$ rpki-client -vvf rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a333a3a2f34382d3438203d3e203338353234.roa File: 323430313a646538303a333a3a2f34382d3438203d3e203338353234.roa (raw, json) Hash identifier: OgwYZEHribBE1oejo4FvhXMQKPLEby7yPYV0k9KQupY= Subject key identifier: D5:43:E2:B6:B6:5B:B9:EB:89:54:92:68:0C:8E:E4:3D:92:82:A5:FC Certificate issuer: /CN=9436E607F375F72BBD96588FBB7CE6D5B628FF86 Certificate serial: 231A2BF13E2B6F962545EBBBD86AA36B548E182F Authority key identifier: 94:36:E6:07:F3:75:F7:2B:BD:96:58:8F:BB:7C:E6:D5:B6:28:FF:86 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a333a3a2f34382d3438203d3e203338353234.roa Signing time: Sun 03 May 2026 02:46:24 +0000 ROA not before: Sun 03 May 2026 02:41:24 +0000 ROA not after: Sun 02 May 2027 02:46:24 +0000 asID: 38524 IP address blocks: 2401:de80:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.crl rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:1a:2b:f1:3e:2b:6f:96:25:45:eb:bb:d8:6a:a3:6b:54:8e:18:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9436E607F375F72BBD96588FBB7CE6D5B628FF86 Validity Not Before: May 3 02:41:24 2026 GMT Not After : May 2 02:46:24 2027 GMT Subject: CN=D543E2B6B65BB9EB895492680C8EE43D9282A5FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b7:86:44:79:20:63:16:4d:b4:93:d8:0d:60: a2:5c:5f:ce:9f:6e:d2:58:fe:7f:b4:d0:77:15:c5: b9:27:4f:c0:bc:df:f0:b6:cc:bf:d3:23:8a:77:ec: 7e:8c:66:64:be:07:90:1e:32:95:c1:88:6b:56:70: 6a:a2:f8:e5:88:59:f8:5b:2c:c5:12:b0:66:9e:8b: 01:58:67:ad:d4:ad:68:89:a2:e3:06:57:75:db:8b: fc:0f:b7:e9:33:91:bb:a3:2b:25:5c:44:7a:3d:39: e9:22:d5:52:e6:71:66:3f:b4:5c:31:78:26:2a:19: 35:9e:9c:15:97:72:62:a0:91:d2:f6:a9:66:f9:6e: 30:22:43:91:27:2c:69:bf:15:75:89:18:54:85:1a: 86:8e:c3:85:7c:46:19:a8:7e:a4:b0:60:ce:9d:4b: 58:f3:ce:67:e4:ad:11:8c:7e:53:74:00:bb:8a:d3: 49:ac:c7:7f:2d:44:30:c7:81:12:3c:a4:38:43:fe: b4:bd:5b:c0:5a:c2:e9:46:05:05:59:5b:e3:36:df: 1e:b6:32:06:a3:8c:1e:65:90:e1:9d:56:79:c1:b5: 58:a6:ab:cf:ed:b1:3c:20:48:a9:58:4c:e0:ae:d6: a8:72:b2:3c:54:1e:5d:65:35:44:28:a5:a5:c7:c9: e1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:43:E2:B6:B6:5B:B9:EB:89:54:92:68:0C:8E:E4:3D:92:82:A5:FC X509v3 Authority Key Identifier: keyid:94:36:E6:07:F3:75:F7:2B:BD:96:58:8F:BB:7C:E6:D5:B6:28:FF:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a333a3a2f34382d3438203d3e203338353234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:de80:3::/48 Signature Algorithm: sha256WithRSAEncryption 60:ac:b1:90:76:9d:77:e7:93:6e:e7:54:5a:b6:29:1b:95:1d: cb:10:ca:ef:e4:a3:ab:98:ca:6b:f5:1c:47:d9:d1:d1:78:ff: 51:3f:75:0d:07:78:78:fd:0e:21:44:d1:bd:9a:2c:fc:17:9f: 1f:02:98:45:97:58:e9:74:2d:40:57:8c:9f:60:49:c6:ae:ad: 2c:78:33:9e:90:db:2d:35:b1:73:73:39:44:d1:b6:21:63:db: ed:fb:ce:2a:f7:66:77:c5:a2:d2:07:0a:19:0f:ae:d4:2f:5e: bc:b3:7c:ec:ec:e4:94:16:85:53:39:6a:ce:b0:5b:43:f9:3a: 13:ce:ce:6d:b5:c9:8c:8a:97:95:b9:63:7b:62:22:11:a6:b8: 2a:e3:94:84:4e:46:a6:18:34:e1:16:6f:11:14:2a:d2:93:45: 9c:74:f1:57:9d:d7:57:69:82:0b:06:52:9d:86:dc:8e:10:8a: da:61:12:ed:4b:05:c3:51:06:f8:38:bb:d9:e2:dc:98:71:64: 64:0c:31:41:a6:a7:f9:79:a1:90:77:bc:69:af:6e:7a:da:fc: 14:0b:99:72:d8:ce:0e:af:60:cf:a8:37:98:fc:c6:e8:fa:23: e2:4e:77:b4:ad:31:7b:5e:a3:1d:20:0c:70:6d:33:3f:c7:d0: 79:02:65:c3 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUIxor8T4rb5YlReu72Gqja1SOGC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQzNkU2MDdGMzc1RjcyQkJEOTY1ODhGQkI3Q0U2RDVC NjI4RkY4NjAeFw0yNjA1MDMwMjQxMjRaFw0yNzA1MDIwMjQ2MjRaMDMxMTAvBgNV BAMTKEQ1NDNFMkI2QjY1QkI5RUI4OTU0OTI2ODBDOEVFNDNEOTI4MkE1RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvt4ZEeSBjFk20k9gNYKJcX86f btJY/n+00HcVxbknT8C83/C2zL/TI4p37H6MZmS+B5AeMpXBiGtWcGqi+OWIWfhb LMUSsGaeiwFYZ63UrWiJouMGV3Xbi/wPt+kzkbujKyVcRHo9Oeki1VLmcWY/tFwx eCYqGTWenBWXcmKgkdL2qWb5bjAiQ5EnLGm/FXWJGFSFGoaOw4V8RhmofqSwYM6d S1jzzmfkrRGMflN0ALuK00msx38tRDDHgRI8pDhD/rS9W8BawulGBQVZW+M23x62 MgajjB5lkOGdVnnBtVimq8/tsTwgSKlYTOCu1qhysjxUHl1lNUQopaXHyeHlAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQU1UPitrZbueuJVJJoDI7kPZKCpfwwHwYDVR0j BBgwFoAUlDbmB/N19yu9lliPu3zm1bYo/4YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2ZmOTY5ZmMtMzljNy00NGNkLTg3MTYtOWNlNGM2ZDVhYzkxLzAvOTQzNkU2MDdG Mzc1RjcyQkJEOTY1ODhGQkI3Q0U2RDVCNjI4RkY4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NDM2RTYwN0YzNzVGNzJCQkQ5NjU4OEZCQjdDRTZENUI2MjhG Rjg2LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdmZjk2OWZjLTM5YzctNDRjZC04 NzE2LTljZTRjNmQ1YWM5MS8wLzMyMzQzMDMxM2E2NDY1MzgzMDNhMzMzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAHegAADMA0G CSqGSIb3DQEBCwUAA4IBAQBgrLGQdp1355Nu51RatikblR3LEMrv5KOrmMpr9RxH 2dHReP9RP3UNB3h4/Q4hRNG9miz8F58fAphFl1jpdC1AV4yfYEnGrq0seDOekNst NbFzczlE0bYhY9vt+84q92Z3xaLSBwoZD67UL168s3zs7OSUFoVTOWrOsFtD+ToT zs5ttcmMipeVuWN7YiIRprgq45SETkamGDThFm8RFCrSk0WcdPFXnddXaYILBlKd htyOEIraYRLtSwXDUQb4OLvZ4tyYcWRkDDFBpqf5eaGQd7xpr2562vwUC5ly2M4O r2DPqDeY/Mbo+iPiTne0rTF7XqMdIAxwbTM/x9B5AmXD -----END CERTIFICATE-----Generated at Wed May 13 09:08:52 2026 by rpki-client