$ rpki-client -vvf rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/323430313a316230303a3a2f33322d3438203d3e203138313033.roa File: 323430313a316230303a3a2f33322d3438203d3e203138313033.roa (raw, json) Hash identifier: LF0MrR9BI6ohPR99FqHdVyHSCGgsD/4Honm25vFKTtU= Subject key identifier: 3F:12:D0:CE:80:41:7B:BB:59:9D:54:70:89:53:72:CB:0A:DB:49:12 Certificate issuer: /CN=CF677DC4A0E9F52E458D7F786C11004CBCC06BE6 Certificate serial: 5451BC8C9A12A0D33361D6B6AADAACA413AE710C Authority key identifier: CF:67:7D:C4:A0:E9:F5:2E:45:8D:7F:78:6C:11:00:4C:BC:C0:6B:E6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/323430313a316230303a3a2f33322d3438203d3e203138313033.roa Signing time: Sun 03 May 2026 03:00:21 +0000 ROA not before: Sun 03 May 2026 02:55:21 +0000 ROA not after: Sun 02 May 2027 03:00:21 +0000 asID: 18103 IP address blocks: 2401:1b00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.crl rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:51:bc:8c:9a:12:a0:d3:33:61:d6:b6:aa:da:ac:a4:13:ae:71:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF677DC4A0E9F52E458D7F786C11004CBCC06BE6 Validity Not Before: May 3 02:55:21 2026 GMT Not After : May 2 03:00:21 2027 GMT Subject: CN=3F12D0CE80417BBB599D5470895372CB0ADB4912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:48:78:b8:57:b9:df:c0:6e:20:8c:b3:d2:7f: 3a:89:ca:79:d6:17:4e:58:68:c5:80:64:76:5d:57: 47:45:ce:69:d9:7b:38:fd:f8:1e:05:20:8c:56:09: eb:a9:59:22:bb:3e:6a:4e:37:d9:6b:9c:a7:8b:eb: 4f:8f:00:ab:fc:2a:64:3c:a3:95:45:07:97:5b:62: ed:13:81:dc:ac:0b:c2:ba:d7:b3:82:d3:64:d1:f1: c5:5b:cc:ab:cc:d0:a0:62:f4:69:b3:c6:1f:b8:82: 9c:2c:79:fe:73:54:d7:db:ac:1d:3f:f8:76:86:e9: 32:ed:9e:4a:20:53:5c:c9:8b:f9:1a:6c:c2:8d:16: 3e:1a:f3:0b:80:e9:8a:d8:29:1c:72:0b:b3:d5:35: 23:58:02:9e:c4:2a:b3:fc:84:13:de:8c:b7:b2:f5: 48:54:e8:6d:b1:ff:d0:bf:7c:81:35:42:c2:18:ce: f9:68:88:aa:bf:fb:51:65:5b:ca:03:9a:7d:6d:88: 8f:16:53:78:6c:f6:0a:2e:49:7c:76:bd:33:b5:3c: ff:16:df:d3:2d:fc:84:07:a1:b7:5e:aa:86:8a:fb: 27:da:a2:33:ad:65:05:6c:d1:63:28:50:07:bd:f7: 80:44:95:6e:b6:50:41:fc:39:fd:d2:d1:3c:60:a8: ed:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:12:D0:CE:80:41:7B:BB:59:9D:54:70:89:53:72:CB:0A:DB:49:12 X509v3 Authority Key Identifier: keyid:CF:67:7D:C4:A0:E9:F5:2E:45:8D:7F:78:6C:11:00:4C:BC:C0:6B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/323430313a316230303a3a2f33322d3438203d3e203138313033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:1b00::/32 Signature Algorithm: sha256WithRSAEncryption 53:7b:62:73:8f:10:d2:83:09:ce:14:37:f0:fd:8f:66:79:aa: e2:aa:34:5a:37:2c:71:1c:7a:ed:c4:dc:99:53:2f:57:57:46: 07:c0:70:c3:47:17:bb:09:87:cc:94:59:20:ad:8e:43:a7:98: 49:ef:c5:db:ab:96:0c:90:a1:ea:9b:e2:e1:e2:0f:64:e6:48: 1d:31:91:cb:9b:d7:4f:74:5c:41:c2:b6:f3:a2:ae:da:ae:22: f1:17:f4:08:77:c1:e4:45:b2:39:5e:66:ad:0d:12:f9:54:76: 8a:1d:2d:82:47:37:49:c3:bb:29:ea:6f:d4:b6:36:7e:25:e6: 30:07:f7:db:6d:8e:c2:56:8c:5c:5a:82:3b:78:b4:6b:cc:02: ff:65:ef:98:da:62:48:d9:0e:7f:ba:d5:55:46:b7:28:0d:b9: d0:a5:8d:12:41:d5:ca:ff:25:84:86:f3:cb:6d:3a:5c:38:12: fa:06:39:90:c5:81:12:2c:0c:d9:00:a6:ae:84:f1:cf:04:8f: ed:13:6f:d5:e3:f6:e0:31:05:df:40:54:e4:a6:a5:e3:42:93: fc:58:df:c9:52:d3:25:4c:27:30:68:7d:f7:9a:6f:f2:8e:7d: 15:10:fb:35:35:e7:f4:cd:83:94:dd:e5:d0:3f:36:b7:87:66: 06:d7:6d:a2 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUVFG8jJoSoNMzYda2qtqspBOucQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y2NzdEQzRBMEU5RjUyRTQ1OEQ3Rjc4NkMxMTAwNENC Q0MwNkJFNjAeFw0yNjA1MDMwMjU1MjFaFw0yNzA1MDIwMzAwMjFaMDMxMTAvBgNV BAMTKDNGMTJEMENFODA0MTdCQkI1OTlENTQ3MDg5NTM3MkNCMEFEQjQ5MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPSHi4V7nfwG4gjLPSfzqJynnW F05YaMWAZHZdV0dFzmnZezj9+B4FIIxWCeupWSK7PmpON9lrnKeL60+PAKv8KmQ8 o5VFB5dbYu0TgdysC8K617OC02TR8cVbzKvM0KBi9Gmzxh+4gpwsef5zVNfbrB0/ +HaG6TLtnkogU1zJi/kabMKNFj4a8wuA6YrYKRxyC7PVNSNYAp7EKrP8hBPejLey 9UhU6G2x/9C/fIE1QsIYzvloiKq/+1FlW8oDmn1tiI8WU3hs9gouSXx2vTO1PP8W 39Mt/IQHobdeqoaK+yfaojOtZQVs0WMoUAe994BElW62UEH8Of3S0TxgqO0TAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUPxLQzoBBe7tZnVRwiVNyywrbSRIwHwYDVR0j BBgwFoAUz2d9xKDp9S5FjX94bBEATLzAa+YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjE5OWMxYWYtZDljNy00ZmZkLWJhMDMtYTNlMWNkZDhhZWUwLzAvQ0Y2NzdEQzRB MEU5RjUyRTQ1OEQ3Rjc4NkMxMTAwNENCQ0MwNkJFNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjY3N0RDNEEwRTlGNTJFNDU4RDdGNzg2QzExMDA0Q0JDQzA2 QkU2LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2IxOTljMWFmLWQ5YzctNGZmZC1i YTAzLWEzZTFjZGQ4YWVlMC8wLzMyMzQzMDMxM2EzMTYyMzAzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzgzMTMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkARsAMA0GCSqGSIb3 DQEBCwUAA4IBAQBTe2JzjxDSgwnOFDfw/Y9meariqjRaNyxxHHrtxNyZUy9XV0YH wHDDRxe7CYfMlFkgrY5Dp5hJ78Xbq5YMkKHqm+Lh4g9k5kgdMZHLm9dPdFxBwrbz oq7ariLxF/QId8HkRbI5XmatDRL5VHaKHS2CRzdJw7sp6m/UtjZ+JeYwB/fbbY7C VoxcWoI7eLRrzAL/Ze+Y2mJI2Q5/utVVRrcoDbnQpY0SQdXK/yWEhvPLbTpcOBL6 BjmQxYESLAzZAKauhPHPBI/tE2/V4/bgMQXfQFTkpqXjQpP8WN/JUtMlTCcwaH33 mm/yjn0VEPs1Nef0zYOU3eXQPza3h2YG122i -----END CERTIFICATE-----Generated at Wed May 13 04:02:33 2026 by rpki-client