$ rpki-client -vvf rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030373a3a2f34382d3438203d3e203338313536.roa File: 323430353a613534303a313030373a3a2f34382d3438203d3e203338313536.roa (raw, json) Hash identifier: SUQFDo/3me7K6mK7WbxUn/2b9SHI+OuxemQ1myZfogM= Subject key identifier: 9E:CC:06:4C:26:F1:10:BE:4C:6E:5E:07:CC:64:B6:F0:D9:E5:F0:09 Certificate issuer: /CN=43E1CC61CDE59968FE0810D4937130A67D6541DC Certificate serial: 32034D11D672D9C4DAFA951F295F41ADB4EA6F94 Authority key identifier: 43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030373a3a2f34382d3438203d3e203338313536.roa Signing time: Sun 03 May 2026 03:05:07 +0000 ROA not before: Sun 03 May 2026 03:00:07 +0000 ROA not after: Sun 02 May 2027 03:05:07 +0000 asID: 38156 IP address blocks: 2405:a540:1007::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:46:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:03:4d:11:d6:72:d9:c4:da:fa:95:1f:29:5f:41:ad:b4:ea:6f:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43E1CC61CDE59968FE0810D4937130A67D6541DC Validity Not Before: May 3 03:00:07 2026 GMT Not After : May 2 03:05:07 2027 GMT Subject: CN=9ECC064C26F110BE4C6E5E07CC64B6F0D9E5F009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:52:c1:6d:26:40:ec:a4:87:6b:cc:ed:5a:b7: c3:62:c4:0a:61:ff:1e:11:af:b4:4f:70:3a:a6:ff: fa:91:20:f4:17:69:a7:d6:62:7d:10:1a:bb:69:6f: af:37:6a:6b:5a:de:53:06:80:75:53:70:07:27:a4: 1c:43:b1:d0:0b:37:11:bb:fd:7a:6a:01:50:6c:8b: fb:c8:b6:e2:a8:f0:a5:1a:7c:de:ef:af:c7:45:ca: 99:be:72:e3:61:67:e5:f6:48:8b:30:f1:0b:d0:d0: e1:ef:53:08:26:77:7a:ab:4b:cb:3a:e2:f9:3b:f5: ff:3c:0b:d9:1e:d2:9a:dc:57:38:45:1f:d7:70:f5: c4:2a:59:86:54:0a:d9:42:f7:79:52:9d:ab:7f:bc: 42:94:9a:cb:fa:d8:11:f7:8a:b2:c8:8b:e8:da:b5: 82:41:16:29:c5:c8:d6:db:27:4b:04:55:79:98:f1: 61:aa:69:8d:ba:69:9e:12:50:a4:4f:ad:d6:e6:95: 86:8c:e4:0a:47:1f:e0:3d:a1:f5:e2:b6:3e:6f:60: e6:c1:07:51:cc:ec:42:60:f3:f2:19:71:36:fe:bf: f2:c8:b6:33:db:ea:a4:97:d1:46:54:07:33:6c:c3: 8b:4b:28:d4:50:6f:28:71:88:ee:08:53:c2:91:18: 52:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:CC:06:4C:26:F1:10:BE:4C:6E:5E:07:CC:64:B6:F0:D9:E5:F0:09 X509v3 Authority Key Identifier: keyid:43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030373a3a2f34382d3438203d3e203338313536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:a540:1007::/48 Signature Algorithm: sha256WithRSAEncryption 04:f3:6c:91:9c:09:88:75:24:23:43:07:86:5f:60:12:d0:9c: d2:37:4f:fd:db:f1:8e:74:e7:a6:97:4c:90:61:ee:90:e9:bf: 2c:12:62:04:20:01:fe:62:b6:91:d8:84:92:91:8a:f9:cf:ae: e5:b3:c2:9f:5b:f3:7b:61:9a:f2:18:e4:fd:e6:be:38:3e:25: 22:31:5b:b0:80:7a:15:7a:42:8d:1c:44:cb:74:28:28:f8:f0: 03:95:16:c8:49:db:cf:4a:48:ce:4c:1a:f7:52:db:2e:df:e6: 99:0d:f4:f7:38:82:ed:ba:35:94:a7:48:a4:05:6e:48:0e:b1: c4:a6:e2:4f:00:14:c7:f4:c8:cc:57:be:4e:ba:ef:6a:79:ac: f1:74:72:fa:9c:03:07:f8:55:b2:66:f5:37:65:1b:75:3b:f4: af:83:1b:45:de:53:a3:71:0f:12:8a:d8:4d:d8:ed:e3:92:9c: 83:2e:38:d9:1b:d1:76:a2:fe:c8:2e:04:5a:52:2a:8d:bc:4c: d5:a2:b7:06:3b:f5:4f:4e:fd:9b:8a:ab:36:33:f3:f6:c2:2c: 72:f0:ba:3c:ab:26:7a:78:71:a7:f9:57:43:5f:b4:d2:96:a2: 2d:92:19:ae:4c:cd:a3:b7:ea:82:45:11:a2:74:59:c2:54:0a: a5:6a:1d:d6 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUMgNNEdZy2cTa+pUfKV9BrbTqb5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFMUNDNjFDREU1OTk2OEZFMDgxMEQ0OTM3MTMwQTY3 RDY1NDFEQzAeFw0yNjA1MDMwMzAwMDdaFw0yNzA1MDIwMzA1MDdaMDMxMTAvBgNV BAMTKDlFQ0MwNjRDMjZGMTEwQkU0QzZFNUUwN0NDNjRCNkYwRDlFNUYwMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnUsFtJkDspIdrzO1at8NixAph /x4Rr7RPcDqm//qRIPQXaafWYn0QGrtpb683amta3lMGgHVTcAcnpBxDsdALNxG7 /XpqAVBsi/vItuKo8KUafN7vr8dFypm+cuNhZ+X2SIsw8QvQ0OHvUwgmd3qrS8s6 4vk79f88C9ke0prcVzhFH9dw9cQqWYZUCtlC93lSnat/vEKUmsv62BH3irLIi+ja tYJBFinFyNbbJ0sEVXmY8WGqaY26aZ4SUKRPrdbmlYaM5ApHH+A9ofXitj5vYObB B1HM7EJg8/IZcTb+v/LItjPb6qSX0UZUBzNsw4tLKNRQbyhxiO4IU8KRGFIPAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUnswGTCbxEL5Mbl4HzGS28Nnl8AkwHwYDVR0j BBgwFoAUQ+HMYc3lmWj+CBDUk3Ewpn1lQdwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzVkM2QyMmEtMzM4Yi00MzAyLTkzZjQtYzAyMWVhNmFkNTQ4LzAvNDNFMUNDNjFD REU1OTk2OEZFMDgxMEQ0OTM3MTMwQTY3RDY1NDFEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0UxQ0M2MUNERTU5OTY4RkUwODEwRDQ5MzcxMzBBNjdENjU0 MURDLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M1ZDNkMjJhLTMzOGItNDMwMi05 M2Y0LWMwMjFlYTZhZDU0OC8wLzMyMzQzMDM1M2E2MTM1MzQzMDNhMzEzMDMwMzcz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzEzNTM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAWl QBAHMA0GCSqGSIb3DQEBCwUAA4IBAQAE82yRnAmIdSQjQweGX2AS0JzSN0/92/GO dOeml0yQYe6Q6b8sEmIEIAH+YraR2ISSkYr5z67ls8KfW/N7YZryGOT95r44PiUi MVuwgHoVekKNHETLdCgo+PADlRbISdvPSkjOTBr3Utsu3+aZDfT3OILtujWUp0ik BW5IDrHEpuJPABTH9MjMV75Ouu9qeazxdHL6nAMH+FWyZvU3ZRt1O/SvgxtF3lOj cQ8SithN2O3jkpyDLjjZG9F2ov7ILgRaUiqNvEzVorcGO/VPTv2biqs2M/P2wixy 8Lo8qyZ6eHGn+VdDX7TSlqItkhmuTM2jt+qCRRGidFnCVAqlah3W -----END CERTIFICATE-----Generated at Wed May 13 11:18:52 2026 by rpki-client