$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/323430343a356434303a353a3a2f34382d3438203d3e20313338353938.roa File: 323430343a356434303a353a3a2f34382d3438203d3e20313338353938.roa (raw, json) Hash identifier: v19HYsz9f+5DNC0VpCdeprRmAwKbW3lgoiMiceEJJ/0= Subject key identifier: 33:16:F2:ED:8B:F4:1E:D9:96:CF:E1:C0:BA:5C:5A:2F:4E:17:B3:E9 Certificate issuer: /CN=3F62814044EDF8B5E77D2B82095BF6627E136F4B Certificate serial: 3BA378B2C15B1D419AF21FAF676A74FF0F051DBC Authority key identifier: 3F:62:81:40:44:ED:F8:B5:E7:7D:2B:82:09:5B:F6:62:7E:13:6F:4B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/323430343a356434303a353a3a2f34382d3438203d3e20313338353938.roa Signing time: Sun 03 May 2026 02:54:38 +0000 ROA not before: Sun 03 May 2026 02:49:38 +0000 ROA not after: Sun 02 May 2027 02:54:38 +0000 asID: 138598 IP address blocks: 2404:5d40:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.crl rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:a3:78:b2:c1:5b:1d:41:9a:f2:1f:af:67:6a:74:ff:0f:05:1d:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F62814044EDF8B5E77D2B82095BF6627E136F4B Validity Not Before: May 3 02:49:38 2026 GMT Not After : May 2 02:54:38 2027 GMT Subject: CN=3316F2ED8BF41ED996CFE1C0BA5C5A2F4E17B3E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:48:f7:76:d8:ea:47:67:d9:97:be:08:33:8c: c4:97:b6:fe:e2:9d:46:ef:7e:29:3a:61:f0:f9:3d: f3:45:c2:0d:70:cd:1a:26:85:b6:dd:9d:68:5f:79: e1:2e:4a:f9:a7:0a:b0:89:8a:37:7f:e5:cf:9f:cb: 85:0b:13:0e:0d:2d:f0:2c:ad:61:dd:c4:ef:30:53: 70:ca:34:fe:27:a5:30:75:e9:94:47:1a:d0:b8:6e: 38:40:d4:8e:76:b5:7e:c3:21:88:c0:d6:ed:30:87: 0f:1a:c4:84:47:d9:25:7f:ff:8f:a9:a4:e7:fc:bc: ee:53:ae:f9:2a:7e:a8:b7:70:f2:cb:bf:c0:ee:d6: ff:2a:b1:f3:2b:38:ef:35:7a:05:6f:54:9f:72:bf: 1d:6e:1e:0c:6b:2a:59:d5:3f:74:03:43:ba:27:09: 78:88:e8:3d:e6:25:f3:65:e7:d0:cb:dd:59:78:58: fd:3d:f9:a9:36:20:61:74:76:16:ab:d7:12:4d:f4: 33:a1:45:3b:ab:e6:a9:87:57:b5:ea:6a:f6:0f:d4: 2a:50:28:e2:60:15:9d:a1:40:61:77:d1:25:97:e3: 63:75:9a:c5:85:3c:0f:f5:e3:63:0c:bf:50:77:84: 78:55:bd:67:42:8e:c8:a7:6b:c8:63:ac:d6:7f:41: 56:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:16:F2:ED:8B:F4:1E:D9:96:CF:E1:C0:BA:5C:5A:2F:4E:17:B3:E9 X509v3 Authority Key Identifier: keyid:3F:62:81:40:44:ED:F8:B5:E7:7D:2B:82:09:5B:F6:62:7E:13:6F:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/323430343a356434303a353a3a2f34382d3438203d3e20313338353938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:5d40:5::/48 Signature Algorithm: sha256WithRSAEncryption 05:f4:8a:0a:66:26:00:27:4d:78:cf:07:39:ed:bb:fb:47:5f: 67:96:7c:fd:7f:8c:6d:20:e0:7e:13:65:74:17:30:68:8d:2b: e5:13:fa:dc:88:0c:ae:28:73:97:f5:dd:b4:9e:96:a1:54:e6: ba:59:d7:4e:53:6c:cf:00:d1:c5:d4:f8:6d:1a:94:d7:38:f3: 6d:bc:2f:46:dd:a8:e7:c4:d6:09:81:e8:f6:dd:45:28:ac:2d: c3:28:4a:57:c0:62:b9:b8:e1:23:84:dd:0f:53:8a:49:fd:e1: 63:19:b7:3c:c7:c1:76:64:9c:c9:a8:bb:4f:c6:36:03:7b:67: 7c:ae:49:ea:aa:8b:bd:f0:f2:51:a9:ab:f1:c8:9f:e2:6c:44: 67:f9:0e:27:cd:97:40:ad:c7:4c:a1:12:c2:cd:c1:40:94:e9: e2:07:42:40:44:09:b7:1d:96:65:ca:f4:72:55:42:37:d7:31: 0c:1d:f3:8e:54:06:59:94:50:1c:b3:81:be:db:c6:bc:17:14: 67:65:f4:4d:dd:9c:46:41:ed:f2:81:97:e8:d6:ad:f4:7b:30: ab:a0:88:4f:ae:b0:cc:d3:d3:b6:8d:86:99:10:fb:bb:33:31: 93:57:f2:a5:7a:30:75:dc:21:69:04:b6:c4:ca:19:de:2a:c2: b5:19:27:ae -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUO6N4ssFbHUGa8h+vZ2p0/w8FHbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y2MjgxNDA0NEVERjhCNUU3N0QyQjgyMDk1QkY2NjI3 RTEzNkY0QjAeFw0yNjA1MDMwMjQ5MzhaFw0yNzA1MDIwMjU0MzhaMDMxMTAvBgNV BAMTKDMzMTZGMkVEOEJGNDFFRDk5NkNGRTFDMEJBNUM1QTJGNEUxN0IzRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjSPd22OpHZ9mXvggzjMSXtv7i nUbvfik6YfD5PfNFwg1wzRomhbbdnWhfeeEuSvmnCrCJijd/5c+fy4ULEw4NLfAs rWHdxO8wU3DKNP4npTB16ZRHGtC4bjhA1I52tX7DIYjA1u0whw8axIRH2SV//4+p pOf8vO5Trvkqfqi3cPLLv8Du1v8qsfMrOO81egVvVJ9yvx1uHgxrKlnVP3QDQ7on CXiI6D3mJfNl59DL3Vl4WP09+ak2IGF0dhar1xJN9DOhRTur5qmHV7XqavYP1CpQ KOJgFZ2hQGF30SWX42N1msWFPA/142MMv1B3hHhVvWdCjsina8hjrNZ/QVbFAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUMxby7Yv0HtmWz+HAulxaL04Xs+kwHwYDVR0j BBgwFoAUP2KBQETt+LXnfSuCCVv2Yn4Tb0swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWM4NWM2YjktMzRmOS00YTg1LTljZWEtYzE2ZTk4YThiNWUwLzAvM0Y2MjgxNDA0 NEVERjhCNUU3N0QyQjgyMDk1QkY2NjI3RTEzNkY0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRjYyODE0MDQ0RURGOEI1RTc3RDJCODIwOTVCRjY2MjdFMTM2 RjRCLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzljODVjNmI5LTM0ZjktNGE4NS05 Y2VhLWMxNmU5OGE4YjVlMC8wLzMyMzQzMDM0M2EzNTY0MzQzMDNhMzUzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzgzNTM5Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBF1AAAUw DQYJKoZIhvcNAQELBQADggEBAAX0igpmJgAnTXjPBzntu/tHX2eWfP1/jG0g4H4T ZXQXMGiNK+UT+tyIDK4oc5f13bSelqFU5rpZ105TbM8A0cXU+G0alNc48228L0bd qOfE1gmB6PbdRSisLcMoSlfAYrm44SOE3Q9Tikn94WMZtzzHwXZknMmou0/GNgN7 Z3yuSeqqi73w8lGpq/HIn+JsRGf5DifNl0Ctx0yhEsLNwUCU6eIHQkBECbcdlmXK 9HJVQjfXMQwd845UBlmUUByzgb7bxrwXFGdl9E3dnEZB7fKBl+jWrfR7MKugiE+u sMzT07aNhpkQ+7szMZNX8qV6MHXcIWkEtsTKGd4qwrUZJ64= -----END CERTIFICATE-----Generated at Wed May 13 08:28:38 2026 by rpki-client