$ rpki-client -vvf rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a623a3a2f34382d3438203d3e203535363835.roa File: 323430343a653130303a623a3a2f34382d3438203d3e203535363835.roa (raw, json) Hash identifier: pb1VqEYJr2hN6kBpjKbLxtnI+8QtZjKC3UvLZT0dfoY= Subject key identifier: AE:A8:D4:DB:12:53:6E:67:43:FE:FE:2B:6A:1D:B7:78:51:E9:60:1C Certificate issuer: /CN=408DEB7465856EE053B64340FA814B862FA5ED30 Certificate serial: 5B79342BA765C8E71DA93E77776781989C85CF50 Authority key identifier: 40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a623a3a2f34382d3438203d3e203535363835.roa Signing time: Sun 03 May 2026 02:48:02 +0000 ROA not before: Sun 03 May 2026 02:43:02 +0000 ROA not after: Sun 02 May 2027 02:48:02 +0000 asID: 55685 IP address blocks: 2404:e100:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:79:34:2b:a7:65:c8:e7:1d:a9:3e:77:77:67:81:98:9c:85:cf:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408DEB7465856EE053B64340FA814B862FA5ED30 Validity Not Before: May 3 02:43:02 2026 GMT Not After : May 2 02:48:02 2027 GMT Subject: CN=AEA8D4DB12536E6743FEFE2B6A1DB77851E9601C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c3:6e:66:99:e8:f5:07:8d:2a:09:df:d5:7c: c6:da:da:09:95:e8:54:3d:4f:9a:37:22:54:47:09: 51:31:36:7f:96:7e:06:37:f7:06:38:cf:95:ed:44: f4:68:47:7b:d3:18:20:e9:30:11:bf:7a:9a:6d:b6: 01:c9:fb:77:3e:63:34:5f:b3:0b:25:77:47:5e:dc: 9c:59:50:df:c5:6c:bb:00:f0:d7:e3:e5:dd:10:e1: 49:c5:03:90:c9:3f:5e:d1:c5:fb:07:af:92:66:ea: 4e:9a:8a:ca:39:87:bd:5c:45:a2:9e:77:4c:13:33: 0f:7d:2c:7e:ab:18:7c:11:bc:4d:27:98:1a:63:04: 95:67:07:3e:92:aa:3c:f0:60:cd:11:61:21:91:45: 2e:3a:fd:f7:d1:6a:99:46:48:3b:84:1d:86:67:1c: 7b:f1:a8:ef:57:b7:41:af:74:1f:6a:f2:37:3d:f5: ce:a1:9a:50:90:89:04:69:0d:66:d8:7e:e4:06:97: 0c:5f:ed:79:ab:e3:d2:08:03:b9:ae:37:d2:5c:b0: df:92:f3:8c:0e:5c:b6:ce:58:d5:87:e9:64:1c:27: 32:f3:5d:fc:57:1f:26:5c:da:1b:fc:2a:59:b0:c9: 9c:e3:20:37:e7:c3:ad:06:9c:5a:af:89:27:8a:5a: 2c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A8:D4:DB:12:53:6E:67:43:FE:FE:2B:6A:1D:B7:78:51:E9:60:1C X509v3 Authority Key Identifier: keyid:40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a623a3a2f34382d3438203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:e100:b::/48 Signature Algorithm: sha256WithRSAEncryption 72:4d:2c:c3:bb:09:7d:57:1d:be:06:a2:df:60:1b:79:1d:3c: 38:1e:16:37:91:63:a8:84:98:05:67:cc:c5:5d:cd:cf:53:2d: b1:af:55:3c:43:d6:4d:af:0d:e2:0c:5f:84:f9:46:99:fc:19: be:95:75:e1:3b:43:19:a9:34:6e:a2:c9:87:64:22:92:24:39: 54:c1:1e:6d:e0:48:4f:86:7c:31:1a:4e:49:1a:76:68:2b:54: 7e:f0:c5:fd:87:a8:3e:97:57:39:27:80:91:4e:99:3a:0e:59: 82:7a:c5:ef:e6:b9:1a:57:43:60:4d:e1:0f:4f:98:18:1b:21: 21:54:ae:41:6c:a5:3f:89:d7:16:c5:1d:3e:1b:a3:3b:24:e4: 05:34:94:77:e6:46:40:18:6c:ff:0b:21:10:88:08:f1:5e:8c: d1:31:08:e3:81:fc:9c:f1:d2:d3:41:b7:b7:b8:e5:87:34:94: d0:d0:fd:ed:ad:67:6b:e5:84:06:fc:b3:f4:6c:24:02:77:fc: a4:93:4c:3b:68:64:32:93:db:09:b3:cc:c4:4d:53:8c:70:c6: 29:72:a8:bc:e5:e0:6f:ef:47:db:e0:a7:4b:90:0b:32:18:e4: 49:8a:21:d5:53:cd:7c:6f:46:d9:fc:81:86:66:36:1e:44:5a: a6:ae:57:5e -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUW3k0K6dlyOcdqT53d2eBmJyFz1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4REVCNzQ2NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYy RkE1RUQzMDAeFw0yNjA1MDMwMjQzMDJaFw0yNzA1MDIwMjQ4MDJaMDMxMTAvBgNV BAMTKEFFQThENERCMTI1MzZFNjc0M0ZFRkUyQjZBMURCNzc4NTFFOTYwMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDw25mmej1B40qCd/VfMba2gmV 6FQ9T5o3IlRHCVExNn+WfgY39wY4z5XtRPRoR3vTGCDpMBG/eppttgHJ+3c+YzRf swsld0de3JxZUN/FbLsA8Nfj5d0Q4UnFA5DJP17RxfsHr5Jm6k6aiso5h71cRaKe d0wTMw99LH6rGHwRvE0nmBpjBJVnBz6SqjzwYM0RYSGRRS46/ffRaplGSDuEHYZn HHvxqO9Xt0GvdB9q8jc99c6hmlCQiQRpDWbYfuQGlwxf7Xmr49IIA7muN9JcsN+S 84wOXLbOWNWH6WQcJzLzXfxXHyZc2hv8KlmwyZzjIDfnw60GnFqviSeKWiyfAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUrqjU2xJTbmdD/v4rah23eFHpYBwwHwYDVR0j BBgwFoAUQI3rdGWFbuBTtkNA+oFLhi+l7TAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVkOGRhYjQtOGJiNi00ZWQwLThkYWItNWE0MDYxNjdiOTlkLzAvNDA4REVCNzQ2 NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYyRkE1RUQzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDhERUI3NDY1ODU2RUUwNTNCNjQzNDBGQTgxNEI4NjJGQTVF RDMwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMyMzQzMDM0M2E2NTMxMzAzMDNhNjIzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzNTM1MzYzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAThAAALMA0G CSqGSIb3DQEBCwUAA4IBAQByTSzDuwl9Vx2+BqLfYBt5HTw4HhY3kWOohJgFZ8zF Xc3PUy2xr1U8Q9ZNrw3iDF+E+UaZ/Bm+lXXhO0MZqTRuosmHZCKSJDlUwR5t4EhP hnwxGk5JGnZoK1R+8MX9h6g+l1c5J4CRTpk6DlmCesXv5rkaV0NgTeEPT5gYGyEh VK5BbKU/idcWxR0+G6M7JOQFNJR35kZAGGz/CyEQiAjxXozRMQjjgfyc8dLTQbe3 uOWHNJTQ0P3trWdr5YQG/LP0bCQCd/ykk0w7aGQyk9sJs8zETVOMcMYpcqi85eBv 70fb4KdLkAsyGORJiiHVU818b0bZ/IGGZjYeRFqmrlde -----END CERTIFICATE-----Generated at Wed May 13 02:36:49 2026 by rpki-client