$ rpki-client -vvf rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030363a3a2f34382d3438203d3e203338313536.roa File: 323430353a613534303a313030363a3a2f34382d3438203d3e203338313536.roa (raw, json) Hash identifier: LWtx3txnmj9FjoJjDB/lmvmHZmgHx1jmLc6PPib5at8= Subject key identifier: 18:D5:4B:08:DF:01:A7:C7:95:29:37:86:F0:3F:A2:1D:7E:E9:1D:FD Certificate issuer: /CN=43E1CC61CDE59968FE0810D4937130A67D6541DC Certificate serial: 269524FD3F6979561539B4CD86CE9F65CAEA4991 Authority key identifier: 43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030363a3a2f34382d3438203d3e203338313536.roa Signing time: Sun 03 May 2026 03:05:08 +0000 ROA not before: Sun 03 May 2026 03:00:08 +0000 ROA not after: Sun 02 May 2027 03:05:08 +0000 asID: 38156 IP address blocks: 2405:a540:1006::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:95:24:fd:3f:69:79:56:15:39:b4:cd:86:ce:9f:65:ca:ea:49:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43E1CC61CDE59968FE0810D4937130A67D6541DC Validity Not Before: May 3 03:00:08 2026 GMT Not After : May 2 03:05:08 2027 GMT Subject: CN=18D54B08DF01A7C795293786F03FA21D7EE91DFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b4:98:89:cf:b5:15:fe:3c:83:56:5e:51:67: 17:98:f5:ca:30:cf:34:45:26:59:a7:c6:46:7b:0a: 27:ab:e4:1c:dc:65:52:3e:5f:02:7b:05:c8:8b:fb: 5a:f0:b5:7c:95:d8:5e:bf:2c:75:15:9b:bb:af:75: 44:f6:ce:0f:95:f1:86:41:ec:13:4f:dd:d6:bc:b1: b4:3c:98:a6:db:2e:6e:1f:06:72:5d:b2:12:0b:14: de:0e:c3:77:bc:ad:a7:7a:86:9b:a0:4a:b8:2f:55: e6:24:57:89:bf:cc:40:86:35:51:25:1f:8c:82:b1: 56:23:a4:83:be:ad:3a:9f:ee:c3:d8:a3:65:44:a3: 16:91:a0:8e:6f:47:09:54:4b:9d:c1:2d:1e:b0:b5: 63:f6:e6:8c:67:fe:da:0b:cf:79:e7:97:26:3a:f6: dc:78:82:ae:23:dc:8a:6e:2c:e9:b1:3d:bf:87:93: 7e:b3:90:39:00:68:30:33:19:65:95:c2:1c:18:bf: 04:f7:96:40:c0:18:d0:0c:99:dc:26:2e:22:84:bf: 45:80:ac:c4:3e:64:2b:14:d0:27:89:6a:4e:c1:fb: 0c:1e:b7:4e:1b:f4:cc:97:75:37:d0:85:f4:57:1b: 7e:cf:61:f0:91:b5:0d:f2:62:5c:3a:bc:55:04:09: 2c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D5:4B:08:DF:01:A7:C7:95:29:37:86:F0:3F:A2:1D:7E:E9:1D:FD X509v3 Authority Key Identifier: keyid:43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030363a3a2f34382d3438203d3e203338313536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:a540:1006::/48 Signature Algorithm: sha256WithRSAEncryption 18:d8:22:c8:04:06:45:ab:27:27:cb:b0:75:d6:4a:36:12:a1: 28:8e:33:35:04:04:bd:ab:68:09:eb:32:11:d2:d8:82:64:39: 49:37:db:e4:bc:2a:91:8c:c6:81:b0:f4:e7:6d:f8:a6:37:1b: 2d:06:7e:1d:f1:b4:54:83:8a:b7:6e:22:63:7e:c5:06:66:f0: 3a:d6:90:b3:98:b8:ec:23:9e:7e:df:9b:69:dd:8d:e1:26:ef: 9e:ce:3e:d5:34:97:01:59:8a:8a:a3:04:28:66:57:e8:23:fa: 60:ce:5c:b0:bf:75:96:ee:d6:c4:c2:b6:27:d2:d2:e0:0b:dd: 03:0f:34:ad:d9:1d:b7:37:a0:fe:c2:aa:d3:c0:44:c5:3b:8b: 3f:bf:cc:87:1d:06:66:36:ad:58:b2:c4:aa:16:2e:94:c2:c0: ef:47:7b:9f:b3:66:e2:39:42:99:89:be:a0:de:8a:42:6e:37: 85:2f:4a:fa:1c:52:e8:4c:6a:1b:28:40:27:e8:2f:e7:ed:e2: 1d:68:86:1a:35:40:17:cf:7e:9e:ef:d8:ee:26:2c:25:55:b8: 09:b8:a0:05:ae:e9:79:52:50:f6:20:b1:8e:a6:e2:1e:21:7d: 61:6a:b9:1a:f2:d7:af:b6:11:99:b6:68:7c:a0:c7:e3:77:15: aa:b9:6e:bf -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUJpUk/T9peVYVObTNhs6fZcrqSZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFMUNDNjFDREU1OTk2OEZFMDgxMEQ0OTM3MTMwQTY3 RDY1NDFEQzAeFw0yNjA1MDMwMzAwMDhaFw0yNzA1MDIwMzA1MDhaMDMxMTAvBgNV BAMTKDE4RDU0QjA4REYwMUE3Qzc5NTI5Mzc4NkYwM0ZBMjFEN0VFOTFERkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjtJiJz7UV/jyDVl5RZxeY9cow zzRFJlmnxkZ7Cier5BzcZVI+XwJ7BciL+1rwtXyV2F6/LHUVm7uvdUT2zg+V8YZB 7BNP3da8sbQ8mKbbLm4fBnJdshILFN4Ow3e8rad6hpugSrgvVeYkV4m/zECGNVEl H4yCsVYjpIO+rTqf7sPYo2VEoxaRoI5vRwlUS53BLR6wtWP25oxn/toLz3nnlyY6 9tx4gq4j3IpuLOmxPb+Hk36zkDkAaDAzGWWVwhwYvwT3lkDAGNAMmdwmLiKEv0WA rMQ+ZCsU0CeJak7B+wwet04b9MyXdTfQhfRXG37PYfCRtQ3yYlw6vFUECSxlAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUGNVLCN8Bp8eVKTeG8D+iHX7pHf0wHwYDVR0j BBgwFoAUQ+HMYc3lmWj+CBDUk3Ewpn1lQdwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzVkM2QyMmEtMzM4Yi00MzAyLTkzZjQtYzAyMWVhNmFkNTQ4LzAvNDNFMUNDNjFD REU1OTk2OEZFMDgxMEQ0OTM3MTMwQTY3RDY1NDFEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0UxQ0M2MUNERTU5OTY4RkUwODEwRDQ5MzcxMzBBNjdENjU0 MURDLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M1ZDNkMjJhLTMzOGItNDMwMi05 M2Y0LWMwMjFlYTZhZDU0OC8wLzMyMzQzMDM1M2E2MTM1MzQzMDNhMzEzMDMwMzYz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzEzNTM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAWl QBAGMA0GCSqGSIb3DQEBCwUAA4IBAQAY2CLIBAZFqycny7B11ko2EqEojjM1BAS9 q2gJ6zIR0tiCZDlJN9vkvCqRjMaBsPTnbfimNxstBn4d8bRUg4q3biJjfsUGZvA6 1pCzmLjsI55+35tp3Y3hJu+ezj7VNJcBWYqKowQoZlfoI/pgzlywv3WW7tbEwrYn 0tLgC90DDzSt2R23N6D+wqrTwETFO4s/v8yHHQZmNq1YssSqFi6UwsDvR3ufs2bi OUKZib6g3opCbjeFL0r6HFLoTGobKEAn6C/n7eIdaIYaNUAXz36e79juJiwlVbgJ uKAFrul5UlD2ILGOpuIeIX1harka8tevthGZtmh8oMfjdxWquW6/ -----END CERTIFICATE-----Generated at Wed May 13 10:36:20 2026 by rpki-client