$ rpki-client -vvf rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a643030303a3a2f34382d3438203d3e203338353135.roa File: 323430323a3630303a643030303a3a2f34382d3438203d3e203338353135.roa (raw, json) Hash identifier: fyhAAUX0oYHo/blO6bCLTKGITAX4/ek1/9c40JSPCMw= Subject key identifier: D7:F3:7F:81:CD:66:8E:6B:2C:00:FB:C5:FB:98:2B:F5:22:3B:38:43 Certificate issuer: /CN=67869B177D646DD081563D36E6E9775C31473EE2 Certificate serial: 302A2F5ABF59C30A754C5CD999E7424B62035A09 Authority key identifier: 67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a643030303a3a2f34382d3438203d3e203338353135.roa Signing time: Sun 03 May 2026 02:41:10 +0000 ROA not before: Sun 03 May 2026 02:36:10 +0000 ROA not after: Sun 02 May 2027 02:41:10 +0000 asID: 38515 IP address blocks: 2402:600:d000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:2a:2f:5a:bf:59:c3:0a:75:4c:5c:d9:99:e7:42:4b:62:03:5a:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67869B177D646DD081563D36E6E9775C31473EE2 Validity Not Before: May 3 02:36:10 2026 GMT Not After : May 2 02:41:10 2027 GMT Subject: CN=D7F37F81CD668E6B2C00FBC5FB982BF5223B3843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:44:d2:84:09:de:5f:83:8f:dd:39:02:33:d3: a1:69:9e:df:33:95:90:b3:94:43:74:03:8b:b3:91: 99:ae:a2:26:c3:a1:bf:86:ab:0d:3d:7a:8e:b1:96: ff:5d:e2:73:f3:fe:28:a0:af:1d:c0:ff:30:f9:a2: 43:d7:77:72:9f:19:91:c6:a3:4b:6c:cc:1a:29:51: 62:e6:77:c7:7b:6c:74:23:c0:30:38:c3:4b:86:69: 84:bb:05:70:ba:14:50:a7:0a:6a:ba:b2:2f:04:b7: 94:a8:c1:db:37:bf:41:58:4f:83:a8:d4:f6:c5:6f: 2a:7a:59:38:fb:5b:f0:12:10:e1:4e:3c:e4:ac:82: e5:3a:4f:e9:56:8c:6c:bf:74:02:58:70:ac:24:d1: ed:66:bf:50:06:f2:6d:24:6d:75:6d:72:d2:a9:91: 17:d2:12:0e:39:b6:60:fc:45:41:50:3e:11:53:95: b1:c9:1a:79:87:98:1d:06:76:a3:7b:64:5f:35:69: 15:31:e5:38:23:1e:b0:07:27:18:0f:d0:e6:12:d2: e9:63:62:fe:30:9a:5f:2f:ac:35:8c:c4:1f:04:e9: a2:ed:ab:e3:d3:64:12:33:50:a6:e5:8d:29:7f:d8: 22:41:ca:08:04:5a:51:fd:20:df:e2:79:04:6a:b8: 5e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F3:7F:81:CD:66:8E:6B:2C:00:FB:C5:FB:98:2B:F5:22:3B:38:43 X509v3 Authority Key Identifier: keyid:67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a643030303a3a2f34382d3438203d3e203338353135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:600:d000::/48 Signature Algorithm: sha256WithRSAEncryption 25:00:50:66:39:03:f7:97:cb:3b:43:a2:14:38:73:ed:1f:08: e5:63:1f:38:90:0b:80:de:8b:16:32:6e:ef:6d:08:9e:bd:0e: e5:56:bf:46:7d:92:e2:92:2e:51:e9:6a:5a:8c:c7:e5:46:c2: bc:b9:7a:bf:31:d7:33:2a:d0:03:9a:ce:6a:94:63:5b:a7:36: f5:3d:63:36:e1:cd:d4:ac:23:29:2b:e9:9e:18:d1:77:62:30: 17:18:60:d7:9f:a0:e6:e0:80:cb:d8:bc:16:1d:80:93:34:e2: a9:cd:95:79:bd:a7:53:58:41:4a:25:76:ae:f2:b9:e9:ba:8e: b2:c9:5d:3a:2c:04:80:c7:6a:51:cc:b6:d8:76:e4:85:ff:9c: b2:ec:2d:44:17:5e:03:5f:c6:54:53:34:0f:f3:05:e7:bf:2e: 77:6f:20:91:84:b0:02:18:2b:04:c7:97:1b:6b:ed:92:47:2e: b4:bb:f4:d8:de:8d:e4:df:6c:cf:3c:f4:0c:d5:62:49:05:6e: 7b:12:b4:e3:1c:b1:64:28:05:6a:e9:7b:7c:8d:db:18:20:8a: 88:a5:4c:c4:de:f0:d8:4a:d7:8d:2b:4f:bc:fe:cb:a3:14:c8: 2d:aa:21:4d:43:43:fd:e2:aa:e6:9c:46:9a:64:61:1c:db:b4: 41:d7:d3:2f -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUMCovWr9Zwwp1TFzZmedCS2IDWgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc4NjlCMTc3RDY0NkREMDgxNTYzRDM2RTZFOTc3NUMz MTQ3M0VFMjAeFw0yNjA1MDMwMjM2MTBaFw0yNzA1MDIwMjQxMTBaMDMxMTAvBgNV BAMTKEQ3RjM3RjgxQ0Q2NjhFNkIyQzAwRkJDNUZCOTgyQkY1MjIzQjM4NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQRNKECd5fg4/dOQIz06Fpnt8z lZCzlEN0A4uzkZmuoibDob+Gqw09eo6xlv9d4nPz/iigrx3A/zD5okPXd3KfGZHG o0tszBopUWLmd8d7bHQjwDA4w0uGaYS7BXC6FFCnCmq6si8Et5Sowds3v0FYT4Oo 1PbFbyp6WTj7W/ASEOFOPOSsguU6T+lWjGy/dAJYcKwk0e1mv1AG8m0kbXVtctKp kRfSEg45tmD8RUFQPhFTlbHJGnmHmB0GdqN7ZF81aRUx5TgjHrAHJxgP0OYS0ulj Yv4wml8vrDWMxB8E6aLtq+PTZBIzUKbljSl/2CJByggEWlH9IN/ieQRquF7PAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU1/N/gc1mjmssAPvF+5gr9SI7OEMwHwYDVR0j BBgwFoAUZ4abF31kbdCBVj025ul3XDFHPuIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmM0YzY0YTktMzUzNy00YmM3LTg2MTMtOGU5ODE2MjllNGNhLzAvNjc4NjlCMTc3 RDY0NkREMDgxNTYzRDM2RTZFOTc3NUMzMTQ3M0VFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82Nzg2OUIxNzdENjQ2REQwODE1NjNEMzZFNkU5Nzc1QzMxNDcz RUUyLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZjNGM2NGE5LTM1MzctNGJjNy04 NjEzLThlOTgxNjI5ZTRjYS8wLzMyMzQzMDMyM2EzNjMwMzAzYTY0MzAzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzMzODM1MzEzNS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQCBgDQ ADANBgkqhkiG9w0BAQsFAAOCAQEAJQBQZjkD95fLO0OiFDhz7R8I5WMfOJALgN6L FjJu720Inr0O5Va/Rn2S4pIuUelqWozH5UbCvLl6vzHXMyrQA5rOapRjW6c29T1j NuHN1KwjKSvpnhjRd2IwFxhg15+g5uCAy9i8Fh2AkzTiqc2Veb2nU1hBSiV2rvK5 6bqOssldOiwEgMdqUcy22Hbkhf+csuwtRBdeA1/GVFM0D/MF578ud28gkYSwAhgr BMeXG2vtkkcutLv02N6N5N9szzz0DNViSQVuexK04xyxZCgFaul7fI3bGCCKiKVM xN7w2ErXjStPvP7LoxTILaohTUND/eKq5pxGmmRhHNu0QdfTLw== -----END CERTIFICATE-----Generated at Wed May 13 12:12:18 2026 by rpki-client