$ rpki-client -vvf rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030353a3a2f34382d3438203d3e203338353236.roa File: 323430353a333734303a393030353a3a2f34382d3438203d3e203338353236.roa (raw, json) Hash identifier: 4yPVJfz1ZzYm0gJYesDzSfQqtZL7JyYUD4GL5qDo6qE= Subject key identifier: AF:16:CC:4C:F2:33:39:41:8B:3E:E7:B9:90:8F:2F:C1:81:8F:AA:68 Certificate issuer: /CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7 Certificate serial: 1F258BF488D299EEF6D030BB99CDAA3AD6D32608 Authority key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030353a3a2f34382d3438203d3e203338353236.roa Signing time: Sun 03 May 2026 03:14:03 +0000 ROA not before: Sun 03 May 2026 03:09:03 +0000 ROA not after: Sun 02 May 2027 03:14:03 +0000 asID: 38526 IP address blocks: 2405:3740:9005::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:25:8b:f4:88:d2:99:ee:f6:d0:30:bb:99:cd:aa:3a:d6:d3:26:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7 Validity Not Before: May 3 03:09:03 2026 GMT Not After : May 2 03:14:03 2027 GMT Subject: CN=AF16CC4CF23339418B3EE7B9908F2FC1818FAA68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fd:da:00:4f:14:7d:9e:20:6e:a6:e5:2c:5f: ad:93:09:ac:fb:12:44:40:a7:c1:c9:44:a8:66:95: e7:c6:21:d8:a5:f3:60:bc:ab:52:c4:35:35:47:be: d6:e4:ca:97:ca:83:41:70:04:fd:47:ba:11:0e:f7: e2:a8:00:90:eb:fe:eb:20:dd:b4:56:13:41:b3:bf: cf:3d:55:33:8e:74:ee:e0:93:69:9c:0d:d1:f4:82: fb:a8:a5:28:a4:c6:3b:6b:02:0f:e2:a6:32:59:75: b1:d4:6c:77:14:ae:7f:87:82:c0:94:62:bc:cd:24: 39:7c:e0:9a:5f:95:4c:50:0e:9d:96:af:15:d8:ba: 62:a9:36:5b:26:1f:70:fe:66:9b:9c:85:26:1b:36: 48:fc:35:c8:a5:21:6b:39:d7:ff:b8:18:2e:87:1e: 27:53:fd:5c:6f:2b:43:9a:61:e5:05:29:00:68:fd: 7a:e0:f1:fe:6f:67:3f:ce:43:19:d8:05:9e:db:42: 88:be:be:0b:14:94:6b:eb:69:78:36:be:45:d8:e3: be:66:96:06:a6:ea:9e:1b:35:86:62:12:4c:48:09: fa:70:c5:68:46:8a:a7:b8:81:72:76:31:92:93:cc: ee:e6:95:26:48:f2:b1:1a:28:8f:28:fb:d5:8b:65: da:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:16:CC:4C:F2:33:39:41:8B:3E:E7:B9:90:8F:2F:C1:81:8F:AA:68 X509v3 Authority Key Identifier: keyid:C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030353a3a2f34382d3438203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740:9005::/48 Signature Algorithm: sha256WithRSAEncryption 36:c5:29:50:be:e3:9a:09:71:71:8a:49:ee:bf:28:e1:88:00: d8:0e:cc:0c:a0:a2:e5:4f:61:54:6b:cf:4c:a1:54:10:b1:62: 02:72:b1:60:23:c9:e2:df:be:a8:c6:90:93:8a:ff:c3:9d:db: 17:20:ce:d7:f2:a9:d5:f6:4a:e3:0f:db:49:0f:84:0e:31:bf: ba:6e:0e:35:6f:46:c8:da:28:65:4d:c8:52:5d:b9:92:71:3c: e7:83:b5:de:c2:a8:ba:5c:5b:ce:2a:45:1c:42:48:e0:ca:3a: 90:eb:ab:bd:48:f8:bb:05:06:9e:42:91:7b:85:77:0b:c8:cb: f5:bf:77:59:6b:31:94:25:a2:ce:f1:7c:29:ad:54:ed:ba:1c: 17:08:ce:69:ea:a6:f8:5d:b3:c2:09:df:71:53:1f:7c:6b:9b: dd:5e:f7:12:03:42:7a:52:d0:79:35:c9:98:f5:0f:fd:83:1b: 97:ad:89:ef:fc:59:ae:cc:2e:2e:4a:e7:3a:72:9b:5f:fa:45: 1d:5e:87:be:44:bb:da:70:ff:7a:c6:3a:3b:34:c3:c4:9d:25: 39:0e:bc:66:6c:61:42:f0:6c:33:19:e2:26:9b:e0:02:2d:a7: db:b1:c3:8d:b4:7a:28:2d:4a:94:44:bc:09:ea:c7:e3:bc:02: 74:24:55:83 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUHyWL9IjSme720DC7mc2qOtbTJggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYzMkEwQ0Y0REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3 RTNDRkZENzAeFw0yNjA1MDMwMzA5MDNaFw0yNzA1MDIwMzE0MDNaMDMxMTAvBgNV BAMTKEFGMTZDQzRDRjIzMzM5NDE4QjNFRTdCOTkwOEYyRkMxODE4RkFBNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT/doATxR9niBupuUsX62TCaz7 EkRAp8HJRKhmlefGIdil82C8q1LENTVHvtbkypfKg0FwBP1HuhEO9+KoAJDr/usg 3bRWE0Gzv889VTOOdO7gk2mcDdH0gvuopSikxjtrAg/ipjJZdbHUbHcUrn+HgsCU YrzNJDl84JpflUxQDp2WrxXYumKpNlsmH3D+ZpuchSYbNkj8NcilIWs51/+4GC6H HidT/VxvK0OaYeUFKQBo/Xrg8f5vZz/OQxnYBZ7bQoi+vgsUlGvraXg2vkXY475m lgam6p4bNYZiEkxICfpwxWhGiqe4gXJ2MZKTzO7mlSZI8rEaKI8o+9WLZdqPAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUrxbMTPIzOUGLPue5kI8vwYGPqmgwHwYDVR0j BBgwFoAUxjKgz02n3ed8vKwfNnEWoH48/9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTY1ZTc4MTAtNjdmNC00MWMyLTgwMzQtNDY1MjczM2I4ZGQyLzAvQzYzMkEwQ0Y0 REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3RTNDRkZENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNjMyQTBDRjREQTdEREU3N0NCQ0FDMUYzNjcxMTZBMDdFM0NG RkQ3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzkzMDMwMzUz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3 QJAFMA0GCSqGSIb3DQEBCwUAA4IBAQA2xSlQvuOaCXFxiknuvyjhiADYDswMoKLl T2FUa89MoVQQsWICcrFgI8ni376oxpCTiv/DndsXIM7X8qnV9krjD9tJD4QOMb+6 bg41b0bI2ihlTchSXbmScTzng7Xewqi6XFvOKkUcQkjgyjqQ66u9SPi7BQaeQpF7 hXcLyMv1v3dZazGUJaLO8XwprVTtuhwXCM5p6qb4XbPCCd9xUx98a5vdXvcSA0J6 UtB5NcmY9Q/9gxuXrYnv/FmuzC4uSuc6cptf+kUdXoe+RLvacP96xjo7NMPEnSU5 DrxmbGFC8GwzGeImm+ACLafbscONtHooLUqURLwJ6sfjvAJ0JFWD -----END CERTIFICATE-----Generated at Wed May 13 11:50:06 2026 by rpki-client