$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383732303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a383732303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: iYgkJS//JyAhU6Q5yPXj1HDEiSA3I2QJBGxBYfPMz+A= Subject key identifier: 94:A5:61:0A:70:F5:40:F0:03:E8:BB:FF:5A:11:A1:45:E8:ED:CA:D3 Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0 Certificate serial: 49BFB78589E4D56934B373EB6C55FE205624174B Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383732303a3a2f34342d3434203d3e20313333373938.roa Signing time: Sun 03 May 2026 03:04:16 +0000 ROA not before: Sun 03 May 2026 02:59:16 +0000 ROA not after: Sun 02 May 2027 03:04:16 +0000 asID: 133798 IP address blocks: 2402:5680:8720::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:bf:b7:85:89:e4:d5:69:34:b3:73:eb:6c:55:fe:20:56:24:17:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0 Validity Not Before: May 3 02:59:16 2026 GMT Not After : May 2 03:04:16 2027 GMT Subject: CN=94A5610A70F540F003E8BBFF5A11A145E8EDCAD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e0:49:f9:d1:29:8d:2f:77:9d:ea:7e:84:ef: 37:f7:64:e8:8f:6d:7e:9c:93:99:7d:27:fa:c5:39: f2:9b:b5:b1:8d:bd:9e:9f:44:c1:ba:c1:b0:a6:00: ed:8c:b0:e0:6f:13:84:b2:1b:2c:e6:6d:06:d4:9e: cd:82:ef:9c:08:c4:cf:c0:d2:06:e1:e8:ec:f3:3b: 86:b3:c7:e7:af:6a:40:bc:6d:4b:2c:03:e2:3f:70: db:ea:81:f8:ed:d3:5a:0a:17:38:e9:0c:92:ee:c2: 2f:62:b2:6d:6f:f1:15:57:47:57:e3:1f:20:94:58: 56:63:7b:5a:70:53:ee:12:63:04:cb:c2:79:ef:d9: 78:59:07:9d:44:9c:87:d7:a8:5a:f7:8b:dc:4d:f5: 59:81:cd:ad:c3:7a:4a:ba:6c:78:0a:94:23:12:70: 9f:d2:f9:bf:c0:7b:38:31:80:17:78:d9:75:c2:5e: 65:17:37:f4:45:65:9f:41:5f:5b:cd:6f:2d:dd:89: e3:4c:0d:cb:54:5e:62:3b:e1:25:88:d4:45:d5:70: e2:e6:0a:e0:5e:82:3a:80:f4:21:28:95:94:d3:0d: 65:d1:e3:ab:c5:a3:02:40:3f:aa:07:5f:43:e3:92: fa:1a:b1:9a:da:68:c6:b6:6a:b3:aa:6d:11:c5:ba: ef:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A5:61:0A:70:F5:40:F0:03:E8:BB:FF:5A:11:A1:45:E8:ED:CA:D3 X509v3 Authority Key Identifier: keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383732303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:8720::/44 Signature Algorithm: sha256WithRSAEncryption 96:94:1a:6a:08:ff:73:b0:dc:c3:3c:cd:61:69:a4:b5:a2:72: 2b:45:ed:d1:f9:ae:de:06:1c:8d:60:6f:38:a3:ad:54:5b:e0: e7:df:42:1a:da:cf:ac:d9:40:94:6b:47:3f:af:af:6e:8e:cf: 48:46:e8:30:11:d5:fd:10:db:53:de:87:e8:d5:f7:4b:a3:b9: 3e:c5:4c:2b:99:b6:00:5c:27:9b:d6:75:71:9c:11:b6:f5:fd: 25:85:f3:7a:f8:5f:ec:b7:32:4c:03:ff:44:f9:08:33:d0:32: 73:47:29:30:1a:3d:66:51:78:70:12:3b:f2:16:b3:b7:4b:57: 89:f2:31:18:80:66:f6:af:a4:a2:ca:5f:4b:d5:49:ae:ee:2d: 54:fe:37:00:80:82:e7:27:dc:de:b3:64:48:aa:0a:de:0c:e0: 26:c1:b2:4e:bd:42:44:16:d2:74:2d:4e:b4:d0:31:eb:7c:85: 5c:6c:42:9d:e2:86:f3:2b:39:5a:2e:a9:e9:eb:bf:67:d1:a7: a4:9b:ba:3f:76:b5:34:28:fb:ac:6e:95:6a:05:74:49:20:2d: eb:aa:a0:3a:2a:e9:e1:cd:f6:e5:6e:c3:d1:65:84:97:c6:a8: 6e:e2:47:ba:aa:13:ab:54:b8:b2:e8:69:0c:51:8c:62:c7:8f: ca:be:48:c0 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUSb+3hYnk1Wk0s3PrbFX+IFYkF0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVGQkVBQ0ZBRUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2 MzIxQTVDMDAeFw0yNjA1MDMwMjU5MTZaFw0yNzA1MDIwMzA0MTZaMDMxMTAvBgNV BAMTKDk0QTU2MTBBNzBGNTQwRjAwM0U4QkJGRjVBMTFBMTQ1RThFRENBRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg4En50SmNL3ed6n6E7zf3ZOiP bX6ck5l9J/rFOfKbtbGNvZ6fRMG6wbCmAO2MsOBvE4SyGyzmbQbUns2C75wIxM/A 0gbh6OzzO4azx+evakC8bUssA+I/cNvqgfjt01oKFzjpDJLuwi9ism1v8RVXR1fj HyCUWFZje1pwU+4SYwTLwnnv2XhZB51EnIfXqFr3i9xN9VmBza3Dekq6bHgKlCMS cJ/S+b/AezgxgBd42XXCXmUXN/RFZZ9BX1vNby3dieNMDctUXmI74SWI1EXVcOLm CuBegjqA9CEolZTTDWXR46vFowJAP6oHX0PjkvoasZraaMa2arOqbRHFuu97AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUlKVhCnD1QPAD6Lv/WhGhRejtytMwHwYDVR0j BBgwFoAUFfvqz67T+fMyWXM49ALIcmMhpcAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzMwM2U2YmItNzM0OS00N2FhLWE0Y2QtNTFkOGEwZTIyMmY2LzAvMTVGQkVBQ0ZB RUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2MzIxQTVDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNUZCRUFDRkFFRDNGOUYzMzI1OTczMzhGNDAyQzg3MjYzMjFB NUMwLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzgzNzMyMzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAhyAwDQYJKoZIhvcNAQELBQADggEBAJaUGmoI/3Ow3MM8zWFppLWicitF7dH5 rt4GHI1gbzijrVRb4OffQhraz6zZQJRrRz+vr26Oz0hG6DAR1f0Q21Peh+jV90uj uT7FTCuZtgBcJ5vWdXGcEbb1/SWF83r4X+y3MkwD/0T5CDPQMnNHKTAaPWZReHAS O/IWs7dLV4nyMRiAZvavpKLKX0vVSa7uLVT+NwCAgucn3N6zZEiqCt4M4CbBsk69 QkQW0nQtTrTQMet8hVxsQp3ihvMrOVouqenrv2fRp6Sbuj92tTQo+6xulWoFdEkg LeuqoDoq6eHN9uVuw9FlhJfGqG7iR7qqE6tUuLLoaQxRjGLHj8q+SMA= -----END CERTIFICATE-----Generated at Wed May 13 13:30:28 2026 by rpki-client