$ rpki-client -vvf rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3930303a3a2f34382d3438203d3e20313336303838.roa File: 323430303a643934303a3930303a3a2f34382d3438203d3e20313336303838.roa (raw, json) Hash identifier: nUJ2UcMYUMgp2Ivw4oUIOzI0b/8YqU8NMhh0tUJGG8w= Subject key identifier: 8D:E3:AD:87:15:69:55:BA:AA:DE:BF:2A:C1:C7:38:21:28:0C:F6:F1 Certificate issuer: /CN=CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8 Certificate serial: 43B0B2241C6A1170E6F3642D6FA3458952115A98 Authority key identifier: CA:FD:3A:17:B2:AD:C6:F9:00:1E:57:A0:1B:B2:9E:9B:69:3B:7C:C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3930303a3a2f34382d3438203d3e20313336303838.roa Signing time: Sun 03 May 2026 02:43:01 +0000 ROA not before: Sun 03 May 2026 02:38:01 +0000 ROA not after: Sun 02 May 2027 02:43:01 +0000 asID: 136088 IP address blocks: 2400:d940:900::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:15:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:b0:b2:24:1c:6a:11:70:e6:f3:64:2d:6f:a3:45:89:52:11:5a:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8 Validity Not Before: May 3 02:38:01 2026 GMT Not After : May 2 02:43:01 2027 GMT Subject: CN=8DE3AD87156955BAAADEBF2AC1C73821280CF6F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b4:b5:34:20:13:25:1f:5e:ad:ad:d7:cf:de: ed:2c:03:fe:77:cc:c3:8e:85:36:46:f2:c2:2e:9d: fe:c5:2a:73:14:d7:dd:88:27:d0:49:d9:1d:de:41: 1b:1b:c3:0f:a8:c0:e3:e5:43:07:08:67:8d:62:ff: 0f:04:07:05:cf:ee:82:cc:30:2f:26:52:7e:ce:58: fc:9f:ee:0d:cc:05:8f:f4:83:9d:91:04:ca:a9:57: 23:1e:16:d4:fd:b9:7e:78:e3:e2:9b:b2:7d:91:bf: a9:7f:64:cc:01:95:f0:e9:b5:b8:ed:23:f8:44:30: ea:ec:81:41:ed:bb:84:76:42:05:3c:15:ae:fb:b8: ca:23:61:b2:7f:28:65:da:72:db:6d:a6:1b:c0:27: 65:f5:c7:4d:1e:57:01:36:a4:ab:33:67:3c:d2:b9: 6d:5c:1a:81:a9:90:5a:9c:f7:26:fd:e6:b9:05:28: ee:17:03:e9:9b:80:03:c2:7b:51:b5:54:46:f2:b8: f4:86:0b:2b:8d:55:08:77:46:3f:2e:7a:db:9c:b4: 09:2f:e5:ea:94:6f:d0:be:9e:b8:e2:9f:a2:a8:5b: 9f:55:d0:b4:4e:51:33:d8:aa:6e:2c:a2:02:ef:a8: 8e:91:c4:26:6d:ca:18:4c:4d:20:bf:00:fc:be:ea: f7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E3:AD:87:15:69:55:BA:AA:DE:BF:2A:C1:C7:38:21:28:0C:F6:F1 X509v3 Authority Key Identifier: keyid:CA:FD:3A:17:B2:AD:C6:F9:00:1E:57:A0:1B:B2:9E:9B:69:3B:7C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3930303a3a2f34382d3438203d3e20313336303838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:d940:900::/48 Signature Algorithm: sha256WithRSAEncryption 6b:73:94:e4:2a:a4:22:be:78:0a:f0:dc:2b:c6:3b:2e:72:e1: be:9b:85:2a:85:ac:e9:89:eb:27:3e:fa:ed:6b:5e:9a:c1:40: 6e:49:9a:ac:69:92:93:00:38:ee:4c:a4:33:f0:a6:da:7c:11: b3:08:90:af:04:4e:14:b1:a0:da:dc:c4:47:6f:14:9a:7f:51: 67:98:e4:9a:16:bd:7d:2f:3c:e1:b9:40:62:5d:09:f3:a9:17: 90:c6:b0:46:f1:63:ab:6f:98:69:17:74:3a:de:58:e0:c5:c5: a5:0e:5f:0e:7f:3b:c0:38:a8:3b:96:04:cd:96:9d:7b:e0:c8: d0:46:04:4e:87:4f:16:a6:10:5b:a4:6d:06:b4:6f:cd:6a:2e: 6d:95:9b:77:e7:c2:e5:3d:a1:df:f5:27:1e:49:02:19:ce:c0: ec:2a:78:dc:3e:9f:3e:ba:60:29:86:0f:29:85:c9:9c:4b:05: d3:b5:2f:4f:38:fc:a5:5b:9b:02:90:0e:99:81:72:2e:33:f8: 96:fa:61:81:82:8b:5d:a1:f7:0d:58:97:53:4e:01:8c:d7:6b: 1f:a0:4b:93:16:04:5d:d8:da:9d:5c:4b:24:45:c1:b8:96:bc: 8b:fe:5c:39:b7:36:2d:6b:5c:fc:4a:bc:7b:c9:d1:ab:89:8f: e5:d2:76:f0 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUQ7CyJBxqEXDm82Qtb6NFiVIRWpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGRDNBMTdCMkFEQzZGOTAwMUU1N0EwMUJCMjlFOUI2 OTNCN0NDODAeFw0yNjA1MDMwMjM4MDFaFw0yNzA1MDIwMjQzMDFaMDMxMTAvBgNV BAMTKDhERTNBRDg3MTU2OTU1QkFBQURFQkYyQUMxQzczODIxMjgwQ0Y2RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWtLU0IBMlH16trdfP3u0sA/53 zMOOhTZG8sIunf7FKnMU192IJ9BJ2R3eQRsbww+owOPlQwcIZ41i/w8EBwXP7oLM MC8mUn7OWPyf7g3MBY/0g52RBMqpVyMeFtT9uX544+Kbsn2Rv6l/ZMwBlfDptbjt I/hEMOrsgUHtu4R2QgU8Fa77uMojYbJ/KGXactttphvAJ2X1x00eVwE2pKszZzzS uW1cGoGpkFqc9yb95rkFKO4XA+mbgAPCe1G1VEbyuPSGCyuNVQh3Rj8uetuctAkv 5eqUb9C+nrjin6KoW59V0LROUTPYqm4sogLvqI6RxCZtyhhMTSC/APy+6vcnAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUjeOthxVpVbqq3r8qwcc4ISgM9vEwHwYDVR0j BBgwFoAUyv06F7KtxvkAHlegG7Kem2k7fMgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNmNGVjMWMtOTUzNS00Y2JmLTljN2EtZmQzMmM4MzBlZGJhLzAvQ0FGRDNBMTdC MkFEQzZGOTAwMUU1N0EwMUJCMjlFOUI2OTNCN0NDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUZEM0ExN0IyQURDNkY5MDAxRTU3QTAxQkIyOUU5QjY5M0I3 Q0M4LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzczZjRlYzFjLTk1MzUtNGNiZi05 YzdhLWZkMzJjODMwZWRiYS8wLzMyMzQzMDMwM2E2NDM5MzQzMDNhMzkzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzAzODM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJADZ QAkAMA0GCSqGSIb3DQEBCwUAA4IBAQBrc5TkKqQivngK8NwrxjsucuG+m4Uqhazp iesnPvrta16awUBuSZqsaZKTADjuTKQz8KbafBGzCJCvBE4UsaDa3MRHbxSaf1Fn mOSaFr19LzzhuUBiXQnzqReQxrBG8WOrb5hpF3Q63ljgxcWlDl8OfzvAOKg7lgTN lp174MjQRgROh08WphBbpG0GtG/Nai5tlZt358LlPaHf9SceSQIZzsDsKnjcPp8+ umAphg8phcmcSwXTtS9POPylW5sCkA6ZgXIuM/iW+mGBgotdofcNWJdTTgGM12sf oEuTFgRd2NqdXEskRcG4lryL/lw5tzYta1z8Srx7ydGriY/l0nbw -----END CERTIFICATE-----Generated at Wed May 13 11:46:37 2026 by rpki-client