$ rpki-client -vvf rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/323430353a636534303a3a2f33322d3438203d3e20313339393838.roa File: 323430353a636534303a3a2f33322d3438203d3e20313339393838.roa (raw, json) Hash identifier: CgpRUUxgJdvC2DaauFEj0ljqW/Af8HR5RmTcf5er/Ag= Subject key identifier: 48:36:C5:AA:61:DC:6D:27:AC:88:E2:CD:0D:36:0D:01:05:C8:9F:3A Certificate issuer: /CN=5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1 Certificate serial: 1A1C5408CB259605E09E212D74F0302683D5E882 Authority key identifier: 5E:D0:FC:9D:E3:C5:BF:0F:26:41:FB:C8:2E:03:53:3A:D5:A6:C5:C1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/323430353a636534303a3a2f33322d3438203d3e20313339393838.roa Signing time: Sun 03 May 2026 03:16:55 +0000 ROA not before: Sun 03 May 2026 03:11:55 +0000 ROA not after: Sun 02 May 2027 03:16:55 +0000 asID: 139988 IP address blocks: 2405:ce40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.crl rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:1c:54:08:cb:25:96:05:e0:9e:21:2d:74:f0:30:26:83:d5:e8:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1 Validity Not Before: May 3 03:11:55 2026 GMT Not After : May 2 03:16:55 2027 GMT Subject: CN=4836C5AA61DC6D27AC88E2CD0D360D0105C89F3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bf:a2:f3:b6:a6:5e:5b:1b:f3:65:7e:9c:95: 71:4c:9b:96:66:6f:77:d4:f0:58:0a:ea:08:a8:a1: 98:7b:3c:a7:0e:ce:64:7e:3b:c9:4e:fc:b0:40:56: f1:30:1a:6c:a1:0c:1c:25:a3:2b:27:c5:9a:03:dd: 04:58:10:3e:98:eb:c6:04:bb:f1:67:83:83:5d:64: 35:84:e8:87:b1:04:88:1e:aa:cc:af:15:68:e5:95: 49:47:17:60:b8:5a:b7:fa:4d:07:f4:d3:a3:81:36: 5b:ea:ff:59:3d:b3:e5:89:a9:b4:50:0f:08:92:38: 6e:2d:8f:40:23:8c:90:74:de:96:27:54:5e:f4:23: 0c:d5:3d:b4:93:c8:e2:81:ff:cc:2b:dc:bd:2a:b6: 9a:a8:31:30:8a:a2:14:26:81:89:d0:9c:1b:9a:9e: 94:80:ea:c2:56:49:b5:00:41:59:b0:15:a2:fc:39: db:17:3b:44:fe:d2:56:fe:65:de:af:60:e2:da:da: b5:90:e1:db:50:90:d9:3e:b4:26:fc:fc:59:87:20: e9:cf:c9:93:09:9c:43:74:81:e1:95:b2:e7:51:08: 20:26:13:5f:5b:e0:23:f3:8f:c8:7d:f8:04:06:83: 06:5b:76:e2:ad:50:20:05:41:bb:3c:46:41:fd:45: 3b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:36:C5:AA:61:DC:6D:27:AC:88:E2:CD:0D:36:0D:01:05:C8:9F:3A X509v3 Authority Key Identifier: keyid:5E:D0:FC:9D:E3:C5:BF:0F:26:41:FB:C8:2E:03:53:3A:D5:A6:C5:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/323430353a636534303a3a2f33322d3438203d3e20313339393838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:ce40::/32 Signature Algorithm: sha256WithRSAEncryption 7f:1e:5e:70:0c:f8:ba:c3:0e:a8:ab:05:b7:7e:7f:c5:08:aa: d7:83:02:51:63:8c:36:10:0a:0a:63:09:0d:6b:21:b9:88:6d: 8a:dd:20:aa:7d:e9:b4:32:c6:6c:b0:22:2b:87:0f:44:27:da: 47:f9:50:51:57:22:6e:1b:cd:aa:a4:e0:63:65:1e:28:8f:77: 69:2a:98:d3:d4:de:44:4c:e5:d7:14:5f:a0:f7:d4:2a:f9:0e: 83:11:33:05:b9:1d:6e:84:ec:61:0d:14:7a:d2:6b:d9:aa:f4: 6d:0b:20:1f:f8:c8:cc:2c:62:0d:38:19:1c:e6:51:4e:e2:23: a8:f1:19:aa:00:ae:8f:19:0b:75:70:32:42:ca:27:8c:b8:9d: c4:86:40:9d:3f:3e:46:3d:35:7f:5b:48:72:e4:84:c8:1f:2a: c2:79:1d:f3:56:56:f1:70:17:a5:b1:bb:df:e9:42:09:40:54: be:2c:ef:60:49:41:96:91:e5:42:37:1f:9c:9b:ec:52:55:f9: 2d:9e:35:5a:7d:61:f3:63:ea:33:a1:07:c0:a9:f2:e3:ed:d9: 72:3d:76:58:3d:46:f3:5e:6f:8a:3e:3b:f0:46:c0:da:2a:00: 42:c0:54:a5:11:b3:b1:82:2e:38:1a:25:6e:59:19:4c:67:33: 8c:79:38:db -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUGhxUCMsllgXgniEtdPAwJoPV6IIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVEMEZDOURFM0M1QkYwRjI2NDFGQkM4MkUwMzUzM0FE NUE2QzVDMTAeFw0yNjA1MDMwMzExNTVaFw0yNzA1MDIwMzE2NTVaMDMxMTAvBgNV BAMTKDQ4MzZDNUFBNjFEQzZEMjdBQzg4RTJDRDBEMzYwRDAxMDVDODlGM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCv6LztqZeWxvzZX6clXFMm5Zm b3fU8FgK6giooZh7PKcOzmR+O8lO/LBAVvEwGmyhDBwloysnxZoD3QRYED6Y68YE u/Fng4NdZDWE6IexBIgeqsyvFWjllUlHF2C4Wrf6TQf006OBNlvq/1k9s+WJqbRQ DwiSOG4tj0AjjJB03pYnVF70IwzVPbSTyOKB/8wr3L0qtpqoMTCKohQmgYnQnBua npSA6sJWSbUAQVmwFaL8OdsXO0T+0lb+Zd6vYOLa2rWQ4dtQkNk+tCb8/FmHIOnP yZMJnEN0geGVsudRCCAmE19b4CPzj8h9+AQGgwZbduKtUCAFQbs8RkH9RTtrAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUSDbFqmHcbSesiOLNDTYNAQXInzowHwYDVR0j BBgwFoAUXtD8nePFvw8mQfvILgNTOtWmxcEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjJkNjZkMTAtYjg1Ny00YmVmLTkzOTUtNDVkNWFiMmM0NGY5LzAvNUVEMEZDOURF M0M1QkYwRjI2NDFGQkM4MkUwMzUzM0FENUE2QzVDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RUQwRkM5REUzQzVCRjBGMjY0MUZCQzgyRTAzNTMzQUQ1QTZD NUMxLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2YyZDY2ZDEwLWI4NTctNGJlZi05 Mzk1LTQ1ZDVhYjJjNDRmOS8wLzMyMzQzMDM1M2E2MzY1MzQzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzMzOTM5MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQFzkAwDQYJKoZI hvcNAQELBQADggEBAH8eXnAM+LrDDqirBbd+f8UIqteDAlFjjDYQCgpjCQ1rIbmI bYrdIKp96bQyxmywIiuHD0Qn2kf5UFFXIm4bzaqk4GNlHiiPd2kqmNPU3kRM5dcU X6D31Cr5DoMRMwW5HW6E7GENFHrSa9mq9G0LIB/4yMwsYg04GRzmUU7iI6jxGaoA ro8ZC3VwMkLKJ4y4ncSGQJ0/PkY9NX9bSHLkhMgfKsJ5HfNWVvFwF6Wxu9/pQglA VL4s72BJQZaR5UI3H5yb7FJV+S2eNVp9YfNj6jOhB8Cp8uPt2XI9dlg9RvNeb4o+ O/BGwNoqAELAVKURs7GCLjgaJW5ZGUxnM4x5ONs= -----END CERTIFICATE-----Generated at Wed May 13 10:32:47 2026 by rpki-client