$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa File: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (raw, json) Hash identifier: 9bsIgvpn+nDqB1JkEO35LZUnAXe5IvhJf7x4sHOoJLY= Subject key identifier: E6:EE:8E:07:E7:87:F2:57:9A:55:A7:DD:F8:89:5C:3A:88:B9:80:D5 Certificate issuer: /CN=AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A Certificate serial: 3E5C713350887A48D7D0E188AC990B6B12E89A4A Authority key identifier: AA:7E:83:DE:74:35:AB:78:AD:E6:13:7B:1E:AC:FD:C6:F6:BC:95:8A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa Signing time: Sun 03 May 2026 02:35:23 +0000 ROA not before: Sun 03 May 2026 02:30:23 +0000 ROA not after: Sun 02 May 2027 02:35:23 +0000 asID: 138866 IP address blocks: 2404:fec0:7071::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:23:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:5c:71:33:50:88:7a:48:d7:d0:e1:88:ac:99:0b:6b:12:e8:9a:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A Validity Not Before: May 3 02:30:23 2026 GMT Not After : May 2 02:35:23 2027 GMT Subject: CN=E6EE8E07E787F2579A55A7DDF8895C3A88B980D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:73:ad:4e:22:c2:a4:d6:c1:e7:ce:ee:45:35: 0e:fc:67:33:2f:7e:c6:d6:02:00:37:ab:95:7a:af: 0f:e8:28:0e:ef:d7:94:f9:fa:ef:75:b1:66:07:46: d3:d5:2a:d0:37:5d:50:85:3f:4b:4c:62:da:a7:be: b0:40:0c:cd:53:8a:a3:16:fd:f7:4b:22:3e:58:7b: fa:16:17:eb:68:12:0d:cc:4b:44:8e:e2:f0:9b:70: ea:24:9b:68:b0:03:35:d8:a6:f2:8b:9f:2e:70:1e: 1d:6e:97:7e:85:f7:3b:50:4f:7c:0a:33:32:a8:d7: d3:fd:6a:e8:80:6b:68:aa:d8:73:1d:0d:d2:6b:0c: a2:bd:4e:2d:0d:ad:b4:72:c3:83:80:d2:b2:bf:5e: ab:04:a3:30:38:47:1b:07:56:df:71:03:ed:b4:28: 74:87:1f:19:7c:58:d5:bd:bf:ba:ca:96:90:8e:38: a9:3e:14:59:e7:bb:5e:2c:94:03:72:50:8d:a3:97: bf:12:72:94:ad:67:af:f9:51:e7:5c:f8:d5:8d:6a: 45:62:9d:a1:01:c7:24:d5:10:4c:08:e4:98:fa:2e: 8f:0e:37:c8:0c:e7:5a:5e:1c:da:6b:2d:a4:09:35: 42:84:b4:aa:a4:6c:58:42:a4:77:2a:08:2c:53:81: d4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:EE:8E:07:E7:87:F2:57:9A:55:A7:DD:F8:89:5C:3A:88:B9:80:D5 X509v3 Authority Key Identifier: keyid:AA:7E:83:DE:74:35:AB:78:AD:E6:13:7B:1E:AC:FD:C6:F6:BC:95:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fec0:7071::/48 Signature Algorithm: sha256WithRSAEncryption ab:06:2a:34:b2:a0:a1:e4:f5:e0:06:4b:f1:07:c2:64:03:de: 73:26:f4:4c:3b:4f:a2:ba:05:df:b4:7e:65:23:31:2c:ae:63: cd:08:ae:ef:fe:56:a3:61:9d:5a:07:da:41:f0:12:53:43:04: 39:31:32:94:0d:5a:d0:f8:95:8b:ab:fd:df:39:88:ef:92:a4: 46:44:fa:02:6c:e3:5e:fa:20:4e:1b:e9:2b:64:b8:13:71:58: db:96:6f:72:38:f2:ff:c7:14:93:5a:ca:1e:9b:cd:24:ce:a8: e4:d0:48:ad:e9:61:96:35:1f:1b:dd:86:07:11:e1:62:6a:65: 08:80:e7:bf:a9:d6:e1:fd:cd:b3:ac:ed:35:0e:97:a0:d5:4b: b9:f9:2a:78:95:86:ff:96:fc:e4:52:27:d7:bf:88:ea:a5:99: 2a:48:61:38:52:29:e3:28:5f:3d:42:55:d2:96:e8:aa:78:b3: 36:0e:73:b7:1e:39:79:7f:e8:d0:39:45:9e:88:93:43:ab:8e: c4:8b:45:63:74:ed:a8:e3:59:ee:38:0c:9b:47:4d:33:e1:af: 9f:f4:84:33:a4:db:9a:22:c1:b0:59:28:85:90:5b:3c:71:58: 5d:54:0c:59:3f:33:74:7c:2a:ca:ed:10:0f:3a:93:9b:30:20: c4:66:d6:80 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUPlxxM1CIekjX0OGIrJkLaxLomkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3RTgzREU3NDM1QUI3OEFERTYxMzdCMUVBQ0ZEQzZG NkJDOTU4QTAeFw0yNjA1MDMwMjMwMjNaFw0yNzA1MDIwMjM1MjNaMDMxMTAvBgNV BAMTKEU2RUU4RTA3RTc4N0YyNTc5QTU1QTdEREY4ODk1QzNBODhCOTgwRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUc61OIsKk1sHnzu5FNQ78ZzMv fsbWAgA3q5V6rw/oKA7v15T5+u91sWYHRtPVKtA3XVCFP0tMYtqnvrBADM1TiqMW /fdLIj5Ye/oWF+toEg3MS0SO4vCbcOokm2iwAzXYpvKLny5wHh1ul36F9ztQT3wK MzKo19P9auiAa2iq2HMdDdJrDKK9Ti0NrbRyw4OA0rK/XqsEozA4RxsHVt9xA+20 KHSHHxl8WNW9v7rKlpCOOKk+FFnnu14slANyUI2jl78ScpStZ6/5Uedc+NWNakVi naEBxyTVEEwI5Jj6Lo8ON8gM51peHNprLaQJNUKEtKqkbFhCpHcqCCxTgdTzAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU5u6OB+eH8leaVafd+IlcOoi5gNUwHwYDVR0j BBgwFoAUqn6D3nQ1q3it5hN7Hqz9xva8lYowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWE1MTlhZWItNWM1Ni00Y2IzLTk0YTAtMGY0MDBlYTZhMzc1LzAvQUE3RTgzREU3 NDM1QUI3OEFERTYxMzdCMUVBQ0ZEQzZGNkJDOTU4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQTdFODNERTc0MzVBQjc4QURFNjEzN0IxRUFDRkRDNkY2QkM5 NThBLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVhNTE5YWViLTVjNTYtNGNiMy05 NGEwLTBmNDAwZWE2YTM3NS8wLzMyMzQzMDM0M2E2NjY1NjMzMDNhMzczMDM3MzEz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzgzODM2MzYucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BP7AcHEwDQYJKoZIhvcNAQELBQADggEBAKsGKjSyoKHk9eAGS/EHwmQD3nMm9Ew7 T6K6Bd+0fmUjMSyuY80Iru/+VqNhnVoH2kHwElNDBDkxMpQNWtD4lYur/d85iO+S pEZE+gJs4176IE4b6StkuBNxWNuWb3I48v/HFJNayh6bzSTOqOTQSK3pYZY1Hxvd hgcR4WJqZQiA57+p1uH9zbOs7TUOl6DVS7n5KniVhv+W/ORSJ9e/iOqlmSpIYThS KeMoXz1CVdKW6Kp4szYOc7ceOXl/6NA5RZ6Ik0OrjsSLRWN07ajjWe44DJtHTTPh r5/0hDOk25oiwbBZKIWQWzxxWF1UDFk/M3R8KsrtEA86k5swIMRm1oA= -----END CERTIFICATE-----Generated at Wed May 13 14:27:19 2026 by rpki-client