$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393961303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a393961303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: i3dKUYs122+kPJ/I/M9ra+phu4Xp4Gqdo1Z2D6rukV4= Subject key identifier: 44:C3:4F:0E:68:67:A1:3F:70:D0:63:E3:EA:96:F5:76:45:DA:30:15 Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0 Certificate serial: 6E11307998B23D164F74DE27A85ED2E43010AF07 Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393961303a3a2f34342d3434203d3e20313333373938.roa Signing time: Sun 03 May 2026 03:04:10 +0000 ROA not before: Sun 03 May 2026 02:59:10 +0000 ROA not after: Sun 02 May 2027 03:04:10 +0000 asID: 133798 IP address blocks: 2402:5680:99a0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:11:30:79:98:b2:3d:16:4f:74:de:27:a8:5e:d2:e4:30:10:af:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0 Validity Not Before: May 3 02:59:10 2026 GMT Not After : May 2 03:04:10 2027 GMT Subject: CN=44C34F0E6867A13F70D063E3EA96F57645DA3015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:51:68:93:f7:d1:66:96:7c:52:f8:09:55:1e: 63:14:b2:df:3d:51:fd:6a:46:65:50:72:fe:07:31: e9:e2:64:f7:bd:4d:eb:36:ae:66:c8:ba:e1:7e:c8: 00:b6:15:e7:8c:2f:99:c1:7c:bd:01:f7:1d:28:d4: e4:59:3f:fb:e5:0a:57:b0:07:6d:4b:2b:a6:14:44: 81:f8:0b:a7:ac:9f:bb:73:92:37:75:99:94:a2:35: 2d:65:13:20:c5:d9:18:d6:57:7e:f5:2c:7a:af:f8: 39:59:38:c4:67:5e:ad:bc:f3:9f:b9:f4:74:70:32: 1b:1d:d1:08:5e:2b:57:71:b6:76:a7:aa:93:bc:e4: d6:e1:ee:7d:ba:7e:ae:8d:fa:8f:6c:0b:f3:ca:c8: 89:f2:14:0b:9a:13:b5:9f:d9:e2:e3:65:52:0b:e8: c2:16:32:53:72:15:1b:d7:38:28:a5:e8:31:5f:b3: 00:db:69:1b:93:ba:22:f2:96:3d:76:25:f2:48:07: 66:15:39:62:5e:bd:47:c6:f2:d7:16:5d:69:dd:d1: 95:3e:b9:e7:86:62:96:67:5a:5d:a6:39:af:d6:54: 9a:f8:93:71:3c:8a:d5:be:56:a4:ac:af:40:de:62: 82:56:3a:b7:84:ae:be:e4:cf:16:7b:3d:16:53:29: cc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C3:4F:0E:68:67:A1:3F:70:D0:63:E3:EA:96:F5:76:45:DA:30:15 X509v3 Authority Key Identifier: keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393961303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:99a0::/44 Signature Algorithm: sha256WithRSAEncryption ac:88:0b:d5:45:9d:6b:d7:ba:10:42:6c:26:91:a5:82:12:59: 7f:36:31:f6:58:ae:d5:dd:2a:08:5d:c5:67:38:41:ad:5d:34: 30:ed:66:53:74:4a:6e:bb:1c:7a:73:ee:a1:c0:cd:4d:3b:cc: 65:1c:47:48:83:0d:f9:27:37:07:07:f7:d4:df:48:31:9c:60: 69:7b:3f:ef:07:b3:43:92:a4:ba:43:74:f8:7d:79:23:9e:40: ed:b0:d2:9c:77:d9:2a:a8:c7:5b:1a:26:77:4a:7b:ec:b3:e1: e5:3d:e7:c5:e7:70:cc:f5:6c:96:8d:67:20:a8:82:ee:41:68: e9:22:50:2d:fa:96:69:dd:40:aa:a8:c7:38:82:a3:61:8e:60: 4c:46:b4:48:06:0c:c4:bf:1e:91:f9:90:50:5e:f9:52:db:da: 95:38:5c:de:67:91:33:80:b6:a3:60:a8:e5:ed:23:f7:88:27: 92:d0:10:91:82:0c:d7:ba:f4:7d:f2:db:0c:8e:78:ee:77:ee: b9:f4:ae:77:fc:48:3a:5f:ca:28:1b:07:d6:63:60:99:97:9d: 38:6e:b4:25:eb:7d:c7:b2:fc:94:f4:57:91:bd:69:45:50:90: 85:d3:9f:f9:f3:c6:60:ef:3d:67:ff:26:b7:39:fa:4b:98:08: 59:7b:2f:44 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUbhEweZiyPRZPdN4nqF7S5DAQrwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVGQkVBQ0ZBRUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2 MzIxQTVDMDAeFw0yNjA1MDMwMjU5MTBaFw0yNzA1MDIwMzA0MTBaMDMxMTAvBgNV BAMTKDQ0QzM0RjBFNjg2N0ExM0Y3MEQwNjNFM0VBOTZGNTc2NDVEQTMwMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWUWiT99FmlnxS+AlVHmMUst89 Uf1qRmVQcv4HMeniZPe9Tes2rmbIuuF+yAC2FeeML5nBfL0B9x0o1ORZP/vlClew B21LK6YURIH4C6esn7tzkjd1mZSiNS1lEyDF2RjWV371LHqv+DlZOMRnXq2885+5 9HRwMhsd0QheK1dxtnanqpO85Nbh7n26fq6N+o9sC/PKyInyFAuaE7Wf2eLjZVIL 6MIWMlNyFRvXOCil6DFfswDbaRuTuiLylj12JfJIB2YVOWJevUfG8tcWXWnd0ZU+ ueeGYpZnWl2mOa/WVJr4k3E8itW+VqSsr0DeYoJWOreErr7kzxZ7PRZTKcyhAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQURMNPDmhnoT9w0GPj6pb1dkXaMBUwHwYDVR0j BBgwFoAUFfvqz67T+fMyWXM49ALIcmMhpcAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzMwM2U2YmItNzM0OS00N2FhLWE0Y2QtNTFkOGEwZTIyMmY2LzAvMTVGQkVBQ0ZB RUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2MzIxQTVDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNUZCRUFDRkFFRDNGOUYzMzI1OTczMzhGNDAyQzg3MjYzMjFB NUMwLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzkzOTYxMzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAmaAwDQYJKoZIhvcNAQELBQADggEBAKyIC9VFnWvXuhBCbCaRpYISWX82MfZY rtXdKghdxWc4Qa1dNDDtZlN0Sm67HHpz7qHAzU07zGUcR0iDDfknNwcH99TfSDGc YGl7P+8Hs0OSpLpDdPh9eSOeQO2w0px32Sqox1saJndKe+yz4eU958XncMz1bJaN ZyCogu5BaOkiUC36lmndQKqoxziCo2GOYExGtEgGDMS/HpH5kFBe+VLb2pU4XN5n kTOAtqNgqOXtI/eIJ5LQEJGCDNe69H3y2wyOeO537rn0rnf8SDpfyigbB9ZjYJmX nThutCXrfcey/JT0V5G9aUVQkIXTn/nzxmDvPWf/Jrc5+kuYCFl7L0Q= -----END CERTIFICATE-----Generated at Wed May 13 12:21:13 2026 by rpki-client