$ rpki-client -vvf rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/323430343a346563303a313a3a2f34382d3438203d3e20313338313339.roa File: 323430343a346563303a313a3a2f34382d3438203d3e20313338313339.roa (raw, json) Hash identifier: +rJFOvb4bPx8zpBXNTS78swcOdCdtndICUOjgWGGCws= Subject key identifier: DC:F7:B9:B4:AF:53:A0:91:75:6E:50:46:5B:30:68:95:B7:CB:A2:C4 Certificate issuer: /CN=53ACB45E4656FA3376DE7D38E028658733AFBFAE Certificate serial: 26DD5234C443A33D721EBC3D2466558A0200078C Authority key identifier: 53:AC:B4:5E:46:56:FA:33:76:DE:7D:38:E0:28:65:87:33:AF:BF:AE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/323430343a346563303a313a3a2f34382d3438203d3e20313338313339.roa Signing time: Sun 03 May 2026 02:49:55 +0000 ROA not before: Sun 03 May 2026 02:44:55 +0000 ROA not after: Sun 02 May 2027 02:49:55 +0000 asID: 138139 IP address blocks: 2404:4ec0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:37:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:dd:52:34:c4:43:a3:3d:72:1e:bc:3d:24:66:55:8a:02:00:07:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53ACB45E4656FA3376DE7D38E028658733AFBFAE Validity Not Before: May 3 02:44:55 2026 GMT Not After : May 2 02:49:55 2027 GMT Subject: CN=DCF7B9B4AF53A091756E50465B306895B7CBA2C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:45:1d:17:4a:b1:43:7a:94:ba:81:f5:48:7a: 50:20:57:3a:fc:01:2a:cb:a3:07:4c:ca:52:a0:b5: de:7b:82:76:71:3c:4b:3f:f8:88:67:c5:ec:11:5d: a3:5b:64:e2:ca:a7:4d:51:f7:de:54:36:b4:ea:ec: 91:3d:d4:a1:e4:44:db:71:a4:c2:4e:ee:76:97:b4: 45:93:ff:c3:81:7a:30:9f:ed:02:9c:65:61:b0:21: 90:73:93:6b:a0:7a:78:9d:94:bf:d7:7c:97:89:51: a7:24:3d:09:1e:32:1c:ac:ff:c7:53:4a:62:8e:ec: f6:af:4f:06:c7:f0:c0:b0:15:28:12:b5:5b:c1:0b: c0:87:ed:47:f3:4d:fd:26:a5:eb:11:87:44:79:5f: 19:31:dd:59:f5:2d:96:b6:a8:ce:85:cd:92:40:32: 8d:7f:40:77:e0:b0:3a:13:38:23:5d:4e:d8:45:ba: ad:4c:ad:f9:e9:e4:83:f9:57:cb:55:c9:6b:f2:f9: 07:fd:25:34:94:e1:09:9a:90:28:42:0f:e2:ac:fe: 70:cc:94:59:26:67:ee:2d:af:d1:1e:59:2c:8f:40: 97:5a:14:7f:b1:d8:b9:78:a1:c4:e2:ba:92:c2:c3: 77:cf:de:ea:1d:b9:36:64:13:80:cd:69:b9:c1:56: 4a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F7:B9:B4:AF:53:A0:91:75:6E:50:46:5B:30:68:95:B7:CB:A2:C4 X509v3 Authority Key Identifier: keyid:53:AC:B4:5E:46:56:FA:33:76:DE:7D:38:E0:28:65:87:33:AF:BF:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/323430343a346563303a313a3a2f34382d3438203d3e20313338313339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:4ec0:1::/48 Signature Algorithm: sha256WithRSAEncryption 95:f0:c6:df:91:1c:1c:a3:01:71:51:7a:cf:13:64:5d:9c:32: ab:85:e9:57:99:0b:51:29:de:08:77:55:ca:4f:e5:9e:28:b7: 9a:c9:6a:9c:96:cb:1b:27:fe:cc:5d:4c:ce:08:9b:ca:8c:5d: 20:ac:46:01:c4:26:a5:29:29:35:f7:32:3b:a8:83:c3:a1:a1: c7:ab:6e:01:fa:fa:20:9d:0b:2a:bb:90:89:d4:e4:bc:c2:71: f9:64:75:63:70:55:bb:4a:14:1a:00:be:ca:52:b3:20:5c:c3: 69:69:d0:33:ed:af:38:30:03:60:f5:8e:f5:54:37:28:f9:f9: 12:a6:c0:67:a0:1b:1d:5c:be:be:3d:df:b6:e3:f0:8e:97:73: 36:5b:8a:b9:db:f3:c8:2b:60:4b:2d:02:ec:25:95:cb:09:2f: 44:81:e2:e9:93:aa:0c:37:82:44:d2:2b:c8:b3:38:01:5f:0a: 46:76:bd:65:95:3a:2e:fc:32:47:2a:86:df:11:47:2f:d7:f2: 68:14:a5:b4:ea:ad:51:4b:de:19:d9:82:16:8f:8f:d3:7c:a9: 9d:e1:cb:83:73:5a:45:9f:d7:d2:b7:72:eb:ad:3c:77:e2:d6: 18:3d:33:7f:f2:90:3d:3d:26:1f:bc:72:fe:33:ec:83:f7:8c: 46:e1:10:64 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUJt1SNMRDoz1yHrw9JGZVigIAB4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNBQ0I0NUU0NjU2RkEzMzc2REU3RDM4RTAyODY1ODcz M0FGQkZBRTAeFw0yNjA1MDMwMjQ0NTVaFw0yNzA1MDIwMjQ5NTVaMDMxMTAvBgNV BAMTKERDRjdCOUI0QUY1M0EwOTE3NTZFNTA0NjVCMzA2ODk1QjdDQkEyQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyRR0XSrFDepS6gfVIelAgVzr8 ASrLowdMylKgtd57gnZxPEs/+IhnxewRXaNbZOLKp01R995UNrTq7JE91KHkRNtx pMJO7naXtEWT/8OBejCf7QKcZWGwIZBzk2ugenidlL/XfJeJUackPQkeMhys/8dT SmKO7PavTwbH8MCwFSgStVvBC8CH7UfzTf0mpesRh0R5Xxkx3Vn1LZa2qM6FzZJA Mo1/QHfgsDoTOCNdTthFuq1Mrfnp5IP5V8tVyWvy+Qf9JTSU4QmakChCD+Ks/nDM lFkmZ+4tr9EeWSyPQJdaFH+x2Ll4ocTiupLCw3fP3uoduTZkE4DNabnBVkpZAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU3Pe5tK9ToJF1blBGWzBolbfLosQwHwYDVR0j BBgwFoAUU6y0XkZW+jN23n044ChlhzOvv64wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGM3NmM4NWYtOWE0Zi00YWZjLTk2OWItOGRhMjUzNmM1YzI0LzAvNTNBQ0I0NUU0 NjU2RkEzMzc2REU3RDM4RTAyODY1ODczM0FGQkZBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81M0FDQjQ1RTQ2NTZGQTMzNzZERTdEMzhFMDI4NjU4NzMzQUZC RkFFLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhjNzZjODVmLTlhNGYtNGFmYy05 NjliLThkYTI1MzZjNWMyNC8wLzMyMzQzMDM0M2EzNDY1NjMzMDNhMzEzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzgzMTMzMzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBE7AAAEw DQYJKoZIhvcNAQELBQADggEBAJXwxt+RHByjAXFRes8TZF2cMquF6VeZC1Ep3gh3 VcpP5Z4ot5rJapyWyxsn/sxdTM4Im8qMXSCsRgHEJqUpKTX3Mjuog8OhocerbgH6 +iCdCyq7kInU5LzCcflkdWNwVbtKFBoAvspSsyBcw2lp0DPtrzgwA2D1jvVUNyj5 +RKmwGegGx1cvr4937bj8I6XczZbirnb88grYEstAuwllcsJL0SB4umTqgw3gkTS K8izOAFfCkZ2vWWVOi78Mkcqht8RRy/X8mgUpbTqrVFL3hnZghaPj9N8qZ3hy4Nz WkWf19K3cuutPHfi1hg9M3/ykD09Jh+8cv4z7IP3jEbhEGQ= -----END CERTIFICATE-----Generated at Wed May 13 14:52:55 2026 by rpki-client