$ rpki-client -vvf rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/323430363a343534303a3a2f33322d3332203d3e20313430343634.roa File: 323430363a343534303a3a2f33322d3332203d3e20313430343634.roa (raw, json) Hash identifier: g38q9LaZAq4No+F6g8orw8HsN+5ba4Mi+pwZw+eZ3w8= Subject key identifier: 6C:6F:E3:83:9D:85:CB:13:38:BE:23:B7:9C:10:33:C4:B8:3A:6A:DD Certificate issuer: /CN=EA413FBCBE2BF73652D85102495ECE33E9330D0F Certificate serial: 0CFD23B3BB9B893ACF3AB80B717A18FA5F9E9E39 Authority key identifier: EA:41:3F:BC:BE:2B:F7:36:52:D8:51:02:49:5E:CE:33:E9:33:0D:0F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/323430363a343534303a3a2f33322d3332203d3e20313430343634.roa Signing time: Sun 03 May 2026 03:11:14 +0000 ROA not before: Sun 03 May 2026 03:06:14 +0000 ROA not after: Sun 02 May 2027 03:11:14 +0000 asID: 140464 IP address blocks: 2406:4540::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.crl rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:fd:23:b3:bb:9b:89:3a:cf:3a:b8:0b:71:7a:18:fa:5f:9e:9e:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA413FBCBE2BF73652D85102495ECE33E9330D0F Validity Not Before: May 3 03:06:14 2026 GMT Not After : May 2 03:11:14 2027 GMT Subject: CN=6C6FE3839D85CB1338BE23B79C1033C4B83A6ADD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e6:f6:df:15:e1:6b:30:4f:b7:d7:c7:24:bc: 08:5d:52:e6:0d:90:d1:83:37:60:c1:a1:ba:a5:3d: 0a:3e:46:20:15:aa:39:3b:ed:28:a7:d7:83:81:73: 6f:10:f5:d7:85:4b:96:a4:89:6c:6e:68:19:bf:1a: 02:e7:79:97:9e:7d:b2:22:16:b5:ea:bb:6c:fa:4e: b4:92:b7:42:3d:c5:75:86:38:92:be:d8:61:44:fc: c1:b3:47:d9:a8:f3:26:04:a7:18:23:f2:48:a4:70: 1c:45:a4:39:b9:9e:32:c2:3b:2c:4f:65:fe:e7:13: e4:28:e4:dd:fb:1a:aa:49:81:ee:53:24:24:1c:fc: 06:a3:71:f6:ff:8f:74:6c:13:e1:28:43:8c:84:8f: d9:26:14:fb:3b:24:ba:d6:6f:6f:1e:61:90:05:c7: fe:87:3e:bb:2d:7e:a5:f5:bc:91:9c:43:6d:5c:c6: 7d:02:79:bf:14:1c:f4:94:47:83:31:82:46:cc:5f: 66:04:68:17:0e:d9:a1:53:b1:35:40:d9:87:f7:98: 1b:55:98:99:f1:44:a7:0b:a6:ef:23:81:12:d9:f2: 04:63:3c:ca:e2:a1:77:9f:ad:41:31:a4:08:b8:7c: 06:d6:d6:0e:1e:91:51:17:78:89:aa:7f:8c:3c:32: 21:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:6F:E3:83:9D:85:CB:13:38:BE:23:B7:9C:10:33:C4:B8:3A:6A:DD X509v3 Authority Key Identifier: keyid:EA:41:3F:BC:BE:2B:F7:36:52:D8:51:02:49:5E:CE:33:E9:33:0D:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/323430363a343534303a3a2f33322d3332203d3e20313430343634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:4540::/32 Signature Algorithm: sha256WithRSAEncryption 5e:18:15:61:1c:00:b3:9f:32:67:64:bf:07:62:b8:5c:83:6b: f6:59:25:b4:70:b3:bc:b0:84:36:ec:aa:11:42:e3:ce:46:6e: 1f:9e:71:2f:6a:57:9d:c9:39:66:99:70:1d:f5:0e:e0:89:17: b2:0f:9c:e6:9c:80:c3:d7:83:ec:07:01:53:67:e1:c3:10:67: ae:21:a6:bb:97:4a:7c:f1:eb:8b:c0:ed:30:6a:3b:35:a4:ea: 56:50:3f:94:c4:a4:ef:f1:ec:20:1d:cb:5d:d1:b3:88:9a:fb: 52:f9:ae:5d:a8:60:0e:00:70:51:05:e9:a5:60:af:1b:10:69: c4:62:f3:1e:55:7f:14:30:05:38:76:62:4e:c3:e7:6a:06:7d: c2:ed:9f:ca:c1:55:f9:e0:c1:5d:76:20:f9:60:ef:af:41:79: 64:ed:5f:39:fb:83:ad:7f:f0:98:ef:2e:3a:fb:fe:31:2f:13: f3:f4:b3:d1:10:53:41:c4:29:fc:a1:4c:e9:e6:64:aa:9b:16: ca:af:7e:e5:e0:14:8d:24:e3:82:35:65:bc:08:23:17:f5:49: a5:7b:72:85:0d:2e:6c:d8:ee:50:2a:1c:db:52:35:fa:f4:cf: 2f:22:3d:7f:97:6b:43:b1:1a:48:5d:50:f2:43:13:dd:31:02: 68:b7:44:34 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUDP0js7ubiTrPOrgLcXoY+l+enjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE0MTNGQkNCRTJCRjczNjUyRDg1MTAyNDk1RUNFMzNF OTMzMEQwRjAeFw0yNjA1MDMwMzA2MTRaFw0yNzA1MDIwMzExMTRaMDMxMTAvBgNV BAMTKDZDNkZFMzgzOUQ4NUNCMTMzOEJFMjNCNzlDMTAzM0M0QjgzQTZBREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC25vbfFeFrME+318ckvAhdUuYN kNGDN2DBobqlPQo+RiAVqjk77Sin14OBc28Q9deFS5akiWxuaBm/GgLneZeefbIi FrXqu2z6TrSSt0I9xXWGOJK+2GFE/MGzR9mo8yYEpxgj8kikcBxFpDm5njLCOyxP Zf7nE+Qo5N37GqpJge5TJCQc/Aajcfb/j3RsE+EoQ4yEj9kmFPs7JLrWb28eYZAF x/6HPrstfqX1vJGcQ21cxn0Ceb8UHPSUR4MxgkbMX2YEaBcO2aFTsTVA2Yf3mBtV mJnxRKcLpu8jgRLZ8gRjPMrioXefrUExpAi4fAbW1g4ekVEXeImqf4w8MiE/AgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUbG/jg52FyxM4viO3nBAzxLg6at0wHwYDVR0j BBgwFoAU6kE/vL4r9zZS2FECSV7OM+kzDQ8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGI4YmU5MDUtZjI5Ni00NWQxLWE4NzktNGE0ZGU1MmNiMmQ2LzAvRUE0MTNGQkNC RTJCRjczNjUyRDg1MTAyNDk1RUNFMzNFOTMzMEQwRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQTQxM0ZCQ0JFMkJGNzM2NTJEODUxMDI0OTVFQ0UzM0U5MzMw RDBGLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RiOGJlOTA1LWYyOTYtNDVkMS1h ODc5LTRhNGRlNTJjYjJkNi8wLzMyMzQzMDM2M2EzNDM1MzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzQzMDM0MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQGRUAwDQYJKoZI hvcNAQELBQADggEBAF4YFWEcALOfMmdkvwdiuFyDa/ZZJbRws7ywhDbsqhFC485G bh+ecS9qV53JOWaZcB31DuCJF7IPnOacgMPXg+wHAVNn4cMQZ64hpruXSnzx64vA 7TBqOzWk6lZQP5TEpO/x7CAdy13Rs4ia+1L5rl2oYA4AcFEF6aVgrxsQacRi8x5V fxQwBTh2Yk7D52oGfcLtn8rBVfngwV12IPlg769BeWTtXzn7g61/8JjvLjr7/jEv E/P0s9EQU0HEKfyhTOnmZKqbFsqvfuXgFI0k44I1ZbwIIxf1SaV7coUNLmzY7lAq HNtSNfr0zy8iPX+Xa0OxGkhdUPJDE90xAmi3RDQ= -----END CERTIFICATE-----Generated at Wed May 13 13:45:51 2026 by rpki-client