$ rpki-client -vvf rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3530303a3a2f34382d3438203d3e20313336303838.roa File: 323430303a643934303a3530303a3a2f34382d3438203d3e20313336303838.roa (raw, json) Hash identifier: 7/h2zwvZrAQS0wAHrJy9NqwWiyEipm8MyD1COAfe2nQ= Subject key identifier: 83:9D:9E:60:E2:5D:91:15:28:2A:2A:9D:98:4B:B2:6E:63:CC:48:75 Certificate issuer: /CN=CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8 Certificate serial: 1150CC2C3CDB30BEE515E8D6ED9F735A7C18AD9D Authority key identifier: CA:FD:3A:17:B2:AD:C6:F9:00:1E:57:A0:1B:B2:9E:9B:69:3B:7C:C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3530303a3a2f34382d3438203d3e20313336303838.roa Signing time: Sun 03 May 2026 02:43:11 +0000 ROA not before: Sun 03 May 2026 02:38:11 +0000 ROA not after: Sun 02 May 2027 02:43:11 +0000 asID: 136088 IP address blocks: 2400:d940:500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:15:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:50:cc:2c:3c:db:30:be:e5:15:e8:d6:ed:9f:73:5a:7c:18:ad:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8 Validity Not Before: May 3 02:38:11 2026 GMT Not After : May 2 02:43:11 2027 GMT Subject: CN=839D9E60E25D9115282A2A9D984BB26E63CC4875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ac:4e:82:e1:10:53:07:15:f5:c3:57:6f:33: 76:b6:93:84:f9:19:1a:fd:e1:b0:08:7d:e8:34:5c: 85:e7:75:84:fc:d2:31:fc:1b:d0:76:a3:4c:38:8a: 8a:0e:d6:ea:e3:b1:f7:43:cf:a3:22:ec:74:09:b7: 35:ef:6a:b6:69:af:a9:7a:bc:03:c0:ba:d0:23:04: c4:9e:78:7d:a3:39:5e:ce:c7:3a:7a:cc:fc:f8:11: 98:63:d6:85:fe:f2:a8:6a:18:47:25:61:08:7a:08: 19:26:80:8d:85:57:ee:b2:89:fc:76:42:e5:3b:c1: a9:6d:ec:78:5e:5c:31:f9:2a:f9:fb:59:74:4e:fa: 32:c8:45:73:90:a7:aa:29:33:11:96:17:e3:83:5c: 73:94:09:c5:52:52:7a:c4:1d:69:73:09:40:86:6a: f5:61:0a:bc:45:54:e0:26:bb:6a:95:a6:0a:5c:35: 14:bb:ea:cf:8d:28:0f:79:32:be:2f:bb:d6:94:7e: ae:76:5e:52:42:d0:6a:10:a9:3f:92:de:e5:1b:c1: 31:d5:c3:ef:45:81:c9:05:f4:52:a1:87:5b:2d:0d: ff:6b:74:51:2c:96:90:05:18:93:50:dd:a6:0f:ad: 24:a2:1f:3b:fd:7a:e4:d3:50:f8:00:42:5f:de:6d: 71:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9D:9E:60:E2:5D:91:15:28:2A:2A:9D:98:4B:B2:6E:63:CC:48:75 X509v3 Authority Key Identifier: keyid:CA:FD:3A:17:B2:AD:C6:F9:00:1E:57:A0:1B:B2:9E:9B:69:3B:7C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3530303a3a2f34382d3438203d3e20313336303838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:d940:500::/48 Signature Algorithm: sha256WithRSAEncryption 96:6d:64:5e:44:32:12:61:35:d0:a7:5d:23:96:a6:16:96:6d: 2d:b8:4e:e7:df:f1:14:ac:af:41:d0:15:64:9c:45:5e:62:38: a2:ec:78:b1:fb:fa:1a:43:87:df:ec:22:24:b3:8f:81:b9:6b: 4f:2c:8e:a7:d4:99:b3:16:f6:1f:10:bd:9d:5e:54:a2:6c:55: 94:7e:eb:3d:80:ee:ea:44:75:2d:58:11:45:7b:4f:70:4d:93: 91:37:1f:27:4c:4c:ce:3d:22:cc:7b:ff:6f:48:4b:68:ec:60: 38:a2:1c:f7:4a:87:36:ef:9c:7d:df:8b:fe:79:5e:7a:77:0d: 84:00:a0:e3:13:ed:eb:88:c1:82:87:d9:e0:0e:fc:cf:81:30: e3:55:16:b8:bf:c7:6b:67:bd:99:f7:4d:98:e0:c0:29:e0:6a: 33:fc:e6:63:b4:63:1a:59:a8:d9:eb:da:0f:16:67:8e:70:1c: be:3e:df:49:d1:2e:1d:82:32:0e:b6:e4:e8:57:cc:f5:c9:70: 19:0c:8a:fd:ca:63:b6:4b:83:b3:14:14:4e:fb:90:73:07:83: a7:1c:90:be:e2:21:45:88:d5:d7:b0:a6:63:ad:e8:fc:74:3d: ce:42:6e:df:cd:81:05:2a:6b:7c:24:02:38:0c:85:28:17:3f: 9c:20:6b:48 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUEVDMLDzbML7lFejW7Z9zWnwYrZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGRDNBMTdCMkFEQzZGOTAwMUU1N0EwMUJCMjlFOUI2 OTNCN0NDODAeFw0yNjA1MDMwMjM4MTFaFw0yNzA1MDIwMjQzMTFaMDMxMTAvBgNV BAMTKDgzOUQ5RTYwRTI1RDkxMTUyODJBMkE5RDk4NEJCMjZFNjNDQzQ4NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPrE6C4RBTBxX1w1dvM3a2k4T5 GRr94bAIfeg0XIXndYT80jH8G9B2o0w4iooO1urjsfdDz6Mi7HQJtzXvarZpr6l6 vAPAutAjBMSeeH2jOV7Oxzp6zPz4EZhj1oX+8qhqGEclYQh6CBkmgI2FV+6yifx2 QuU7walt7HheXDH5Kvn7WXRO+jLIRXOQp6opMxGWF+ODXHOUCcVSUnrEHWlzCUCG avVhCrxFVOAmu2qVpgpcNRS76s+NKA95Mr4vu9aUfq52XlJC0GoQqT+S3uUbwTHV w+9FgckF9FKhh1stDf9rdFEslpAFGJNQ3aYPrSSiHzv9euTTUPgAQl/ebXHXAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUg52eYOJdkRUoKiqdmEuybmPMSHUwHwYDVR0j BBgwFoAUyv06F7KtxvkAHlegG7Kem2k7fMgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNmNGVjMWMtOTUzNS00Y2JmLTljN2EtZmQzMmM4MzBlZGJhLzAvQ0FGRDNBMTdC MkFEQzZGOTAwMUU1N0EwMUJCMjlFOUI2OTNCN0NDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUZEM0ExN0IyQURDNkY5MDAxRTU3QTAxQkIyOUU5QjY5M0I3 Q0M4LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzczZjRlYzFjLTk1MzUtNGNiZi05 YzdhLWZkMzJjODMwZWRiYS8wLzMyMzQzMDMwM2E2NDM5MzQzMDNhMzUzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzAzODM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJADZ QAUAMA0GCSqGSIb3DQEBCwUAA4IBAQCWbWReRDISYTXQp10jlqYWlm0tuE7n3/EU rK9B0BVknEVeYjii7Hix+/oaQ4ff7CIks4+BuWtPLI6n1JmzFvYfEL2dXlSibFWU fus9gO7qRHUtWBFFe09wTZORNx8nTEzOPSLMe/9vSEto7GA4ohz3Soc275x934v+ eV56dw2EAKDjE+3riMGCh9ngDvzPgTDjVRa4v8drZ72Z902Y4MAp4Goz/OZjtGMa WajZ69oPFmeOcBy+Pt9J0S4dgjIOtuToV8z1yXAZDIr9ymO2S4OzFBRO+5BzB4On HJC+4iFFiNXXsKZjrej8dD3OQm7fzYEFKmt8JAI4DIUoFz+cIGtI -----END CERTIFICATE-----Generated at Wed May 13 10:20:53 2026 by rpki-client