$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383931303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a383931303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: mTwhkY1wSV3Svusp3hM8LY36ChjdkdBZ7w4nLLnT+7Q= Subject key identifier: CB:CF:91:12:61:E1:C1:34:B2:76:7A:37:7D:A5:9D:0D:74:FA:7C:A6 Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0 Certificate serial: 22427D506B98F6CDFCFE475AE7681883407B7F07 Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383931303a3a2f34342d3434203d3e20313333373938.roa Signing time: Sun 03 May 2026 03:04:34 +0000 ROA not before: Sun 03 May 2026 02:59:34 +0000 ROA not after: Sun 02 May 2027 03:04:34 +0000 asID: 133798 IP address blocks: 2402:5680:8910::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:42:7d:50:6b:98:f6:cd:fc:fe:47:5a:e7:68:18:83:40:7b:7f:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0 Validity Not Before: May 3 02:59:34 2026 GMT Not After : May 2 03:04:34 2027 GMT Subject: CN=CBCF911261E1C134B2767A377DA59D0D74FA7CA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bc:f3:fe:03:9b:db:8c:47:c2:88:b3:a9:c4: 8c:21:bd:e6:d4:0d:69:b0:fd:da:5e:3e:c2:40:75: ed:fe:4d:b5:70:79:03:3f:a1:85:24:43:a7:84:cd: f4:53:7c:4f:c0:b8:ae:12:7b:46:2b:42:33:35:1f: 0a:3d:3e:35:cb:43:0b:ac:a9:b0:e5:6c:86:e0:d7: 73:2d:ef:c3:2e:62:32:aa:e3:46:11:f7:74:cb:e6: d8:7d:fe:dd:58:c7:72:ef:09:51:b1:6e:c7:b9:91: a5:22:f8:75:86:89:67:4d:c4:1a:d2:a7:d9:37:7d: 40:00:92:8c:19:0f:c5:31:a9:dc:44:4b:75:5a:94: 12:48:05:4b:54:fd:b3:07:9a:ef:85:09:30:65:94: d7:31:d8:14:f4:62:ca:79:90:f3:e7:6c:48:52:aa: 8b:c5:c0:76:c3:15:ca:7f:cd:fa:67:c2:a2:15:08: 3a:58:da:92:96:00:c5:a0:cf:2c:ec:81:22:50:1d: 23:c8:2c:ea:c3:84:d1:d3:40:46:74:14:57:a6:dc: 4b:38:65:41:4a:32:9b:01:86:2e:e1:e9:db:e9:c5: 99:5c:78:3c:10:7f:8a:00:74:2a:e4:5e:c4:de:1c: a7:24:ed:8b:46:63:22:ae:45:1f:35:3a:02:3f:f2: 0f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:CF:91:12:61:E1:C1:34:B2:76:7A:37:7D:A5:9D:0D:74:FA:7C:A6 X509v3 Authority Key Identifier: keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383931303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:8910::/44 Signature Algorithm: sha256WithRSAEncryption b8:10:80:9f:4d:48:f1:b8:85:97:8f:fc:c1:f7:b0:89:d8:72: 23:da:39:7f:91:aa:67:ed:45:73:c8:87:dc:eb:b7:64:be:dd: c0:65:cb:ef:d7:b4:8a:f1:9c:b1:5e:87:00:74:9f:0c:eb:10: 10:45:84:d9:52:4c:ea:36:e2:61:4c:f2:75:16:53:9c:9c:5a: d7:26:19:17:25:a4:73:57:f4:83:99:43:10:f4:4d:64:29:c4: 2d:56:50:da:69:04:a2:3a:91:00:14:fc:68:3b:84:2e:d6:02: 85:1a:31:c4:6d:c8:1f:19:4c:6a:15:96:1a:0c:89:fe:5e:6a: 3c:58:77:d3:02:a0:42:fc:7e:cb:d4:fd:8a:f8:49:ae:52:8c: f2:a9:c0:d5:fd:fa:4d:3d:d5:65:9b:ae:cf:ec:e8:5b:ad:07: 5d:61:69:24:b9:2f:86:71:51:70:a4:22:73:29:b1:f4:0a:51: 5d:b0:62:4c:26:50:9a:ca:2f:e2:28:86:19:58:d6:0b:78:bb: 40:2f:55:c6:7c:e0:b5:eb:77:54:8f:59:35:b7:85:f0:76:29: f5:2d:b7:82:0d:64:92:ed:23:1d:4c:3a:d8:28:2d:fc:83:2e: 19:3c:0d:a9:d7:aa:85:5c:c7:b4:c6:f3:1c:9b:8a:87:d4:e6: 05:2a:53:49 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUIkJ9UGuY9s38/kda52gYg0B7fwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVGQkVBQ0ZBRUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2 MzIxQTVDMDAeFw0yNjA1MDMwMjU5MzRaFw0yNzA1MDIwMzA0MzRaMDMxMTAvBgNV BAMTKENCQ0Y5MTEyNjFFMUMxMzRCMjc2N0EzNzdEQTU5RDBENzRGQTdDQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5vPP+A5vbjEfCiLOpxIwhvebU DWmw/dpePsJAde3+TbVweQM/oYUkQ6eEzfRTfE/AuK4Se0YrQjM1Hwo9PjXLQwus qbDlbIbg13Mt78MuYjKq40YR93TL5th9/t1Yx3LvCVGxbse5kaUi+HWGiWdNxBrS p9k3fUAAkowZD8UxqdxES3ValBJIBUtU/bMHmu+FCTBllNcx2BT0Ysp5kPPnbEhS qovFwHbDFcp/zfpnwqIVCDpY2pKWAMWgzyzsgSJQHSPILOrDhNHTQEZ0FFem3Es4 ZUFKMpsBhi7h6dvpxZlceDwQf4oAdCrkXsTeHKck7YtGYyKuRR81OgI/8g/RAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUy8+REmHhwTSydno3faWdDXT6fKYwHwYDVR0j BBgwFoAUFfvqz67T+fMyWXM49ALIcmMhpcAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzMwM2U2YmItNzM0OS00N2FhLWE0Y2QtNTFkOGEwZTIyMmY2LzAvMTVGQkVBQ0ZB RUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2MzIxQTVDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNUZCRUFDRkFFRDNGOUYzMzI1OTczMzhGNDAyQzg3MjYzMjFB NUMwLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzgzOTMxMzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAiRAwDQYJKoZIhvcNAQELBQADggEBALgQgJ9NSPG4hZeP/MH3sInYciPaOX+R qmftRXPIh9zrt2S+3cBly+/XtIrxnLFehwB0nwzrEBBFhNlSTOo24mFM8nUWU5yc WtcmGRclpHNX9IOZQxD0TWQpxC1WUNppBKI6kQAU/Gg7hC7WAoUaMcRtyB8ZTGoV lhoMif5eajxYd9MCoEL8fsvU/Yr4Sa5SjPKpwNX9+k091WWbrs/s6FutB11haSS5 L4ZxUXCkInMpsfQKUV2wYkwmUJrKL+IohhlY1gt4u0AvVcZ84LXrd1SPWTW3hfB2 KfUtt4INZJLtIx1MOtgoLfyDLhk8DanXqoVcx7TG8xybiofU5gUqU0k= -----END CERTIFICATE-----Generated at Wed May 13 13:44:49 2026 by rpki-client