$ rpki-client -vvf rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/323430353a316463303a3a2f33322d3438203d3e203436303437.roa File: 323430353a316463303a3a2f33322d3438203d3e203436303437.roa (raw, json) Hash identifier: HQCm3qwAScR/igpqWrG5cwARCu90Hji8rsjqlIgAeaM= Subject key identifier: 19:73:65:3D:E2:44:C0:F6:2A:BD:4F:34:61:EE:3E:C6:65:0D:90:8D Certificate issuer: /CN=855FB1394E274E698967BBB475F8817B92100FB4 Certificate serial: 5E580EBEBB89686CF4FDD614CE2A695B18E00771 Authority key identifier: 85:5F:B1:39:4E:27:4E:69:89:67:BB:B4:75:F8:81:7B:92:10:0F:B4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/323430353a316463303a3a2f33322d3438203d3e203436303437.roa Signing time: Sun 03 May 2026 02:54:55 +0000 ROA not before: Sun 03 May 2026 02:49:55 +0000 ROA not after: Sun 02 May 2027 02:54:55 +0000 asID: 46047 IP address blocks: 2405:1dc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.crl rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:58:0e:be:bb:89:68:6c:f4:fd:d6:14:ce:2a:69:5b:18:e0:07:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855FB1394E274E698967BBB475F8817B92100FB4 Validity Not Before: May 3 02:49:55 2026 GMT Not After : May 2 02:54:55 2027 GMT Subject: CN=1973653DE244C0F62ABD4F3461EE3EC6650D908D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bf:36:d4:25:12:01:a8:bb:68:e5:88:93:b1: 2f:49:63:3a:d6:d9:4d:17:62:f3:65:e7:62:23:59: b7:96:45:2c:2a:fd:14:7d:72:f4:e4:96:72:95:33: b3:09:0e:38:9d:52:3d:d9:ad:b0:83:c7:e3:6a:d4: 74:0b:bd:e4:93:04:2e:16:7d:78:1f:df:89:91:76: a2:c4:89:01:1c:4b:df:4a:e3:6b:7f:11:bf:83:fe: d5:a1:35:da:45:72:d1:ec:69:3c:d2:56:26:e1:49: 75:a3:31:f7:80:a4:ed:85:97:36:2f:f0:75:6b:54: e8:8e:22:74:f5:26:3e:09:37:36:23:e6:a6:52:cb: 6f:d4:a4:f9:b3:54:7c:97:43:5c:a9:e7:ae:e7:6f: 4c:11:7d:d3:59:fd:55:ce:f9:d7:f6:db:ad:7c:74: b6:72:28:e9:27:1a:49:07:a5:80:28:27:16:42:89: 37:24:70:7c:36:b1:04:1f:e4:12:d4:eb:e7:e7:43: 17:e9:03:f1:bb:3f:28:a3:62:ea:79:0f:aa:11:a8: 7b:c0:2a:0d:fe:4b:8d:8d:ce:14:04:f2:01:5f:09: af:70:7d:84:fb:2f:1e:94:b5:d3:36:30:4d:7b:74: ec:3e:ee:32:c4:c0:73:d1:c3:05:eb:61:ff:a8:40: 45:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:73:65:3D:E2:44:C0:F6:2A:BD:4F:34:61:EE:3E:C6:65:0D:90:8D X509v3 Authority Key Identifier: keyid:85:5F:B1:39:4E:27:4E:69:89:67:BB:B4:75:F8:81:7B:92:10:0F:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/323430353a316463303a3a2f33322d3438203d3e203436303437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:1dc0::/32 Signature Algorithm: sha256WithRSAEncryption 9e:cf:53:d0:f6:24:8d:26:c3:1a:b6:ea:a0:ec:db:e5:69:db: 38:1c:80:5e:52:1d:f6:45:b5:a6:8c:37:f5:2e:47:7e:9f:fd: cc:ce:3d:5b:7f:31:76:a0:fc:84:74:50:53:b4:56:e4:d0:99: 07:30:3c:a5:61:52:2f:6c:6e:d1:50:1d:e6:46:a6:72:a0:fa: 87:9e:b6:8a:2d:8a:ac:5b:63:36:8c:f3:ec:9d:fa:f4:ce:8e: 33:e2:c3:3b:80:4d:8e:86:12:b3:21:15:4f:ca:49:17:3b:3b: d3:d9:9c:dd:90:fe:18:c9:57:32:4a:14:85:4e:94:16:5c:27: 49:cc:43:2f:7e:d2:78:ed:07:b3:3b:33:5d:87:3d:e8:75:4c: 9d:33:22:d5:72:e5:9a:fb:77:cf:45:2c:2b:c1:3d:26:58:1c: cd:a6:10:41:86:c9:10:57:bf:29:42:c0:be:b7:09:84:b3:ab: 55:25:37:aa:7a:9d:37:d6:03:f1:09:18:5e:b1:1f:66:81:42: 69:bf:4a:dc:db:e0:d4:f4:bb:81:b2:fb:55:27:fb:36:5a:a2: 5e:36:5e:48:3d:b3:7e:bb:40:af:05:22:b2:c8:7f:05:da:a9: ce:b1:d8:04:e9:7b:30:09:dc:8b:ec:bc:0f:04:90:6c:b1:37: 39:0d:2a:e8 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUXlgOvruJaGz0/dYUzippWxjgB3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1RkIxMzk0RTI3NEU2OTg5NjdCQkI0NzVGODgxN0I5 MjEwMEZCNDAeFw0yNjA1MDMwMjQ5NTVaFw0yNzA1MDIwMjU0NTVaMDMxMTAvBgNV BAMTKDE5NzM2NTNERTI0NEMwRjYyQUJENEYzNDYxRUUzRUM2NjUwRDkwOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0vzbUJRIBqLto5YiTsS9JYzrW 2U0XYvNl52IjWbeWRSwq/RR9cvTklnKVM7MJDjidUj3ZrbCDx+Nq1HQLveSTBC4W fXgf34mRdqLEiQEcS99K42t/Eb+D/tWhNdpFctHsaTzSVibhSXWjMfeApO2FlzYv 8HVrVOiOInT1Jj4JNzYj5qZSy2/UpPmzVHyXQ1yp567nb0wRfdNZ/VXO+df22618 dLZyKOknGkkHpYAoJxZCiTckcHw2sQQf5BLU6+fnQxfpA/G7PyijYup5D6oRqHvA Kg3+S42NzhQE8gFfCa9wfYT7Lx6UtdM2ME17dOw+7jLEwHPRwwXrYf+oQEVlAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUGXNlPeJEwPYqvU80Ye4+xmUNkI0wHwYDVR0j BBgwFoAUhV+xOU4nTmmJZ7u0dfiBe5IQD7QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWUxMjljOTQtYzVhNi00ZGQ0LWIzNGEtN2UzNTNkZTZjZTgxLzAvODU1RkIxMzk0 RTI3NEU2OTg5NjdCQkI0NzVGODgxN0I5MjEwMEZCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTVGQjEzOTRFMjc0RTY5ODk2N0JCQjQ3NUY4ODE3QjkyMTAw RkI0LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzllMTI5Yzk0LWM1YTYtNGRkNC1i MzRhLTdlMzUzZGU2Y2U4MS8wLzMyMzQzMDM1M2EzMTY0NjMzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDM0MzYzMDM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBR3AMA0GCSqGSIb3 DQEBCwUAA4IBAQCez1PQ9iSNJsMatuqg7Nvlads4HIBeUh32RbWmjDf1Lkd+n/3M zj1bfzF2oPyEdFBTtFbk0JkHMDylYVIvbG7RUB3mRqZyoPqHnraKLYqsW2M2jPPs nfr0zo4z4sM7gE2OhhKzIRVPykkXOzvT2ZzdkP4YyVcyShSFTpQWXCdJzEMvftJ4 7QezOzNdhz3odUydMyLVcuWa+3fPRSwrwT0mWBzNphBBhskQV78pQsC+twmEs6tV JTeqep031gPxCRhesR9mgUJpv0rc2+DU9LuBsvtVJ/s2WqJeNl5IPbN+u0CvBSKy yH8F2qnOsdgE6XswCdyL7LwPBJBssTc5DSro -----END CERTIFICATE-----Generated at Wed May 13 08:39:53 2026 by rpki-client