$ rpki-client -vvf rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/323430343a346563303a3a2f33322d3438203d3e20313338313339.roa File: 323430343a346563303a3a2f33322d3438203d3e20313338313339.roa (raw, json) Hash identifier: m05tCCtHoncngpxhcE+KAOaSWn3A5TCSdMi96lfmrtI= Subject key identifier: 7D:4C:F1:36:70:70:C0:B1:BF:E2:B4:CB:C2:AB:D4:C1:00:8A:CC:18 Certificate issuer: /CN=53ACB45E4656FA3376DE7D38E028658733AFBFAE Certificate serial: 508C0BF73342777170871C7E5F1BA7A3C71322CE Authority key identifier: 53:AC:B4:5E:46:56:FA:33:76:DE:7D:38:E0:28:65:87:33:AF:BF:AE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/323430343a346563303a3a2f33322d3438203d3e20313338313339.roa Signing time: Sun 03 May 2026 02:49:56 +0000 ROA not before: Sun 03 May 2026 02:44:56 +0000 ROA not after: Sun 02 May 2027 02:49:56 +0000 asID: 138139 IP address blocks: 2404:4ec0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:37:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:8c:0b:f7:33:42:77:71:70:87:1c:7e:5f:1b:a7:a3:c7:13:22:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53ACB45E4656FA3376DE7D38E028658733AFBFAE Validity Not Before: May 3 02:44:56 2026 GMT Not After : May 2 02:49:56 2027 GMT Subject: CN=7D4CF1367070C0B1BFE2B4CBC2ABD4C1008ACC18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:71:14:35:fa:95:a2:7d:bc:a5:9c:f9:f9:b3: 35:4b:fd:fe:7c:05:e7:9b:1c:a9:3d:af:0a:43:3f: 13:45:8c:ca:4a:2d:f9:05:32:34:b9:36:0e:e9:fc: 7b:ea:b2:94:d6:c0:0e:c6:dc:a6:51:03:78:95:73: 78:9d:6a:50:5a:15:22:4d:5e:8e:39:b1:2d:7f:3d: 8f:e8:86:2d:ef:7b:a4:18:4c:83:d0:21:c6:3f:e3: 01:d9:71:35:f2:58:c4:03:78:bf:8b:b3:47:df:e3: f2:91:12:fd:71:02:03:9e:74:33:10:bd:4e:62:00: e1:c2:39:6f:55:b4:2c:46:ce:3c:3e:f2:f8:63:9d: b8:45:8d:b5:fa:ee:fc:84:dc:64:5e:14:04:30:6f: f9:f1:01:a9:a6:21:83:f0:7e:41:2a:bc:5f:8e:b7: 58:b8:cc:a1:b4:2c:d3:04:4d:23:ab:b5:5d:6e:44: b2:c7:9d:ff:81:b0:53:1f:5b:79:50:04:05:77:14: af:8a:29:8f:96:82:15:99:54:83:c3:6b:38:33:01: 5e:f4:82:b9:0d:07:45:98:c4:ef:21:99:5a:63:53: 51:92:dd:04:32:56:bf:02:ad:f5:c2:8f:d6:be:af: 70:f3:a8:78:c1:51:9a:35:32:43:c2:c3:30:7d:cb: 40:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:4C:F1:36:70:70:C0:B1:BF:E2:B4:CB:C2:AB:D4:C1:00:8A:CC:18 X509v3 Authority Key Identifier: keyid:53:AC:B4:5E:46:56:FA:33:76:DE:7D:38:E0:28:65:87:33:AF:BF:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/323430343a346563303a3a2f33322d3438203d3e20313338313339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:4ec0::/32 Signature Algorithm: sha256WithRSAEncryption 4d:94:c3:36:50:55:18:31:50:c4:63:64:ed:c9:a0:68:a2:d9: 2e:16:ec:2a:38:65:2a:d7:65:8f:be:fb:1a:e9:67:58:f2:fe: e0:c1:70:de:85:c4:92:62:3c:8c:e1:71:d5:19:41:87:60:5e: 54:7e:ba:8b:62:44:7c:90:d2:91:99:2a:1c:7f:35:97:ce:6b: 78:dc:ef:e5:c2:96:0b:89:fe:d7:77:33:a4:ea:c6:08:3e:d6: 50:a8:a8:72:37:59:26:18:0a:f6:78:da:fd:3c:07:b6:df:ce: bd:cf:1d:db:13:9a:6d:c2:ba:d6:db:5e:a0:03:98:1e:6a:60: 3a:ed:38:9f:9c:db:62:26:00:ad:91:cb:46:b3:f3:19:f2:8d: ae:73:da:3e:6a:1f:98:b6:17:33:8d:b7:55:6c:ae:73:78:1b: 32:7d:2c:8f:ba:99:fb:dd:32:10:71:14:61:43:45:f9:9e:14: 4f:c5:b7:82:af:c8:81:11:fd:9f:74:57:4f:48:01:19:e1:9f: 8a:4b:3e:b5:70:0e:d3:24:b2:75:93:43:8f:93:be:3e:15:bd: 13:9d:bd:76:d6:fb:e8:45:e6:99:41:72:b8:e1:70:fd:c2:7a: 84:41:a2:e7:68:96:d4:ba:51:e9:97:c9:01:7c:e9:57:ea:1d: a3:4d:1d:88 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUUIwL9zNCd3Fwhxx+Xxuno8cTIs4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNBQ0I0NUU0NjU2RkEzMzc2REU3RDM4RTAyODY1ODcz M0FGQkZBRTAeFw0yNjA1MDMwMjQ0NTZaFw0yNzA1MDIwMjQ5NTZaMDMxMTAvBgNV BAMTKDdENENGMTM2NzA3MEMwQjFCRkUyQjRDQkMyQUJENEMxMDA4QUNDMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrcRQ1+pWifbylnPn5szVL/f58 BeebHKk9rwpDPxNFjMpKLfkFMjS5Ng7p/HvqspTWwA7G3KZRA3iVc3idalBaFSJN Xo45sS1/PY/ohi3ve6QYTIPQIcY/4wHZcTXyWMQDeL+Ls0ff4/KREv1xAgOedDMQ vU5iAOHCOW9VtCxGzjw+8vhjnbhFjbX67vyE3GReFAQwb/nxAammIYPwfkEqvF+O t1i4zKG0LNMETSOrtV1uRLLHnf+BsFMfW3lQBAV3FK+KKY+WghWZVIPDazgzAV70 grkNB0WYxO8hmVpjU1GS3QQyVr8CrfXCj9a+r3DzqHjBUZo1MkPCwzB9y0DPAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUfUzxNnBwwLG/4rTLwqvUwQCKzBgwHwYDVR0j BBgwFoAUU6y0XkZW+jN23n044ChlhzOvv64wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGM3NmM4NWYtOWE0Zi00YWZjLTk2OWItOGRhMjUzNmM1YzI0LzAvNTNBQ0I0NUU0 NjU2RkEzMzc2REU3RDM4RTAyODY1ODczM0FGQkZBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81M0FDQjQ1RTQ2NTZGQTMzNzZERTdEMzhFMDI4NjU4NzMzQUZC RkFFLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhjNzZjODVmLTlhNGYtNGFmYy05 NjliLThkYTI1MzZjNWMyNC8wLzMyMzQzMDM0M2EzNDY1NjMzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzMzODMxMzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQETsAwDQYJKoZI hvcNAQELBQADggEBAE2UwzZQVRgxUMRjZO3JoGii2S4W7Co4ZSrXZY+++xrpZ1jy /uDBcN6FxJJiPIzhcdUZQYdgXlR+uotiRHyQ0pGZKhx/NZfOa3jc7+XClguJ/td3 M6Tqxgg+1lCoqHI3WSYYCvZ42v08B7bfzr3PHdsTmm3CutbbXqADmB5qYDrtOJ+c 22ImAK2Ry0az8xnyja5z2j5qH5i2FzONt1VsrnN4GzJ9LI+6mfvdMhBxFGFDRfme FE/Ft4KvyIER/Z90V09IARnhn4pLPrVwDtMksnWTQ4+Tvj4VvROdvXbW++hF5plB crjhcP3CeoRBoudoltS6UemXyQF86VfqHaNNHYg= -----END CERTIFICATE-----Generated at Wed May 13 14:17:34 2026 by rpki-client