$ rpki-client -vvf rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3830303a3a2f34382d3438203d3e20313336303838.roa File: 323430303a643934303a3830303a3a2f34382d3438203d3e20313336303838.roa (raw, json) Hash identifier: 7VINGDMY1TUq927w0s5kPc4NrKgys1/WpgtYsMIyWe4= Subject key identifier: 21:49:73:92:A7:F3:B6:A2:82:A5:B2:37:61:5C:BD:C7:BE:30:45:FF Certificate issuer: /CN=CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8 Certificate serial: 23289064791968CB7F755716DE256FF9721E9E16 Authority key identifier: CA:FD:3A:17:B2:AD:C6:F9:00:1E:57:A0:1B:B2:9E:9B:69:3B:7C:C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3830303a3a2f34382d3438203d3e20313336303838.roa Signing time: Sun 03 May 2026 02:43:07 +0000 ROA not before: Sun 03 May 2026 02:38:07 +0000 ROA not after: Sun 02 May 2027 02:43:07 +0000 asID: 136088 IP address blocks: 2400:d940:800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:15:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:28:90:64:79:19:68:cb:7f:75:57:16:de:25:6f:f9:72:1e:9e:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8 Validity Not Before: May 3 02:38:07 2026 GMT Not After : May 2 02:43:07 2027 GMT Subject: CN=21497392A7F3B6A282A5B237615CBDC7BE3045FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:22:87:e5:e9:eb:02:eb:be:4e:2b:20:58:5c: 12:59:62:d5:bc:06:b0:52:56:46:f5:26:7a:b5:a8: 4e:e8:a1:23:d2:9e:f8:d3:8e:c7:93:39:75:59:64: d2:39:9a:0a:7f:ca:95:e9:b6:c4:c5:b4:eb:ca:3c: dc:bf:3a:50:9c:76:43:c7:6b:ee:48:7a:4b:95:f9: c8:3d:ba:88:09:c4:8f:c7:df:bf:f9:e6:24:c6:4e: f2:21:15:16:e9:45:c8:bd:b8:0f:9b:ff:6f:5a:67: 82:94:63:ec:f9:4d:60:ab:45:13:71:ba:57:3b:f4: 34:8c:85:38:3e:f4:80:a2:9b:ea:6f:4c:5c:4c:f3: 6c:86:99:9b:57:e0:b2:e9:d1:a5:8b:01:9d:6b:0e: b0:46:c9:b6:c0:d7:a3:ad:e3:fa:8c:36:ca:71:2c: d6:a5:f1:c5:e0:00:c5:ba:4c:86:2e:fa:03:12:a9: 45:74:18:d4:1c:ef:cc:df:31:c0:61:9f:2f:e2:87: e9:15:12:53:17:87:10:37:ec:34:e0:6c:19:25:69: 39:be:b0:d3:a8:3f:56:76:c6:17:62:a9:fb:75:15: 66:f1:14:2f:69:4d:62:46:69:59:f3:dc:66:99:ce: 8e:b7:33:e1:37:fd:54:1e:37:13:c7:90:4b:11:16: 48:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:49:73:92:A7:F3:B6:A2:82:A5:B2:37:61:5C:BD:C7:BE:30:45:FF X509v3 Authority Key Identifier: keyid:CA:FD:3A:17:B2:AD:C6:F9:00:1E:57:A0:1B:B2:9E:9B:69:3B:7C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3830303a3a2f34382d3438203d3e20313336303838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:d940:800::/48 Signature Algorithm: sha256WithRSAEncryption 0c:96:22:9b:98:9e:06:80:c6:59:9e:07:d1:d6:78:cc:da:83: ae:64:f7:e2:94:ad:63:99:ef:30:ca:dc:5e:e6:3a:ca:78:8b: 6b:55:47:dc:89:c2:cc:31:35:22:9c:01:02:73:a2:fb:15:ee: 1c:16:5b:90:7e:58:c9:f0:3e:d3:8a:55:c9:56:8d:f7:f4:c0: 57:3c:11:12:18:8a:ed:12:f7:9f:34:33:f7:7b:34:15:1a:04: 8f:71:8d:a5:da:87:be:c7:f3:e6:0d:90:7c:a9:46:1e:ee:23: 83:13:1b:9f:56:82:5c:b7:cb:89:cc:5e:fe:6b:60:42:a6:92: 44:2b:ba:a7:44:8b:5a:ab:17:56:55:dc:3d:33:92:23:4b:3a: bb:89:6b:81:a4:6b:cd:12:3d:d8:7f:87:f1:33:b0:f4:21:34: a2:7f:4d:45:26:1e:3c:a5:d5:ae:bc:17:a2:2f:c9:bc:d0:87: fc:4f:05:a1:db:c7:68:28:af:e5:83:88:3c:b2:14:7b:ea:bf: 21:43:81:16:67:b5:71:42:10:69:ec:1a:e7:58:5a:d8:b7:e0: 97:f6:f8:04:ae:c6:ef:a1:a6:e9:c4:af:38:ea:9f:09:ee:b7: 21:69:b1:ab:52:91:92:e8:7f:41:ff:ca:9e:c3:6c:31:c0:50: fd:a9:ef:06 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUIyiQZHkZaMt/dVcW3iVv+XIenhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGRDNBMTdCMkFEQzZGOTAwMUU1N0EwMUJCMjlFOUI2 OTNCN0NDODAeFw0yNjA1MDMwMjM4MDdaFw0yNzA1MDIwMjQzMDdaMDMxMTAvBgNV BAMTKDIxNDk3MzkyQTdGM0I2QTI4MkE1QjIzNzYxNUNCREM3QkUzMDQ1RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbIofl6esC675OKyBYXBJZYtW8 BrBSVkb1Jnq1qE7ooSPSnvjTjseTOXVZZNI5mgp/ypXptsTFtOvKPNy/OlCcdkPH a+5IekuV+cg9uogJxI/H37/55iTGTvIhFRbpRci9uA+b/29aZ4KUY+z5TWCrRRNx ulc79DSMhTg+9ICim+pvTFxM82yGmZtX4LLp0aWLAZ1rDrBGybbA16Ot4/qMNspx LNal8cXgAMW6TIYu+gMSqUV0GNQc78zfMcBhny/ih+kVElMXhxA37DTgbBklaTm+ sNOoP1Z2xhdiqft1FWbxFC9pTWJGaVnz3GaZzo63M+E3/VQeNxPHkEsRFkjZAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUIUlzkqfztqKCpbI3YVy9x74wRf8wHwYDVR0j BBgwFoAUyv06F7KtxvkAHlegG7Kem2k7fMgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNmNGVjMWMtOTUzNS00Y2JmLTljN2EtZmQzMmM4MzBlZGJhLzAvQ0FGRDNBMTdC MkFEQzZGOTAwMUU1N0EwMUJCMjlFOUI2OTNCN0NDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUZEM0ExN0IyQURDNkY5MDAxRTU3QTAxQkIyOUU5QjY5M0I3 Q0M4LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzczZjRlYzFjLTk1MzUtNGNiZi05 YzdhLWZkMzJjODMwZWRiYS8wLzMyMzQzMDMwM2E2NDM5MzQzMDNhMzgzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzAzODM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJADZ QAgAMA0GCSqGSIb3DQEBCwUAA4IBAQAMliKbmJ4GgMZZngfR1njM2oOuZPfilK1j me8wytxe5jrKeItrVUfcicLMMTUinAECc6L7Fe4cFluQfljJ8D7TilXJVo339MBX PBESGIrtEvefNDP3ezQVGgSPcY2l2oe+x/PmDZB8qUYe7iODExufVoJct8uJzF7+ a2BCppJEK7qnRItaqxdWVdw9M5IjSzq7iWuBpGvNEj3Yf4fxM7D0ITSif01FJh48 pdWuvBeiL8m80If8TwWh28doKK/lg4g8shR76r8hQ4EWZ7VxQhBp7BrnWFrYt+CX 9vgErsbvoabpxK846p8J7rchabGrUpGS6H9B/8qew2wxwFD9qe8G -----END CERTIFICATE-----Generated at Wed May 13 11:35:11 2026 by rpki-client