$ rpki-client -vvf rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030393a3a2f34382d3438203d3e203338313536.roa File: 323430353a613534303a313030393a3a2f34382d3438203d3e203338313536.roa (raw, json) Hash identifier: FymgtPH5XRJeo2g24rTB6Zt9DBTm0EmGQZ0QaJOmZSE= Subject key identifier: 07:93:FB:51:51:19:E0:B3:10:D6:E2:9E:6D:BE:24:38:44:B3:E1:88 Certificate issuer: /CN=43E1CC61CDE59968FE0810D4937130A67D6541DC Certificate serial: 356E7DFD8FFBC91EFDD1FB1BEE53AE6C40959509 Authority key identifier: 43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030393a3a2f34382d3438203d3e203338313536.roa Signing time: Sun 03 May 2026 03:05:14 +0000 ROA not before: Sun 03 May 2026 03:00:14 +0000 ROA not after: Sun 02 May 2027 03:05:14 +0000 asID: 38156 IP address blocks: 2405:a540:1009::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:46:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:6e:7d:fd:8f:fb:c9:1e:fd:d1:fb:1b:ee:53:ae:6c:40:95:95:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43E1CC61CDE59968FE0810D4937130A67D6541DC Validity Not Before: May 3 03:00:14 2026 GMT Not After : May 2 03:05:14 2027 GMT Subject: CN=0793FB515119E0B310D6E29E6DBE243844B3E188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:90:44:ac:1a:bd:38:73:2a:01:05:71:b2:6b: 27:84:d9:33:1c:99:7f:f2:11:6b:a1:10:29:a0:39: 87:42:77:11:38:e2:a2:0b:95:50:13:52:81:55:23: 6f:1c:35:bb:a1:9d:9c:fd:68:d9:90:19:2e:cd:4e: 6c:df:2b:50:6b:ee:71:c9:03:05:38:13:e0:bb:5c: 1a:64:13:dd:e8:8c:3f:f0:6e:d4:c8:71:42:9e:ed: c0:55:fa:46:64:6f:24:0b:1d:aa:c1:2d:90:e1:08: 27:58:39:de:66:6e:45:7a:f1:b0:eb:bb:37:7a:33: 55:41:0e:0f:bd:19:ba:65:ee:b6:c7:82:be:32:f5: 9e:f7:3d:d4:b2:88:76:9e:36:af:d4:64:d3:08:bd: 1d:d2:de:90:a5:ce:c7:b0:97:a0:59:fe:f0:d0:c5: dc:b3:07:e4:f1:ed:fd:d1:58:f6:3e:cb:57:c8:8d: 9a:e9:61:40:ff:a3:b5:be:cf:89:bd:f6:98:6e:e1: d7:c4:76:2a:b3:f8:91:8b:99:7d:f1:43:88:95:7d: d6:4d:e5:98:ac:4a:64:9d:29:52:b1:62:7a:46:84: bd:2b:d3:18:1e:ff:0d:bd:2c:4e:75:1c:e4:f2:cf: 68:62:3c:08:dd:bd:a9:ff:80:f3:b8:64:4e:0f:9f: 1f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:93:FB:51:51:19:E0:B3:10:D6:E2:9E:6D:BE:24:38:44:B3:E1:88 X509v3 Authority Key Identifier: keyid:43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030393a3a2f34382d3438203d3e203338313536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:a540:1009::/48 Signature Algorithm: sha256WithRSAEncryption 94:cc:c8:2a:1e:d0:72:4a:7d:90:83:58:b5:1f:ea:ff:f2:b6: 95:1a:09:0d:bf:06:8b:0f:07:18:dd:98:c6:a5:d4:fe:4c:45: 5a:c2:87:67:ea:b3:38:75:56:65:59:b3:e2:9d:55:0a:bc:b8: bb:27:e2:33:60:9e:0a:4f:79:5a:1e:18:8c:06:5e:f8:35:dc: 56:a6:36:c8:a0:a0:c5:d2:e4:05:c5:aa:0c:46:73:b8:6f:78: cb:74:dc:55:fb:75:f5:fe:de:88:94:d0:ff:f3:aa:47:6e:cd: 93:48:fb:5e:aa:76:32:40:64:f0:3c:c7:3b:73:b5:39:d0:c1: e2:8b:e6:e9:e6:88:d2:d3:47:5e:76:c8:31:92:3f:44:ae:bf: aa:10:2b:f3:a1:cc:71:e4:00:e1:e2:00:6b:61:02:e8:41:83: 35:1b:73:10:55:50:1f:fe:8d:3c:db:0a:06:84:d7:e1:2d:12: d5:08:27:ca:47:fb:e3:3c:62:e6:51:bb:a8:e8:40:f2:ba:60: aa:af:32:be:4d:67:da:22:38:e4:7d:6f:ba:8e:85:cb:ba:7c: 5f:21:01:fd:3d:56:09:e6:a2:ba:cb:0b:f4:59:a0:d1:a0:bc: 46:04:0e:e0:7b:03:e5:32:80:86:27:3c:c6:40:35:14:59:33: ed:7a:c7:2c -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUNW59/Y/7yR790fsb7lOubECVlQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFMUNDNjFDREU1OTk2OEZFMDgxMEQ0OTM3MTMwQTY3 RDY1NDFEQzAeFw0yNjA1MDMwMzAwMTRaFw0yNzA1MDIwMzA1MTRaMDMxMTAvBgNV BAMTKDA3OTNGQjUxNTExOUUwQjMxMEQ2RTI5RTZEQkUyNDM4NDRCM0UxODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHkESsGr04cyoBBXGyayeE2TMc mX/yEWuhECmgOYdCdxE44qILlVATUoFVI28cNbuhnZz9aNmQGS7NTmzfK1Br7nHJ AwU4E+C7XBpkE93ojD/wbtTIcUKe7cBV+kZkbyQLHarBLZDhCCdYOd5mbkV68bDr uzd6M1VBDg+9Gbpl7rbHgr4y9Z73PdSyiHaeNq/UZNMIvR3S3pClzsewl6BZ/vDQ xdyzB+Tx7f3RWPY+y1fIjZrpYUD/o7W+z4m99phu4dfEdiqz+JGLmX3xQ4iVfdZN 5ZisSmSdKVKxYnpGhL0r0xge/w29LE51HOTyz2hiPAjdvan/gPO4ZE4Pnx+3AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUB5P7UVEZ4LMQ1uKebb4kOESz4YgwHwYDVR0j BBgwFoAUQ+HMYc3lmWj+CBDUk3Ewpn1lQdwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzVkM2QyMmEtMzM4Yi00MzAyLTkzZjQtYzAyMWVhNmFkNTQ4LzAvNDNFMUNDNjFD REU1OTk2OEZFMDgxMEQ0OTM3MTMwQTY3RDY1NDFEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0UxQ0M2MUNERTU5OTY4RkUwODEwRDQ5MzcxMzBBNjdENjU0 MURDLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M1ZDNkMjJhLTMzOGItNDMwMi05 M2Y0LWMwMjFlYTZhZDU0OC8wLzMyMzQzMDM1M2E2MTM1MzQzMDNhMzEzMDMwMzkz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzEzNTM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAWl QBAJMA0GCSqGSIb3DQEBCwUAA4IBAQCUzMgqHtBySn2Qg1i1H+r/8raVGgkNvwaL DwcY3ZjGpdT+TEVawodn6rM4dVZlWbPinVUKvLi7J+IzYJ4KT3laHhiMBl74NdxW pjbIoKDF0uQFxaoMRnO4b3jLdNxV+3X1/t6IlND/86pHbs2TSPteqnYyQGTwPMc7 c7U50MHii+bp5ojS00dedsgxkj9Err+qECvzocxx5ADh4gBrYQLoQYM1G3MQVVAf /o082woGhNfhLRLVCCfKR/vjPGLmUbuo6EDyumCqrzK+TWfaIjjkfW+6joXLunxf IQH9PVYJ5qK6ywv0WaDRoLxGBA7gewPlMoCGJzzGQDUUWTPtescs -----END CERTIFICATE-----Generated at Wed May 13 12:02:00 2026 by rpki-client