$ rpki-client -vvf rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/323430303a366632303a353a3a2f34382d3438203d3e20313333383039.roa File: 323430303a366632303a353a3a2f34382d3438203d3e20313333383039.roa (raw, json) Hash identifier: Y11dlVlt6+3oD4JtJmp7MCEET4NoNGtXuRA6xU0HxaQ= Subject key identifier: 81:CA:F3:37:32:B6:38:8C:11:8D:AB:64:4C:30:AC:B1:94:E9:C4:06 Certificate issuer: /CN=1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB Certificate serial: 4A4975ED3B2D5EA96243078C74F0321F465518A5 Authority key identifier: 10:42:C5:F5:EA:F2:2D:A9:0A:07:2C:14:F7:EA:1D:4E:B6:60:9C:FB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/323430303a366632303a353a3a2f34382d3438203d3e20313333383039.roa Signing time: Sun 03 May 2026 02:35:09 +0000 ROA not before: Sun 03 May 2026 02:30:09 +0000 ROA not after: Sun 02 May 2027 02:35:09 +0000 asID: 133809 IP address blocks: 2400:6f20:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.crl rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:10:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:49:75:ed:3b:2d:5e:a9:62:43:07:8c:74:f0:32:1f:46:55:18:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB Validity Not Before: May 3 02:30:09 2026 GMT Not After : May 2 02:35:09 2027 GMT Subject: CN=81CAF33732B6388C118DAB644C30ACB194E9C406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ef:58:2c:f3:a7:fe:28:9f:ec:65:9f:1a:f9: e8:3a:b3:de:a8:3d:52:1e:e0:ec:bb:9e:21:f0:95: b9:23:46:fe:b9:22:af:f4:89:d4:64:c5:5c:f3:e7: 43:40:03:b2:af:6e:fb:e1:f1:17:21:1b:43:46:bb: 7d:ff:9e:68:19:eb:ab:01:5c:36:70:17:04:90:59: e3:c7:aa:c6:62:8e:85:76:19:63:8b:f6:b8:c8:32: ff:38:bd:4e:35:0a:6f:d4:b0:e8:6f:87:72:22:e3: 10:02:a6:83:44:a5:ac:6d:97:6c:19:23:7c:7c:e8: ff:d3:66:a5:33:62:80:0a:66:1d:41:c7:5f:cc:78: 4a:65:66:37:89:a7:7b:45:fe:6e:45:89:44:13:6e: 49:d5:20:22:c4:b0:a0:dc:44:a3:23:45:c7:c9:4d: 7b:90:d9:a4:9a:5f:25:63:90:27:98:62:8a:75:3c: 22:ce:e3:a3:cb:db:71:b0:2a:60:48:08:b4:ea:51: f6:9e:6f:75:0b:6a:39:0d:14:22:26:3f:ec:ea:cb: 3c:e2:61:c4:1c:0e:c0:b1:be:88:62:50:e8:5a:be: df:f1:4c:bd:41:e0:8f:ff:3b:c1:df:ab:80:05:84: b6:e9:83:e2:5b:3d:bf:0d:db:06:bc:dc:b8:2d:86: 37:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:CA:F3:37:32:B6:38:8C:11:8D:AB:64:4C:30:AC:B1:94:E9:C4:06 X509v3 Authority Key Identifier: keyid:10:42:C5:F5:EA:F2:2D:A9:0A:07:2C:14:F7:EA:1D:4E:B6:60:9C:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1042C5F5EAF22DA90A072C14F7EA1D4EB6609CFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/323430303a366632303a353a3a2f34382d3438203d3e20313333383039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:6f20:5::/48 Signature Algorithm: sha256WithRSAEncryption 0e:8e:12:22:0b:de:a8:ed:15:f0:68:12:34:84:bf:e5:ef:bb: 4a:c3:54:d2:f9:48:00:7f:b6:1c:49:b6:f0:60:3d:62:6c:12: 35:b8:c8:e2:1e:9b:84:14:a8:dc:80:f3:30:30:db:94:28:ae: 2c:3f:64:53:0c:46:67:ff:5c:2d:c2:44:c7:ee:10:d3:ee:81: 7c:48:69:cf:f9:2b:36:5d:25:58:96:a9:81:57:32:c7:f1:36: a8:5b:9e:ba:f1:88:80:b6:24:06:75:1c:0a:85:4e:cf:9a:3c: 7a:3a:3c:31:6f:3b:04:40:70:b7:85:23:64:05:9a:cc:bd:7f: 4c:6e:bb:0a:53:be:dd:c7:27:de:12:13:3e:28:79:52:72:63: f1:74:14:f0:43:6e:81:80:4d:ae:90:2d:82:1c:72:13:79:82: f9:1f:16:d4:0e:74:92:35:f6:96:52:36:64:ae:5d:b2:31:cc: ef:3c:46:6c:69:27:d2:b1:ac:f9:9a:05:79:fb:4f:ea:76:88: dd:2a:37:52:bc:e6:c2:20:1e:8d:1e:eb:39:b7:31:68:2d:13: db:3e:37:ca:a8:3a:0e:1d:a7:95:a0:fe:d1:8e:53:7b:60:f4: 92:b4:22:f4:0b:92:35:cf:36:b5:6a:06:59:ae:80:70:72:f1: 06:c4:73:71 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUSkl17TstXqliQweMdPAyH0ZVGKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0MkM1RjVFQUYyMkRBOTBBMDcyQzE0RjdFQTFENEVC NjYwOUNGQjAeFw0yNjA1MDMwMjMwMDlaFw0yNzA1MDIwMjM1MDlaMDMxMTAvBgNV BAMTKDgxQ0FGMzM3MzJCNjM4OEMxMThEQUI2NDRDMzBBQ0IxOTRFOUM0MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh71gs86f+KJ/sZZ8a+eg6s96o PVIe4Oy7niHwlbkjRv65Iq/0idRkxVzz50NAA7Kvbvvh8RchG0NGu33/nmgZ66sB XDZwFwSQWePHqsZijoV2GWOL9rjIMv84vU41Cm/UsOhvh3Ii4xACpoNEpaxtl2wZ I3x86P/TZqUzYoAKZh1Bx1/MeEplZjeJp3tF/m5FiUQTbknVICLEsKDcRKMjRcfJ TXuQ2aSaXyVjkCeYYop1PCLO46PL23GwKmBICLTqUfaeb3ULajkNFCImP+zqyzzi YcQcDsCxvohiUOhavt/xTL1B4I//O8Hfq4AFhLbpg+JbPb8N2wa83Lgthjd7AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUgcrzNzK2OIwRjatkTDCssZTpxAYwHwYDVR0j BBgwFoAUEELF9eryLakKBywU9+odTrZgnPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTljZWY4YjAtYmE2NC00YzBjLThkZTgtMWY1MGE4NWQ1ZmRlLzAvMTA0MkM1RjVF QUYyMkRBOTBBMDcyQzE0RjdFQTFENEVCNjYwOUNGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDQyQzVGNUVBRjIyREE5MEEwNzJDMTRGN0VBMUQ0RUI2NjA5 Q0ZCLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzU5Y2VmOGIwLWJhNjQtNGMwYy04 ZGU4LTFmNTBhODVkNWZkZS8wLzMyMzQzMDMwM2EzNjY2MzIzMDNhMzUzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzMzODMwMzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAG8gAAUw DQYJKoZIhvcNAQELBQADggEBAA6OEiIL3qjtFfBoEjSEv+Xvu0rDVNL5SAB/thxJ tvBgPWJsEjW4yOIem4QUqNyA8zAw25Qoriw/ZFMMRmf/XC3CRMfuENPugXxIac/5 KzZdJViWqYFXMsfxNqhbnrrxiIC2JAZ1HAqFTs+aPHo6PDFvOwRAcLeFI2QFmsy9 f0xuuwpTvt3HJ94SEz4oeVJyY/F0FPBDboGATa6QLYIcchN5gvkfFtQOdJI19pZS NmSuXbIxzO88RmxpJ9KxrPmaBXn7T+p2iN0qN1K85sIgHo0e6zm3MWgtE9s+N8qo Og4dp5Wg/tGOU3tg9JK0IvQLkjXPNrVqBlmugHBy8QbEc3E= -----END CERTIFICATE-----Generated at Wed May 13 08:10:43 2026 by rpki-client