$ rpki-client -vvf rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/323430363a613063303a3a2f33322d3332203d3e20313337333331.roa File: 323430363a613063303a3a2f33322d3332203d3e20313337333331.roa (raw, json) Hash identifier: 6pyTfAlzYTBLrXJyXEzbPma6QqEhBhRMnugG93bjYxI= Subject key identifier: 60:AE:CA:13:33:63:87:A0:5D:E1:8A:5B:1E:4B:39:47:5D:24:42:A2 Certificate issuer: /CN=4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391 Certificate serial: 795589CC022620109F74705B19E5424E4BECA774 Authority key identifier: 4D:4C:BE:65:1A:A2:20:F9:08:8E:4D:BB:BC:97:BB:E2:D0:E0:D3:91 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/323430363a613063303a3a2f33322d3332203d3e20313337333331.roa Signing time: Sun 03 May 2026 02:17:36 +0000 ROA not before: Sun 03 May 2026 02:12:36 +0000 ROA not after: Sun 02 May 2027 02:17:36 +0000 asID: 137331 IP address blocks: 2406:a0c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 12:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:55:89:cc:02:26:20:10:9f:74:70:5b:19:e5:42:4e:4b:ec:a7:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391 Validity Not Before: May 3 02:12:36 2026 GMT Not After : May 2 02:17:36 2027 GMT Subject: CN=60AECA13336387A05DE18A5B1E4B39475D2442A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0b:20:b4:06:24:9c:f6:35:6b:b3:1f:ac:02: 83:dc:e3:23:7c:60:bf:50:e9:b6:e9:e6:c7:05:27: 2c:d1:48:55:a5:05:c8:e1:38:93:e2:21:5e:2e:45: 24:ef:cb:92:66:64:9c:45:95:ef:17:31:4f:c5:bb: cb:2b:19:ba:c2:57:4e:34:78:b7:88:b5:ff:82:3d: 8d:15:89:db:a5:c3:9e:b0:01:71:02:08:90:1b:f8: ba:00:5f:b3:97:e0:d6:b2:55:cd:81:08:51:f9:11: b4:a7:ec:e8:2c:b2:4b:64:14:6f:78:69:a8:ca:c5: a3:a5:57:50:f6:35:73:44:37:e1:e9:16:ee:40:3b: b9:1b:e7:07:b4:a4:ee:65:15:10:b2:8b:12:26:ec: a7:83:ae:37:fb:c6:a4:30:99:a3:42:7e:21:6d:ec: 86:c2:bf:9b:30:85:c8:45:15:71:b2:9c:e8:a9:86: 4a:80:51:3d:05:b6:7b:75:ab:20:01:29:53:2d:1a: de:16:f8:f1:33:55:fa:08:27:3f:ad:11:68:29:b4: 6a:be:c1:19:96:2b:43:74:47:04:a7:65:53:ce:76: 76:a0:7a:a1:b5:b8:34:9c:1b:ec:e3:db:fd:de:11: cd:a7:d4:87:b7:14:b2:52:c7:7d:2f:a1:b5:1c:2e: 01:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:AE:CA:13:33:63:87:A0:5D:E1:8A:5B:1E:4B:39:47:5D:24:42:A2 X509v3 Authority Key Identifier: keyid:4D:4C:BE:65:1A:A2:20:F9:08:8E:4D:BB:BC:97:BB:E2:D0:E0:D3:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/323430363a613063303a3a2f33322d3332203d3e20313337333331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:a0c0::/32 Signature Algorithm: sha256WithRSAEncryption 27:87:64:a1:f3:de:1e:eb:36:80:cd:00:84:e9:23:a6:da:85: 12:96:22:2c:5a:83:3b:92:7b:e7:61:eb:5e:2a:54:47:56:3b: dc:f0:6b:8f:cd:4b:04:6b:95:67:76:f5:04:c0:9b:ed:4a:4e: 5a:b8:6f:70:83:61:bf:65:a6:e8:6e:09:f3:ad:e2:02:79:f7: f1:89:54:98:98:78:2a:05:de:45:49:3a:80:d8:4e:5f:9f:a2: 9d:08:2f:7b:34:2a:48:b1:8a:a2:d8:7d:be:b1:3d:e0:e1:f9: 56:df:f9:84:cc:e7:cc:72:d7:ae:ab:5a:39:12:db:14:b5:99: f2:63:bc:f6:26:11:72:18:f6:fa:8b:c8:3a:ab:b6:a9:69:e7: 85:59:6f:c6:b4:e2:65:06:62:3c:7e:4a:70:17:9e:fb:01:8b: 06:97:39:35:e8:f4:93:23:3b:87:1c:ad:d0:f0:c3:32:0b:af: 19:3f:bd:1e:e4:1e:d3:5a:0d:91:66:2f:d1:8d:53:09:5a:b1: 77:ea:46:25:b2:ee:2c:07:05:49:67:57:96:76:04:49:71:a1: 86:5d:d7:53:09:9e:8c:b1:c8:25:52:64:bb:cf:59:2e:59:85: fa:3c:01:7e:9d:69:17:74:cf:cc:9b:6b:e3:74:74:35:03:3a: 4a:74:bc:88 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUeVWJzAImIBCfdHBbGeVCTkvsp3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ0Q0JFNjUxQUEyMjBGOTA4OEU0REJCQkM5N0JCRTJE MEUwRDM5MTAeFw0yNjA1MDMwMjEyMzZaFw0yNzA1MDIwMjE3MzZaMDMxMTAvBgNV BAMTKDYwQUVDQTEzMzM2Mzg3QTA1REUxOEE1QjFFNEIzOTQ3NUQyNDQyQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFCyC0BiSc9jVrsx+sAoPc4yN8 YL9Q6bbp5scFJyzRSFWlBcjhOJPiIV4uRSTvy5JmZJxFle8XMU/Fu8srGbrCV040 eLeItf+CPY0Vidulw56wAXECCJAb+LoAX7OX4NayVc2BCFH5EbSn7OgssktkFG94 aajKxaOlV1D2NXNEN+HpFu5AO7kb5we0pO5lFRCyixIm7KeDrjf7xqQwmaNCfiFt 7IbCv5swhchFFXGynOiphkqAUT0Ftnt1qyABKVMtGt4W+PEzVfoIJz+tEWgptGq+ wRmWK0N0RwSnZVPOdnageqG1uDScG+zj2/3eEc2n1Ie3FLJSx30vobUcLgHpAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUYK7KEzNjh6Bd4YpbHks5R10kQqIwHwYDVR0j BBgwFoAUTUy+ZRqiIPkIjk27vJe74tDg05EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWQwN2UzZDgtOWJmYy00NDgzLWEyZGQtYWZhNDU5MzgxMWU1LzAvNEQ0Q0JFNjUx QUEyMjBGOTA4OEU0REJCQkM5N0JCRTJEMEUwRDM5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDRDQkU2NTFBQTIyMEY5MDg4RTREQkJCQzk3QkJFMkQwRTBE MzkxLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFkMDdlM2Q4LTliZmMtNDQ4My1h MmRkLWFmYTQ1OTM4MTFlNS8wLzMyMzQzMDM2M2E2MTMwNjMzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzNzMzMzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQGoMAwDQYJKoZI hvcNAQELBQADggEBACeHZKHz3h7rNoDNAITpI6bahRKWIixagzuSe+dh614qVEdW O9zwa4/NSwRrlWd29QTAm+1KTlq4b3CDYb9lpuhuCfOt4gJ59/GJVJiYeCoF3kVJ OoDYTl+fop0IL3s0KkixiqLYfb6xPeDh+Vbf+YTM58xy166rWjkS2xS1mfJjvPYm EXIY9vqLyDqrtqlp54VZb8a04mUGYjx+SnAXnvsBiwaXOTXo9JMjO4ccrdDwwzIL rxk/vR7kHtNaDZFmL9GNUwlasXfqRiWy7iwHBUlnV5Z2BElxoYZd11MJnoyxyCVS ZLvPWS5Zhfo8AX6daRd0z8yba+N0dDUDOkp0vIg= -----END CERTIFICATE-----Generated at Tue May 5 16:57:21 2026 by rpki-client