$ rpki-client -vvf rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a323a3a2f34382d3438203d3e20313339393732.roa File: 323430353a633434303a323a3a2f34382d3438203d3e20313339393732.roa (raw, json) Hash identifier: 6/n96Pug9V/OAfQQphzWdcVB4O+JA7BIOnJOjVVmWls= Subject key identifier: 13:5D:CC:67:56:0D:5C:ED:11:68:DE:60:4A:50:54:1D:98:4D:65:19 Certificate issuer: /CN=C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C Certificate serial: 0A21FEA1094590837C4B881E722C32B367002935 Authority key identifier: C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a323a3a2f34382d3438203d3e20313339393732.roa Signing time: Sun 03 May 2026 02:54:00 +0000 ROA not before: Sun 03 May 2026 02:49:00 +0000 ROA not after: Sun 02 May 2027 02:54:00 +0000 asID: 139972 IP address blocks: 2405:c440:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:21:fe:a1:09:45:90:83:7c:4b:88:1e:72:2c:32:b3:67:00:29:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C Validity Not Before: May 3 02:49:00 2026 GMT Not After : May 2 02:54:00 2027 GMT Subject: CN=135DCC67560D5CED1168DE604A50541D984D6519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:36:d4:2c:e7:ee:ce:f5:5c:21:11:a4:ab:f7: 10:2b:cb:82:1c:b0:db:51:34:90:18:9c:23:ec:7d: 67:39:84:8f:e2:3f:25:c8:ff:79:d5:ca:45:8f:d5: 6a:33:2e:b2:89:98:ba:4f:b1:61:0c:07:45:c5:32: 0a:c3:11:1e:11:ce:a1:9d:0a:1c:5b:4a:11:d5:00: 22:62:12:c6:c9:91:da:b7:40:a6:37:1b:3c:6a:7b: 22:d2:48:ae:40:4a:9e:2d:8e:2d:64:a1:5b:4e:33: 03:e0:23:e7:05:b6:b8:53:5c:cc:b1:7b:ef:73:35: 75:ef:04:28:86:b9:5f:1c:9d:72:e3:ac:ae:f7:0e: 0c:bc:84:3e:69:56:fe:c1:7a:3d:c2:4f:07:7d:3f: 51:61:ee:51:70:4f:bb:a4:08:42:cb:6f:03:1e:53: dd:95:53:f4:91:ea:70:1d:d0:1e:31:7a:36:b2:25: e3:97:75:03:0e:25:7d:41:b6:87:85:d7:b7:64:d7: 52:9c:90:16:c1:1b:49:bc:06:80:0c:bb:10:30:79: e5:8e:63:a4:5b:80:ac:e3:dd:b0:f1:a8:19:a2:0f: 2b:50:c7:c1:a0:9f:e9:bc:93:ae:dd:7c:de:11:1a: ea:94:02:a9:f7:96:97:dc:df:43:67:dc:a3:74:2a: bf:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:5D:CC:67:56:0D:5C:ED:11:68:DE:60:4A:50:54:1D:98:4D:65:19 X509v3 Authority Key Identifier: keyid:C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a323a3a2f34382d3438203d3e20313339393732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:c440:2::/48 Signature Algorithm: sha256WithRSAEncryption 1e:3a:66:d2:22:a9:05:dc:d4:ae:97:f8:9d:f1:81:06:7e:af: 7e:7f:57:42:37:ad:5b:bf:2f:a5:7a:40:6f:f8:49:5d:fd:44: 3e:3d:c7:b8:af:38:92:08:ea:93:61:71:b4:dd:55:8d:59:40: f8:c7:71:7e:42:a4:75:39:42:48:d9:c9:03:7a:57:57:e7:e5: 94:7b:e2:ea:8e:79:e9:8b:0e:ac:e8:8c:f7:02:ab:06:07:9a: 29:cd:c7:9a:ed:4f:1a:ed:ab:19:56:3f:fa:da:c2:34:f7:bc: 2f:9f:1f:a1:34:18:38:2e:56:f0:fa:b6:73:f5:fb:5c:b2:aa: 84:a4:72:54:0c:7e:c1:e2:4f:ff:61:84:37:ef:0d:63:11:a8: cf:8e:62:30:72:29:ae:56:c1:5b:bf:12:7f:1d:91:85:7d:90: 0b:1a:5d:8f:4f:4d:c6:95:5c:c0:92:49:9b:ea:e2:6f:77:3f: 74:33:31:04:08:9d:6d:00:dc:9f:0d:9e:4d:7f:f0:a1:50:9f: ed:51:0c:24:a3:22:88:43:d2:90:ab:b1:70:dd:37:79:e7:4a: 18:ea:12:19:63:a3:39:94:97:70:9f:96:92:1a:c4:b6:0e:ae: 68:d1:75:c6:e2:56:e2:02:c7:53:34:f8:44:6c:78:0e:7c:16: 3e:9e:df:d6 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUCiH+oQlFkIN8S4geciwys2cAKTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFBNEFCNDA3MjZENENFREQ2NjNEMUMzNEVCQkU4MTdG QTQ0QzQyQzAeFw0yNjA1MDMwMjQ5MDBaFw0yNzA1MDIwMjU0MDBaMDMxMTAvBgNV BAMTKDEzNURDQzY3NTYwRDVDRUQxMTY4REU2MDRBNTA1NDFEOTg0RDY1MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrNtQs5+7O9VwhEaSr9xAry4Ic sNtRNJAYnCPsfWc5hI/iPyXI/3nVykWP1WozLrKJmLpPsWEMB0XFMgrDER4RzqGd ChxbShHVACJiEsbJkdq3QKY3GzxqeyLSSK5ASp4tji1koVtOMwPgI+cFtrhTXMyx e+9zNXXvBCiGuV8cnXLjrK73Dgy8hD5pVv7Bej3CTwd9P1Fh7lFwT7ukCELLbwMe U92VU/SR6nAd0B4xejayJeOXdQMOJX1BtoeF17dk11KckBbBG0m8BoAMuxAweeWO Y6RbgKzj3bDxqBmiDytQx8Ggn+m8k67dfN4RGuqUAqn3lpfc30Nn3KN0Kr/BAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUE13MZ1YNXO0RaN5gSlBUHZhNZRkwHwYDVR0j BBgwFoAUwaSrQHJtTO3WY9HDTrvoF/pExCwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTllZWJmN2MtZmUzOC00NmE5LTgzMTEtZTA1M2ZjYTUwZGZkLzAvQzFBNEFCNDA3 MjZENENFREQ2NjNEMUMzNEVCQkU4MTdGQTQ0QzQyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMUE0QUI0MDcyNkQ0Q0VERDY2M0QxQzM0RUJCRTgxN0ZBNDRD NDJDLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzk5ZWViZjdjLWZlMzgtNDZhOS04 MzExLWUwNTNmY2E1MGRmZC8wLzMyMzQzMDM1M2E2MzM0MzQzMDNhMzIzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzkzOTM3MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBcRAAAIw DQYJKoZIhvcNAQELBQADggEBAB46ZtIiqQXc1K6X+J3xgQZ+r35/V0I3rVu/L6V6 QG/4SV39RD49x7ivOJII6pNhcbTdVY1ZQPjHcX5CpHU5QkjZyQN6V1fn5ZR74uqO eemLDqzojPcCqwYHminNx5rtTxrtqxlWP/rawjT3vC+fH6E0GDguVvD6tnP1+1yy qoSkclQMfsHiT/9hhDfvDWMRqM+OYjByKa5WwVu/En8dkYV9kAsaXY9PTcaVXMCS SZvq4m93P3QzMQQInW0A3J8Nnk1/8KFQn+1RDCSjIohD0pCrsXDdN3nnShjqEhlj ozmUl3CflpIaxLYOrmjRdcbiVuICx1M0+ERseA58Fj6e39Y= -----END CERTIFICATE-----Generated at Wed May 13 00:20:31 2026 by rpki-client