$ rpki-client -vvf rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030383a3a2f34382d3438203d3e203338353236.roa File: 323430353a333734303a383030383a3a2f34382d3438203d3e203338353236.roa (raw, json) Hash identifier: iIR5OkLVk+L9EhRaDyZ5Rc6Wvh3zk/PMPQj+877GGRo= Subject key identifier: 38:62:38:BF:E9:EA:C1:98:7F:DE:71:07:64:4B:71:A2:CE:F3:B8:53 Certificate issuer: /CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7 Certificate serial: 157966527115F51AADE7ED93C1977B3288C4DD85 Authority key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030383a3a2f34382d3438203d3e203338353236.roa Signing time: Sun 03 May 2026 03:14:06 +0000 ROA not before: Sun 03 May 2026 03:09:06 +0000 ROA not after: Sun 02 May 2027 03:14:06 +0000 asID: 38526 IP address blocks: 2405:3740:8008::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:79:66:52:71:15:f5:1a:ad:e7:ed:93:c1:97:7b:32:88:c4:dd:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7 Validity Not Before: May 3 03:09:06 2026 GMT Not After : May 2 03:14:06 2027 GMT Subject: CN=386238BFE9EAC1987FDE7107644B71A2CEF3B853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:14:1b:e3:a5:bd:05:95:40:ab:93:35:fc:15: df:da:0f:bf:0f:7f:ed:0e:15:07:7e:b7:6d:18:97: 6f:5e:40:ec:ee:33:7b:03:4c:7d:9f:e4:7f:49:4e: ec:5e:de:8a:5d:8d:f1:3a:80:48:55:e4:2c:c7:e9: 7c:56:4c:57:f4:7d:81:f0:10:11:ea:d6:4e:f9:cc: f2:ce:69:3e:a4:b4:06:ea:79:82:49:44:b6:bb:44: 29:4c:5c:0a:6f:50:b4:27:3f:ba:85:cf:e1:b3:ca: fb:be:73:64:75:8c:f4:06:60:6d:39:97:28:ae:fb: bf:af:10:d5:78:b6:fc:38:d4:e5:75:bd:fc:75:a8: 06:84:42:d8:7d:4c:05:f9:69:70:14:45:71:a8:c3: fd:dd:11:c5:4a:cd:18:34:c2:fb:19:1a:24:27:1c: 84:24:86:e6:38:67:fc:18:e2:e0:16:07:9c:95:85: 14:c3:77:56:92:b1:a8:be:ec:be:7c:f3:2e:77:57: 22:60:8f:09:c4:d1:08:a0:21:90:9b:12:4d:90:1c: 21:b8:b1:14:3d:6d:a1:27:39:52:c2:6b:f2:d1:6b: ec:49:3f:b0:74:a4:98:ed:2f:3b:9d:3e:6f:ba:8d: 4a:2c:63:25:35:0e:b3:97:6d:2c:63:04:19:52:a7: 59:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:62:38:BF:E9:EA:C1:98:7F:DE:71:07:64:4B:71:A2:CE:F3:B8:53 X509v3 Authority Key Identifier: keyid:C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030383a3a2f34382d3438203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740:8008::/48 Signature Algorithm: sha256WithRSAEncryption 75:16:29:42:a8:97:be:fd:1a:67:fb:2f:dc:59:81:14:af:8d: ac:1b:fe:46:11:19:79:c3:7d:3d:5e:4a:8e:f9:c3:6b:df:59: d8:13:f0:c8:5a:06:6b:ae:4b:f9:c9:ca:2f:3b:76:d0:f7:46: e7:07:7e:0d:d3:93:58:24:1b:20:4c:4d:21:b8:b1:bf:ab:ac: e3:3b:25:be:54:12:98:b0:85:74:54:43:8b:6c:fc:24:1d:bd: ab:e4:40:fd:30:0d:43:ea:8b:b5:45:ec:5c:06:fb:28:ca:17: 95:85:2a:37:0f:5a:57:7e:3a:0b:d2:4b:5a:9d:0e:8f:d4:31: 8a:f7:f0:73:82:6c:c7:18:a0:ef:73:5d:c9:67:4c:d0:a9:09: 13:5b:94:8b:b0:22:7f:d8:5d:33:2c:a1:97:83:70:00:5b:8c: 39:39:f0:a7:a6:ac:64:cd:45:2c:81:25:c0:2a:ee:e2:54:8d: 27:41:85:42:f2:ed:51:46:fb:db:eb:0f:d1:55:c1:e8:5b:6d: 6d:3b:6c:f9:dd:6b:b0:3b:60:7a:aa:a1:a8:6c:2e:b5:b4:0e: e2:7f:c9:35:d1:74:9e:a7:ff:59:48:b8:2e:db:a8:81:8d:56: c3:ce:85:cc:11:89:12:b9:ca:60:c9:6e:2f:f6:f9:77:1f:bd: f3:59:e1:af -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUFXlmUnEV9Rqt5+2TwZd7MojE3YUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYzMkEwQ0Y0REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3 RTNDRkZENzAeFw0yNjA1MDMwMzA5MDZaFw0yNzA1MDIwMzE0MDZaMDMxMTAvBgNV BAMTKDM4NjIzOEJGRTlFQUMxOTg3RkRFNzEwNzY0NEI3MUEyQ0VGM0I4NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvFBvjpb0FlUCrkzX8Fd/aD78P f+0OFQd+t20Yl29eQOzuM3sDTH2f5H9JTuxe3opdjfE6gEhV5CzH6XxWTFf0fYHw EBHq1k75zPLOaT6ktAbqeYJJRLa7RClMXApvULQnP7qFz+Gzyvu+c2R1jPQGYG05 lyiu+7+vENV4tvw41OV1vfx1qAaEQth9TAX5aXAURXGow/3dEcVKzRg0wvsZGiQn HIQkhuY4Z/wY4uAWB5yVhRTDd1aSsai+7L588y53VyJgjwnE0QigIZCbEk2QHCG4 sRQ9baEnOVLCa/LRa+xJP7B0pJjtLzudPm+6jUosYyU1DrOXbSxjBBlSp1kFAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUOGI4v+nqwZh/3nEHZEtxos7zuFMwHwYDVR0j BBgwFoAUxjKgz02n3ed8vKwfNnEWoH48/9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTY1ZTc4MTAtNjdmNC00MWMyLTgwMzQtNDY1MjczM2I4ZGQyLzAvQzYzMkEwQ0Y0 REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3RTNDRkZENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNjMyQTBDRjREQTdEREU3N0NCQ0FDMUYzNjcxMTZBMDdFM0NG RkQ3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzgzMDMwMzgz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3 QIAIMA0GCSqGSIb3DQEBCwUAA4IBAQB1FilCqJe+/Rpn+y/cWYEUr42sG/5GERl5 w309XkqO+cNr31nYE/DIWgZrrkv5ycovO3bQ90bnB34N05NYJBsgTE0huLG/q6zj OyW+VBKYsIV0VEOLbPwkHb2r5ED9MA1D6ou1RexcBvsoyheVhSo3D1pXfjoL0kta nQ6P1DGK9/BzgmzHGKDvc13JZ0zQqQkTW5SLsCJ/2F0zLKGXg3AAW4w5OfCnpqxk zUUsgSXAKu7iVI0nQYVC8u1RRvvb6w/RVcHoW21tO2z53WuwO2B6qqGobC61tA7i f8k10XSep/9ZSLgu26iBjVbDzoXMEYkSucpgyW4v9vl3H73zWeGv -----END CERTIFICATE-----Generated at Wed May 13 11:58:46 2026 by rpki-client