$ rpki-client -vvf rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031613a3a2f34382d3438203d3e203338353236.roa File: 323430353a333734303a393031613a3a2f34382d3438203d3e203338353236.roa (raw, json) Hash identifier: 9cS7BrqglT1WyNqwYT04jIlCYfF8ELstvullWGV92zo= Subject key identifier: D2:FB:67:17:6E:40:A7:63:3F:B3:3E:9C:8E:5E:08:72:BE:F1:2F:E5 Certificate issuer: /CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7 Certificate serial: 734B91BFC928C2BCBEAB799A5FFF35E4B6C2EA17 Authority key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031613a3a2f34382d3438203d3e203338353236.roa Signing time: Sun 03 May 2026 03:14:01 +0000 ROA not before: Sun 03 May 2026 03:09:01 +0000 ROA not after: Sun 02 May 2027 03:14:01 +0000 asID: 38526 IP address blocks: 2405:3740:901a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:4b:91:bf:c9:28:c2:bc:be:ab:79:9a:5f:ff:35:e4:b6:c2:ea:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7 Validity Not Before: May 3 03:09:01 2026 GMT Not After : May 2 03:14:01 2027 GMT Subject: CN=D2FB67176E40A7633FB33E9C8E5E0872BEF12FE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e7:f6:31:c8:0b:df:58:61:70:5a:6f:2c:1b: ab:0c:99:29:1b:95:60:65:38:e6:c2:aa:af:a7:60: 79:5d:6e:dd:c9:ae:67:35:0c:99:2d:31:8a:5e:54: 29:43:77:95:59:f0:2d:3a:b2:61:f3:86:a7:97:72: cf:49:23:af:c4:08:4c:cb:d1:4d:a7:4d:2d:d2:f0: c5:4e:bd:7e:0d:f7:50:77:82:aa:48:a0:da:fa:86: 02:9c:e7:d6:b0:48:b5:20:a7:92:48:4d:25:82:2d: ff:e8:00:8a:55:cb:63:28:73:3b:55:9a:e4:57:5e: f1:f3:7d:97:98:e4:cc:d5:45:73:46:19:c6:c7:ff: e1:2b:c4:89:70:d5:88:6f:50:5d:7d:64:d8:a7:63: a4:2f:fa:b4:25:10:1b:2d:1e:60:81:cb:92:68:c6: e7:03:5a:30:65:92:33:40:53:83:65:d9:d2:d3:f3: c7:66:e4:7e:e8:51:2e:ee:f0:8d:61:2a:cf:13:bc: 9a:74:65:b2:74:c8:09:db:01:26:ab:67:f8:8b:6a: da:c0:ef:d3:e7:56:52:bd:c0:a7:d5:74:fd:76:d0: 5d:93:28:0e:67:23:82:24:f8:d7:be:dc:c4:0e:9b: 1c:ed:fc:fa:3c:89:16:a6:5a:a6:c3:8e:18:02:97: b6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FB:67:17:6E:40:A7:63:3F:B3:3E:9C:8E:5E:08:72:BE:F1:2F:E5 X509v3 Authority Key Identifier: keyid:C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031613a3a2f34382d3438203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740:901a::/48 Signature Algorithm: sha256WithRSAEncryption 0a:a5:96:d5:09:d9:f9:b7:df:23:76:82:45:a0:eb:fc:a7:23: 1e:7a:3c:32:f0:d5:9d:54:3b:2b:e7:98:69:79:af:e0:b7:44: 20:13:b7:c0:48:b2:b3:8d:4d:08:95:d7:a7:c3:ef:6b:fb:7a: 4f:03:73:b6:da:1e:7f:e6:86:80:ea:fc:8b:97:f1:29:a7:6b: d2:ec:91:d7:0e:73:ed:73:45:a0:49:06:06:f7:f9:d7:9e:3d: 3c:22:75:66:08:87:97:45:ef:5e:38:0f:65:cf:af:db:61:86: fa:bc:e0:b4:f4:85:8e:38:56:72:98:83:b4:a7:3b:88:29:05: 60:64:56:a4:11:39:13:b0:fa:f6:2d:79:31:44:cb:96:a4:67: f5:0e:4d:e7:a6:be:b0:a3:b8:d0:58:55:4d:19:31:0a:c0:66: e4:a6:2b:62:3a:31:97:33:38:fd:f6:47:41:23:60:12:7d:89: af:bc:0a:82:90:42:75:cc:9d:34:c6:80:68:ab:eb:fd:ef:b7: 0f:a7:80:9a:7e:9d:3e:52:84:d3:26:5a:05:c9:95:e0:77:42: 49:00:53:a6:a2:3d:9e:3d:67:b8:e1:5b:d3:ea:eb:05:25:5a: e1:b8:69:32:be:64:ef:51:88:52:42:fa:7b:46:70:e2:58:09: 7d:68:0b:da -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUc0uRv8kowry+q3maX/815LbC6hcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYzMkEwQ0Y0REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3 RTNDRkZENzAeFw0yNjA1MDMwMzA5MDFaFw0yNzA1MDIwMzE0MDFaMDMxMTAvBgNV BAMTKEQyRkI2NzE3NkU0MEE3NjMzRkIzM0U5QzhFNUUwODcyQkVGMTJGRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ5/YxyAvfWGFwWm8sG6sMmSkb lWBlOObCqq+nYHldbt3Jrmc1DJktMYpeVClDd5VZ8C06smHzhqeXcs9JI6/ECEzL 0U2nTS3S8MVOvX4N91B3gqpIoNr6hgKc59awSLUgp5JITSWCLf/oAIpVy2MocztV muRXXvHzfZeY5MzVRXNGGcbH/+ErxIlw1YhvUF19ZNinY6Qv+rQlEBstHmCBy5Jo xucDWjBlkjNAU4Nl2dLT88dm5H7oUS7u8I1hKs8TvJp0ZbJ0yAnbASarZ/iLatrA 79PnVlK9wKfVdP120F2TKA5nI4Ik+Ne+3MQOmxzt/Po8iRamWqbDjhgCl7adAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU0vtnF25Ap2M/sz6cjl4Icr7xL+UwHwYDVR0j BBgwFoAUxjKgz02n3ed8vKwfNnEWoH48/9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTY1ZTc4MTAtNjdmNC00MWMyLTgwMzQtNDY1MjczM2I4ZGQyLzAvQzYzMkEwQ0Y0 REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3RTNDRkZENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNjMyQTBDRjREQTdEREU3N0NCQ0FDMUYzNjcxMTZBMDdFM0NG RkQ3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzkzMDMxNjEz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3 QJAaMA0GCSqGSIb3DQEBCwUAA4IBAQAKpZbVCdn5t98jdoJFoOv8pyMeejwy8NWd VDsr55hpea/gt0QgE7fASLKzjU0Ildenw+9r+3pPA3O22h5/5oaA6vyLl/Epp2vS 7JHXDnPtc0WgSQYG9/nXnj08InVmCIeXRe9eOA9lz6/bYYb6vOC09IWOOFZymIO0 pzuIKQVgZFakETkTsPr2LXkxRMuWpGf1Dk3npr6wo7jQWFVNGTEKwGbkpitiOjGX Mzj99kdBI2ASfYmvvAqCkEJ1zJ00xoBoq+v977cPp4Cafp0+UoTTJloFyZXgd0JJ AFOmoj2ePWe44VvT6usFJVrhuGkyvmTvUYhSQvp7RnDiWAl9aAva -----END CERTIFICATE-----Generated at Wed May 13 12:28:14 2026 by rpki-client