$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31333a3a2f34382d3438203d3e203538353532.roa File: 323430343a666430303a31333a3a2f34382d3438203d3e203538353532.roa (raw, json) Hash identifier: GK2/BRbm2GmcAXTGu5HGrH5pzZav8GBCGC6umcR4FYQ= Subject key identifier: 95:BB:F5:04:AB:8C:F8:8B:C7:19:C9:2D:A8:1C:6C:BD:C7:01:7F:84 Certificate issuer: /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52 Certificate serial: 4AD3F3A8A764767F1568F006DEC6C4306453983B Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31333a3a2f34382d3438203d3e203538353532.roa Signing time: Sun 03 May 2026 02:36:37 +0000 ROA not before: Sun 03 May 2026 02:31:37 +0000 ROA not after: Sun 02 May 2027 02:36:37 +0000 asID: 58552 IP address blocks: 2404:fd00:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d3:f3:a8:a7:64:76:7f:15:68:f0:06:de:c6:c4:30:64:53:98:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52 Validity Not Before: May 3 02:31:37 2026 GMT Not After : May 2 02:36:37 2027 GMT Subject: CN=95BBF504AB8CF88BC719C92DA81C6CBDC7017F84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:11:ee:1a:54:e4:fd:5b:4f:b2:66:0c:b9:b0: 14:aa:65:b8:dd:54:b3:b3:ed:31:6a:e1:f4:8f:30: a0:b5:58:e2:29:29:69:3d:50:d9:e6:d7:bc:cd:64: ae:1d:70:6b:84:26:47:b7:71:5f:b1:1a:0b:6d:40: f0:b4:74:92:0b:bd:04:8d:a7:e5:2d:0e:b6:73:01: 74:40:68:43:94:cf:1e:14:43:c9:58:b7:90:26:46: 74:54:47:2b:28:92:8a:09:6a:48:55:09:3d:50:5c: 0d:6a:43:6c:b1:a7:df:c8:c3:0c:b4:c1:d6:62:52: 6e:57:41:cd:89:af:12:4f:2d:88:79:85:4a:06:59: f0:b8:c1:d6:46:0f:99:8c:2b:fd:3f:14:7c:15:51: ee:3f:83:94:8e:4b:18:a9:84:a9:39:06:d8:26:d4: e3:0c:34:19:28:5b:9f:a9:cd:f0:ab:8e:3d:c7:0b: 60:ca:fa:78:9c:8c:ae:03:52:a8:f6:db:eb:82:d0: 0a:d3:f6:2f:c3:cc:38:90:c9:bc:56:d7:b3:c9:c1: 83:d7:35:c6:1c:77:b9:f1:78:da:9e:30:68:a3:a4: 08:57:9e:a3:2e:6b:86:10:e5:99:9c:0c:1f:9f:c8: 13:7f:5e:13:16:54:51:76:bf:8b:73:17:bd:37:32: dc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:BB:F5:04:AB:8C:F8:8B:C7:19:C9:2D:A8:1C:6C:BD:C7:01:7F:84 X509v3 Authority Key Identifier: keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31333a3a2f34382d3438203d3e203538353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fd00:13::/48 Signature Algorithm: sha256WithRSAEncryption 72:e6:0d:7b:91:f9:47:03:e6:c7:bb:0e:2d:60:a6:b7:1b:09: 27:87:f7:97:41:07:20:eb:86:04:54:f4:eb:97:88:54:c8:06: fc:eb:ee:a8:e6:b3:6a:c4:14:63:8f:9e:07:88:4a:bd:16:c5: 0c:f7:9f:2f:65:8f:ef:63:b3:c8:22:21:28:59:64:4a:72:c9: 1d:b7:7f:e0:54:a3:56:f1:bf:99:1f:94:c3:4c:96:6b:35:2b: 07:25:4e:11:93:a1:e1:86:ee:74:a8:a6:62:28:c9:3b:e2:94: dd:0f:05:db:11:12:cb:7d:84:20:68:7f:cf:c4:5f:5a:36:bc: 89:95:09:ab:f4:26:26:28:e9:48:42:36:7b:2b:e1:26:fb:86: e7:64:2a:5d:18:ef:2c:e6:24:c4:38:f5:8c:ae:45:29:5a:d8: 1c:d8:72:e1:15:91:95:f5:fa:3c:2a:02:74:62:fa:b0:97:a5: 6a:49:7d:c2:89:60:c8:94:9c:eb:e4:b1:1e:25:83:69:0e:a1: e1:1f:2f:78:a5:5c:31:39:96:73:05:3f:8a:04:24:11:d8:b3: ba:89:c5:89:54:17:72:4a:ee:3e:a3:ac:eb:46:31:a5:c2:90: e2:6c:83:2a:d8:b2:2d:a4:05:96:a0:a6:6b:8e:31:c9:0c:f0: ee:e3:84:a7 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUStPzqKdkdn8VaPAG3sbEMGRTmDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBEQjJDNDRFMjZDQTJBMTQ2RUY3MzhEMzlGNTNDQkIw OTAxREI1MjAeFw0yNjA1MDMwMjMxMzdaFw0yNzA1MDIwMjM2MzdaMDMxMTAvBgNV BAMTKDk1QkJGNTA0QUI4Q0Y4OEJDNzE5QzkyREE4MUM2Q0JEQzcwMTdGODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCREe4aVOT9W0+yZgy5sBSqZbjd VLOz7TFq4fSPMKC1WOIpKWk9UNnm17zNZK4dcGuEJke3cV+xGgttQPC0dJILvQSN p+UtDrZzAXRAaEOUzx4UQ8lYt5AmRnRURysokooJakhVCT1QXA1qQ2yxp9/Iwwy0 wdZiUm5XQc2JrxJPLYh5hUoGWfC4wdZGD5mMK/0/FHwVUe4/g5SOSxiphKk5Btgm 1OMMNBkoW5+pzfCrjj3HC2DK+nicjK4DUqj22+uC0ArT9i/DzDiQybxW17PJwYPX NcYcd7nxeNqeMGijpAhXnqMua4YQ5ZmcDB+fyBN/XhMWVFF2v4tzF703MtxlAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUlbv1BKuM+IvHGcktqBxsvccBf4QwHwYDVR0j BBgwFoAUENssROJsoqFG73ONOfU8uwkB21IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQyMjdkYmUtNGExYy00MGIwLTk0YTYtNzkzYmRiZGEzNzc3LzAvMTBEQjJDNDRF MjZDQTJBMTQ2RUY3MzhEMzlGNTNDQkIwOTAxREI1Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMERCMkM0NEUyNkNBMkExNDZFRjczOEQzOUY1M0NCQjA5MDFE QjUyLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMyMzQzMDM0M2E2NjY0MzAzMDNhMzEzMzNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzgzNTM1MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBP0AABMw DQYJKoZIhvcNAQELBQADggEBAHLmDXuR+UcD5se7Di1gprcbCSeH95dBByDrhgRU 9OuXiFTIBvzr7qjms2rEFGOPngeISr0WxQz3ny9lj+9js8giIShZZEpyyR23f+BU o1bxv5kflMNMlms1KwclThGToeGG7nSopmIoyTvilN0PBdsREst9hCBof8/EX1o2 vImVCav0JiYo6UhCNnsr4Sb7hudkKl0Y7yzmJMQ49YyuRSla2BzYcuEVkZX1+jwq AnRi+rCXpWpJfcKJYMiUnOvksR4lg2kOoeEfL3ilXDE5lnMFP4oEJBHYs7qJxYlU F3JK7j6jrOtGMaXCkOJsgyrYsi2kBZagpmuOMckM8O7jhKc= -----END CERTIFICATE-----Generated at Wed May 13 06:08:05 2026 by rpki-client