$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31623a3a2f34382d3438203d3e203538353532.roa File: 323430343a666430303a31623a3a2f34382d3438203d3e203538353532.roa (raw, json) Hash identifier: 7Az4ETEvwdmVXZoaImfOj+k4QBgXpllBhhQuQMUy1ME= Subject key identifier: 84:1C:32:2D:51:72:34:D5:92:70:D9:72:E8:58:65:E8:7B:2F:80:F6 Certificate issuer: /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52 Certificate serial: 10BB91B39578177CAFB6CC58FA141F1A7DEDA89E Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31623a3a2f34382d3438203d3e203538353532.roa Signing time: Sun 03 May 2026 02:36:27 +0000 ROA not before: Sun 03 May 2026 02:31:27 +0000 ROA not after: Sun 02 May 2027 02:36:27 +0000 asID: 58552 IP address blocks: 2404:fd00:1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:bb:91:b3:95:78:17:7c:af:b6:cc:58:fa:14:1f:1a:7d:ed:a8:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52 Validity Not Before: May 3 02:31:27 2026 GMT Not After : May 2 02:36:27 2027 GMT Subject: CN=841C322D517234D59270D972E85865E87B2F80F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8b:0d:c1:20:6f:bf:04:27:f6:5e:ac:90:aa: 82:b8:2b:a0:68:36:92:bd:e4:fb:a8:e0:28:38:6c: 6e:f5:bf:76:14:14:8f:a8:f9:e3:5e:7e:6d:7e:6d: cc:55:61:48:80:c2:df:ec:99:5e:a5:9f:af:4b:31: 29:ff:3f:3d:82:8f:38:ce:6b:c4:0a:d3:b0:af:9e: 50:80:c7:e6:42:0d:43:22:63:c9:0e:4e:f5:ad:5c: 8a:e2:50:cf:ca:1a:80:97:65:0e:61:08:3c:a0:70: fb:82:74:87:56:af:03:0d:e5:0a:57:66:bf:3f:5b: 49:4e:0c:69:ed:01:37:ba:d2:27:61:06:d7:01:b9: ea:0a:e1:f0:65:52:97:32:11:ee:f4:c2:a4:18:0c: d1:91:b8:fc:c8:bb:a3:62:f3:2b:bf:55:46:1d:6a: 0b:62:1e:a3:e6:30:b4:6c:b1:2b:bf:ea:fc:3f:39: a7:87:28:48:15:e7:07:db:66:74:5b:8a:4b:d2:04: 75:1e:f7:9b:d4:a7:ad:a8:70:0a:32:db:06:a1:82: ef:d4:fe:cc:c6:f3:8c:a2:f1:e0:e5:96:2f:bc:35: 1a:6a:64:39:13:ec:97:39:89:a2:30:31:ab:96:e5: 9c:dc:97:50:3a:bb:3b:28:71:75:de:32:ea:fb:1c: 0f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1C:32:2D:51:72:34:D5:92:70:D9:72:E8:58:65:E8:7B:2F:80:F6 X509v3 Authority Key Identifier: keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31623a3a2f34382d3438203d3e203538353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fd00:1b::/48 Signature Algorithm: sha256WithRSAEncryption 4d:ab:90:2a:cd:95:3c:7e:e8:85:6f:ca:a4:50:08:d6:72:c5: 33:8c:bc:b7:5a:01:0d:85:e8:6e:fe:5b:7c:2d:cc:1a:8e:07: b8:aa:64:87:a9:f8:b0:15:5b:c6:94:27:a0:f6:0e:76:ee:60: c2:d3:32:36:a9:8d:d3:a7:d0:69:c2:55:08:ae:d9:04:fa:71: c6:c6:f5:36:38:b9:9d:60:54:c2:b2:c9:45:73:5d:b9:66:28: 85:c3:75:dc:59:c4:e9:7f:91:58:07:6f:70:8f:f8:c6:5d:0a: 7d:22:95:ca:f8:0e:63:df:41:6d:2b:13:0a:be:90:69:0f:be: a9:60:b4:82:6d:b5:4b:58:d9:47:18:d0:42:81:c6:f6:e5:3b: e6:50:ed:25:8d:44:8f:a0:dd:17:45:7f:34:44:ca:f1:f5:cc: e8:11:65:bc:d3:fb:0a:b1:88:57:ba:9c:4d:03:19:d6:7b:8e: 1e:52:63:55:0a:be:65:84:4b:1a:df:17:dc:d3:19:36:89:e2: c9:3a:6e:4c:1d:a9:a6:c5:a7:ca:64:fb:f9:a6:ef:ee:5f:48: 7e:c8:9c:c3:9a:fe:56:15:63:fd:19:cc:77:ae:23:cf:6d:bc: 86:e0:d3:4b:81:77:45:40:d0:af:96:7f:59:64:10:67:8c:9b: b7:8e:38:b6 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUELuRs5V4F3yvtsxY+hQfGn3tqJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBEQjJDNDRFMjZDQTJBMTQ2RUY3MzhEMzlGNTNDQkIw OTAxREI1MjAeFw0yNjA1MDMwMjMxMjdaFw0yNzA1MDIwMjM2MjdaMDMxMTAvBgNV BAMTKDg0MUMzMjJENTE3MjM0RDU5MjcwRDk3MkU4NTg2NUU4N0IyRjgwRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCliw3BIG+/BCf2XqyQqoK4K6Bo NpK95Puo4Cg4bG71v3YUFI+o+eNefm1+bcxVYUiAwt/smV6ln69LMSn/Pz2CjzjO a8QK07CvnlCAx+ZCDUMiY8kOTvWtXIriUM/KGoCXZQ5hCDygcPuCdIdWrwMN5QpX Zr8/W0lODGntATe60idhBtcBueoK4fBlUpcyEe70wqQYDNGRuPzIu6Ni8yu/VUYd agtiHqPmMLRssSu/6vw/OaeHKEgV5wfbZnRbikvSBHUe95vUp62ocAoy2wahgu/U /szG84yi8eDlli+8NRpqZDkT7Jc5iaIwMauW5Zzcl1A6uzsocXXeMur7HA+VAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUhBwyLVFyNNWScNly6Fhl6HsvgPYwHwYDVR0j BBgwFoAUENssROJsoqFG73ONOfU8uwkB21IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQyMjdkYmUtNGExYy00MGIwLTk0YTYtNzkzYmRiZGEzNzc3LzAvMTBEQjJDNDRF MjZDQTJBMTQ2RUY3MzhEMzlGNTNDQkIwOTAxREI1Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMERCMkM0NEUyNkNBMkExNDZFRjczOEQzOUY1M0NCQjA5MDFE QjUyLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMyMzQzMDM0M2E2NjY0MzAzMDNhMzE2MjNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzgzNTM1MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBP0AABsw DQYJKoZIhvcNAQELBQADggEBAE2rkCrNlTx+6IVvyqRQCNZyxTOMvLdaAQ2F6G7+ W3wtzBqOB7iqZIep+LAVW8aUJ6D2DnbuYMLTMjapjdOn0GnCVQiu2QT6ccbG9TY4 uZ1gVMKyyUVzXblmKIXDddxZxOl/kVgHb3CP+MZdCn0ilcr4DmPfQW0rEwq+kGkP vqlgtIJttUtY2UcY0EKBxvblO+ZQ7SWNRI+g3RdFfzREyvH1zOgRZbzT+wqxiFe6 nE0DGdZ7jh5SY1UKvmWESxrfF9zTGTaJ4sk6bkwdqabFp8pk+/mm7+5fSH7InMOa /lYVY/0ZzHeuI89tvIbg00uBd0VA0K+Wf1lkEGeMm7eOOLY= -----END CERTIFICATE-----Generated at Wed May 13 08:35:05 2026 by rpki-client