 Certificate serial: 443181ADAEA421D8F21298E167E6E1C6575915CE Authority key identifier: C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31393a3a2f34382d3438203d3e20313437313337.roa Signing time: Sun 03 May 2026 02:26:30 +0000 ROA not before: Sun 03 May 2026 02:21:30 +0000 ROA not after: Sun 02 May 2027 02:26:30 +0000 asID: 147137 IP address blocks: 2400:46a0:19::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:31:81:ad:ae:a4:21:d8:f2:12:98:e1:67:e6:e1:c6:57:59:15:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9 Validity Not Before: May 3 02:21:30 2026 GMT Not After : May 2 02:26:30 2027 GMT Subject: CN=7E385DB1048CD9E4632C91471A0588C4EE70EC5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:08:39:30:07:83:61:98:31:fb:c3:79:68:61: 35:bd:06:04:33:32:b3:ac:9b:a7:9c:62:a8:00:69: 98:1e:48:c2:bd:63:41:fd:e6:13:9a:04:87:50:e8: d2:e8:a8:e4:3f:b9:e7:23:cf:2a:d1:05:23:8c:65: b9:a2:e0:57:2d:b0:00:25:2c:9f:4d:d3:33:98:18: b6:c4:dd:a2:7c:a4:a5:6a:bd:61:ce:0b:68:fd:1e: da:60:c3:01:4f:d9:53:95:8c:d6:f9:3d:be:28:8d: b0:a1:ef:87:14:30:7b:f8:82:de:20:c8:25:f7:55: 8e:90:3b:91:1f:eb:0b:df:67:85:cf:a6:fb:70:8d: 31:ac:ae:15:33:4a:7b:0c:5c:20:9a:57:d4:18:57: c4:3f:1a:92:fc:dc:db:22:a9:48:72:53:c0:6f:16: b9:63:07:c8:ff:7b:90:f6:a3:dc:d2:a2:d1:71:94: 00:05:99:43:7d:76:8b:e8:6c:10:95:17:a9:a4:28: a1:de:c3:cd:e7:41:1d:54:c6:74:91:a1:48:9e:1b: ba:55:ff:46:e4:3f:7f:a8:e7:f2:06:58:d8:0b:c4: c9:dc:56:6f:ec:5b:da:4b:49:e4:36:4a:af:2f:5b: 0a:a4:59:b2:71:ab:c4:b5:75:8a:0f:9f:ba:be:3d: f6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:38:5D:B1:04:8C:D9:E4:63:2C:91:47:1A:05:88:C4:EE:70:EC:5D X509v3 Authority Key Identifier: keyid:C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31393a3a2f34382d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0:19::/48 Signature Algorithm: sha256WithRSAEncryption 00:8c:fb:a7:85:f3:ea:8a:f2:93:ba:b7:d3:e7:15:65:33:ef: 61:09:a7:24:4d:46:61:15:10:f8:0f:a9:32:7e:5a:ce:eb:6a: 43:00:ef:09:87:e0:49:c3:6d:30:b3:61:e2:9a:53:f5:3d:86: 10:9c:ae:3b:e4:c3:93:dc:e0:1f:e9:ed:22:73:0c:a4:1b:55: 01:4f:ee:14:38:59:c0:e0:c5:0f:f2:d5:c7:7a:93:0c:e3:87: 73:b9:24:74:e7:bb:03:c9:2f:2b:57:bb:2f:41:58:86:cf:28: cd:7a:5c:43:5c:4f:64:fc:3b:50:63:2f:52:22:a2:09:ca:15: 4d:39:b2:83:d2:51:a8:47:cc:be:e2:93:1f:93:21:d7:be:8c: 39:68:c5:69:57:5b:19:9a:c2:3e:e0:02:5c:76:72:c1:db:92: 58:64:60:03:88:28:b3:63:c9:3d:2d:5d:0b:f7:1e:a0:b4:b3: 8b:68:ad:e1:97:1d:a9:e1:70:11:52:6f:d4:8f:83:e1:6a:41: 45:f3:9f:f5:33:4c:05:e4:01:51:a7:86:b9:6f:f2:83:aa:f7: 42:75:cd:7a:ad:3b:37:21:67:8f:d9:15:8e:85:68:7e:57:10: ee:c1:cc:13:e3:ea:11:9f:62:34:45:93:dc:a5:3b:4d:bd:a5: 00:d1:9f:fc -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIURDGBra6kIdjyEpjhZ+bhxldZFc4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBENzAyOEMwRkE2MjgzNDhBRTIyNDVERDBDQzAyRDND NURDQjNGOTAeFw0yNjA1MDMwMjIxMzBaFw0yNzA1MDIwMjI2MzBaMDMxMTAvBgNV BAMTKDdFMzg1REIxMDQ4Q0Q5RTQ2MzJDOTE0NzFBMDU4OEM0RUU3MEVDNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUCDkwB4NhmDH7w3loYTW9BgQz MrOsm6ecYqgAaZgeSMK9Y0H95hOaBIdQ6NLoqOQ/uecjzyrRBSOMZbmi4FctsAAl LJ9N0zOYGLbE3aJ8pKVqvWHOC2j9HtpgwwFP2VOVjNb5Pb4ojbCh74cUMHv4gt4g yCX3VY6QO5Ef6wvfZ4XPpvtwjTGsrhUzSnsMXCCaV9QYV8Q/GpL83NsiqUhyU8Bv FrljB8j/e5D2o9zSotFxlAAFmUN9dovobBCVF6mkKKHew83nQR1UxnSRoUieG7pV /0bkP3+o5/IGWNgLxMncVm/sW9pLSeQ2Sq8vWwqkWbJxq8S1dYoPn7q+PfaZAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUfjhdsQSM2eRjLJFHGgWIxO5w7F0wHwYDVR0j BBgwFoAUwNcCjA+mKDSK4iRd0MwC08Xcs/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E2NjVjMzItNmRhZi00NzJiLWJjZTYtMzE3ZDVkNmM3ODllLzAvQzBENzAyOEMw RkE2MjgzNDhBRTIyNDVERDBDQzAyRDNDNURDQjNGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMEQ3MDI4QzBGQTYyODM0OEFFMjI0NUREMENDMDJEM0M1RENC M0Y5LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzEzOTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzNzMxMzMzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQARqAA GTANBgkqhkiG9w0BAQsFAAOCAQEAAIz7p4Xz6oryk7q30+cVZTPvYQmnJE1GYRUQ +A+pMn5azutqQwDvCYfgScNtMLNh4ppT9T2GEJyuO+TDk9zgH+ntInMMpBtVAU/u FDhZwODFD/LVx3qTDOOHc7kkdOe7A8kvK1e7L0FYhs8ozXpcQ1xPZPw7UGMvUiKi CcoVTTmyg9JRqEfMvuKTH5Mh176MOWjFaVdbGZrCPuACXHZywduSWGRgA4gos2PJ PS1dC/ceoLSzi2it4ZcdqeFwEVJv1I+D4WpBRfOf9TNMBeQBUaeGuW/yg6r3QnXN eq07NyFnj9kVjoVoflcQ7sHME+PqEZ9iNEWT3KU7Tb2lANGf/A== -----END CERTIFICATE-----Generated at Wed May 13 12:32:58 2026 by rpki-client