$ rpki-client -vvf rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/323430303a373530303a3a2f33322d3332203d3e20313431313432.roa File: 323430303a373530303a3a2f33322d3332203d3e20313431313432.roa (raw, json) Hash identifier: zbddhP7SNU+N1CDEwFKRNo4Q4pKFgeqQ1pbI5rRqtBU= Subject key identifier: EE:61:FD:F5:E9:AD:03:A0:2B:86:1A:5B:ED:98:00:2B:D6:0F:E4:6A Certificate issuer: /CN=D35962E8F839460DC5283C472D81ADB87BBD3992 Certificate serial: 567CA302D418C9BF35C7A3200DACE31192B253A1 Authority key identifier: D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/323430303a373530303a3a2f33322d3332203d3e20313431313432.roa Signing time: Sun 03 May 2026 03:12:01 +0000 ROA not before: Sun 03 May 2026 03:07:01 +0000 ROA not after: Sun 02 May 2027 03:12:01 +0000 asID: 141142 IP address blocks: 2400:7500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:7c:a3:02:d4:18:c9:bf:35:c7:a3:20:0d:ac:e3:11:92:b2:53:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D35962E8F839460DC5283C472D81ADB87BBD3992 Validity Not Before: May 3 03:07:01 2026 GMT Not After : May 2 03:12:01 2027 GMT Subject: CN=EE61FDF5E9AD03A02B861A5BED98002BD60FE46A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:55:3d:97:1a:3f:e3:97:69:b7:5c:80:4b:af: 34:ed:17:83:d1:b0:61:42:d2:dd:57:1c:a9:cf:56: 01:d3:c4:7d:60:84:f9:7a:0f:b9:9d:c8:4f:c4:9e: be:96:9f:45:de:7a:57:54:f2:76:59:e7:64:08:fd: aa:20:45:39:90:0c:28:67:f1:23:c6:fa:42:25:e4: 4a:8d:ed:3e:d2:e8:10:6f:c9:bb:42:d9:cd:8f:50: 04:9a:24:68:d7:ce:7c:95:bc:42:a8:07:74:6d:6e: f8:3e:73:9b:b8:91:a9:9a:06:9b:68:22:7d:7a:d4: 8a:6e:2a:48:69:35:01:8b:11:ce:99:5e:d0:5f:0a: b8:4e:de:ce:7f:90:cb:d8:5e:f5:2e:e1:f8:68:13: e7:4c:f0:2d:b8:8a:1e:3e:20:23:ca:15:66:fd:2b: 25:b2:96:08:d8:39:fe:c7:18:86:ba:25:42:df:ec: e3:e0:52:47:8b:33:61:46:d7:3d:d0:3f:5d:4b:37: bb:22:5b:f5:99:c0:73:fb:4b:76:9f:68:9c:ee:d0: 77:90:ff:5a:21:32:68:e6:75:db:96:14:49:72:eb: 7a:fd:00:2b:9d:47:15:2a:e3:91:bc:84:1f:d8:ea: 1d:3c:51:5b:c1:84:ec:75:db:e6:53:5b:4e:78:4c: 04:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:61:FD:F5:E9:AD:03:A0:2B:86:1A:5B:ED:98:00:2B:D6:0F:E4:6A X509v3 Authority Key Identifier: keyid:D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/323430303a373530303a3a2f33322d3332203d3e20313431313432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:7500::/32 Signature Algorithm: sha256WithRSAEncryption 37:69:31:7f:99:fc:d1:10:0f:48:b5:a8:57:06:32:9d:33:17: 7e:32:4d:be:cc:64:80:ab:31:7a:5e:10:52:72:35:ef:c0:5c: 2a:4b:7e:4d:73:5f:3d:1d:0c:25:49:67:87:fd:19:53:09:c4: e3:c9:5b:79:76:d5:2f:9c:22:71:0a:7d:8b:78:6b:8f:c9:91: d9:7a:22:4b:e0:7f:a1:8f:dc:3f:c1:26:fd:f0:ac:92:d5:e6: 2b:6d:4d:63:09:f0:90:b7:18:61:06:a2:aa:99:8c:39:06:b4: ed:d1:88:47:60:ae:17:4c:d4:8d:3e:11:18:87:ab:a1:35:13: 96:57:26:81:31:08:bc:4a:73:f6:c3:48:18:7d:04:c0:06:9f: 5d:87:22:07:c9:ed:f1:09:08:0a:e6:72:84:f7:6c:d5:f0:31: 99:a8:9c:f0:80:ed:71:7f:ca:c2:82:e3:47:41:ae:cf:e1:98: ce:c1:a6:c2:ae:44:b8:54:46:1a:63:6f:ec:b9:33:93:ea:bc: 82:90:42:e2:80:ef:20:08:89:ae:4a:b8:a2:29:21:ca:a3:75: 43:35:5a:ba:52:41:0f:78:b8:9d:fb:a5:3c:37:c1:ba:69:56: 86:49:25:19:17:9c:f2:6d:6c:7c:db:b7:10:e1:30:93:b0:a7: bf:0c:35:39 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUVnyjAtQYyb81x6MgDazjEZKyU6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1OTYyRThGODM5NDYwREM1MjgzQzQ3MkQ4MUFEQjg3 QkJEMzk5MjAeFw0yNjA1MDMwMzA3MDFaFw0yNzA1MDIwMzEyMDFaMDMxMTAvBgNV BAMTKEVFNjFGREY1RTlBRDAzQTAyQjg2MUE1QkVEOTgwMDJCRDYwRkU0NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSVT2XGj/jl2m3XIBLrzTtF4PR sGFC0t1XHKnPVgHTxH1ghPl6D7mdyE/Enr6Wn0XeeldU8nZZ52QI/aogRTmQDChn 8SPG+kIl5EqN7T7S6BBvybtC2c2PUASaJGjXznyVvEKoB3Rtbvg+c5u4kamaBpto In161IpuKkhpNQGLEc6ZXtBfCrhO3s5/kMvYXvUu4fhoE+dM8C24ih4+ICPKFWb9 KyWylgjYOf7HGIa6JULf7OPgUkeLM2FG1z3QP11LN7siW/WZwHP7S3afaJzu0HeQ /1ohMmjmdduWFEly63r9ACudRxUq45G8hB/Y6h08UVvBhOx12+ZTW054TARjAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQU7mH99emtA6Arhhpb7ZgAK9YP5GowHwYDVR0j BBgwFoAU01li6Pg5Rg3FKDxHLYGtuHu9OZIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGYyZTdmZDYtZWI1ZS00ODBhLThlOTctYzU1ZjY4ZTA1ODlhLzAvRDM1OTYyRThG ODM5NDYwREM1MjgzQzQ3MkQ4MUFEQjg3QkJEMzk5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzU5NjJFOEY4Mzk0NjBEQzUyODNDNDcyRDgxQURCODdCQkQz OTkyLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RmMmU3ZmQ2LWViNWUtNDgwYS04 ZTk3LWM1NWY2OGUwNTg5YS8wLzMyMzQzMDMwM2EzNzM1MzAzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzQzMTMxMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQAdQAwDQYJKoZI hvcNAQELBQADggEBADdpMX+Z/NEQD0i1qFcGMp0zF34yTb7MZICrMXpeEFJyNe/A XCpLfk1zXz0dDCVJZ4f9GVMJxOPJW3l21S+cInEKfYt4a4/Jkdl6Ikvgf6GP3D/B Jv3wrJLV5ittTWMJ8JC3GGEGoqqZjDkGtO3RiEdgrhdM1I0+ERiHq6E1E5ZXJoEx CLxKc/bDSBh9BMAGn12HIgfJ7fEJCArmcoT3bNXwMZmonPCA7XF/ysKC40dBrs/h mM7BpsKuRLhURhpjb+y5M5PqvIKQQuKA7yAIia5KuKIpIcqjdUM1WrpSQQ94uJ37 pTw3wbppVoZJJRkXnPJtbHzbtxDhMJOwp78MNTk= -----END CERTIFICATE-----Generated at Wed May 13 03:58:42 2026 by rpki-client