$ rpki-client -vvf rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/323430363a373734303a3a2f33322d3332203d3e20313431303733.roa File: 323430363a373734303a3a2f33322d3332203d3e20313431303733.roa (raw, json) Hash identifier: HohwK1jgAliW1qLFON0wv/kfIfQEid5eomkEHXmmaro= Subject key identifier: 47:B4:14:C9:B7:74:03:74:C5:FF:64:6C:5A:52:EB:57:12:22:62:6B Certificate issuer: /CN=A58E55B7CCE754B9CB71A0C874161981234B001D Certificate serial: 0C9F8E5AA9A8F0D28D43D209B9F886D83B4C0A50 Authority key identifier: A5:8E:55:B7:CC:E7:54:B9:CB:71:A0:C8:74:16:19:81:23:4B:00:1D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/323430363a373734303a3a2f33322d3332203d3e20313431303733.roa Signing time: Sun 03 May 2026 02:30:55 +0000 ROA not before: Sun 03 May 2026 02:25:55 +0000 ROA not after: Sun 02 May 2027 02:30:55 +0000 asID: 141073 IP address blocks: 2406:7740::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.crl rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:14:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:9f:8e:5a:a9:a8:f0:d2:8d:43:d2:09:b9:f8:86:d8:3b:4c:0a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A58E55B7CCE754B9CB71A0C874161981234B001D Validity Not Before: May 3 02:25:55 2026 GMT Not After : May 2 02:30:55 2027 GMT Subject: CN=47B414C9B7740374C5FF646C5A52EB571222626B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5f:ce:5a:83:b9:8b:4e:5f:36:3b:bd:1f:f7: 21:71:78:8c:49:f5:eb:cd:66:04:01:4c:d6:5b:c5: 7c:e2:03:c3:b0:50:29:1c:ea:c6:57:81:2e:39:31: 8a:0f:68:f8:d4:a2:5a:72:0f:fa:79:26:8c:df:04: fe:60:c1:8f:6d:b7:11:23:fe:47:46:3d:7a:7c:af: f5:1f:92:82:de:40:e8:c3:e3:ab:f3:b1:1c:1f:b0: 30:7f:59:1a:73:40:03:2c:26:94:69:3c:99:a7:ea: 72:16:a5:b8:fb:fc:ce:26:67:48:36:96:61:5a:da: ae:0b:75:14:21:db:c0:c9:73:5a:5d:3f:cc:50:8a: b6:b6:94:79:5b:5d:cc:97:ab:e2:62:6c:2b:5e:a9: 14:fb:c5:11:ba:22:ca:bb:56:b2:b0:ad:33:ca:fb: e7:ab:54:f6:ca:46:48:a9:7a:12:b3:49:c1:82:a0: d7:ee:d2:df:8a:07:2c:11:e4:63:ae:57:77:14:83: 80:14:bf:9e:48:66:24:cb:55:5c:24:f8:4f:b2:cb: 57:25:42:e6:c3:b2:b6:2f:a4:2f:71:1d:65:37:0c: e4:91:6f:2b:be:9f:62:dc:34:66:9c:60:16:11:90: 55:d3:cd:99:0d:91:3e:10:25:24:35:5b:60:de:b5: e7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B4:14:C9:B7:74:03:74:C5:FF:64:6C:5A:52:EB:57:12:22:62:6B X509v3 Authority Key Identifier: keyid:A5:8E:55:B7:CC:E7:54:B9:CB:71:A0:C8:74:16:19:81:23:4B:00:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/323430363a373734303a3a2f33322d3332203d3e20313431303733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:7740::/32 Signature Algorithm: sha256WithRSAEncryption a3:36:1e:4b:c9:8e:21:c5:d8:f4:89:b1:d3:c2:7b:9f:6a:8e: ac:ed:a9:b2:8d:c0:bd:62:8d:2c:8f:c3:e0:f4:d2:4d:b3:4d: af:06:30:8a:ee:f5:9d:d7:15:ce:9c:c4:29:87:af:e6:82:ae: c4:7d:ce:77:e7:18:e0:27:d8:d8:56:6c:06:ed:32:3b:2d:ad: e7:1a:82:11:a2:59:bd:c8:91:3a:e9:13:53:e4:56:57:e7:5e: 18:7d:61:66:78:b7:56:1a:37:cf:35:53:ae:2e:bc:34:43:15: 82:aa:50:1b:d3:3f:73:77:df:65:e5:d2:fc:c2:5c:b7:fc:fe: fe:14:39:0f:ed:8c:16:7f:6b:2e:26:a9:b8:b5:24:7d:7a:dc: da:c1:a7:68:40:cb:11:10:23:b1:d8:fc:73:77:82:f9:db:f6: 7c:39:1c:55:97:5c:9e:f7:5a:d4:ab:03:9f:7c:43:e4:33:9a: d0:56:c3:b3:37:c7:e4:f3:a1:de:a0:8a:07:8a:c4:2e:fa:cb: 6a:b6:4a:d6:cb:a1:c5:4f:06:ed:e7:43:26:1e:7d:54:dd:c9: 91:d0:42:ea:32:ef:83:31:2a:eb:ce:50:e6:c9:c0:3c:a1:c3: 11:c6:12:5f:c5:7c:75:94:06:a5:b4:0b:86:3d:da:5d:cd:7f: 29:46:8c:cf -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUDJ+OWqmo8NKNQ9IJufiG2DtMClAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU4RTU1QjdDQ0U3NTRCOUNCNzFBMEM4NzQxNjE5ODEy MzRCMDAxRDAeFw0yNjA1MDMwMjI1NTVaFw0yNzA1MDIwMjMwNTVaMDMxMTAvBgNV BAMTKDQ3QjQxNEM5Qjc3NDAzNzRDNUZGNjQ2QzVBNTJFQjU3MTIyMjYyNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnX85ag7mLTl82O70f9yFxeIxJ 9evNZgQBTNZbxXziA8OwUCkc6sZXgS45MYoPaPjUolpyD/p5JozfBP5gwY9ttxEj /kdGPXp8r/UfkoLeQOjD46vzsRwfsDB/WRpzQAMsJpRpPJmn6nIWpbj7/M4mZ0g2 lmFa2q4LdRQh28DJc1pdP8xQira2lHlbXcyXq+JibCteqRT7xRG6Isq7VrKwrTPK ++erVPbKRkipehKzScGCoNfu0t+KBywR5GOuV3cUg4AUv55IZiTLVVwk+E+yy1cl QubDsrYvpC9xHWU3DOSRbyu+n2LcNGacYBYRkFXTzZkNkT4QJSQ1W2DetecnAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUR7QUybd0A3TF/2RsWlLrVxIiYmswHwYDVR0j BBgwFoAUpY5Vt8znVLnLcaDIdBYZgSNLAB0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDg1OGY4NWMtYTQ1OC00YTU4LWJiZGUtNGJmYjM0M2RjNGIwLzAvQTU4RTU1QjdD Q0U3NTRCOUNCNzFBMEM4NzQxNjE5ODEyMzRCMDAxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNThFNTVCN0NDRTc1NEI5Q0I3MUEwQzg3NDE2MTk4MTIzNEIw MDFELmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ4NThmODVjLWE0NTgtNGE1OC1i YmRlLTRiZmIzNDNkYzRiMC8wLzMyMzQzMDM2M2EzNzM3MzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzQzMTMwMzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQGd0AwDQYJKoZI hvcNAQELBQADggEBAKM2HkvJjiHF2PSJsdPCe59qjqztqbKNwL1ijSyPw+D00k2z Ta8GMIru9Z3XFc6cxCmHr+aCrsR9znfnGOAn2NhWbAbtMjstrecaghGiWb3IkTrp E1PkVlfnXhh9YWZ4t1YaN881U64uvDRDFYKqUBvTP3N332Xl0vzCXLf8/v4UOQ/t jBZ/ay4mqbi1JH163NrBp2hAyxEQI7HY/HN3gvnb9nw5HFWXXJ73WtSrA598Q+Qz mtBWw7M3x+Tzod6gigeKxC76y2q2StbLocVPBu3nQyYefVTdyZHQQuoy74MxKuvO UObJwDyhwxHGEl/FfHWUBqW0C4Y92l3NfylGjM8= -----END CERTIFICATE-----Generated at Wed May 13 06:37:56 2026 by rpki-client