$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32353a3a2f34382d3438203d3e20313437313337.roa File: 323430303a343661303a32353a3a2f34382d3438203d3e20313437313337.roa (raw, json) Hash identifier: RgFmlKKxmL5ut1KmXAx7XdZwngIvPGxFdbg1RlK2QKc= Subject key identifier: 64:42:CE:F4:18:AE:23:72:D3:56:D3:2B:AD:63:FD:2A:78:7D:D8:9A Certificate issuer: /CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9 Certificate serial: 6C1FE85063FB8F18380021C8BBFE5B99789E570A Authority key identifier: C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32353a3a2f34382d3438203d3e20313437313337.roa Signing time: Sun 03 May 2026 02:26:44 +0000 ROA not before: Sun 03 May 2026 02:21:44 +0000 ROA not after: Sun 02 May 2027 02:26:44 +0000 asID: 147137 IP address blocks: 2400:46a0:25::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:1f:e8:50:63:fb:8f:18:38:00:21:c8:bb:fe:5b:99:78:9e:57:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9 Validity Not Before: May 3 02:21:44 2026 GMT Not After : May 2 02:26:44 2027 GMT Subject: CN=6442CEF418AE2372D356D32BAD63FD2A787DD89A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:47:5c:dc:b3:df:93:14:fc:a7:2a:c9:9c:d2: b1:a1:12:bd:c6:4c:d1:cc:39:b6:5e:00:29:1f:1d: 05:ae:4c:e9:ca:e8:0e:df:fe:4d:e2:24:9d:33:4a: 06:b6:9a:17:c2:92:b0:42:a7:d1:8d:6c:27:10:dc: 17:bd:d8:ee:03:61:67:83:3f:67:49:e2:d7:90:dc: 1e:4b:09:72:38:18:05:27:ac:b7:54:73:9f:49:92: eb:f7:a4:40:99:b5:df:fd:76:da:63:fb:f7:37:dc: 08:14:9f:87:9b:67:52:a2:f5:31:da:52:1f:70:80: 61:8d:e8:06:d7:92:2e:c5:e4:3a:ff:07:81:29:bf: be:83:c9:e1:7d:08:ce:60:61:67:10:2d:93:56:e3: 3a:bc:3a:b7:5f:2b:6c:6d:e7:4d:77:5a:44:be:a7: b5:fe:8f:30:e9:0a:90:cf:6f:1c:89:cc:40:6e:61: 73:e5:67:3a:db:32:ac:67:f6:72:89:7b:67:e3:e0: 72:d6:23:ff:6e:f6:2d:c5:42:ea:53:47:3d:ba:2a: e1:64:5c:12:b0:41:d9:2c:21:11:8c:9a:b7:97:39: 81:b5:35:02:8d:78:51:75:6e:1a:a7:48:e1:fa:9d: 53:cf:4b:f7:1d:34:bb:ca:0a:76:d0:dc:a4:a6:4f: 43:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:42:CE:F4:18:AE:23:72:D3:56:D3:2B:AD:63:FD:2A:78:7D:D8:9A X509v3 Authority Key Identifier: keyid:C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32353a3a2f34382d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0:25::/48 Signature Algorithm: sha256WithRSAEncryption 2b:fc:10:b7:ee:39:fc:a7:ca:44:4d:95:24:a3:aa:6c:f1:a1: 92:89:86:50:0b:3b:f2:f3:c0:81:fc:72:04:a7:8e:50:1f:a8: 65:42:c6:a3:b4:9f:61:6f:52:51:29:55:99:32:27:d5:e4:4c: 32:0f:05:be:5d:d3:68:50:72:fe:5f:61:3c:45:9d:5b:95:38: 8b:d0:ee:33:10:45:08:e9:12:01:fb:5e:d3:72:d2:0f:d7:62: 33:e4:37:d2:af:99:26:19:1d:20:a2:c5:a2:75:5d:98:f7:97: d8:b2:b1:3b:92:37:46:6f:0f:aa:3e:83:db:3c:22:44:1a:59: e5:38:92:58:77:7b:29:97:7f:ab:fc:b1:01:69:69:b2:e7:ff: c6:c5:2e:8f:b3:f4:7c:79:31:31:f8:4b:a0:a5:04:fb:ff:73: ec:bd:d8:d6:3f:34:43:ca:ab:f1:87:b1:a4:02:28:92:47:a4: 5e:ca:d8:a6:21:86:27:c4:9c:aa:76:f8:0d:20:c1:f8:c2:3d: 48:49:01:54:a5:ee:f5:05:07:ff:48:76:4f:36:78:39:a7:21: fb:da:26:0d:ea:f7:1d:28:d9:7e:63:72:c7:e1:d8:d2:98:59: 71:f5:0c:ed:64:e5:19:cd:73:f4:6d:16:34:1b:85:27:81:63: fd:ed:35:51 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUbB/oUGP7jxg4ACHIu/5bmXieVwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBENzAyOEMwRkE2MjgzNDhBRTIyNDVERDBDQzAyRDND NURDQjNGOTAeFw0yNjA1MDMwMjIxNDRaFw0yNzA1MDIwMjI2NDRaMDMxMTAvBgNV BAMTKDY0NDJDRUY0MThBRTIzNzJEMzU2RDMyQkFENjNGRDJBNzg3REQ4OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQR1zcs9+TFPynKsmc0rGhEr3G TNHMObZeACkfHQWuTOnK6A7f/k3iJJ0zSga2mhfCkrBCp9GNbCcQ3Be92O4DYWeD P2dJ4teQ3B5LCXI4GAUnrLdUc59Jkuv3pECZtd/9dtpj+/c33AgUn4ebZ1Ki9THa Uh9wgGGN6AbXki7F5Dr/B4Epv76DyeF9CM5gYWcQLZNW4zq8OrdfK2xt5013WkS+ p7X+jzDpCpDPbxyJzEBuYXPlZzrbMqxn9nKJe2fj4HLWI/9u9i3FQupTRz26KuFk XBKwQdksIRGMmreXOYG1NQKNeFF1bhqnSOH6nVPPS/cdNLvKCnbQ3KSmT0OdAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUZELO9BiuI3LTVtMrrWP9Knh92JowHwYDVR0j BBgwFoAUwNcCjA+mKDSK4iRd0MwC08Xcs/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E2NjVjMzItNmRhZi00NzJiLWJjZTYtMzE3ZDVkNmM3ODllLzAvQzBENzAyOEMw RkE2MjgzNDhBRTIyNDVERDBDQzAyRDNDNURDQjNGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMEQ3MDI4QzBGQTYyODM0OEFFMjI0NUREMENDMDJEM0M1RENC M0Y5LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzIzNTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzNzMxMzMzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQARqAA JTANBgkqhkiG9w0BAQsFAAOCAQEAK/wQt+45/KfKRE2VJKOqbPGhkomGUAs78vPA gfxyBKeOUB+oZULGo7SfYW9SUSlVmTIn1eRMMg8Fvl3TaFBy/l9hPEWdW5U4i9Du MxBFCOkSAfte03LSD9diM+Q30q+ZJhkdIKLFonVdmPeX2LKxO5I3Rm8Pqj6D2zwi RBpZ5TiSWHd7KZd/q/yxAWlpsuf/xsUuj7P0fHkxMfhLoKUE+/9z7L3Y1j80Q8qr 8YexpAIokkekXsrYpiGGJ8Scqnb4DSDB+MI9SEkBVKXu9QUH/0h2TzZ4Oach+9om Der3HSjZfmNyx+HY0phZcfUM7WTlGc1z9G0WNBuFJ4Fj/e01UQ== -----END CERTIFICATE-----Generated at Wed May 13 12:01:48 2026 by rpki-client