$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/323430363a366434303a313431303a3a2f34382d3438203d3e20313431303536.roa File: 323430363a366434303a313431303a3a2f34382d3438203d3e20313431303536.roa (raw, json) Hash identifier: j+TaQjlpliKWuOR+ri5IrN7rmZzVKtlRC0yuzCbqi8M= Subject key identifier: A1:16:01:DA:A6:B4:71:65:31:05:D2:BA:B1:87:FC:11:27:8A:13:C5 Certificate issuer: /CN=330092B238160780852731102A871D6304465F70 Certificate serial: 396AAB8B4202CBEB27277264F0112CD061C19259 Authority key identifier: 33:00:92:B2:38:16:07:80:85:27:31:10:2A:87:1D:63:04:46:5F:70 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/323430363a366434303a313431303a3a2f34382d3438203d3e20313431303536.roa Signing time: Sun 03 May 2026 02:28:25 +0000 ROA not before: Sun 03 May 2026 02:23:25 +0000 ROA not after: Sun 02 May 2027 02:28:25 +0000 asID: 141056 IP address blocks: 2406:6d40:1410::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.crl rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:19:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:6a:ab:8b:42:02:cb:eb:27:27:72:64:f0:11:2c:d0:61:c1:92:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=330092B238160780852731102A871D6304465F70 Validity Not Before: May 3 02:23:25 2026 GMT Not After : May 2 02:28:25 2027 GMT Subject: CN=A11601DAA6B471653105D2BAB187FC11278A13C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d5:f6:6c:3b:5a:11:e5:99:5d:0c:4b:a1:32: 22:2e:71:99:3b:26:30:5e:14:62:2a:5d:96:c4:f3: 88:f0:8b:e7:2b:09:96:33:c6:0a:53:be:62:b7:92: b1:cb:04:de:74:b6:c9:52:68:42:6f:bb:3b:a2:f1: cb:ab:95:e5:f5:97:db:3c:79:8e:bb:c5:d6:d2:56: 6a:ce:96:ab:e7:17:ec:31:c3:64:af:4c:df:d4:0c: 91:e4:2d:5c:bd:c7:c9:7b:df:d3:b2:90:f7:75:ba: 0d:66:f7:51:19:9e:c0:4c:88:45:aa:a4:7a:24:ea: 39:5c:4f:31:1a:17:72:58:ba:95:3b:0a:06:0c:63: b2:c9:2a:f3:e2:4a:ab:44:24:61:d7:27:53:68:80: c4:6a:d0:3f:84:d6:c6:46:0d:1a:3a:46:58:83:51: 5b:24:34:76:91:3d:11:2e:4d:58:74:df:7a:c3:d7: cb:6b:cf:c4:df:68:b9:35:3a:4b:52:b0:07:ff:db: d4:5b:36:93:73:2b:1d:43:28:8c:7b:88:0b:49:1e: c4:1d:e1:b1:c1:24:42:ee:05:6a:59:b8:9e:a5:84: 78:91:a4:4a:13:9b:a7:e7:62:b2:6a:b8:d9:15:bb: 3c:75:1d:d8:ff:eb:03:18:8b:87:68:3b:bf:29:39: 92:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:16:01:DA:A6:B4:71:65:31:05:D2:BA:B1:87:FC:11:27:8A:13:C5 X509v3 Authority Key Identifier: keyid:33:00:92:B2:38:16:07:80:85:27:31:10:2A:87:1D:63:04:46:5F:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/323430363a366434303a313431303a3a2f34382d3438203d3e20313431303536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:6d40:1410::/48 Signature Algorithm: sha256WithRSAEncryption 9f:41:24:7f:3a:2f:a7:ab:2f:7a:72:0b:6e:b6:fc:cb:c4:bf: 1a:39:69:25:89:5b:e4:b5:70:51:ec:ef:1b:a5:60:34:a4:4e: 80:aa:72:0a:35:4c:aa:5d:99:3b:c0:ac:50:17:2e:73:20:b4: 27:c6:1a:86:d6:69:34:3e:da:89:74:69:ac:8e:17:9a:34:1e: db:2f:a6:7f:8a:47:22:4e:7b:24:c6:ab:eb:c2:83:30:89:ca: de:19:0b:18:d2:da:f8:97:d8:46:26:1a:84:73:14:4f:b4:d4: 92:ed:35:83:51:8e:04:73:84:36:0d:ce:2e:a0:3e:74:3f:04: 03:8e:d6:93:03:01:9b:29:81:83:dc:f5:e1:3e:08:34:8e:6f: a9:08:13:cc:a5:bc:a1:44:a0:b4:50:22:b0:4c:6a:4c:da:9b: 2b:63:83:d1:8f:ff:4d:0a:e7:f7:18:38:e3:a6:e2:0b:77:d7: dc:dc:91:2a:31:54:b1:85:15:75:1c:d3:62:d6:e8:71:a6:aa: f2:fe:86:60:e3:d2:41:fe:36:84:3b:3b:2e:cc:3f:d9:9e:35: e2:13:79:e5:69:19:d3:39:ad:d1:cb:55:22:49:6b:7a:41:18: 7c:95:f7:ca:60:4f:b3:62:84:0e:b4:4c:c3:0a:b8:a2:a9:7b: ab:c5:5a:54 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUOWqri0ICy+snJ3Jk8BEs0GHBklkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMwMDkyQjIzODE2MDc4MDg1MjczMTEwMkE4NzFENjMw NDQ2NUY3MDAeFw0yNjA1MDMwMjIzMjVaFw0yNzA1MDIwMjI4MjVaMDMxMTAvBgNV BAMTKEExMTYwMURBQTZCNDcxNjUzMTA1RDJCQUIxODdGQzExMjc4QTEzQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO1fZsO1oR5ZldDEuhMiIucZk7 JjBeFGIqXZbE84jwi+crCZYzxgpTvmK3krHLBN50tslSaEJvuzui8curleX1l9s8 eY67xdbSVmrOlqvnF+wxw2SvTN/UDJHkLVy9x8l739OykPd1ug1m91EZnsBMiEWq pHok6jlcTzEaF3JYupU7CgYMY7LJKvPiSqtEJGHXJ1NogMRq0D+E1sZGDRo6RliD UVskNHaRPREuTVh033rD18trz8TfaLk1OktSsAf/29RbNpNzKx1DKIx7iAtJHsQd 4bHBJELuBWpZuJ6lhHiRpEoTm6fnYrJquNkVuzx1Hdj/6wMYi4doO78pOZIjAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUoRYB2qa0cWUxBdK6sYf8ESeKE8UwHwYDVR0j BBgwFoAUMwCSsjgWB4CFJzEQKocdYwRGX3AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2UyYzQ4MTUtYjJkYS00YzIwLWJjMzEtNTAzYWRmNDliNDkwLzAvMzMwMDkyQjIz ODE2MDc4MDg1MjczMTEwMkE4NzFENjMwNDQ2NUY3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMzAwOTJCMjM4MTYwNzgwODUyNzMxMTAyQTg3MUQ2MzA0NDY1 RjcwLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNlMmM0ODE1LWIyZGEtNGMyMC1i YzMxLTUwM2FkZjQ5YjQ5MC8wLzMyMzQzMDM2M2EzNjY0MzQzMDNhMzEzNDMxMzAz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM0MzEzMDM1MzYucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk Bm1AFBAwDQYJKoZIhvcNAQELBQADggEBAJ9BJH86L6erL3pyC262/MvEvxo5aSWJ W+S1cFHs7xulYDSkToCqcgo1TKpdmTvArFAXLnMgtCfGGobWaTQ+2ol0aayOF5o0 Htsvpn+KRyJOeyTGq+vCgzCJyt4ZCxjS2viX2EYmGoRzFE+01JLtNYNRjgRzhDYN zi6gPnQ/BAOO1pMDAZspgYPc9eE+CDSOb6kIE8ylvKFEoLRQIrBMakzamytjg9GP /00K5/cYOOOm4gt319zckSoxVLGFFXUc02LW6HGmqvL+hmDj0kH+NoQ7Oy7MP9me NeITeeVpGdM5rdHLVSJJa3pBGHyV98pgT7NihA60TMMKuKKpe6vFWlQ= -----END CERTIFICATE-----Generated at Wed May 13 12:41:48 2026 by rpki-client