$ rpki-client -vvf rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a343030343a3a2f34382d3438203d3e203436303235.roa File: 323430323a393830303a343030343a3a2f34382d3438203d3e203436303235.roa (raw, json) Hash identifier: eqnahhXgySqNLG8oDgj9uvFOh7CT4j6GLbeP3yYb4vs= Subject key identifier: 41:E7:B8:28:8D:CC:A7:BD:90:2D:0A:90:32:1B:DC:F5:CE:37:01:98 Certificate issuer: /CN=E6E6F523D42F21D74E4B720AEC452D61205E5B6A Certificate serial: 6D2E7C6A49BEAF543D660A3C051D3D68C0F484CE Authority key identifier: E6:E6:F5:23:D4:2F:21:D7:4E:4B:72:0A:EC:45:2D:61:20:5E:5B:6A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a343030343a3a2f34382d3438203d3e203436303235.roa Signing time: Sun 03 May 2026 02:30:36 +0000 ROA not before: Sun 03 May 2026 02:25:36 +0000 ROA not after: Sun 02 May 2027 02:30:36 +0000 asID: 46025 IP address blocks: 2402:9800:4004::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.crl rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:2e:7c:6a:49:be:af:54:3d:66:0a:3c:05:1d:3d:68:c0:f4:84:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6E6F523D42F21D74E4B720AEC452D61205E5B6A Validity Not Before: May 3 02:25:36 2026 GMT Not After : May 2 02:30:36 2027 GMT Subject: CN=41E7B8288DCCA7BD902D0A90321BDCF5CE370198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f0:e3:ae:30:c4:ce:9d:28:70:da:44:d2:75: f2:d9:98:2f:ba:f8:eb:d2:d0:d3:6d:f4:72:3a:9d: 72:ce:b5:2c:f4:0a:77:d0:73:dd:76:73:ef:a5:04: 63:c7:68:34:5c:4b:9b:e9:cb:5c:fb:ef:d7:7e:36: ad:e6:d0:29:f6:ed:7f:87:bf:51:b0:1e:3d:64:46: 5e:55:a6:b5:4c:15:cc:2f:b3:0b:fb:be:f0:db:9a: 39:97:31:6f:b0:f6:3a:d9:b4:c3:ef:ba:04:14:c0: 7b:4c:d4:c6:6a:89:b9:9e:db:2e:e9:a8:2e:e5:96: b4:10:f0:27:13:d5:07:2b:6b:e8:c0:2e:5c:29:10: b2:9a:f1:d5:f6:fa:9e:fa:67:a4:a5:35:2c:6f:02: 30:dc:4a:63:b4:b4:3d:60:87:ce:97:b8:1f:f2:1d: 55:00:b6:ce:67:50:bd:3d:b5:96:43:2b:d9:4b:ad: c3:dd:5c:85:35:6f:cb:ad:ec:a9:08:ba:a6:f6:95: d0:52:e1:86:ce:e9:28:e1:d0:64:64:df:b4:8b:24: ec:30:a3:73:c8:b3:55:7c:8f:45:3e:69:22:89:2d: 2f:f4:37:6f:55:12:f2:b8:ff:5d:aa:00:1f:5d:39: 41:7b:fe:6c:26:91:98:07:b9:ed:05:53:23:9b:08: 0d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E7:B8:28:8D:CC:A7:BD:90:2D:0A:90:32:1B:DC:F5:CE:37:01:98 X509v3 Authority Key Identifier: keyid:E6:E6:F5:23:D4:2F:21:D7:4E:4B:72:0A:EC:45:2D:61:20:5E:5B:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a343030343a3a2f34382d3438203d3e203436303235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:9800:4004::/48 Signature Algorithm: sha256WithRSAEncryption 61:60:6f:07:85:ff:bf:f4:41:a8:cf:dc:6e:2b:e4:94:58:1e: 9d:8c:54:b0:19:e1:a0:7b:d3:2b:40:6a:29:48:f1:0c:dc:9d: b2:85:6f:19:8b:21:3a:f4:36:12:6a:09:19:2a:bd:16:db:07: 06:76:c5:51:83:13:1d:7f:5d:b0:bd:2a:50:a3:ac:4a:99:ae: 7a:4f:11:0a:4f:24:2b:b1:83:9c:34:65:a4:f7:04:ff:50:4c: 74:88:35:67:b5:5e:9c:fe:32:71:8e:63:1f:29:28:8e:d7:21: 68:0e:78:c5:44:21:15:c5:69:9a:12:ae:54:a4:3a:5b:a2:18: d0:65:4a:82:7a:3c:47:3e:2d:63:78:74:b2:04:ed:e7:ac:16: 51:d5:e5:ee:86:8c:a5:da:5f:dc:7f:90:f4:63:dc:55:4a:32: 2c:27:ab:e2:68:73:ca:48:a8:3d:cc:d7:37:68:14:ab:ff:12: aa:78:de:18:72:4f:03:60:11:49:0d:e9:e3:35:e3:26:a7:6a: 3b:6d:a9:1f:5e:65:04:56:84:00:85:4b:36:62:f4:7c:fb:14: 4c:9e:3c:45:4b:a2:c7:d7:72:a6:c2:91:6e:61:0a:db:37:c6: 7f:61:b3:6b:56:66:a3:16:ee:3d:1c:02:82:b8:71:0f:11:c2: 41:e6:f6:43 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUbS58akm+r1Q9Zgo8BR09aMD0hM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTZFNkY1MjNENDJGMjFENzRFNEI3MjBBRUM0NTJENjEy MDVFNUI2QTAeFw0yNjA1MDMwMjI1MzZaFw0yNzA1MDIwMjMwMzZaMDMxMTAvBgNV BAMTKDQxRTdCODI4OERDQ0E3QkQ5MDJEMEE5MDMyMUJEQ0Y1Q0UzNzAxOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC18OOuMMTOnShw2kTSdfLZmC+6 +OvS0NNt9HI6nXLOtSz0CnfQc912c++lBGPHaDRcS5vpy1z779d+Nq3m0Cn27X+H v1GwHj1kRl5VprVMFcwvswv7vvDbmjmXMW+w9jrZtMPvugQUwHtM1MZqibme2y7p qC7llrQQ8CcT1Qcra+jALlwpELKa8dX2+p76Z6SlNSxvAjDcSmO0tD1gh86XuB/y HVUAts5nUL09tZZDK9lLrcPdXIU1b8ut7KkIuqb2ldBS4YbO6Sjh0GRk37SLJOww o3PIs1V8j0U+aSKJLS/0N29VEvK4/12qAB9dOUF7/mwmkZgHue0FUyObCA0XAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUQee4KI3Mp72QLQqQMhvc9c43AZgwHwYDVR0j BBgwFoAU5ub1I9QvIddOS3IK7EUtYSBeW2owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDc4ZmQ0YWYtZmU2Ny00NWM4LTgwYjctMDZmYzExOGRmOGUyLzAvRTZFNkY1MjNE NDJGMjFENzRFNEI3MjBBRUM0NTJENjEyMDVFNUI2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNkU2RjUyM0Q0MkYyMUQ3NEU0QjcyMEFFQzQ1MkQ2MTIwNUU1 QjZBLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ3OGZkNGFmLWZlNjctNDVjOC04 MGI3LTA2ZmMxMThkZjhlMi8wLzMyMzQzMDMyM2EzOTM4MzAzMDNhMzQzMDMwMzQz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNDM2MzAzMjM1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAKY AEAEMA0GCSqGSIb3DQEBCwUAA4IBAQBhYG8Hhf+/9EGoz9xuK+SUWB6djFSwGeGg e9MrQGopSPEM3J2yhW8ZiyE69DYSagkZKr0W2wcGdsVRgxMdf12wvSpQo6xKma56 TxEKTyQrsYOcNGWk9wT/UEx0iDVntV6c/jJxjmMfKSiO1yFoDnjFRCEVxWmaEq5U pDpbohjQZUqCejxHPi1jeHSyBO3nrBZR1eXuhoyl2l/cf5D0Y9xVSjIsJ6viaHPK SKg9zNc3aBSr/xKqeN4Yck8DYBFJDenjNeMmp2o7bakfXmUEVoQAhUs2YvR8+xRM njxFS6LH13KmwpFuYQrbN8Z/YbNrVmajFu49HAKCuHEPEcJB5vZD -----END CERTIFICATE-----Generated at Wed May 13 10:33:20 2026 by rpki-client