$ rpki-client -vvf rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/323430343a326363303a35383a3a2f34362d3436203d3e20313331373336.roa File: 323430343a326363303a35383a3a2f34362d3436203d3e20313331373336.roa (raw, json) Hash identifier: 2ePu3EHR90dClUt0r5HRZza+Dx4B+Kag1aBuSmuBj9s= Subject key identifier: 19:25:AD:05:F5:51:11:13:79:36:B3:B4:C6:5C:5D:D8:7B:63:79:B4 Certificate issuer: /CN=2EAB22DEDA17C8633520C765C1BECE6852B8BD70 Certificate serial: 680DC25A53E529799649ED3938375931D279D35E Authority key identifier: 2E:AB:22:DE:DA:17:C8:63:35:20:C7:65:C1:BE:CE:68:52:B8:BD:70 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/323430343a326363303a35383a3a2f34362d3436203d3e20313331373336.roa Signing time: Sun 03 May 2026 02:52:11 +0000 ROA not before: Sun 03 May 2026 02:47:11 +0000 ROA not after: Sun 02 May 2027 02:52:11 +0000 asID: 131736 IP address blocks: 2404:2cc0:58::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.crl rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:0d:c2:5a:53:e5:29:79:96:49:ed:39:38:37:59:31:d2:79:d3:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EAB22DEDA17C8633520C765C1BECE6852B8BD70 Validity Not Before: May 3 02:47:11 2026 GMT Not After : May 2 02:52:11 2027 GMT Subject: CN=1925AD05F55111137936B3B4C65C5DD87B6379B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:19:05:e3:4c:1a:07:f9:25:c6:9f:ec:07:bd: fa:25:bb:56:18:bd:5c:27:7a:3f:ac:bf:c6:91:8e: 2c:ad:56:49:92:f8:ac:69:02:cc:a7:96:3e:0e:9e: 31:c1:58:33:26:1f:ff:98:b1:d5:36:3a:62:08:86: 1e:d7:cc:40:1f:4e:59:0b:c5:ca:8d:96:8c:d9:4b: cf:67:4e:e2:ad:19:ac:b5:1c:3c:2c:89:4a:7f:af: 84:f6:c9:95:29:63:50:99:5c:9f:3f:18:d9:c7:27: 83:0c:a5:65:3d:b9:8a:99:8d:b1:c4:ff:42:a6:4f: 56:88:33:3b:ea:f4:54:1d:cb:1b:4e:01:03:81:e0: b7:86:54:b6:66:59:b0:29:b2:90:7e:5d:9e:d9:cc: 26:52:d0:4b:ea:68:e2:7d:21:3c:1d:5b:70:ae:81: 5f:b7:1a:ac:40:da:26:ce:fc:5c:16:9d:db:55:78: cf:48:e6:90:b5:41:8d:ea:6f:bb:57:e4:ba:71:00: b9:52:20:22:ae:f4:2c:c2:fa:10:72:9a:be:02:1e: 86:02:d4:e7:4e:6d:87:5a:d2:ff:a0:de:91:45:29: 75:b1:d4:43:3a:35:1c:33:5b:1a:e6:05:5b:30:1d: 5a:9e:c5:d3:8e:80:28:80:61:a0:55:04:be:fd:a6: ac:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:25:AD:05:F5:51:11:13:79:36:B3:B4:C6:5C:5D:D8:7B:63:79:B4 X509v3 Authority Key Identifier: keyid:2E:AB:22:DE:DA:17:C8:63:35:20:C7:65:C1:BE:CE:68:52:B8:BD:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/323430343a326363303a35383a3a2f34362d3436203d3e20313331373336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:2cc0:58::/46 Signature Algorithm: sha256WithRSAEncryption 63:04:0c:11:5b:7c:59:6b:f3:3d:14:83:46:61:b1:1c:f7:fb: 02:98:ec:b1:c2:46:44:75:f3:31:9f:f7:e5:86:b3:69:c2:db: 92:70:88:d0:2f:84:78:58:c1:e5:46:9d:58:e8:85:86:f5:34: 59:9f:bf:a3:cf:31:f8:9c:7e:38:30:1e:c2:9a:37:a4:b1:19: 2b:39:1b:ce:06:4b:d2:23:17:bb:44:fb:20:c7:71:ad:d5:52: a4:88:fa:9f:71:b5:d0:cc:9b:a5:92:45:b5:c5:cb:83:ff:96: a7:26:94:94:71:20:18:43:80:b5:47:46:da:fa:ab:53:cb:cb: fb:2d:22:fd:21:b2:9e:e1:f3:c2:c9:fd:67:76:67:43:13:12: be:6c:ee:a9:47:ba:37:b7:f1:e9:09:45:f7:35:13:4a:d5:66: ed:2b:0e:a2:a4:07:90:b8:f7:95:7f:ca:11:0d:09:1c:e1:03: 64:bf:31:fd:aa:f9:30:a5:79:bb:58:5d:5d:e3:ad:76:8b:ac: bb:33:11:e0:14:c2:77:61:f8:b4:fa:8c:84:14:75:4c:fb:f2: 8c:f9:6f:21:c7:5e:79:52:48:af:22:1a:04:67:d5:94:fc:96: 0c:e3:ea:9d:f7:7e:d8:76:65:3a:57:c5:6e:8f:1b:87:57:82: b5:6c:8c:f8 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUaA3CWlPlKXmWSe05ODdZMdJ5014wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVBQjIyREVEQTE3Qzg2MzM1MjBDNzY1QzFCRUNFNjg1 MkI4QkQ3MDAeFw0yNjA1MDMwMjQ3MTFaFw0yNzA1MDIwMjUyMTFaMDMxMTAvBgNV BAMTKDE5MjVBRDA1RjU1MTExMTM3OTM2QjNCNEM2NUM1REQ4N0I2Mzc5QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbGQXjTBoH+SXGn+wHvfolu1YY vVwnej+sv8aRjiytVkmS+KxpAsynlj4OnjHBWDMmH/+YsdU2OmIIhh7XzEAfTlkL xcqNlozZS89nTuKtGay1HDwsiUp/r4T2yZUpY1CZXJ8/GNnHJ4MMpWU9uYqZjbHE /0KmT1aIMzvq9FQdyxtOAQOB4LeGVLZmWbApspB+XZ7ZzCZS0EvqaOJ9ITwdW3Cu gV+3GqxA2ibO/FwWndtVeM9I5pC1QY3qb7tX5LpxALlSICKu9CzC+hBymr4CHoYC 1OdObYda0v+g3pFFKXWx1EM6NRwzWxrmBVswHVqexdOOgCiAYaBVBL79pqwDAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUGSWtBfVRERN5NrO0xlxd2HtjebQwHwYDVR0j BBgwFoAULqsi3toXyGM1IMdlwb7OaFK4vXAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTI1Y2RhMzYtNjkzYS00YzFhLWJhOWUtZTBlMTc4MTEyMTQwLzAvMkVBQjIyREVE QTE3Qzg2MzM1MjBDNzY1QzFCRUNFNjg1MkI4QkQ3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRUFCMjJERURBMTdDODYzMzUyMEM3NjVDMUJFQ0U2ODUyQjhC RDcwLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkyNWNkYTM2LTY5M2EtNGMxYS1i YTllLWUwZTE3ODExMjE0MC8wLzMyMzQzMDM0M2EzMjYzNjMzMDNhMzUzODNhM2Ey ZjM0MzYyZDM0MzYyMDNkM2UyMDMxMzMzMTM3MzMzNi5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAiQELMAA WDANBgkqhkiG9w0BAQsFAAOCAQEAYwQMEVt8WWvzPRSDRmGxHPf7ApjsscJGRHXz MZ/35YazacLbknCI0C+EeFjB5UadWOiFhvU0WZ+/o88x+Jx+ODAewpo3pLEZKzkb zgZL0iMXu0T7IMdxrdVSpIj6n3G10MybpZJFtcXLg/+WpyaUlHEgGEOAtUdG2vqr U8vL+y0i/SGynuHzwsn9Z3ZnQxMSvmzuqUe6N7fx6QlF9zUTStVm7SsOoqQHkLj3 lX/KEQ0JHOEDZL8x/ar5MKV5u1hdXeOtdousuzMR4BTCd2H4tPqMhBR1TPvyjPlv IcdeeVJIryIaBGfVlPyWDOPqnfd+2HZlOlfFbo8bh1eCtWyM+A== -----END CERTIFICATE-----Generated at Wed May 13 09:17:57 2026 by rpki-client