$ rpki-client -vvf rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313031313a3a2f34382d3438203d3e203338313536.roa File: 323430353a613534303a313031313a3a2f34382d3438203d3e203338313536.roa (raw, json) Hash identifier: /s6NqXf3Az+33qCBWrV7/rHS8XMqrqM1zxdpU1dDV14= Subject key identifier: DD:D3:EF:7F:5A:63:B6:A7:10:07:A3:03:6E:CD:D0:2B:8E:44:A5:3C Certificate issuer: /CN=43E1CC61CDE59968FE0810D4937130A67D6541DC Certificate serial: 613F2C6D5B49B6C1CE26B6EC92659DC1FE658CDB Authority key identifier: 43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313031313a3a2f34382d3438203d3e203338313536.roa Signing time: Sun 03 May 2026 03:05:08 +0000 ROA not before: Sun 03 May 2026 03:00:08 +0000 ROA not after: Sun 02 May 2027 03:05:08 +0000 asID: 38156 IP address blocks: 2405:a540:1011::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:46:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:3f:2c:6d:5b:49:b6:c1:ce:26:b6:ec:92:65:9d:c1:fe:65:8c:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43E1CC61CDE59968FE0810D4937130A67D6541DC Validity Not Before: May 3 03:00:08 2026 GMT Not After : May 2 03:05:08 2027 GMT Subject: CN=DDD3EF7F5A63B6A71007A3036ECDD02B8E44A53C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ff:7d:7b:23:f3:6a:be:60:2b:8c:d6:f4:8f: 1e:00:23:f1:63:79:f5:6a:13:68:ad:f9:b7:c0:cc: f3:43:9c:92:7b:32:69:37:e3:e5:b0:fc:9c:52:8f: 7e:e5:bd:62:1e:04:65:45:98:ea:6f:1d:28:61:6c: be:28:66:a1:91:4e:a6:7e:b2:a4:bb:da:38:fd:99: 42:de:93:b5:af:ca:7c:84:aa:2a:65:60:5a:30:2e: ba:b1:b6:3b:ba:b8:36:96:72:4d:1f:3c:6b:de:2a: 0f:33:d2:3d:c3:85:51:e1:ca:92:e8:2c:c2:6b:9c: 38:a2:a2:7d:06:ba:e9:29:c6:c3:46:9b:d9:c2:67: 20:3f:cc:8f:70:a4:db:3a:49:ed:d3:3b:e9:25:81: 2a:0b:82:18:2d:74:4e:a1:9f:af:37:b0:8d:45:75: 03:59:59:60:b9:ce:14:09:f5:0b:ab:25:95:fc:76: 5b:b4:cc:c0:77:50:d2:5a:4b:5a:60:9f:e5:c4:4b: 3a:89:31:2b:30:23:f1:61:a6:58:ab:47:0e:0a:24: 14:97:20:8b:3c:3a:3a:99:4f:ba:8a:12:7d:d9:8a: 68:d4:87:3c:70:c1:c4:0d:5b:7f:a7:50:73:98:a4: 36:b5:09:2e:73:8e:20:fb:32:8f:53:06:a2:38:46: 0e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D3:EF:7F:5A:63:B6:A7:10:07:A3:03:6E:CD:D0:2B:8E:44:A5:3C X509v3 Authority Key Identifier: keyid:43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313031313a3a2f34382d3438203d3e203338313536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:a540:1011::/48 Signature Algorithm: sha256WithRSAEncryption 25:81:cc:9b:7b:50:0a:3e:2d:41:df:a8:ed:3f:dc:c7:d2:51: a3:51:5f:94:68:23:bf:33:2a:2d:c5:f0:77:8b:a0:db:4a:78: 19:d1:f7:44:3d:1e:75:dc:cc:42:16:2a:30:46:46:a2:8e:10: 51:15:bf:10:bd:ab:73:3b:26:c0:38:ec:9e:e2:c6:6d:5e:55: e0:16:b1:a7:00:71:17:71:c5:c4:d8:91:45:cf:eb:18:bd:1e: ef:28:63:c2:4c:36:06:40:0c:58:5f:af:87:62:9d:c9:fb:3f: 19:3b:3e:e6:30:6b:7f:c9:a6:5f:71:c0:45:80:42:02:f8:7e: 82:d7:e2:55:99:d4:6d:70:41:ea:a1:77:c2:9e:5e:54:9d:2d: eb:51:e2:84:e9:0a:78:6c:00:bb:09:d7:f7:59:b8:1a:85:b0: aa:51:58:47:8c:61:2b:01:1e:f4:18:14:9e:bb:1a:90:8d:0b: 6c:b9:7d:61:a3:f7:88:ee:f2:44:de:02:01:1d:91:51:23:67: 2d:b4:92:df:c7:c7:c2:17:c0:16:f6:5f:34:0e:03:32:c1:4c: 71:56:31:aa:f3:12:57:3d:43:67:e4:61:12:9f:a5:13:fa:c9: 21:72:15:c3:a6:af:5c:65:30:1d:39:9b:dc:08:31:5a:cb:3c: 80:0b:7e:5c -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUYT8sbVtJtsHOJrbskmWdwf5ljNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFMUNDNjFDREU1OTk2OEZFMDgxMEQ0OTM3MTMwQTY3 RDY1NDFEQzAeFw0yNjA1MDMwMzAwMDhaFw0yNzA1MDIwMzA1MDhaMDMxMTAvBgNV BAMTKERERDNFRjdGNUE2M0I2QTcxMDA3QTMwMzZFQ0REMDJCOEU0NEE1M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm/317I/NqvmArjNb0jx4AI/Fj efVqE2it+bfAzPNDnJJ7Mmk34+Ww/JxSj37lvWIeBGVFmOpvHShhbL4oZqGRTqZ+ sqS72jj9mULek7WvynyEqiplYFowLrqxtju6uDaWck0fPGveKg8z0j3DhVHhypLo LMJrnDiion0GuukpxsNGm9nCZyA/zI9wpNs6Se3TO+klgSoLghgtdE6hn683sI1F dQNZWWC5zhQJ9QurJZX8dlu0zMB3UNJaS1pgn+XESzqJMSswI/FhplirRw4KJBSX IIs8OjqZT7qKEn3ZimjUhzxwwcQNW3+nUHOYpDa1CS5zjiD7Mo9TBqI4Rg4hAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU3dPvf1pjtqcQB6MDbs3QK45EpTwwHwYDVR0j BBgwFoAUQ+HMYc3lmWj+CBDUk3Ewpn1lQdwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzVkM2QyMmEtMzM4Yi00MzAyLTkzZjQtYzAyMWVhNmFkNTQ4LzAvNDNFMUNDNjFD REU1OTk2OEZFMDgxMEQ0OTM3MTMwQTY3RDY1NDFEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0UxQ0M2MUNERTU5OTY4RkUwODEwRDQ5MzcxMzBBNjdENjU0 MURDLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M1ZDNkMjJhLTMzOGItNDMwMi05 M2Y0LWMwMjFlYTZhZDU0OC8wLzMyMzQzMDM1M2E2MTM1MzQzMDNhMzEzMDMxMzEz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzEzNTM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAWl QBARMA0GCSqGSIb3DQEBCwUAA4IBAQAlgcybe1AKPi1B36jtP9zH0lGjUV+UaCO/ MyotxfB3i6DbSngZ0fdEPR513MxCFiowRkaijhBRFb8QvatzOybAOOye4sZtXlXg FrGnAHEXccXE2JFFz+sYvR7vKGPCTDYGQAxYX6+HYp3J+z8ZOz7mMGt/yaZfccBF gEIC+H6C1+JVmdRtcEHqoXfCnl5UnS3rUeKE6Qp4bAC7Cdf3WbgahbCqUVhHjGEr AR70GBSeuxqQjQtsuX1ho/eI7vJE3gIBHZFRI2cttJLfx8fCF8AW9l80DgMywUxx VjGq8xJXPUNn5GESn6UT+skhchXDpq9cZTAdOZvcCDFayzyAC35c -----END CERTIFICATE-----Generated at Wed May 13 12:51:21 2026 by rpki-client