$ rpki-client -vvf rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/323430313a316430303a313a3a2f34382d3438203d3e203338353035.roa File: 323430313a316430303a313a3a2f34382d3438203d3e203338353035.roa (raw, json) Hash identifier: HsxEHeytaLeXbzMYkGNZ4CxQC7x6cG09R70sugNWXM0= Subject key identifier: D5:F6:F7:1E:59:67:DB:DA:39:FF:15:4A:03:0E:BE:DE:BB:2F:28:90 Certificate issuer: /CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993 Certificate serial: 0DB6C05618E78F99082844C41C7B3DB1F22B2C74 Authority key identifier: 04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/323430313a316430303a313a3a2f34382d3438203d3e203338353035.roa Signing time: Sun 03 May 2026 02:47:39 +0000 ROA not before: Sun 03 May 2026 02:42:39 +0000 ROA not after: Sun 02 May 2027 02:47:39 +0000 asID: 38505 IP address blocks: 2401:1d00:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:b6:c0:56:18:e7:8f:99:08:28:44:c4:1c:7b:3d:b1:f2:2b:2c:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993 Validity Not Before: May 3 02:42:39 2026 GMT Not After : May 2 02:47:39 2027 GMT Subject: CN=D5F6F71E5967DBDA39FF154A030EBEDEBB2F2890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4f:ab:0b:97:8d:20:d7:a8:30:d0:a5:2a:6e: 48:43:4c:c0:d2:2f:0d:0a:5f:2f:31:af:7c:ba:ff: 29:c2:7c:37:de:a7:6e:c1:9e:fc:e4:94:f8:17:d1: c9:1f:7f:2a:75:39:9b:62:b4:a4:cd:85:16:e5:8c: 52:d1:ae:32:d4:37:e2:d5:b5:96:71:82:65:f5:15: d1:55:7b:b0:05:0b:c5:34:45:fd:02:b8:55:9f:60: 8e:44:57:7f:3f:3a:76:73:36:eb:f2:43:08:0f:11: 38:cc:42:f6:bd:a0:1c:0e:9c:ef:46:8a:3f:cf:3b: 56:d5:02:d3:03:e8:a1:2c:d7:b9:0e:fb:93:9f:fb: 35:3d:69:ff:7b:05:ef:2f:ab:cb:24:d8:65:6a:10: fb:89:f4:2d:a3:9c:92:7d:43:47:27:36:52:c2:2c: 8c:16:b6:9a:e0:fa:45:13:2c:69:58:15:ff:2b:e4: e0:14:ec:10:d7:43:30:73:ec:e8:54:60:f1:00:16: 5e:21:c3:ee:14:e3:06:80:67:c4:0c:40:bf:27:61: e8:c8:b2:13:a2:5f:ac:5d:13:1a:cd:9d:20:57:3b: 68:e8:b1:d2:3c:1f:a1:b3:e4:c9:61:5d:c5:85:ed: 03:b3:08:ff:2c:aa:9d:4b:30:3b:6d:eb:e3:26:1a: 18:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F6:F7:1E:59:67:DB:DA:39:FF:15:4A:03:0E:BE:DE:BB:2F:28:90 X509v3 Authority Key Identifier: keyid:04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/323430313a316430303a313a3a2f34382d3438203d3e203338353035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:1d00:1::/48 Signature Algorithm: sha256WithRSAEncryption 29:04:5f:b8:56:22:26:0f:fc:73:b1:c4:7d:b9:00:79:98:c7: 36:78:71:5e:3f:c3:58:be:4a:dd:7d:61:60:fe:45:51:11:6d: 68:38:05:43:7c:da:ea:a5:38:45:b3:33:09:64:f8:44:c9:33: 9f:a7:ed:93:af:29:22:de:66:5f:ff:8b:d3:84:80:fc:34:16: 6f:6b:7d:1d:d7:a4:ea:2b:80:bd:ed:ca:71:91:87:fa:06:f9: 89:98:eb:d7:14:b5:1a:a5:ba:5e:d6:dc:2d:51:bb:f7:26:b0: 49:14:3c:2f:72:9f:ab:d5:ad:3f:8c:ec:d9:14:62:f6:af:8d: 74:1a:1e:0b:03:67:2f:f3:6a:bd:43:18:b9:0e:69:b6:bf:b8: a8:3a:8a:27:11:f7:fc:75:f6:6a:26:80:5c:ce:a3:79:32:71: 0d:78:ba:d8:5c:52:fe:e5:30:09:6f:05:78:af:e4:50:fd:65: c5:d1:6e:62:b0:26:81:e0:03:86:68:8d:cb:1c:65:eb:71:95: 38:e6:9a:a9:a9:0d:e7:71:cf:d4:5e:c4:1c:ec:6d:0d:de:df: 54:f0:b1:74:3f:a0:d8:89:3a:db:7b:88:1d:9a:0e:ac:03:70: 07:fa:45:42:bb:db:3e:3b:d6:77:1c:92:94:85:ad:0b:75:ae: d3:5a:a5:9f -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUDbbAVhjnj5kIKETEHHs9sfIrLHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRDOEVGNkY1MjYwRkRBMDY2NjFEOUU5NTMwNDU3MkI4 RTdDNDk5MzAeFw0yNjA1MDMwMjQyMzlaFw0yNzA1MDIwMjQ3MzlaMDMxMTAvBgNV BAMTKEQ1RjZGNzFFNTk2N0RCREEzOUZGMTU0QTAzMEVCRURFQkIyRjI4OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2T6sLl40g16gw0KUqbkhDTMDS Lw0KXy8xr3y6/ynCfDfep27BnvzklPgX0ckffyp1OZtitKTNhRbljFLRrjLUN+LV tZZxgmX1FdFVe7AFC8U0Rf0CuFWfYI5EV38/OnZzNuvyQwgPETjMQva9oBwOnO9G ij/PO1bVAtMD6KEs17kO+5Of+zU9af97Be8vq8sk2GVqEPuJ9C2jnJJ9Q0cnNlLC LIwWtprg+kUTLGlYFf8r5OAU7BDXQzBz7OhUYPEAFl4hw+4U4waAZ8QMQL8nYejI shOiX6xdExrNnSBXO2josdI8H6Gz5MlhXcWF7QOzCP8sqp1LMDtt6+MmGhj5AgMB AAGjggI3MIICMzAdBgNVHQ4EFgQU1fb3Hlln29o5/xVKAw6+3rsvKJAwHwYDVR0j BBgwFoAUBMjvb1Jg/aBmYdnpUwRXK458SZMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODNkMDc4NmQtM2QzZS00NWI3LTk2NjUtOGQ0NzRmZDE0YWVhLzAvMDRDOEVGNkY1 MjYwRkRBMDY2NjFEOUU5NTMwNDU3MkI4RTdDNDk5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNEM4RUY2RjUyNjBGREEwNjY2MUQ5RTk1MzA0NTcyQjhFN0M0 OTkzLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzgzZDA3ODZkLTNkM2UtNDViNy05 NjY1LThkNDc0ZmQxNGFlYS8wLzMyMzQzMDMxM2EzMTY0MzAzMDNhMzEzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEdAAABMA0G CSqGSIb3DQEBCwUAA4IBAQApBF+4ViImD/xzscR9uQB5mMc2eHFeP8NYvkrdfWFg /kVREW1oOAVDfNrqpThFszMJZPhEyTOfp+2Tryki3mZf/4vThID8NBZva30d16Tq K4C97cpxkYf6BvmJmOvXFLUapbpe1twtUbv3JrBJFDwvcp+r1a0/jOzZFGL2r410 Gh4LA2cv82q9Qxi5Dmm2v7ioOoonEff8dfZqJoBczqN5MnENeLrYXFL+5TAJbwV4 r+RQ/WXF0W5isCaB4AOGaI3LHGXrcZU45pqpqQ3ncc/UXsQc7G0N3t9U8LF0P6DY iTrbe4gdmg6sA3AH+kVCu9s+O9Z3HJKUha0Lda7TWqWf -----END CERTIFICATE-----Generated at Wed May 13 04:51:32 2026 by rpki-client