$ rpki-client -vvf rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030333a3a2f34382d3438203d3e203338313536.roa File: 323430353a613534303a313030333a3a2f34382d3438203d3e203338313536.roa (raw, json) Hash identifier: Cigucd/NI7znq4aJY8FxoWkyWnlcJwSTYzMKj0Cfavc= Subject key identifier: DA:C3:BB:68:C7:E7:9A:9C:48:81:07:38:53:DD:BC:06:4B:B2:0A:93 Certificate issuer: /CN=43E1CC61CDE59968FE0810D4937130A67D6541DC Certificate serial: 3D3DA5DEEE55BAD28EFAA18BE2811732D573B5DB Authority key identifier: 43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030333a3a2f34382d3438203d3e203338313536.roa Signing time: Sun 03 May 2026 03:05:10 +0000 ROA not before: Sun 03 May 2026 03:00:10 +0000 ROA not after: Sun 02 May 2027 03:05:10 +0000 asID: 38156 IP address blocks: 2405:a540:1003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:46:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:3d:a5:de:ee:55:ba:d2:8e:fa:a1:8b:e2:81:17:32:d5:73:b5:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43E1CC61CDE59968FE0810D4937130A67D6541DC Validity Not Before: May 3 03:00:10 2026 GMT Not After : May 2 03:05:10 2027 GMT Subject: CN=DAC3BB68C7E79A9C4881073853DDBC064BB20A93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2f:ed:28:27:5d:1e:36:81:6f:d8:9f:50:15: a3:cf:d9:e7:31:03:26:3c:37:3f:4d:a3:79:3b:41: b8:8f:f0:6f:35:c9:f4:5d:d2:68:2d:e4:4c:5a:9d: 83:18:94:32:1d:29:27:cc:61:8b:b9:a5:a2:7c:c1: a9:f3:08:11:91:b9:fe:6d:1b:29:1d:c9:fc:31:93: 25:b7:d8:f3:05:17:b9:5e:20:c7:63:4d:7c:96:dd: b8:41:ef:67:03:95:3c:82:d1:43:6c:90:26:1b:15: 59:4b:a6:31:7b:50:1b:b2:08:fe:f6:57:6d:dc:a1: 9d:1e:1a:f0:25:05:df:a6:da:c5:e3:84:df:b9:c7: 35:ee:34:bb:f8:98:37:62:13:33:b5:0a:d9:76:02: bf:1b:1a:6d:88:87:c0:8d:69:9c:5f:db:4c:79:48: 42:26:55:e2:71:80:06:b5:82:ed:39:ef:7f:c3:d3: ef:95:f1:97:a9:ed:06:83:aa:4f:0a:68:9a:cb:1b: 5f:84:9b:d0:38:ef:51:78:35:ce:f0:b3:f4:8b:a3: 3a:1e:e2:d7:38:b2:01:0a:a7:5a:1c:a8:0f:89:f4: ff:5d:79:79:f1:b5:e3:ae:95:fa:65:96:40:a3:6d: 9b:fc:3f:26:5d:fa:ff:3b:e7:a7:38:23:98:e1:35: a5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C3:BB:68:C7:E7:9A:9C:48:81:07:38:53:DD:BC:06:4B:B2:0A:93 X509v3 Authority Key Identifier: keyid:43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030333a3a2f34382d3438203d3e203338313536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:a540:1003::/48 Signature Algorithm: sha256WithRSAEncryption 9d:67:cd:16:fa:5c:8f:0e:50:6f:40:4f:56:92:19:3e:60:35: ac:05:d0:2c:39:03:33:4d:31:d4:fd:17:58:5d:fc:b1:86:5c: 89:ce:45:21:88:ac:3f:01:4f:ee:1a:42:56:c0:0e:eb:14:a6: e8:44:b1:d0:95:7b:c2:11:da:95:ad:e2:37:85:81:1c:0c:50: f3:5b:60:8c:52:4a:d9:f7:87:14:c9:2d:23:6e:72:75:35:03: b3:34:4d:e3:fc:3e:c6:6c:71:df:4f:cd:3e:8b:64:87:74:76: 8b:63:5a:db:f2:89:22:eb:92:04:51:b7:fc:26:d5:89:4f:0c: b6:91:70:fc:df:87:5d:f6:f6:21:6b:ac:e8:de:b7:28:3c:7f: 27:11:cf:8b:d6:7d:62:d6:d1:e3:b0:aa:6f:0a:91:d0:ea:ac: 38:24:f2:ad:e6:f3:83:c0:f9:64:a4:9a:21:6e:6d:41:01:f3: 76:66:24:3a:7a:d5:d4:50:15:6e:6c:da:60:0a:b6:b6:b0:20: 4f:b2:70:43:8d:29:dc:7e:21:f2:60:25:76:2e:88:9e:ab:cc: c1:ee:56:35:a6:43:f9:e0:3b:95:4c:29:44:e2:7d:1e:44:d1: 8b:59:27:0e:dd:78:33:6f:68:08:41:63:21:72:1e:c2:69:6a: 4f:26:86:23 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUPT2l3u5VutKO+qGL4oEXMtVztdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFMUNDNjFDREU1OTk2OEZFMDgxMEQ0OTM3MTMwQTY3 RDY1NDFEQzAeFw0yNjA1MDMwMzAwMTBaFw0yNzA1MDIwMzA1MTBaMDMxMTAvBgNV BAMTKERBQzNCQjY4QzdFNzlBOUM0ODgxMDczODUzRERCQzA2NEJCMjBBOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtL+0oJ10eNoFv2J9QFaPP2ecx AyY8Nz9No3k7QbiP8G81yfRd0mgt5ExanYMYlDIdKSfMYYu5paJ8wanzCBGRuf5t GykdyfwxkyW32PMFF7leIMdjTXyW3bhB72cDlTyC0UNskCYbFVlLpjF7UBuyCP72 V23coZ0eGvAlBd+m2sXjhN+5xzXuNLv4mDdiEzO1Ctl2Ar8bGm2Ih8CNaZxf20x5 SEImVeJxgAa1gu0573/D0++V8Zep7QaDqk8KaJrLG1+Em9A471F4Nc7ws/SLozoe 4tc4sgEKp1ocqA+J9P9deXnxteOulfpllkCjbZv8PyZd+v8756c4I5jhNaWdAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU2sO7aMfnmpxIgQc4U928BkuyCpMwHwYDVR0j BBgwFoAUQ+HMYc3lmWj+CBDUk3Ewpn1lQdwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzVkM2QyMmEtMzM4Yi00MzAyLTkzZjQtYzAyMWVhNmFkNTQ4LzAvNDNFMUNDNjFD REU1OTk2OEZFMDgxMEQ0OTM3MTMwQTY3RDY1NDFEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0UxQ0M2MUNERTU5OTY4RkUwODEwRDQ5MzcxMzBBNjdENjU0 MURDLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M1ZDNkMjJhLTMzOGItNDMwMi05 M2Y0LWMwMjFlYTZhZDU0OC8wLzMyMzQzMDM1M2E2MTM1MzQzMDNhMzEzMDMwMzMz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzEzNTM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAWl QBADMA0GCSqGSIb3DQEBCwUAA4IBAQCdZ80W+lyPDlBvQE9Wkhk+YDWsBdAsOQMz TTHU/RdYXfyxhlyJzkUhiKw/AU/uGkJWwA7rFKboRLHQlXvCEdqVreI3hYEcDFDz W2CMUkrZ94cUyS0jbnJ1NQOzNE3j/D7GbHHfT80+i2SHdHaLY1rb8oki65IEUbf8 JtWJTwy2kXD834dd9vYha6zo3rcoPH8nEc+L1n1i1tHjsKpvCpHQ6qw4JPKt5vOD wPlkpJohbm1BAfN2ZiQ6etXUUBVubNpgCra2sCBPsnBDjSncfiHyYCV2Loieq8zB 7lY1pkP54DuVTClE4n0eRNGLWScO3Xgzb2gIQWMhch7CaWpPJoYj -----END CERTIFICATE-----Generated at Wed May 13 12:06:23 2026 by rpki-client