$ rpki-client -vvf rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030643a3a2f34382d3438203d3e203338313536.roa File: 323430353a613534303a313030643a3a2f34382d3438203d3e203338313536.roa (raw, json) Hash identifier: cpyNUFqnnPw0hoOUNBzdPXv7w/EpVs/cMCjjRluZNLo= Subject key identifier: 63:7B:CC:94:D0:33:7F:D6:E2:6E:4B:69:CD:99:E2:FF:DE:D4:CE:69 Certificate issuer: /CN=43E1CC61CDE59968FE0810D4937130A67D6541DC Certificate serial: 27418D256F9C663622A8D216CE25299D481F14D2 Authority key identifier: 43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030643a3a2f34382d3438203d3e203338313536.roa Signing time: Sun 03 May 2026 03:05:09 +0000 ROA not before: Sun 03 May 2026 03:00:09 +0000 ROA not after: Sun 02 May 2027 03:05:09 +0000 asID: 38156 IP address blocks: 2405:a540:100d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:41:8d:25:6f:9c:66:36:22:a8:d2:16:ce:25:29:9d:48:1f:14:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43E1CC61CDE59968FE0810D4937130A67D6541DC Validity Not Before: May 3 03:00:09 2026 GMT Not After : May 2 03:05:09 2027 GMT Subject: CN=637BCC94D0337FD6E26E4B69CD99E2FFDED4CE69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b4:f1:b8:96:14:a4:8f:34:e0:29:00:8d:72: 62:46:31:a2:ad:da:a6:2d:0a:39:29:83:ee:f3:5b: 64:92:c5:66:7e:7b:59:9c:03:59:5e:7b:60:bd:b9: 8d:67:e3:be:81:6c:59:31:ed:35:c8:c6:51:e1:81: 47:cb:cc:eb:ee:27:6e:0e:01:57:8d:6d:e7:d7:dc: 4c:ab:bc:70:45:7b:36:13:a2:df:d3:71:54:8a:40: ad:4c:07:ec:3e:58:7c:0d:8b:71:4b:79:f2:0e:0a: 4b:0e:a2:75:f6:e7:7f:59:1f:82:38:a0:65:79:62: 63:65:d6:36:72:19:e9:4b:bb:42:d1:5c:b2:d3:04: 91:be:93:5b:08:c6:7f:95:b8:ae:a9:d8:be:74:d2: f5:75:b6:31:23:32:cb:79:de:a0:e0:23:ab:18:0e: 00:5e:05:91:cc:99:b3:29:7c:ac:bd:95:a7:cf:93: 6f:c2:8a:3e:b5:0a:bb:0c:e6:fb:3e:b0:25:8b:51: e1:7f:2c:73:7c:2f:18:7c:f8:a8:0d:47:3c:71:7e: 7c:84:ef:f7:4a:a6:60:16:0f:00:a6:79:24:4f:c8: a4:30:c3:66:ab:e8:f3:47:75:d2:02:e2:ae:8e:76: 3b:50:af:bd:9b:49:1f:df:90:b9:20:d5:12:86:73: 69:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:7B:CC:94:D0:33:7F:D6:E2:6E:4B:69:CD:99:E2:FF:DE:D4:CE:69 X509v3 Authority Key Identifier: keyid:43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030643a3a2f34382d3438203d3e203338313536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:a540:100d::/48 Signature Algorithm: sha256WithRSAEncryption 51:8d:b9:8f:98:20:5c:13:13:9b:02:32:90:c6:87:02:54:66: 97:fd:02:a6:ca:d1:f1:2b:77:30:a6:6b:de:f4:03:d8:0f:e8: c6:ab:6d:20:b9:bc:81:a9:7a:ef:78:5e:9d:ef:e1:fa:ce:6d: d1:97:9c:de:69:34:58:a1:ab:04:0f:72:0b:5e:db:6a:5a:f4: 43:d3:4e:99:72:01:6e:9b:9a:ce:6e:ba:ea:65:62:7d:72:77: 63:f5:92:7e:37:ec:42:32:0e:9f:fc:70:4a:3a:14:4b:77:75: bb:af:b5:1b:bd:2f:8e:1b:43:f0:ed:5f:57:c0:70:ab:ea:7f: 4a:56:69:be:75:4a:31:2a:9a:d1:79:66:52:b8:ef:0e:df:21: 7c:59:ef:f1:c5:3c:7f:6e:ab:4d:53:95:68:fa:db:fd:c3:84: 71:06:14:de:f2:ed:80:78:78:df:b4:22:a0:b1:d6:a7:fd:30: 2b:e7:60:03:a2:9d:f7:ca:6e:4e:67:ec:ea:86:78:13:a7:49: 1b:ee:dc:10:d4:19:74:4d:8b:eb:b2:c5:d1:7f:88:d5:46:89: 80:ae:e1:3d:08:c6:d0:58:03:83:ed:81:46:78:4a:07:14:f1: 9d:55:67:07:af:f5:c1:48:45:6c:cc:f7:ce:1c:8a:86:9e:6c: cb:f6:cb:f3 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUJ0GNJW+cZjYiqNIWziUpnUgfFNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFMUNDNjFDREU1OTk2OEZFMDgxMEQ0OTM3MTMwQTY3 RDY1NDFEQzAeFw0yNjA1MDMwMzAwMDlaFw0yNzA1MDIwMzA1MDlaMDMxMTAvBgNV BAMTKDYzN0JDQzk0RDAzMzdGRDZFMjZFNEI2OUNEOTlFMkZGREVENENFNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNtPG4lhSkjzTgKQCNcmJGMaKt 2qYtCjkpg+7zW2SSxWZ+e1mcA1lee2C9uY1n476BbFkx7TXIxlHhgUfLzOvuJ24O AVeNbefX3EyrvHBFezYTot/TcVSKQK1MB+w+WHwNi3FLefIOCksOonX2539ZH4I4 oGV5YmNl1jZyGelLu0LRXLLTBJG+k1sIxn+VuK6p2L500vV1tjEjMst53qDgI6sY DgBeBZHMmbMpfKy9lafPk2/Cij61CrsM5vs+sCWLUeF/LHN8Lxh8+KgNRzxxfnyE 7/dKpmAWDwCmeSRPyKQww2ar6PNHddIC4q6OdjtQr72bSR/fkLkg1RKGc2mlAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUY3vMlNAzf9bibktpzZni/97UzmkwHwYDVR0j BBgwFoAUQ+HMYc3lmWj+CBDUk3Ewpn1lQdwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzVkM2QyMmEtMzM4Yi00MzAyLTkzZjQtYzAyMWVhNmFkNTQ4LzAvNDNFMUNDNjFD REU1OTk2OEZFMDgxMEQ0OTM3MTMwQTY3RDY1NDFEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0UxQ0M2MUNERTU5OTY4RkUwODEwRDQ5MzcxMzBBNjdENjU0 MURDLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M1ZDNkMjJhLTMzOGItNDMwMi05 M2Y0LWMwMjFlYTZhZDU0OC8wLzMyMzQzMDM1M2E2MTM1MzQzMDNhMzEzMDMwNjQz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzEzNTM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAWl QBANMA0GCSqGSIb3DQEBCwUAA4IBAQBRjbmPmCBcExObAjKQxocCVGaX/QKmytHx K3cwpmve9APYD+jGq20gubyBqXrveF6d7+H6zm3Rl5zeaTRYoasED3ILXttqWvRD 006ZcgFum5rObrrqZWJ9cndj9ZJ+N+xCMg6f/HBKOhRLd3W7r7UbvS+OG0Pw7V9X wHCr6n9KVmm+dUoxKprReWZSuO8O3yF8We/xxTx/bqtNU5Vo+tv9w4RxBhTe8u2A eHjftCKgsdan/TAr52ADop33ym5OZ+zqhngTp0kb7twQ1Bl0TYvrssXRf4jVRomA ruE9CMbQWAOD7YFGeEoHFPGdVWcHr/XBSEVszPfOHIqGnmzL9svz -----END CERTIFICATE-----Generated at Wed May 13 09:27:17 2026 by rpki-client