$ rpki-client -vvf rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/323430333a623230303a613939633a3a2f34382d3438203d3e203338353036.roa File: 323430333a623230303a613939633a3a2f34382d3438203d3e203338353036.roa (raw, json) Hash identifier: XAeIzu631fi3CwuOFGNDoY933yMIfsvYuPPKWulTcYM= Subject key identifier: A0:B1:23:68:27:CB:C6:93:EC:17:F1:22:6F:11:F2:93:02:62:25:31 Certificate issuer: /CN=A9BFA348A050E46482F4E00C605FF9961247FC64 Certificate serial: 23B60B695654CC46894817FD0B757FE79A97DD89 Authority key identifier: A9:BF:A3:48:A0:50:E4:64:82:F4:E0:0C:60:5F:F9:96:12:47:FC:64 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/323430333a623230303a613939633a3a2f34382d3438203d3e203338353036.roa Signing time: Sun 03 May 2026 03:15:54 +0000 ROA not before: Sun 03 May 2026 03:10:54 +0000 ROA not after: Sun 02 May 2027 03:15:54 +0000 asID: 38506 IP address blocks: 2403:b200:a99c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.crl rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b6:0b:69:56:54:cc:46:89:48:17:fd:0b:75:7f:e7:9a:97:dd:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9BFA348A050E46482F4E00C605FF9961247FC64 Validity Not Before: May 3 03:10:54 2026 GMT Not After : May 2 03:15:54 2027 GMT Subject: CN=A0B1236827CBC693EC17F1226F11F29302622531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ba:e9:db:68:d7:e9:c3:0e:fa:f1:1a:40:0f: 51:93:01:7c:e5:30:0b:f6:84:e0:bc:93:fe:b8:ee: 00:f0:b7:fe:eb:39:d5:33:73:bc:a6:b4:1d:5c:b3: 46:d2:61:1a:26:df:ac:e7:48:07:c2:81:4d:b1:39: d4:6d:2c:98:a1:b8:7b:63:8c:7a:28:9e:64:a0:07: 8b:f0:13:bc:e2:e6:03:24:e1:d1:29:1e:08:3c:1a: c9:42:b1:9d:ba:85:ab:11:e6:e8:3c:f5:fa:3c:90: ea:9a:d2:33:1c:6d:30:86:e7:c3:37:51:3b:84:38: 28:19:a3:2d:db:e7:d3:2d:67:a6:ec:e3:dd:f2:b4: 28:9d:b2:c2:ce:4f:ef:94:5b:b6:5e:0f:a3:5c:0d: 58:86:1c:f4:ee:f2:24:c6:6b:5c:ae:4a:c2:70:a2: ae:8a:78:07:35:38:38:9b:16:ff:84:3c:f4:64:fa: fa:27:03:bf:01:0c:be:1a:c9:df:77:28:b6:07:ab: cd:1d:ca:2c:9b:2c:44:ae:f9:32:ca:d5:e5:2d:e9: 4a:f1:50:69:30:91:f7:d3:5a:a4:98:de:4f:60:d4: 04:e1:3c:d3:2b:3d:81:08:31:7b:9b:05:51:11:ba: 0b:9c:30:ad:40:93:15:ff:75:86:d9:5e:ec:2e:2d: 5f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B1:23:68:27:CB:C6:93:EC:17:F1:22:6F:11:F2:93:02:62:25:31 X509v3 Authority Key Identifier: keyid:A9:BF:A3:48:A0:50:E4:64:82:F4:E0:0C:60:5F:F9:96:12:47:FC:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/323430333a623230303a613939633a3a2f34382d3438203d3e203338353036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b200:a99c::/48 Signature Algorithm: sha256WithRSAEncryption 77:0b:cc:f5:d3:a4:97:08:25:ba:f9:35:da:6a:9b:28:23:d1: cc:d5:c6:67:5d:58:12:e4:e8:6e:96:0d:8c:e3:e6:18:37:9e: 57:a4:ea:4b:00:23:67:87:b0:1e:a7:83:b1:9e:53:51:ae:8c: 72:c9:26:cb:14:33:3c:11:a1:46:4b:ef:9d:fb:6c:c3:4e:50: 91:d8:4f:e9:ed:5a:e6:7e:13:b7:d4:eb:ef:37:4d:7b:1e:ca: 5e:12:ae:92:56:25:31:51:ac:50:ba:e3:5b:7c:60:08:de:9b: f6:e4:e5:2d:d8:75:44:88:f1:0e:61:aa:be:21:fd:b7:8e:9d: c6:39:87:1f:2f:71:39:bd:5f:a0:fd:a6:19:86:85:73:6b:47: 28:55:ad:54:05:95:20:4e:59:60:48:a5:96:7a:b0:4a:b1:76: 91:da:28:ac:56:cf:9f:65:6f:4e:52:fa:03:ba:04:1a:e9:87: 9b:9a:4d:27:a6:9d:b9:95:4c:91:7b:de:1d:14:23:26:90:04: cc:fa:9b:8e:77:27:4a:19:64:ce:2d:94:c7:23:e5:71:23:96: 95:35:80:1f:49:98:96:7c:df:9c:13:62:2d:1d:61:6b:ef:e2: 89:8c:0c:06:9b:f8:45:f7:88:3b:d0:41:20:79:9f:38:55:9d: 35:0b:3a:58 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUI7YLaVZUzEaJSBf9C3V/55qX3YkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlCRkEzNDhBMDUwRTQ2NDgyRjRFMDBDNjA1RkY5OTYx MjQ3RkM2NDAeFw0yNjA1MDMwMzEwNTRaFw0yNzA1MDIwMzE1NTRaMDMxMTAvBgNV BAMTKEEwQjEyMzY4MjdDQkM2OTNFQzE3RjEyMjZGMTFGMjkzMDI2MjI1MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOuunbaNfpww768RpAD1GTAXzl MAv2hOC8k/647gDwt/7rOdUzc7ymtB1cs0bSYRom36znSAfCgU2xOdRtLJihuHtj jHoonmSgB4vwE7zi5gMk4dEpHgg8GslCsZ26hasR5ug89fo8kOqa0jMcbTCG58M3 UTuEOCgZoy3b59MtZ6bs493ytCidssLOT++UW7ZeD6NcDViGHPTu8iTGa1yuSsJw oq6KeAc1ODibFv+EPPRk+vonA78BDL4ayd93KLYHq80dyiybLESu+TLK1eUt6Urx UGkwkffTWqSY3k9g1AThPNMrPYEIMXubBVERugucMK1AkxX/dYbZXuwuLV9jAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUoLEjaCfLxpPsF/EibxHykwJiJTEwHwYDVR0j BBgwFoAUqb+jSKBQ5GSC9OAMYF/5lhJH/GQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWQ5YmE5NTMtODQ4OS00NTBlLWJiZGYtNzY0NTcxZmJhY2U3LzAvQTlCRkEzNDhB MDUwRTQ2NDgyRjRFMDBDNjA1RkY5OTYxMjQ3RkM2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOUJGQTM0OEEwNTBFNDY0ODJGNEUwMEM2MDVGRjk5NjEyNDdG QzY0LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2VkOWJhOTUzLTg0ODktNDUwZS1i YmRmLTc2NDU3MWZiYWNlNy8wLzMyMzQzMDMzM2E2MjMyMzAzMDNhNjEzOTM5NjMz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMDM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAOy AKmcMA0GCSqGSIb3DQEBCwUAA4IBAQB3C8z106SXCCW6+TXaapsoI9HM1cZnXVgS 5Ohulg2M4+YYN55XpOpLACNnh7Aep4OxnlNRroxyySbLFDM8EaFGS++d+2zDTlCR 2E/p7VrmfhO31OvvN017HspeEq6SViUxUaxQuuNbfGAI3pv25OUt2HVEiPEOYaq+ If23jp3GOYcfL3E5vV+g/aYZhoVza0coVa1UBZUgTllgSKWWerBKsXaR2iisVs+f ZW9OUvoDugQa6Yebmk0npp25lUyRe94dFCMmkATM+puOdydKGWTOLZTHI+VxI5aV NYAfSZiWfN+cE2ItHWFr7+KJjAwGm/hF94g70EEgeZ84VZ01CzpY -----END CERTIFICATE-----Generated at Wed May 13 07:52:50 2026 by rpki-client