$ rpki-client -vvf rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a323030313a3a2f34382d3438203d3e203535363835.roa File: 323430343a653130303a323030313a3a2f34382d3438203d3e203535363835.roa (raw, json) Hash identifier: zzxXm+Scrt2TtHV+TAk4gRueWNwz1TnTiniujwfO9v8= Subject key identifier: 25:8D:EC:68:AE:3E:0D:54:F7:E5:1C:DB:F6:8E:4E:A3:73:BE:AC:58 Certificate issuer: /CN=408DEB7465856EE053B64340FA814B862FA5ED30 Certificate serial: 22A2663FE62A3AEE3F32496BDC50F342CDDD626D Authority key identifier: 40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a323030313a3a2f34382d3438203d3e203535363835.roa Signing time: Sun 03 May 2026 02:48:01 +0000 ROA not before: Sun 03 May 2026 02:43:01 +0000 ROA not after: Sun 02 May 2027 02:48:01 +0000 asID: 55685 IP address blocks: 2404:e100:2001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:a2:66:3f:e6:2a:3a:ee:3f:32:49:6b:dc:50:f3:42:cd:dd:62:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408DEB7465856EE053B64340FA814B862FA5ED30 Validity Not Before: May 3 02:43:01 2026 GMT Not After : May 2 02:48:01 2027 GMT Subject: CN=258DEC68AE3E0D54F7E51CDBF68E4EA373BEAC58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b6:54:77:f5:e3:e9:03:2b:6b:2f:32:f0:b8: 6c:e0:89:a4:af:2c:f7:13:5f:b1:8d:12:78:6b:74: f9:f9:9a:3a:c5:f8:22:92:aa:73:ed:16:8c:05:a6: 35:30:45:4c:7e:b4:40:58:b2:0c:b1:15:ef:4d:cf: 54:57:7b:47:38:8f:24:6a:c0:94:40:a9:6a:bf:28: 1c:35:64:87:83:91:37:53:bc:82:28:bd:7f:4c:ec: 6c:3a:b4:bf:8f:5f:15:b1:4e:78:cd:d5:52:0d:19: e4:fa:50:30:93:59:e8:12:3d:9b:87:07:62:f7:b8: d5:42:ab:7d:1b:02:70:99:42:d0:d0:1b:42:bf:e3: 84:b5:e2:65:14:65:31:5d:2f:bf:f6:a9:11:05:a3: b5:67:84:31:0b:93:43:76:77:60:ab:a7:1d:f2:12: 39:24:9c:93:22:54:2c:a3:e9:52:d4:0a:45:c0:3f: 27:ba:e1:fc:37:29:e3:a2:f0:ea:ee:24:32:b2:b6: 6e:cd:2a:77:38:b7:bb:19:e3:1f:2a:14:f6:45:ec: ad:0f:16:e1:26:ea:aa:cd:73:c4:ab:6e:bf:a3:bb: 1b:e0:53:24:45:ed:70:f3:0c:96:c2:76:50:8a:db: a0:88:e1:08:9d:5b:7a:6f:1f:c6:c0:b5:4d:45:ff: 39:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:8D:EC:68:AE:3E:0D:54:F7:E5:1C:DB:F6:8E:4E:A3:73:BE:AC:58 X509v3 Authority Key Identifier: keyid:40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a323030313a3a2f34382d3438203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:e100:2001::/48 Signature Algorithm: sha256WithRSAEncryption 90:87:d0:9e:95:00:47:39:99:4e:b0:c9:e9:db:24:54:15:1f: b0:59:e4:01:48:6f:b9:04:65:10:ab:b6:5e:52:54:bb:82:e6: 65:33:85:0a:0f:04:3e:62:02:67:bc:ab:6d:92:b5:fd:cd:e6: 01:f5:bb:05:ca:97:d0:f1:a6:fc:87:53:fa:06:34:95:bb:25: 8c:86:90:f0:07:59:71:f4:3c:0b:42:f5:33:43:9a:52:09:d8: 4e:5f:ee:51:49:3c:87:19:94:78:45:47:97:1a:c5:4a:b0:11: 69:c2:93:ef:77:91:26:88:82:f1:69:30:86:a2:39:80:4e:21: 33:cd:86:c3:d1:14:35:de:88:6f:56:af:6b:87:2b:7c:e9:3a: 06:3a:65:d2:35:71:51:2d:e0:de:9a:27:10:56:93:b9:ae:6d: 53:46:29:d3:40:eb:99:f6:99:50:68:84:57:b7:6d:65:c1:08: d1:26:2c:81:6c:ba:d7:34:87:3e:fe:fb:65:b3:10:c2:a0:51: 66:39:83:7d:b4:3b:70:7e:2e:46:c9:66:0b:e3:3a:04:7d:40: 59:42:72:b7:90:c3:72:45:28:6c:b7:64:73:27:93:ac:a4:ef: e6:e1:73:95:25:b6:40:fe:93:bc:6d:00:ee:76:bf:10:82:74: 4c:6a:f2:88 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUIqJmP+YqOu4/Mklr3FDzQs3dYm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4REVCNzQ2NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYy RkE1RUQzMDAeFw0yNjA1MDMwMjQzMDFaFw0yNzA1MDIwMjQ4MDFaMDMxMTAvBgNV BAMTKDI1OERFQzY4QUUzRTBENTRGN0U1MUNEQkY2OEU0RUEzNzNCRUFDNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCctlR39ePpAytrLzLwuGzgiaSv LPcTX7GNEnhrdPn5mjrF+CKSqnPtFowFpjUwRUx+tEBYsgyxFe9Nz1RXe0c4jyRq wJRAqWq/KBw1ZIeDkTdTvIIovX9M7Gw6tL+PXxWxTnjN1VINGeT6UDCTWegSPZuH B2L3uNVCq30bAnCZQtDQG0K/44S14mUUZTFdL7/2qREFo7VnhDELk0N2d2Crpx3y EjkknJMiVCyj6VLUCkXAPye64fw3KeOi8OruJDKytm7NKnc4t7sZ4x8qFPZF7K0P FuEm6qrNc8Srbr+juxvgUyRF7XDzDJbCdlCK26CI4QidW3pvH8bAtU1F/zkvAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUJY3saK4+DVT35Rzb9o5Oo3O+rFgwHwYDVR0j BBgwFoAUQI3rdGWFbuBTtkNA+oFLhi+l7TAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVkOGRhYjQtOGJiNi00ZWQwLThkYWItNWE0MDYxNjdiOTlkLzAvNDA4REVCNzQ2 NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYyRkE1RUQzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDhERUI3NDY1ODU2RUUwNTNCNjQzNDBGQTgxNEI4NjJGQTVF RDMwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMyMzQzMDM0M2E2NTMxMzAzMDNhMzIzMDMwMzEz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTM1MzYzODM1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJATh ACABMA0GCSqGSIb3DQEBCwUAA4IBAQCQh9CelQBHOZlOsMnp2yRUFR+wWeQBSG+5 BGUQq7ZeUlS7guZlM4UKDwQ+YgJnvKttkrX9zeYB9bsFypfQ8ab8h1P6BjSVuyWM hpDwB1lx9DwLQvUzQ5pSCdhOX+5RSTyHGZR4RUeXGsVKsBFpwpPvd5EmiILxaTCG ojmATiEzzYbD0RQ13ohvVq9rhyt86ToGOmXSNXFRLeDemicQVpO5rm1TRinTQOuZ 9plQaIRXt21lwQjRJiyBbLrXNIc+/vtlsxDCoFFmOYN9tDtwfi5GyWYL4zoEfUBZ QnK3kMNyRShst2RzJ5OspO/m4XOVJbZA/pO8bQDudr8QgnRMavKI -----END CERTIFICATE-----Generated at Wed May 13 05:50:32 2026 by rpki-client