$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32343a3a2f34382d3438203d3e20313437313337.roa File: 323430303a343661303a32343a3a2f34382d3438203d3e20313437313337.roa (raw, json) Hash identifier: 5SgJA7bdr6raZ7Mqjwc8wZqhlg7dpVjh8FGcFa+U5rk= Subject key identifier: 42:EF:E8:4E:02:7E:85:27:6C:65:56:A4:C4:96:77:C0:A1:75:B2:F8 Certificate issuer: /CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9 Certificate serial: 7C6B56C7649F559D0B0A23C2FDF103114BF34137 Authority key identifier: C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32343a3a2f34382d3438203d3e20313437313337.roa Signing time: Sun 03 May 2026 02:26:34 +0000 ROA not before: Sun 03 May 2026 02:21:34 +0000 ROA not after: Sun 02 May 2027 02:26:34 +0000 asID: 147137 IP address blocks: 2400:46a0:24::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:6b:56:c7:64:9f:55:9d:0b:0a:23:c2:fd:f1:03:11:4b:f3:41:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9 Validity Not Before: May 3 02:21:34 2026 GMT Not After : May 2 02:26:34 2027 GMT Subject: CN=42EFE84E027E85276C6556A4C49677C0A175B2F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0b:8e:22:dd:2b:00:3b:b2:36:a3:df:3d:3a: 97:57:b5:0d:72:ba:be:fa:09:be:cf:8a:41:6f:19: 3f:cf:32:d5:d1:70:3b:c4:19:1d:99:61:cd:13:5f: e9:70:92:08:c1:99:41:9e:45:28:52:65:c3:e9:b3: 7c:6a:75:41:36:4f:26:05:fa:ee:7f:85:78:53:7b: 0f:32:66:f3:ea:32:8c:e1:c0:bf:8f:45:1a:71:8b: a8:c0:b8:f4:d0:61:80:9e:ac:f0:77:1b:94:1e:c6: 14:fd:e5:79:1e:2c:58:d3:15:2e:16:ac:61:77:9d: 3d:9d:c2:a4:7b:26:c3:a9:d6:8a:07:f7:7e:2a:16: 5c:d4:9c:c3:e7:1d:14:68:60:ca:f7:53:6e:29:67: 5d:6b:ca:11:e5:80:c9:27:d7:ed:5f:ae:9d:06:5e: 19:d7:a6:95:7e:8e:af:3c:b4:cf:58:72:66:88:35: 70:fe:e2:b2:cc:d4:e9:e2:b0:e2:87:ba:cf:18:d0: 61:98:2e:ef:49:8c:e6:b8:27:c7:bf:28:96:f7:63: b8:21:c0:f7:e6:89:8c:47:25:2f:86:63:6d:30:1b: e1:8e:5b:95:39:87:9a:9a:11:ed:5c:3c:78:05:ce: 14:86:dd:89:a2:ee:9d:d5:ab:6c:d0:0e:e3:b4:79: 2e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:EF:E8:4E:02:7E:85:27:6C:65:56:A4:C4:96:77:C0:A1:75:B2:F8 X509v3 Authority Key Identifier: keyid:C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32343a3a2f34382d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0:24::/48 Signature Algorithm: sha256WithRSAEncryption 4f:68:66:23:ed:84:e3:b8:60:b3:7f:ba:d7:ea:26:9d:7f:6d: 9f:7a:23:d3:b2:d2:07:0b:d1:ad:28:31:d5:8d:7d:64:20:3c: 96:15:18:71:b9:c1:5b:a3:0e:7b:02:b7:79:6c:ae:b5:b9:12: 1b:94:2f:08:b5:1d:95:7a:28:77:98:07:07:e1:0a:38:89:88: 4b:5a:31:77:40:cc:45:16:17:98:aa:78:c8:b4:0e:91:62:86: 93:f1:70:a3:b9:68:80:90:4a:00:33:57:8d:8d:17:28:57:1f: ec:d7:6f:c3:bd:24:21:18:05:59:e3:8c:9e:09:7b:bc:5a:10: 39:cf:27:05:83:fb:2d:1c:ea:4e:91:b9:a8:2c:72:bf:46:a1: 54:ba:8f:e9:8a:c3:fb:d9:19:79:8e:9a:e0:c6:15:58:ab:98: 08:8b:8b:ed:4e:3c:2e:6a:52:76:9c:c4:7f:78:b9:49:d8:37: 39:cf:b5:18:a2:3b:1b:12:e9:38:cd:f5:5a:8c:79:79:6b:01: 26:9d:98:a7:64:a2:b4:d6:1f:1c:f4:d2:eb:c7:3c:e9:9d:07: 5e:83:5d:33:10:f9:6b:66:fb:5d:6d:19:69:79:a5:40:5f:93: 73:7a:9b:05:5b:f8:29:65:df:e0:0b:71:d3:5b:28:5a:60:61: a8:0d:50:94 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUfGtWx2SfVZ0LCiPC/fEDEUvzQTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBENzAyOEMwRkE2MjgzNDhBRTIyNDVERDBDQzAyRDND NURDQjNGOTAeFw0yNjA1MDMwMjIxMzRaFw0yNzA1MDIwMjI2MzRaMDMxMTAvBgNV BAMTKDQyRUZFODRFMDI3RTg1Mjc2QzY1NTZBNEM0OTY3N0MwQTE3NUIyRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQC44i3SsAO7I2o989OpdXtQ1y ur76Cb7PikFvGT/PMtXRcDvEGR2ZYc0TX+lwkgjBmUGeRShSZcPps3xqdUE2TyYF +u5/hXhTew8yZvPqMozhwL+PRRpxi6jAuPTQYYCerPB3G5QexhT95XkeLFjTFS4W rGF3nT2dwqR7JsOp1ooH934qFlzUnMPnHRRoYMr3U24pZ11ryhHlgMkn1+1frp0G XhnXppV+jq88tM9YcmaINXD+4rLM1OnisOKHus8Y0GGYLu9JjOa4J8e/KJb3Y7gh wPfmiYxHJS+GY20wG+GOW5U5h5qaEe1cPHgFzhSG3Ymi7p3Vq2zQDuO0eS71AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUQu/oTgJ+hSdsZVakxJZ3wKF1svgwHwYDVR0j BBgwFoAUwNcCjA+mKDSK4iRd0MwC08Xcs/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E2NjVjMzItNmRhZi00NzJiLWJjZTYtMzE3ZDVkNmM3ODllLzAvQzBENzAyOEMw RkE2MjgzNDhBRTIyNDVERDBDQzAyRDNDNURDQjNGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMEQ3MDI4QzBGQTYyODM0OEFFMjI0NUREMENDMDJEM0M1RENC M0Y5LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzIzNDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzNzMxMzMzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQARqAA JDANBgkqhkiG9w0BAQsFAAOCAQEAT2hmI+2E47hgs3+61+omnX9tn3oj07LSBwvR rSgx1Y19ZCA8lhUYcbnBW6MOewK3eWyutbkSG5QvCLUdlXood5gHB+EKOImIS1ox d0DMRRYXmKp4yLQOkWKGk/Fwo7logJBKADNXjY0XKFcf7Ndvw70kIRgFWeOMngl7 vFoQOc8nBYP7LRzqTpG5qCxyv0ahVLqP6YrD+9kZeY6a4MYVWKuYCIuL7U48LmpS dpzEf3i5Sdg3Oc+1GKI7GxLpOM31Wox5eWsBJp2Yp2SitNYfHPTS68c86Z0HXoNd MxD5a2b7XW0ZaXmlQF+Tc3qbBVv4KWXf4Atx01soWmBhqA1QlA== -----END CERTIFICATE-----Generated at Wed May 13 11:22:15 2026 by rpki-client