$ rpki-client -vvf rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/323430313a616530303a3a2f33322d3438203d3e203338373533.roa File: 323430313a616530303a3a2f33322d3438203d3e203338373533.roa (raw, json) Hash identifier: DoHKNn4cb3vp5YQSHqZMksp+KViD5ZdqVczEp981xag= Subject key identifier: E4:DD:C2:47:D7:92:0B:76:51:15:E4:25:28:D1:3C:7F:1F:79:C7:E7 Certificate issuer: /CN=955AF2D41C7C84BFE354F8648EE3271584452C79 Certificate serial: 6E89E63327780C420B7DE6E902288D5A2A5BB62C Authority key identifier: 95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/323430313a616530303a3a2f33322d3438203d3e203338373533.roa Signing time: Sun 03 May 2026 02:55:30 +0000 ROA not before: Sun 03 May 2026 02:50:30 +0000 ROA not after: Sun 02 May 2027 02:55:30 +0000 asID: 38753 IP address blocks: 2401:ae00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:15:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:89:e6:33:27:78:0c:42:0b:7d:e6:e9:02:28:8d:5a:2a:5b:b6:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=955AF2D41C7C84BFE354F8648EE3271584452C79 Validity Not Before: May 3 02:50:30 2026 GMT Not After : May 2 02:55:30 2027 GMT Subject: CN=E4DDC247D7920B765115E42528D13C7F1F79C7E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ba:f3:9f:1f:c8:97:79:01:a4:76:cc:80:50: bd:b1:73:3c:5d:4c:50:ac:31:9c:96:a9:74:c4:fa: 1f:63:1d:0d:3f:69:8d:db:f8:73:84:b0:d3:e9:f5: 21:bd:c6:62:4c:4b:5d:a6:f5:c3:4e:92:b5:ad:33: 3f:20:46:91:2c:e1:37:be:e0:9a:b8:d5:f0:d2:65: 0d:11:90:ff:8f:9b:34:8c:76:4f:d1:26:7a:7d:60: e2:7f:22:ef:84:fc:95:4b:39:91:a1:73:6c:21:50: bf:db:5e:00:63:b8:eb:ce:eb:62:c4:83:2a:e8:1a: ca:ea:74:fb:27:60:e8:35:68:9c:c7:89:3c:e2:54: 88:59:57:1f:87:58:3e:2e:08:50:f2:9a:52:6a:2a: 16:73:80:84:5f:8e:d6:4f:59:25:4c:61:2d:f8:89: d3:ff:f0:cd:ab:67:d9:a9:36:69:11:30:0b:25:c0: da:d3:7d:62:48:b4:ce:b3:48:29:1a:21:3d:64:dd: fd:54:69:d2:5b:bc:4c:53:78:fd:dc:49:5d:f0:0c: 84:c1:33:19:81:35:b5:62:16:09:1d:54:e8:ad:4c: e0:95:82:90:91:03:99:6e:34:2f:dd:16:91:a4:0f: 4a:4b:0e:3c:fe:e0:ed:e5:f2:8b:ec:8c:6e:59:ad: 55:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:DD:C2:47:D7:92:0B:76:51:15:E4:25:28:D1:3C:7F:1F:79:C7:E7 X509v3 Authority Key Identifier: keyid:95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/323430313a616530303a3a2f33322d3438203d3e203338373533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:ae00::/32 Signature Algorithm: sha256WithRSAEncryption 93:6a:a1:8f:13:27:29:02:81:d3:7e:39:09:5a:10:13:e8:42: a2:c1:a8:ef:31:f7:0b:a3:23:d1:27:88:0d:e9:db:e5:05:bf: 8c:07:61:72:d9:61:db:f0:e6:f2:04:ae:fd:86:ee:5c:6c:dc: c8:53:fb:52:c5:5d:36:e6:a7:9e:6a:73:8b:a9:45:e4:d8:a7: 11:ee:73:11:7a:d7:a9:d0:12:82:51:33:a1:0a:5a:f8:57:91: 64:c2:f5:4d:8a:5d:6a:4f:84:8a:4f:6e:e8:c9:ca:f3:85:bd: f4:a1:3f:3b:a1:f2:bf:60:7d:3e:ae:38:b0:19:53:fc:44:c0: 73:63:76:89:c8:e7:4f:01:66:29:86:16:fe:c1:83:b0:e5:dc: 47:07:8d:94:db:cf:a2:a7:90:dd:bc:ed:85:c7:a7:e2:7a:97: 39:33:22:67:21:4f:c3:0d:ba:8e:f3:6c:7a:a2:b4:86:d4:eb: 73:8d:c7:f7:4c:cc:b6:7a:7c:ad:0a:22:c7:f7:88:b7:f3:21: 9c:2d:09:15:5b:5a:d4:c3:d8:08:48:de:e4:ed:96:eb:6b:39: 50:df:ae:3d:93:e6:cf:40:b2:46:a0:f1:68:e9:e2:f7:63:95: 5e:4b:9b:66:90:78:73:9c:73:c9:a8:2d:f9:41:56:de:60:81: 7e:c1:c4:41 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUbonmMyd4DEILfebpAiiNWipbtiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU1QUYyRDQxQzdDODRCRkUzNTRGODY0OEVFMzI3MTU4 NDQ1MkM3OTAeFw0yNjA1MDMwMjUwMzBaFw0yNzA1MDIwMjU1MzBaMDMxMTAvBgNV BAMTKEU0RERDMjQ3RDc5MjBCNzY1MTE1RTQyNTI4RDEzQzdGMUY3OUM3RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0uvOfH8iXeQGkdsyAUL2xczxd TFCsMZyWqXTE+h9jHQ0/aY3b+HOEsNPp9SG9xmJMS12m9cNOkrWtMz8gRpEs4Te+ 4Jq41fDSZQ0RkP+PmzSMdk/RJnp9YOJ/Iu+E/JVLOZGhc2whUL/bXgBjuOvO62LE gyroGsrqdPsnYOg1aJzHiTziVIhZVx+HWD4uCFDymlJqKhZzgIRfjtZPWSVMYS34 idP/8M2rZ9mpNmkRMAslwNrTfWJItM6zSCkaIT1k3f1UadJbvExTeP3cSV3wDITB MxmBNbViFgkdVOitTOCVgpCRA5luNC/dFpGkD0pLDjz+4O3l8ovsjG5ZrVWVAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQU5N3CR9eSC3ZRFeQlKNE8fx95x+cwHwYDVR0j BBgwFoAUlVry1Bx8hL/jVPhkjuMnFYRFLHkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTA2YjY2NzMtNDdhMS00NWU1LWI2YzItNDJhYjhiNDc2MjQ5LzAvOTU1QUYyRDQx QzdDODRCRkUzNTRGODY0OEVFMzI3MTU4NDQ1MkM3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NTVBRjJENDFDN0M4NEJGRTM1NEY4NjQ4RUUzMjcxNTg0NDUy Qzc5LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2EwNmI2NjczLTQ3YTEtNDVlNS1i NmMyLTQyYWI4YjQ3NjI0OS8wLzMyMzQzMDMxM2E2MTY1MzAzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMzMzgzNzM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAa4AMA0GCSqGSIb3 DQEBCwUAA4IBAQCTaqGPEycpAoHTfjkJWhAT6EKiwajvMfcLoyPRJ4gN6dvlBb+M B2Fy2WHb8ObyBK79hu5cbNzIU/tSxV025qeeanOLqUXk2KcR7nMRetep0BKCUTOh Clr4V5FkwvVNil1qT4SKT27oycrzhb30oT87ofK/YH0+rjiwGVP8RMBzY3aJyOdP AWYphhb+wYOw5dxHB42U28+ip5DdvO2Fx6fiepc5MyJnIU/DDbqO82x6orSG1Otz jcf3TMy2enytCiLH94i38yGcLQkVW1rUw9gISN7k7ZbrazlQ3649k+bPQLJGoPFo 6eL3Y5VeS5tmkHhznHPJqC35QVbeYIF+wcRB -----END CERTIFICATE-----Generated at Wed May 13 10:20:35 2026 by rpki-client