$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a383030303a3a2f34372d3437203d3e203137373237.roa File: 323430343a633030303a383030303a3a2f34372d3437203d3e203137373237.roa (raw, json) Hash identifier: gOoO4iTa4O/7b3wNsLFjv8Xi/qEPU6SiY5lW3WTFFWE= Subject key identifier: 59:14:60:F6:E0:01:0B:DA:28:58:01:BE:C7:30:FC:08:11:E4:11:AA Certificate issuer: /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0 Certificate serial: 51C0E2EE08999430178CDA1C84CA3025B16C8272 Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a383030303a3a2f34372d3437203d3e203137373237.roa Signing time: Sun 03 May 2026 02:38:30 +0000 ROA not before: Sun 03 May 2026 02:33:30 +0000 ROA not after: Sun 02 May 2027 02:38:30 +0000 asID: 17727 IP address blocks: 2404:c000:8000::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 May 2026 23:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:c0:e2:ee:08:99:94:30:17:8c:da:1c:84:ca:30:25:b1:6c:82:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0 Validity Not Before: May 3 02:33:30 2026 GMT Not After : May 2 02:38:30 2027 GMT Subject: CN=591460F6E0010BDA285801BEC730FC0811E411AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:08:3a:9a:07:23:01:9b:64:13:04:08:91:de: c8:69:a0:10:84:35:ed:ab:ed:6a:3a:55:74:ce:bc: b1:4c:86:98:62:0b:60:c0:79:a8:bf:24:07:b0:a1: d3:65:9a:ca:f8:a6:1f:6f:ba:e8:12:92:d3:14:69: 82:60:55:88:45:d0:34:45:87:2f:80:98:49:24:d9: b2:0b:2b:ef:2a:af:48:a1:0d:bc:46:3d:87:da:8e: 57:a1:9a:40:c4:11:4f:28:9d:8b:6c:16:7e:67:83: e3:d2:2e:f1:eb:ee:13:96:92:65:fe:b3:b2:f3:2b: 53:4c:69:8d:bd:00:f0:d8:2e:30:73:76:d3:65:f1: 13:3e:91:49:b2:8e:cc:6b:f1:46:46:42:df:b2:c9: 0f:a0:3f:f2:75:bd:72:00:05:6c:54:f3:99:2e:4f: 48:e6:c1:27:ce:59:28:69:5e:06:30:4d:82:83:93: 2d:be:8d:22:dc:99:a0:30:9d:59:a9:5a:b3:43:1f: 4b:7d:4d:60:4c:12:d4:12:71:7e:26:b2:3b:6b:94: b6:62:89:a8:57:1f:62:8e:b3:fd:a6:02:1d:87:b0: 0d:e5:10:dc:e0:71:a6:ac:d5:70:9d:d1:3d:12:8f: 15:d1:fc:50:59:5c:8c:20:10:12:1e:9f:3e:1f:fe: 05:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:14:60:F6:E0:01:0B:DA:28:58:01:BE:C7:30:FC:08:11:E4:11:AA X509v3 Authority Key Identifier: keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a383030303a3a2f34372d3437203d3e203137373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:c000:8000::/47 Signature Algorithm: sha256WithRSAEncryption 86:0d:82:b3:b2:e1:eb:6f:42:db:91:e0:27:7e:2f:e7:fc:ff: 46:f0:8d:c0:a1:19:12:fa:67:8f:10:ef:d7:6a:02:c0:e1:a4: ac:a5:08:2d:9e:b4:25:e4:87:22:e7:d7:b9:3e:cd:0e:8d:0a: a6:5d:ed:e0:81:e5:fa:e8:94:b6:39:e8:81:17:ab:23:f6:a6: 85:bc:04:51:81:da:34:dc:b3:93:5f:23:53:f6:61:4f:b9:9f: ac:45:8d:42:f0:0b:27:b7:20:1b:4f:2f:bc:55:50:30:85:10: e3:b2:15:ec:0c:b6:95:23:90:f7:7d:ad:d8:82:46:41:28:f2: 00:59:c7:7d:8a:9b:b8:ed:c0:23:7e:75:b8:0d:36:db:89:8c: 95:0a:b4:c7:4a:d2:49:67:c5:30:00:cb:7a:13:3f:73:b7:e6: b0:22:fe:ac:44:48:87:40:13:1f:e5:d8:e1:bf:f2:3a:1c:19: 3d:43:47:af:9e:02:fe:66:fe:fe:bc:60:1e:09:72:25:a3:ac: f2:47:04:97:6b:95:26:3e:7f:cb:a1:60:c3:aa:f3:62:97:10: cd:51:5f:51:8c:dd:49:3d:4f:73:8a:14:88:32:18:8b:bd:11: f1:e1:30:14:1d:df:01:2a:94:9a:56:7b:64:0f:74:8f:fa:5e: 3c:1d:f7:6b -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUUcDi7giZlDAXjNochMowJbFsgnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFFMTU4QjNDODREMzA3NjhDQkMwRDFENTYwMzRFMjZF NzA0QjVEMDAeFw0yNjA1MDMwMjMzMzBaFw0yNzA1MDIwMjM4MzBaMDMxMTAvBgNV BAMTKDU5MTQ2MEY2RTAwMTBCREEyODU4MDFCRUM3MzBGQzA4MTFFNDExQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMCDqaByMBm2QTBAiR3shpoBCE Ne2r7Wo6VXTOvLFMhphiC2DAeai/JAewodNlmsr4ph9vuugSktMUaYJgVYhF0DRF hy+AmEkk2bILK+8qr0ihDbxGPYfajlehmkDEEU8onYtsFn5ng+PSLvHr7hOWkmX+ s7LzK1NMaY29APDYLjBzdtNl8RM+kUmyjsxr8UZGQt+yyQ+gP/J1vXIABWxU85ku T0jmwSfOWShpXgYwTYKDky2+jSLcmaAwnVmpWrNDH0t9TWBMEtQScX4msjtrlLZi iahXH2KOs/2mAh2HsA3lENzgcaas1XCd0T0SjxXR/FBZXIwgEBIenz4f/gVhAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUWRRg9uABC9ooWAG+xzD8CBHkEaowHwYDVR0j BBgwFoAU6uFYs8hNMHaMvA0dVgNOJucEtdAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjM1ZjdhMmYtNzI1ZS00Mzk5LTg2OWEtNGIxZmNmMmM2YTBjLzAvRUFFMTU4QjND ODREMzA3NjhDQkMwRDFENTYwMzRFMjZFNzA0QjVEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQUUxNThCM0M4NEQzMDc2OENCQzBEMUQ1NjAzNEUyNkU3MDRC NUQwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMyMzQzMDM0M2E2MzMwMzAzMDNhMzgzMDMwMzAz YTNhMmYzNDM3MmQzNDM3MjAzZDNlMjAzMTM3MzczMjM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJATA AIAAMA0GCSqGSIb3DQEBCwUAA4IBAQCGDYKzsuHrb0LbkeAnfi/n/P9G8I3AoRkS +mePEO/XagLA4aSspQgtnrQl5Ici59e5Ps0OjQqmXe3ggeX66JS2OeiBF6sj9qaF vARRgdo03LOTXyNT9mFPuZ+sRY1C8AsntyAbTy+8VVAwhRDjshXsDLaVI5D3fa3Y gkZBKPIAWcd9ipu47cAjfnW4DTbbiYyVCrTHStJJZ8UwAMt6Ez9zt+awIv6sREiH QBMf5djhv/I6HBk9Q0evngL+Zv7+vGAeCXIlo6zyRwSXa5UmPn/LoWDDqvNilxDN UV9RjN1JPU9zihSIMhiLvRHx4TAUHd8BKpSaVntkD3SP+l48Hfdr -----END CERTIFICATE-----Generated at Thu May 7 04:31:44 2026 by rpki-client