$ rpki-client -vvf rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/323430353a3730303a3a2f33322d3332203d3e2039323531.roa File: 323430353a3730303a3a2f33322d3332203d3e2039323531.roa (raw, json) Hash identifier: nX8ArP2zu0QlOO7gowBxT6S+iz6GNAp5g9TpT5HDhVk= Subject key identifier: 99:BB:14:DB:4D:C6:35:B5:8A:96:41:AD:83:8D:4A:5B:3D:BB:9E:C5 Certificate issuer: /CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0 Certificate serial: 5B56A2B0FD95E594DDA30D4D1E2D4ED01D68B56F Authority key identifier: 4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/323430353a3730303a3a2f33322d3332203d3e2039323531.roa Signing time: Sun 03 May 2026 02:39:45 +0000 ROA not before: Sun 03 May 2026 02:34:45 +0000 ROA not after: Sun 02 May 2027 02:39:45 +0000 asID: 9251 IP address blocks: 2405:700::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:56:a2:b0:fd:95:e5:94:dd:a3:0d:4d:1e:2d:4e:d0:1d:68:b5:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0 Validity Not Before: May 3 02:34:45 2026 GMT Not After : May 2 02:39:45 2027 GMT Subject: CN=99BB14DB4DC635B58A9641AD838D4A5B3DBB9EC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b0:79:06:16:d1:ed:4c:38:f7:01:82:87:a6: a8:b9:8b:cd:a8:fd:e9:01:22:2f:b4:fd:8c:e5:88: 9b:5c:d3:6b:54:4f:b3:c6:66:ef:ff:13:29:8d:3c: 90:ca:db:31:74:82:59:fd:37:7d:2d:4f:f5:e3:3c: d9:82:ec:3d:1d:ce:66:05:95:1e:ba:ee:97:b7:e2: 53:56:bc:b9:fd:e7:aa:0c:38:ff:4a:2e:11:1a:d4: 3f:4f:8f:6d:80:55:03:8d:2b:b0:2c:a3:8f:c8:e2: 04:4c:b3:97:38:47:d1:20:d9:e0:d0:3a:d5:99:0e: d1:90:98:34:4c:aa:cd:60:01:ca:2f:70:10:72:93: fa:4d:bf:8a:62:c7:ed:fd:f3:c0:61:72:de:e1:86: ab:62:82:5d:9c:37:4c:5d:15:eb:b5:f1:cd:93:ba: 75:68:7c:2e:aa:88:8e:93:f4:57:7a:d2:ee:cb:c3: fd:bc:d9:73:bb:59:5b:02:f6:9f:63:6d:84:5d:23: fb:d3:dd:48:eb:ae:32:31:fe:e8:0e:59:da:67:78: 35:98:fd:55:8d:28:c0:8c:66:a2:b2:aa:17:2c:f6: a7:8f:78:15:b3:0e:dc:54:77:3f:ff:01:3c:82:f7: 96:f3:31:fe:90:e9:59:c2:29:f1:68:d0:33:d5:93: 5a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BB:14:DB:4D:C6:35:B5:8A:96:41:AD:83:8D:4A:5B:3D:BB:9E:C5 X509v3 Authority Key Identifier: keyid:4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/323430353a3730303a3a2f33322d3332203d3e2039323531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:700::/32 Signature Algorithm: sha256WithRSAEncryption b9:3f:b5:2b:2a:f6:b1:2d:5b:70:78:30:3f:a9:25:9f:63:99: 89:3d:84:53:70:f8:22:0d:ea:29:ed:07:92:6d:7a:23:24:9d: 08:48:b7:ca:7e:42:ce:54:4e:3d:b5:fa:83:77:5f:e8:85:d5: 33:31:78:ae:81:2c:67:5d:f7:15:0e:8e:bb:8d:d9:67:ab:79: 39:56:7a:19:a1:c9:42:66:f1:4b:ad:57:a8:8b:52:8d:4d:40: 9d:ff:d9:29:86:59:c9:26:b7:8b:86:02:d0:3a:8b:96:b4:49: fe:4d:e7:b8:92:17:d7:2a:d1:c1:f1:f3:d2:70:2b:ea:77:a9: 5e:26:ed:29:48:15:b8:32:ed:f5:ae:ab:d5:73:cc:c0:e0:49: d4:27:a4:f4:d5:65:45:10:34:a0:31:89:a9:cf:2f:c5:88:d5: 94:52:9a:38:f2:4b:f2:ef:db:a7:bf:ff:c9:53:2c:4f:a9:8f: ac:39:a0:3e:3a:ee:b7:8c:1d:e4:e7:25:02:4a:69:fc:79:2a: 9c:71:18:90:24:50:22:47:4d:fa:f1:3e:6a:23:dc:d1:5f:20: 0c:75:d1:fe:62:80:61:47:11:15:d8:95:b0:22:a1:f0:af:c2: 54:54:4b:28:30:47:6b:43:26:bc:6a:dc:73:34:c1:94:20:4f: e6:e1:27:54 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUW1aisP2V5ZTdow1NHi1O0B1otW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE0RUFFNkRGN0VCRjhENUI0NDA0REJBRTQ4NzQ4Q0NG MjcwRjdBMDAeFw0yNjA1MDMwMjM0NDVaFw0yNzA1MDIwMjM5NDVaMDMxMTAvBgNV BAMTKDk5QkIxNERCNERDNjM1QjU4QTk2NDFBRDgzOEQ0QTVCM0RCQjlFQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGsHkGFtHtTDj3AYKHpqi5i82o /ekBIi+0/YzliJtc02tUT7PGZu//EymNPJDK2zF0gln9N30tT/XjPNmC7D0dzmYF lR667pe34lNWvLn956oMOP9KLhEa1D9Pj22AVQONK7Aso4/I4gRMs5c4R9Eg2eDQ OtWZDtGQmDRMqs1gAcovcBByk/pNv4pix+3988Bhct7hhqtigl2cN0xdFeu18c2T unVofC6qiI6T9Fd60u7Lw/282XO7WVsC9p9jbYRdI/vT3UjrrjIx/ugOWdpneDWY /VWNKMCMZqKyqhcs9qePeBWzDtxUdz//ATyC95bzMf6Q6VnCKfFo0DPVk1oFAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUmbsU203GNbWKlkGtg41KWz27nsUwHwYDVR0j BBgwFoAUSk6ubffr+NW0QE265IdIzPJw96AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjVlYzI1ZTQtOWFhOC00YmVmLTkwOTctYzBiZWMwYjI2NmE3LzAvNEE0RUFFNkRG N0VCRjhENUI0NDA0REJBRTQ4NzQ4Q0NGMjcwRjdBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QTRFQUU2REY3RUJGOEQ1QjQ0MDREQkFFNDg3NDhDQ0YyNzBG N0EwLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkGCCsGAQUFBzALhn1yc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjVlYzI1ZTQtOWFhOC00YmVmLTkw OTctYzBiZWMwYjI2NmE3LzAvMzIzNDMwMzUzYTM3MzAzMDNhM2EyZjMzMzIyZDMz MzIyMDNkM2UyMDM5MzIzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAUHADANBgkqhkiG9w0BAQsF AAOCAQEAuT+1Kyr2sS1bcHgwP6kln2OZiT2EU3D4Ig3qKe0Hkm16IySdCEi3yn5C zlROPbX6g3df6IXVMzF4roEsZ133FQ6Ou43ZZ6t5OVZ6GaHJQmbxS61XqItSjU1A nf/ZKYZZySa3i4YC0DqLlrRJ/k3nuJIX1yrRwfHz0nAr6nepXibtKUgVuDLt9a6r 1XPMwOBJ1Cek9NVlRRA0oDGJqc8vxYjVlFKaOPJL8u/bp7//yVMsT6mPrDmgPjru t4wd5OclAkpp/HkqnHEYkCRQIkdN+vE+aiPc0V8gDHXR/mKAYUcRFdiVsCKh8K/C VFRLKDBHa0MmvGrcczTBlCBP5uEnVA== -----END CERTIFICATE-----Generated at Wed May 13 12:42:14 2026 by rpki-client