$ rpki-client -vvf rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/323430363a373734303a3a2f33322d3438203d3e20313431303733.roa File: 323430363a373734303a3a2f33322d3438203d3e20313431303733.roa (raw, json) Hash identifier: vr59TWn1/ZjjHekiAiHOdHxbOj07TAVp/Qt6Ye+eebQ= Subject key identifier: 48:12:E1:43:6E:3C:43:FB:EC:4A:38:D5:01:1B:51:BC:84:9B:A2:EC Certificate issuer: /CN=A58E55B7CCE754B9CB71A0C874161981234B001D Certificate serial: 516DCBF605C06143353A7CF7B311DEB7B26F2A53 Authority key identifier: A5:8E:55:B7:CC:E7:54:B9:CB:71:A0:C8:74:16:19:81:23:4B:00:1D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/323430363a373734303a3a2f33322d3438203d3e20313431303733.roa Signing time: Sun 03 May 2026 02:30:54 +0000 ROA not before: Sun 03 May 2026 02:25:54 +0000 ROA not after: Sun 02 May 2027 02:30:54 +0000 asID: 141073 IP address blocks: 2406:7740::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.crl rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 10:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:6d:cb:f6:05:c0:61:43:35:3a:7c:f7:b3:11:de:b7:b2:6f:2a:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A58E55B7CCE754B9CB71A0C874161981234B001D Validity Not Before: May 3 02:25:54 2026 GMT Not After : May 2 02:30:54 2027 GMT Subject: CN=4812E1436E3C43FBEC4A38D5011B51BC849BA2EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1c:cb:13:23:52:64:fb:d5:cf:60:93:17:46: fd:5b:09:78:ab:26:ca:98:f3:b8:9b:13:59:10:cf: 60:73:85:30:a4:79:c7:7b:e7:18:62:75:b8:e4:7d: 89:ff:48:86:a7:90:54:80:4c:d6:8b:17:54:8f:1a: a1:2f:06:ed:71:a8:cd:76:d8:3b:24:9b:4a:fd:76: d3:34:48:bc:09:a7:32:00:88:1a:97:0f:ae:99:aa: bf:28:c0:3e:48:27:51:d4:c7:76:1a:63:c1:07:2c: 84:68:c8:46:e0:39:bb:50:fd:6b:28:86:63:97:4a: e4:1a:b5:66:fe:38:ca:9a:47:84:eb:dd:b5:b6:c0: fa:bf:37:f6:88:5d:9b:be:db:d7:11:36:69:08:2f: fc:4e:f9:d7:23:9e:78:7e:c5:7c:35:97:8d:48:1b: 53:e9:cd:50:69:c4:d4:39:3b:f3:8a:08:4d:c9:51: 39:c3:ba:90:51:72:fa:07:e0:43:41:c9:ad:30:84: 36:5e:9e:82:c7:26:95:33:71:c7:86:7b:ec:f5:4a: 19:c2:cc:a3:53:a2:f2:e4:ab:8f:a3:1a:f1:86:24: 05:fc:6e:e9:bf:d1:0c:a9:55:c8:67:46:36:60:b6: d9:f2:2a:d2:fa:7f:bd:2c:78:c7:59:fa:61:36:9b: 01:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:12:E1:43:6E:3C:43:FB:EC:4A:38:D5:01:1B:51:BC:84:9B:A2:EC X509v3 Authority Key Identifier: keyid:A5:8E:55:B7:CC:E7:54:B9:CB:71:A0:C8:74:16:19:81:23:4B:00:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/323430363a373734303a3a2f33322d3438203d3e20313431303733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:7740::/32 Signature Algorithm: sha256WithRSAEncryption 06:6a:ce:fa:b7:e5:ff:f6:a1:c3:85:8e:a8:9c:09:c8:19:95: 11:45:66:94:11:45:02:53:74:ad:46:32:68:74:1c:ea:54:80: b7:47:66:b1:22:e0:a0:79:5c:ad:cc:18:00:48:4c:7b:9d:3f: 39:6e:0a:05:79:aa:81:ad:9d:7b:e5:28:46:57:a0:72:64:16: 68:74:eb:9a:b5:f7:e0:86:1a:88:52:ed:46:cf:d7:2c:80:58: 5a:e6:2c:bf:41:61:b9:13:68:0f:6a:89:bf:09:0a:2e:9c:59: 61:e1:3f:a2:55:12:f6:fe:28:bc:a3:11:9a:9f:89:6e:96:e0: d5:e0:50:60:da:aa:7f:ba:b0:00:59:fd:99:1a:3a:7d:39:ba: 4c:b2:49:b7:97:fe:44:6d:47:de:fc:73:17:5b:99:39:58:25: 30:14:56:8f:e4:43:aa:96:03:56:05:a2:39:b5:0a:01:7e:84: 84:8d:f1:d8:0f:4e:2a:bb:ba:16:2f:2e:4f:14:0e:4d:ee:1f: d4:8c:67:38:22:04:92:9e:5b:09:53:46:cb:81:6b:d4:72:8c: 7e:63:71:50:73:85:4b:26:21:26:58:f5:13:05:a0:ca:b2:45: aa:c1:b0:e8:4a:d8:ce:81:18:f1:30:5d:45:b4:37:35:c5:87: 35:7c:59:14 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUUW3L9gXAYUM1Onz3sxHet7JvKlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU4RTU1QjdDQ0U3NTRCOUNCNzFBMEM4NzQxNjE5ODEy MzRCMDAxRDAeFw0yNjA1MDMwMjI1NTRaFw0yNzA1MDIwMjMwNTRaMDMxMTAvBgNV BAMTKDQ4MTJFMTQzNkUzQzQzRkJFQzRBMzhENTAxMUI1MUJDODQ5QkEyRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0HMsTI1Jk+9XPYJMXRv1bCXir JsqY87ibE1kQz2BzhTCkecd75xhidbjkfYn/SIankFSATNaLF1SPGqEvBu1xqM12 2Dskm0r9dtM0SLwJpzIAiBqXD66Zqr8owD5IJ1HUx3YaY8EHLIRoyEbgObtQ/Wso hmOXSuQatWb+OMqaR4Tr3bW2wPq/N/aIXZu+29cRNmkIL/xO+dcjnnh+xXw1l41I G1PpzVBpxNQ5O/OKCE3JUTnDupBRcvoH4ENBya0whDZenoLHJpUzcceGe+z1ShnC zKNTovLkq4+jGvGGJAX8bum/0QypVchnRjZgttnyKtL6f70seMdZ+mE2mwE1AgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUSBLhQ248Q/vsSjjVARtRvISbouwwHwYDVR0j BBgwFoAUpY5Vt8znVLnLcaDIdBYZgSNLAB0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDg1OGY4NWMtYTQ1OC00YTU4LWJiZGUtNGJmYjM0M2RjNGIwLzAvQTU4RTU1QjdD Q0U3NTRCOUNCNzFBMEM4NzQxNjE5ODEyMzRCMDAxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNThFNTVCN0NDRTc1NEI5Q0I3MUEwQzg3NDE2MTk4MTIzNEIw MDFELmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ4NThmODVjLWE0NTgtNGE1OC1i YmRlLTRiZmIzNDNkYzRiMC8wLzMyMzQzMDM2M2EzNzM3MzQzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzQzMTMwMzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQGd0AwDQYJKoZI hvcNAQELBQADggEBAAZqzvq35f/2ocOFjqicCcgZlRFFZpQRRQJTdK1GMmh0HOpU gLdHZrEi4KB5XK3MGABITHudPzluCgV5qoGtnXvlKEZXoHJkFmh065q19+CGGohS 7UbP1yyAWFrmLL9BYbkTaA9qib8JCi6cWWHhP6JVEvb+KLyjEZqfiW6W4NXgUGDa qn+6sABZ/ZkaOn05ukyySbeX/kRtR978cxdbmTlYJTAUVo/kQ6qWA1YFojm1CgF+ hISN8dgPTiq7uhYvLk8UDk3uH9SMZzgiBJKeWwlTRsuBa9RyjH5jcVBzhUsmISZY 9RMFoMqyRarBsOhK2M6BGPEwXUW0NzXFhzV8WRQ= -----END CERTIFICATE-----Generated at Wed May 13 04:09:59 2026 by rpki-client