$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31353a3a2f34382d3438203d3e203538353532.roa File: 323430343a666430303a31353a3a2f34382d3438203d3e203538353532.roa (raw, json) Hash identifier: ae1+RaNPOlAn0iGCqLckcjPWA4xnHoBL4T2Srwy4py8= Subject key identifier: 32:EC:3E:18:05:A3:9C:EA:A0:9F:30:BA:C6:89:08:A5:A1:B7:28:3F Certificate issuer: /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52 Certificate serial: 04AE5A7DEB86EDBF7E893C1D62A4F11648885211 Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31353a3a2f34382d3438203d3e203538353532.roa Signing time: Sun 03 May 2026 02:36:38 +0000 ROA not before: Sun 03 May 2026 02:31:38 +0000 ROA not after: Sun 02 May 2027 02:36:38 +0000 asID: 58552 IP address blocks: 2404:fd00:15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ae:5a:7d:eb:86:ed:bf:7e:89:3c:1d:62:a4:f1:16:48:88:52:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52 Validity Not Before: May 3 02:31:38 2026 GMT Not After : May 2 02:36:38 2027 GMT Subject: CN=32EC3E1805A39CEAA09F30BAC68908A5A1B7283F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4f:a7:ee:15:9e:93:e6:1b:79:6d:2e:1b:84: b1:eb:15:38:45:ed:f3:a6:0a:a1:0a:71:16:8a:d1: b7:68:df:e3:c6:9b:84:4d:bf:84:00:24:99:96:73: a4:30:1a:77:9b:1f:13:7a:e5:86:16:df:8c:37:53: 1a:1a:92:24:a9:6a:d1:4a:62:ad:18:58:e7:91:32: 0b:eb:78:9a:9e:97:57:31:21:af:e8:04:41:f2:6e: dd:cc:16:b2:c8:2a:46:db:7a:b8:a0:93:59:fc:7f: a9:15:c2:dc:68:f6:6d:c9:2b:46:16:af:27:0a:02: 91:ab:07:4e:4f:c9:46:68:76:63:aa:81:b1:b0:b5: 22:d6:3f:09:94:91:46:48:03:c5:53:db:22:7a:0a: e1:53:fa:73:e1:97:67:f9:fc:a7:f9:e5:18:09:19: 8c:e8:0a:09:f7:dc:ab:ba:1f:f0:67:8c:4f:0d:be: 65:0d:68:1a:17:22:0f:fa:d4:b9:53:16:32:f3:ad: 81:73:ac:be:8a:ab:ea:48:95:7b:ba:ea:47:7d:c7: 4f:4b:5d:06:9a:50:97:dd:4c:af:08:34:27:b8:76: 6a:0e:f2:3a:9d:e6:8f:a6:c2:ff:41:fc:a0:90:74: 68:38:e8:0b:47:ff:3e:da:56:68:be:6b:d3:ed:af: e4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:EC:3E:18:05:A3:9C:EA:A0:9F:30:BA:C6:89:08:A5:A1:B7:28:3F X509v3 Authority Key Identifier: keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31353a3a2f34382d3438203d3e203538353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fd00:15::/48 Signature Algorithm: sha256WithRSAEncryption 11:bf:3b:6e:75:d6:4e:aa:45:2d:35:b5:6b:ee:c3:fc:a1:a4: e1:59:5c:ad:34:57:cf:2b:30:d3:c9:fd:de:03:73:5b:e1:cc: 24:7e:82:40:1e:e1:2b:61:c0:83:bd:41:75:ab:64:47:f5:4b: 43:6c:5e:f2:ba:db:ed:e3:88:56:c1:88:4e:b3:1f:b7:d8:5d: 91:3d:aa:c8:a3:7a:12:95:99:0a:4b:16:ea:42:38:03:cb:07: a5:b1:87:9e:9f:bd:c9:6f:71:2d:da:58:fa:a6:66:35:1c:89: 84:b5:33:eb:03:7d:0b:60:ca:f4:25:47:43:a3:c0:7a:a9:da: 77:dd:e6:3a:c4:78:a7:be:b7:40:24:cf:46:8f:e3:3b:8b:b6: eb:f7:4b:3f:97:b7:15:13:7a:ef:57:ac:24:33:53:f6:f5:71: b3:32:67:43:65:1f:34:a3:6c:c7:b2:1b:ab:89:18:ba:8a:09: 9e:f8:ee:da:6b:8f:c4:90:a4:e1:25:d8:c4:30:3d:2c:6b:d5: 36:b1:5b:39:93:52:4b:5d:7a:84:27:cf:00:d0:39:e5:e7:1b: 34:7c:fa:ae:59:86:01:af:3f:ea:0d:d0:89:d1:e6:e4:ae:29: db:0b:44:39:1e:78:c4:35:97:8d:05:64:77:12:37:b8:dd:81: a5:49:7a:39 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUBK5afeuG7b9+iTwdYqTxFkiIUhEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBEQjJDNDRFMjZDQTJBMTQ2RUY3MzhEMzlGNTNDQkIw OTAxREI1MjAeFw0yNjA1MDMwMjMxMzhaFw0yNzA1MDIwMjM2MzhaMDMxMTAvBgNV BAMTKDMyRUMzRTE4MDVBMzlDRUFBMDlGMzBCQUM2ODkwOEE1QTFCNzI4M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUT6fuFZ6T5ht5bS4bhLHrFThF 7fOmCqEKcRaK0bdo3+PGm4RNv4QAJJmWc6QwGnebHxN65YYW34w3UxoakiSpatFK Yq0YWOeRMgvreJqel1cxIa/oBEHybt3MFrLIKkbberigk1n8f6kVwtxo9m3JK0YW rycKApGrB05PyUZodmOqgbGwtSLWPwmUkUZIA8VT2yJ6CuFT+nPhl2f5/Kf55RgJ GYzoCgn33Ku6H/BnjE8NvmUNaBoXIg/61LlTFjLzrYFzrL6Kq+pIlXu66kd9x09L XQaaUJfdTK8INCe4dmoO8jqd5o+mwv9B/KCQdGg46AtH/z7aVmi+a9Ptr+RzAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUMuw+GAWjnOqgnzC6xokIpaG3KD8wHwYDVR0j BBgwFoAUENssROJsoqFG73ONOfU8uwkB21IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQyMjdkYmUtNGExYy00MGIwLTk0YTYtNzkzYmRiZGEzNzc3LzAvMTBEQjJDNDRF MjZDQTJBMTQ2RUY3MzhEMzlGNTNDQkIwOTAxREI1Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMERCMkM0NEUyNkNBMkExNDZFRjczOEQzOUY1M0NCQjA5MDFE QjUyLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMyMzQzMDM0M2E2NjY0MzAzMDNhMzEzNTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzgzNTM1MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBP0AABUw DQYJKoZIhvcNAQELBQADggEBABG/O2511k6qRS01tWvuw/yhpOFZXK00V88rMNPJ /d4Dc1vhzCR+gkAe4SthwIO9QXWrZEf1S0NsXvK62+3jiFbBiE6zH7fYXZE9qsij ehKVmQpLFupCOAPLB6Wxh56fvclvcS3aWPqmZjUciYS1M+sDfQtgyvQlR0OjwHqp 2nfd5jrEeKe+t0Akz0aP4zuLtuv3Sz+XtxUTeu9XrCQzU/b1cbMyZ0NlHzSjbMey G6uJGLqKCZ747tprj8SQpOEl2MQwPSxr1TaxWzmTUktdeoQnzwDQOeXnGzR8+q5Z hgGvP+oN0InR5uSuKdsLRDkeeMQ1l40FZHcSN7jdgaVJejk= -----END CERTIFICATE-----Generated at Wed May 13 06:27:17 2026 by rpki-client