$ rpki-client -vvf rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/323430333a623930303a323032303a3a2f34382d3438203d3e2034333832.roa File: 323430333a623930303a323032303a3a2f34382d3438203d3e2034333832.roa (raw, json) Hash identifier: xHTM4Dl9Q5HuRM0LLQTU8e9mpsnqdL1Szb5p9XaOS1U= Subject key identifier: C8:A9:9E:6F:8E:A6:93:D4:71:8F:38:49:4A:B8:99:E5:FF:36:EF:D3 Certificate issuer: /CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404 Certificate serial: 114B18B15723A79B6871FCF4BE83CFA0BDCCE854 Authority key identifier: 25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/323430333a623930303a323032303a3a2f34382d3438203d3e2034333832.roa Signing time: Sun 03 May 2026 02:16:17 +0000 ROA not before: Sun 03 May 2026 02:11:17 +0000 ROA not after: Sun 02 May 2027 02:16:17 +0000 asID: 4382 IP address blocks: 2403:b900:2020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 14:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:4b:18:b1:57:23:a7:9b:68:71:fc:f4:be:83:cf:a0:bd:cc:e8:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404 Validity Not Before: May 3 02:11:17 2026 GMT Not After : May 2 02:16:17 2027 GMT Subject: CN=C8A99E6F8EA693D4718F38494AB899E5FF36EFD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:77:4d:7b:ed:5a:53:4a:f1:0a:6c:b3:7a:46: 91:82:e3:31:b0:91:c7:9a:30:b1:2e:80:98:8b:f8: 1e:6b:c9:1b:06:1e:90:dd:9e:20:4e:13:18:bf:59: 7b:5b:3e:5a:3c:59:8a:4a:0b:b3:0a:27:a6:57:24: ab:d1:a2:49:51:20:68:15:10:ac:3e:dd:a5:27:63: 5d:9c:2a:10:4a:5b:d8:53:2e:82:71:75:70:9d:c4: da:0b:bc:f0:bb:a4:a9:3c:f6:2c:da:17:3f:c4:92: 8b:bf:a9:8f:c5:63:80:51:b8:b1:36:6c:29:06:9b: e6:e7:4c:50:05:24:15:c4:9d:85:28:4a:d7:c0:da: e5:e5:7d:dc:42:f6:a4:36:15:95:ff:6c:be:c5:3d: 4c:d9:f5:8e:d9:8a:78:20:6b:38:59:4e:db:fb:09: 81:ea:a0:a7:d8:64:f7:02:5f:75:75:5e:e7:fe:b9: fc:33:b5:48:0e:b6:93:85:23:d7:30:91:85:e4:01: a1:f0:15:6d:b7:f0:45:1e:26:fb:df:57:ea:ce:9f: 9c:08:cc:09:f5:7c:d2:4d:56:eb:25:5d:6c:9b:c7: 16:18:ad:2c:87:85:8f:82:c8:d5:b2:18:e6:94:8e: fb:8d:48:78:ca:d6:74:21:ff:1f:d2:c2:88:11:34: 63:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A9:9E:6F:8E:A6:93:D4:71:8F:38:49:4A:B8:99:E5:FF:36:EF:D3 X509v3 Authority Key Identifier: keyid:25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/323430333a623930303a323032303a3a2f34382d3438203d3e2034333832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b900:2020::/48 Signature Algorithm: sha256WithRSAEncryption 49:4f:2b:ee:91:10:01:b3:e1:44:98:87:22:d1:71:68:e6:71: ae:b0:49:08:ca:6a:8c:32:73:cf:a6:7b:aa:f3:5e:db:2c:18: 7b:71:bf:55:5b:76:92:b4:6e:51:89:f0:b8:13:7c:95:c6:56: 53:63:bc:b8:ff:e8:f2:ab:e7:6a:b2:b0:13:b3:7d:b3:3c:af: 97:91:17:2d:8b:3c:7e:0b:4d:98:85:6b:ae:a3:73:77:eb:3f: ae:58:86:ea:e0:40:15:0f:6d:c2:0e:7c:8a:36:94:c7:4f:4e: c8:20:80:43:c4:2b:01:85:53:2a:1a:0d:13:a9:9a:e4:fe:b5: a9:48:29:53:9e:bb:3c:c4:9c:46:15:09:13:40:1c:13:41:3d: e4:bc:13:3d:72:34:ce:5a:e9:8a:2b:ee:82:55:81:c0:3d:08: 77:bd:35:69:a5:62:f0:96:0f:7e:cd:8d:38:cb:dc:4a:3f:de: 8d:97:65:4b:f5:f2:dd:be:76:0b:5a:76:c6:74:3e:39:b5:fe: 0a:e2:84:d2:35:38:48:96:d9:a9:a7:e8:0b:8a:d0:0b:fc:24: b6:be:f2:a6:f4:c7:c6:2f:a7:09:76:d8:ac:41:01:f3:35:b9: 65:a1:5c:f8:f8:36:28:aa:bd:5a:08:b9:2e:f7:d7:f8:28:2b: ad:d3:29:96 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUEUsYsVcjp5tocfz0voPPoL3M6FQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUyODM3Q0ExNDRCM0VFN0RCMjQzRUJDQjBDMTBGODE4 QTRFRTQwNDAeFw0yNjA1MDMwMjExMTdaFw0yNzA1MDIwMjE2MTdaMDMxMTAvBgNV BAMTKEM4QTk5RTZGOEVBNjkzRDQ3MThGMzg0OTRBQjg5OUU1RkYzNkVGRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFd0177VpTSvEKbLN6RpGC4zGw kceaMLEugJiL+B5ryRsGHpDdniBOExi/WXtbPlo8WYpKC7MKJ6ZXJKvRoklRIGgV EKw+3aUnY12cKhBKW9hTLoJxdXCdxNoLvPC7pKk89izaFz/Ekou/qY/FY4BRuLE2 bCkGm+bnTFAFJBXEnYUoStfA2uXlfdxC9qQ2FZX/bL7FPUzZ9Y7ZinggazhZTtv7 CYHqoKfYZPcCX3V1Xuf+ufwztUgOtpOFI9cwkYXkAaHwFW238EUeJvvfV+rOn5wI zAn1fNJNVuslXWybxxYYrSyHhY+CyNWyGOaUjvuNSHjK1nQh/x/SwogRNGO7AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUyKmeb46mk9RxjzhJSriZ5f8279MwHwYDVR0j BBgwFoAUJSg3yhRLPufbJD68sMEPgYpO5AQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTg2YjM4ODktNjk2Ni00NWVmLTkwNzMtYWQxNDAxMWFjM2IyLzAvMjUyODM3Q0Ex NDRCM0VFN0RCMjQzRUJDQjBDMTBGODE4QTRFRTQwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTI4MzdDQTE0NEIzRUU3REIyNDNFQkNCMEMxMEY4MThBNEVF NDA0LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE4NmIzODg5LTY5NjYtNDVlZi05 MDczLWFkMTQwMTFhYzNiMi8wLzMyMzQzMDMzM2E2MjM5MzAzMDNhMzIzMDMyMzAz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNDMzMzgzMi5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQDuQAg IDANBgkqhkiG9w0BAQsFAAOCAQEASU8r7pEQAbPhRJiHItFxaOZxrrBJCMpqjDJz z6Z7qvNe2ywYe3G/VVt2krRuUYnwuBN8lcZWU2O8uP/o8qvnarKwE7N9szyvl5EX LYs8fgtNmIVrrqNzd+s/rliG6uBAFQ9twg58ijaUx09OyCCAQ8QrAYVTKhoNE6ma 5P61qUgpU567PMScRhUJE0AcE0E95LwTPXI0zlrpiivuglWBwD0Id701aaVi8JYP fs2NOMvcSj/ejZdlS/Xy3b52C1p2xnQ+ObX+CuKE0jU4SJbZqafoC4rQC/wktr7y pvTHxi+nCXbYrEEB8zW5ZaFc+Pg2KKq9Wgi5LvfX+CgrrdMplg== -----END CERTIFICATE-----Generated at Fri May 8 03:17:30 2026 by rpki-client