$ rpki-client -vvf rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3430303a3a2f34302d3430203d3e20313339393439.roa File: 323430353a616163303a3430303a3a2f34302d3430203d3e20313339393439.roa (raw, json) Hash identifier: Nvj659+mApnonGTEGwCTBqqPqjy73hJnAHzzweAPAkA= Subject key identifier: 4A:B9:2E:75:CA:DA:52:89:57:6C:5D:77:75:14:14:82:2E:5D:F5:9B Certificate issuer: /CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0 Certificate serial: 53855784A8FA949375D0282481971D1CB268FA2C Authority key identifier: 0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3430303a3a2f34302d3430203d3e20313339393439.roa Signing time: Sun 03 May 2026 02:28:18 +0000 ROA not before: Sun 03 May 2026 02:23:18 +0000 ROA not after: Sun 02 May 2027 02:28:18 +0000 asID: 139949 IP address blocks: 2405:aac0:400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:85:57:84:a8:fa:94:93:75:d0:28:24:81:97:1d:1c:b2:68:fa:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0 Validity Not Before: May 3 02:23:18 2026 GMT Not After : May 2 02:28:18 2027 GMT Subject: CN=4AB92E75CADA5289576C5D77751414822E5DF59B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5d:2b:00:e5:fe:b1:76:f4:d6:83:f5:dc:eb: a0:93:62:ff:3c:ae:d4:ac:5d:b5:0f:e4:93:4c:4f: 66:ab:71:5a:7a:72:dd:f3:b7:6f:3c:5b:c7:98:6f: e0:d5:0c:81:bd:ee:34:56:af:09:18:84:d4:78:4f: 0b:2a:59:8f:0d:b6:84:8e:b7:e0:44:23:df:f0:3f: de:25:60:a0:4e:54:23:a6:6e:a9:af:6e:dc:eb:a7: f9:88:51:f7:df:81:43:a1:5a:cf:9c:c9:61:5d:53: 73:bb:7f:fc:2a:a0:84:60:d7:67:c6:87:9d:39:f6: 99:6d:5c:33:d2:e4:4f:8c:35:b8:e4:61:90:95:19: a8:56:4a:7b:2c:fa:c2:e0:7f:01:2d:11:50:64:01: ac:9e:ca:9f:6b:88:8a:a7:f9:ae:4c:81:99:6d:cb: 31:8d:52:83:78:86:be:6f:d6:35:f7:2c:74:fe:6a: 0f:8b:94:62:de:62:17:96:f1:b7:80:74:a7:b6:d2: 9d:f4:d8:81:b7:ff:c0:ac:e2:e9:6d:9f:c3:12:3f: 90:08:91:82:36:8e:7a:01:1e:e5:ad:d7:0a:2f:9b: 38:f2:06:e6:fd:c0:15:96:68:fb:e2:31:44:3a:29: 70:3a:25:e7:89:ed:94:8b:c6:2e:e5:7c:a8:67:9d: a3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B9:2E:75:CA:DA:52:89:57:6C:5D:77:75:14:14:82:2E:5D:F5:9B X509v3 Authority Key Identifier: keyid:0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3430303a3a2f34302d3430203d3e20313339393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:aac0:400::/40 Signature Algorithm: sha256WithRSAEncryption 9d:0d:9c:2e:ad:04:3b:3f:7f:33:90:b1:8c:45:9d:f9:86:61: b0:ed:90:36:2e:9a:1a:25:fd:ed:2f:c4:24:1f:9d:99:19:91: fc:b9:5c:8f:fa:be:9c:93:04:42:60:09:39:27:ba:71:64:b2: 1b:ac:86:ab:56:51:87:0e:69:8b:e7:01:0d:30:e7:24:c2:51: 28:8e:bc:0f:4d:09:d7:3b:bf:50:96:1a:0c:2d:80:10:aa:96: aa:e0:af:ca:0a:7a:7c:1b:2e:34:f5:36:15:f7:80:cb:95:8c: cc:e8:ad:83:31:5b:73:5a:b6:10:ab:de:18:94:53:8b:74:01: 0d:6b:0a:86:36:cb:15:d8:80:11:97:11:6c:61:b8:fc:69:f4: b0:3e:d8:c8:ee:79:53:a9:76:8d:56:00:72:b0:05:fb:1f:e9: 0a:6b:92:db:4d:6a:ad:e4:9c:8b:79:de:81:9f:c3:9f:04:2b: f9:4d:a0:32:14:24:54:fc:43:08:b6:e3:81:eb:62:1f:bc:80: 22:0e:96:64:06:70:f6:e4:6c:7f:81:8f:d2:b7:fc:af:ad:e5: 86:bd:ca:de:d9:ad:84:3f:26:92:28:99:9b:f0:d7:02:59:58: dc:30:b5:7e:2a:ce:d7:66:28:47:70:8e:0b:e1:c6:97:c2:b1: ed:bc:a3:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU4VXhKj6lJN10CgkgZcdHLJo+iwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEwMjQ0NjJGRkRBN0UyNkU1RDM2NjYxQUFBREUyQzYw MUQwNjRGMDAeFw0yNjA1MDMwMjIzMThaFw0yNzA1MDIwMjI4MThaMDMxMTAvBgNV BAMTKDRBQjkyRTc1Q0FEQTUyODk1NzZDNUQ3Nzc1MTQxNDgyMkU1REY1OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcXSsA5f6xdvTWg/Xc66CTYv88 rtSsXbUP5JNMT2arcVp6ct3zt288W8eYb+DVDIG97jRWrwkYhNR4TwsqWY8NtoSO t+BEI9/wP94lYKBOVCOmbqmvbtzrp/mIUfffgUOhWs+cyWFdU3O7f/wqoIRg12fG h5059pltXDPS5E+MNbjkYZCVGahWSnss+sLgfwEtEVBkAayeyp9riIqn+a5MgZlt yzGNUoN4hr5v1jX3LHT+ag+LlGLeYheW8beAdKe20p302IG3/8Cs4ultn8MSP5AI kYI2jnoBHuWt1wovmzjyBub9wBWWaPviMUQ6KXA6JeeJ7ZSLxi7lfKhnnaMnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSrkudcraUolXbF13dRQUgi5d9ZswHwYDVR0j BBgwFoAUCgJEYv/afibl02Zhqq3ixgHQZPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2RlZGMwMzMtY2Q0ZC00NjIwLTkzNzItZTZlMDM5ZmMwNmI5LzAvMEEwMjQ0NjJG RkRBN0UyNkU1RDM2NjYxQUFBREUyQzYwMUQwNjRGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQTAyNDQ2MkZGREE3RTI2RTVEMzY2NjFBQUFERTJDNjAxRDA2 NEYwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNkZWRjMDMzLWNkNGQtNDYyMC05 MzcyLWU2ZTAzOWZjMDZiOS8wLzMyMzQzMDM1M2E2MTYxNjMzMDNhMzQzMDMwM2Ez YTJmMzQzMDJkMzQzMDIwM2QzZTIwMzEzMzM5MzkzNDM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAWq wAQwDQYJKoZIhvcNAQELBQADggEBAJ0NnC6tBDs/fzOQsYxFnfmGYbDtkDYumhol /e0vxCQfnZkZkfy5XI/6vpyTBEJgCTknunFkshushqtWUYcOaYvnAQ0w5yTCUSiO vA9NCdc7v1CWGgwtgBCqlqrgr8oKenwbLjT1NhX3gMuVjMzorYMxW3NathCr3hiU U4t0AQ1rCoY2yxXYgBGXEWxhuPxp9LA+2MjueVOpdo1WAHKwBfsf6QprkttNaq3k nIt53oGfw58EK/lNoDIUJFT8Qwi244HrYh+8gCIOlmQGcPbkbH+Bj9K3/K+t5Ya9 yt7ZrYQ/JpIomZvw1wJZWNwwtX4qztdmKEdwjgvhxpfCse28ozQ= -----END CERTIFICATE-----Generated at Wed May 13 06:25:47 2026 by rpki-client