$ rpki-client -vvf rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a3a2f33322d3332203d3e20313339343139.roa File: 323430353a363734303a3a2f33322d3332203d3e20313339343139.roa (raw, json) Hash identifier: 8k6aDl60v1ure0qCHDz6FgohushoGe3xp2fkg+fDqX4= Subject key identifier: 36:DB:27:0F:6E:71:4F:B4:A4:ED:7F:C2:BB:FB:6B:CE:E4:22:5F:00 Certificate issuer: /CN=33A70133EE15A92F98C43BE642D1CCF7C2B07E6F Certificate serial: 5A99A78B0C6405C0D01D4675274CF7DD36D3219A Authority key identifier: 33:A7:01:33:EE:15:A9:2F:98:C4:3B:E6:42:D1:CC:F7:C2:B0:7E:6F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a3a2f33322d3332203d3e20313339343139.roa Signing time: Sun 03 May 2026 02:34:27 +0000 ROA not before: Sun 03 May 2026 02:29:27 +0000 ROA not after: Sun 02 May 2027 02:34:27 +0000 asID: 139419 IP address blocks: 2405:6740::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:99:a7:8b:0c:64:05:c0:d0:1d:46:75:27:4c:f7:dd:36:d3:21:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33A70133EE15A92F98C43BE642D1CCF7C2B07E6F Validity Not Before: May 3 02:29:27 2026 GMT Not After : May 2 02:34:27 2027 GMT Subject: CN=36DB270F6E714FB4A4ED7FC2BBFB6BCEE4225F00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:04:4a:32:2b:06:2e:69:c6:8b:cf:00:16:4d: e7:8c:3e:85:75:bc:c3:f7:33:0a:07:01:09:96:06: c0:70:96:a1:20:fe:b7:fd:a6:5b:3c:b6:27:29:4a: cc:46:3e:9c:77:69:10:4c:3a:a1:77:df:78:77:02: e8:12:0e:52:f9:72:01:6d:6c:45:c7:72:96:7b:1a: 6a:e4:02:44:c6:d7:e2:8a:49:f3:c0:ef:0e:35:bb: 1c:8b:84:af:5b:9a:e2:06:50:52:19:dd:65:cb:60: 90:aa:cb:99:34:b0:17:ad:03:05:10:3a:d0:38:36: 3e:e9:9f:dd:0c:c3:a3:44:c7:56:82:56:df:a9:d7: 99:42:8a:37:08:ad:65:34:d7:60:5d:9b:c2:63:70: 7b:26:57:3a:07:8f:42:85:66:da:4b:b6:8e:93:d4: 29:94:b6:63:cb:05:38:c3:48:cf:ec:7c:57:d8:9e: 11:07:f0:f0:0f:e5:e0:ea:8c:bc:fe:c6:ba:4b:b8: b3:50:06:f1:c4:3d:58:cd:a2:83:93:b3:67:24:40: 08:69:f9:2d:1a:8d:a8:4b:aa:05:a8:86:36:10:62: e4:04:cd:e3:be:12:18:3a:b9:67:98:c0:f8:fa:70: 2a:ee:8a:29:d1:d4:07:f4:be:44:10:05:fa:35:3c: 5a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DB:27:0F:6E:71:4F:B4:A4:ED:7F:C2:BB:FB:6B:CE:E4:22:5F:00 X509v3 Authority Key Identifier: keyid:33:A7:01:33:EE:15:A9:2F:98:C4:3B:E6:42:D1:CC:F7:C2:B0:7E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a3a2f33322d3332203d3e20313339343139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:6740::/32 Signature Algorithm: sha256WithRSAEncryption 96:52:87:3c:2c:c1:f0:3c:79:a8:87:34:4b:fc:85:fb:d1:c1: f5:03:19:d1:09:01:c5:fa:c4:1e:f7:75:db:ca:81:b3:ec:f7: 35:04:e2:73:d2:72:45:96:31:ba:6a:c8:17:08:e3:39:5e:0f: d3:00:3b:1e:24:33:47:80:7c:be:36:43:71:83:4f:72:d8:5b: 0a:9c:0c:d7:34:8a:04:64:d1:3c:d0:67:16:44:cd:cd:b0:34: 95:a2:cb:1f:0b:a7:d3:f6:5c:6a:46:fe:77:41:42:3b:d6:d2: 7d:d6:ea:b2:6f:0f:e5:7a:0b:00:44:19:59:57:83:54:ad:73: 74:fb:45:28:c0:a5:9b:02:c9:77:f6:99:21:b6:67:4b:15:c5: 4f:a4:af:19:89:57:55:42:84:a3:0b:e5:bb:d7:e2:19:7f:88: 77:f6:6c:8c:70:f6:57:23:39:5f:f6:cd:5d:bc:ca:25:c5:db: ed:fd:63:3d:1a:46:38:e1:8d:06:0d:eb:6c:2c:9d:8e:ac:14: c7:81:4f:74:eb:f8:16:a7:43:a1:a2:48:f8:90:f7:92:06:2f: e4:f6:21:d0:dc:0b:f6:ec:cb:39:69:c5:b6:5a:67:91:21:b1: ba:f9:a5:59:73:a7:bb:0e:ac:d8:40:71:7d:ca:cd:ec:c4:dd: 8b:b3:3d:37 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUWpmniwxkBcDQHUZ1J0z33TbTIZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNBNzAxMzNFRTE1QTkyRjk4QzQzQkU2NDJEMUNDRjdD MkIwN0U2RjAeFw0yNjA1MDMwMjI5MjdaFw0yNzA1MDIwMjM0MjdaMDMxMTAvBgNV BAMTKDM2REIyNzBGNkU3MTRGQjRBNEVEN0ZDMkJCRkI2QkNFRTQyMjVGMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsBEoyKwYuacaLzwAWTeeMPoV1 vMP3MwoHAQmWBsBwlqEg/rf9pls8ticpSsxGPpx3aRBMOqF333h3AugSDlL5cgFt bEXHcpZ7GmrkAkTG1+KKSfPA7w41uxyLhK9bmuIGUFIZ3WXLYJCqy5k0sBetAwUQ OtA4Nj7pn90Mw6NEx1aCVt+p15lCijcIrWU012Bdm8JjcHsmVzoHj0KFZtpLto6T 1CmUtmPLBTjDSM/sfFfYnhEH8PAP5eDqjLz+xrpLuLNQBvHEPVjNooOTs2ckQAhp +S0ajahLqgWohjYQYuQEzeO+Ehg6uWeYwPj6cCruiinR1Af0vkQQBfo1PFoVAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUNtsnD25xT7Sk7X/Cu/trzuQiXwAwHwYDVR0j BBgwFoAUM6cBM+4VqS+YxDvmQtHM98Kwfm8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTcxM2ZjMTctNTdmMS00NjcxLThhMTYtZjg1OGRkZDdkYTQzLzAvMzNBNzAxMzNF RTE1QTkyRjk4QzQzQkU2NDJEMUNDRjdDMkIwN0U2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0E3MDEzM0VFMTVBOTJGOThDNDNCRTY0MkQxQ0NGN0MyQjA3 RTZGLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzU3MTNmYzE3LTU3ZjEtNDY3MS04 YTE2LWY4NThkZGQ3ZGE0My8wLzMyMzQzMDM1M2EzNjM3MzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzOTM0MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQFZ0AwDQYJKoZI hvcNAQELBQADggEBAJZShzwswfA8eaiHNEv8hfvRwfUDGdEJAcX6xB73ddvKgbPs 9zUE4nPSckWWMbpqyBcI4zleD9MAOx4kM0eAfL42Q3GDT3LYWwqcDNc0igRk0TzQ ZxZEzc2wNJWiyx8Lp9P2XGpG/ndBQjvW0n3W6rJvD+V6CwBEGVlXg1Stc3T7RSjA pZsCyXf2mSG2Z0sVxU+krxmJV1VChKML5bvX4hl/iHf2bIxw9lcjOV/2zV28yiXF 2+39Yz0aRjjhjQYN62wsnY6sFMeBT3Tr+BanQ6GiSPiQ95IGL+T2IdDcC/bsyzlp xbZaZ5Ehsbr5pVlzp7sOrNhAcX3KzezE3YuzPTc= -----END CERTIFICATE-----Generated at Wed May 13 17:14:05 2026 by rpki-client