$ rpki-client -vvf rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030333a3a2f34382d3438203d3e203535363835.roa File: 323430343a653130303a333030333a3a2f34382d3438203d3e203535363835.roa (raw, json) Hash identifier: p9GuvZpVXGOu6H5D3HvMBhou5ViROJkVlEsHLf6NCQs= Subject key identifier: 86:02:E3:AD:E3:B6:A5:BD:3C:44:39:8A:45:10:7E:CC:CD:6A:6E:F8 Certificate issuer: /CN=408DEB7465856EE053B64340FA814B862FA5ED30 Certificate serial: 0B1315A45FFD119C0FBA2A9D0903350297E8A38F Authority key identifier: 40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030333a3a2f34382d3438203d3e203535363835.roa Signing time: Sun 03 May 2026 02:47:49 +0000 ROA not before: Sun 03 May 2026 02:42:49 +0000 ROA not after: Sun 02 May 2027 02:47:49 +0000 asID: 55685 IP address blocks: 2404:e100:3003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:13:15:a4:5f:fd:11:9c:0f:ba:2a:9d:09:03:35:02:97:e8:a3:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408DEB7465856EE053B64340FA814B862FA5ED30 Validity Not Before: May 3 02:42:49 2026 GMT Not After : May 2 02:47:49 2027 GMT Subject: CN=8602E3ADE3B6A5BD3C44398A45107ECCCD6A6EF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f6:b0:c3:2e:28:6f:83:c5:a2:98:33:81:a7: fe:35:f6:8c:80:53:25:ca:29:00:09:a0:4a:eb:01: f4:01:57:8e:a8:ac:93:19:e6:82:72:15:90:50:b6: df:c7:b0:12:48:09:50:62:c0:d4:85:3d:06:26:f2: 16:97:d3:42:76:6f:57:0e:3a:31:9b:f2:1d:80:6b: e4:7b:10:3b:33:0c:72:2d:66:7c:6d:4a:da:54:d8: 8c:e0:92:0e:6d:6c:f1:99:57:fe:95:ef:e5:b8:4f: 6b:d5:27:cc:c8:0a:c9:6d:91:be:fe:f2:cf:d7:4a: 74:a7:b0:21:5d:15:90:b9:e0:23:44:01:36:38:2d: 57:26:4d:ef:6f:9b:aa:ef:fc:c5:ab:c2:84:15:af: 47:7e:19:45:a2:19:b1:ce:b7:78:3f:98:77:14:92: 24:c2:ff:59:aa:42:38:53:96:f4:1c:94:51:3b:b6: 8e:88:39:ad:5a:24:2f:8b:39:10:4f:ab:4d:84:a0: 77:4e:c6:3e:ff:6e:aa:5d:39:54:17:83:17:04:35: a6:08:3f:38:c2:b6:2b:09:45:02:d6:db:c3:8a:b3: 2a:61:8c:f4:c4:65:cd:65:40:f0:2b:a1:73:e9:b3: 8c:8f:c7:5c:1e:84:82:47:3a:fb:83:0a:c1:3d:71: 1c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:02:E3:AD:E3:B6:A5:BD:3C:44:39:8A:45:10:7E:CC:CD:6A:6E:F8 X509v3 Authority Key Identifier: keyid:40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030333a3a2f34382d3438203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:e100:3003::/48 Signature Algorithm: sha256WithRSAEncryption 11:44:d8:77:f8:ca:f7:c1:c4:33:05:19:1d:68:5d:de:9f:14: ac:1d:0c:72:91:f3:43:fe:08:e4:4c:e9:16:92:eb:b6:56:da: 41:d3:47:be:ea:d7:cf:b5:3e:e0:24:a0:ed:56:4a:da:50:4a: ac:65:2e:04:7c:fb:3c:79:8a:92:7f:2b:fc:fd:71:3e:9a:5f: 94:ee:4c:49:4c:5c:a9:c6:37:bf:b7:5e:10:77:14:76:f9:3a: 00:24:e4:e2:dc:53:c5:28:aa:a0:4d:7d:0b:73:ce:d7:ee:ed: c1:2e:da:10:8e:7a:e7:8a:da:1c:46:10:a3:a1:f7:bc:75:0f: 88:f1:46:72:cd:45:11:db:1e:4a:42:25:ed:90:7e:a2:70:8c: fc:00:ae:5f:27:3b:fc:ba:03:a8:08:c9:10:38:ac:c6:4b:3e: 91:48:71:64:ae:85:f7:ad:f7:07:6c:5b:63:f6:95:9d:fa:39: bc:76:2c:d8:b7:1e:cf:e1:8c:ef:f1:47:25:a1:66:ec:49:c8: d8:72:76:1c:94:3c:64:a0:9d:70:20:20:39:e5:49:72:60:8a: ea:2d:98:a5:0a:b0:ba:1e:67:27:6b:91:97:9b:60:38:b4:56: 15:3b:d8:06:0c:36:80:93:dd:3e:71:c0:e6:4c:c8:23:1f:65: 70:d7:61:ee -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUCxMVpF/9EZwPuiqdCQM1Apfoo48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4REVCNzQ2NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYy RkE1RUQzMDAeFw0yNjA1MDMwMjQyNDlaFw0yNzA1MDIwMjQ3NDlaMDMxMTAvBgNV BAMTKDg2MDJFM0FERTNCNkE1QkQzQzQ0Mzk4QTQ1MTA3RUNDQ0Q2QTZFRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU9rDDLihvg8WimDOBp/419oyA UyXKKQAJoErrAfQBV46orJMZ5oJyFZBQtt/HsBJICVBiwNSFPQYm8haX00J2b1cO OjGb8h2Aa+R7EDszDHItZnxtStpU2Izgkg5tbPGZV/6V7+W4T2vVJ8zICsltkb7+ 8s/XSnSnsCFdFZC54CNEATY4LVcmTe9vm6rv/MWrwoQVr0d+GUWiGbHOt3g/mHcU kiTC/1mqQjhTlvQclFE7to6IOa1aJC+LORBPq02EoHdOxj7/bqpdOVQXgxcENaYI PzjCtisJRQLW28OKsyphjPTEZc1lQPAroXPps4yPx1wehIJHOvuDCsE9cRwzAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUhgLjreO2pb08RDmKRRB+zM1qbvgwHwYDVR0j BBgwFoAUQI3rdGWFbuBTtkNA+oFLhi+l7TAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVkOGRhYjQtOGJiNi00ZWQwLThkYWItNWE0MDYxNjdiOTlkLzAvNDA4REVCNzQ2 NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYyRkE1RUQzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDhERUI3NDY1ODU2RUUwNTNCNjQzNDBGQTgxNEI4NjJGQTVF RDMwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMyMzQzMDM0M2E2NTMxMzAzMDNhMzMzMDMwMzMz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTM1MzYzODM1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJATh ADADMA0GCSqGSIb3DQEBCwUAA4IBAQARRNh3+Mr3wcQzBRkdaF3enxSsHQxykfND /gjkTOkWkuu2VtpB00e+6tfPtT7gJKDtVkraUEqsZS4EfPs8eYqSfyv8/XE+ml+U 7kxJTFypxje/t14QdxR2+ToAJOTi3FPFKKqgTX0Lc87X7u3BLtoQjnrnitocRhCj ofe8dQ+I8UZyzUUR2x5KQiXtkH6icIz8AK5fJzv8ugOoCMkQOKzGSz6RSHFkroX3 rfcHbFtj9pWd+jm8dizYtx7P4Yzv8UcloWbsScjYcnYclDxkoJ1wICA55UlyYIrq LZilCrC6Hmcna5GXm2A4tFYVO9gGDDaAk90+ccDmTMgjH2Vw12Hu -----END CERTIFICATE-----Generated at Wed May 13 05:43:21 2026 by rpki-client