$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a323a3a2f34382d3438203d3e203539323832.roa File: 323430303a643638303a323a3a2f34382d3438203d3e203539323832.roa (raw, json) Hash identifier: AXYnJAEv7z2tUD33+NaHrltSBMuBOMW49EVRFoSQzz8= Subject key identifier: F4:EE:0A:3C:B1:95:C6:CE:EE:2A:4E:F4:60:32:84:0D:15:CA:DB:A3 Certificate issuer: /CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D Certificate serial: 04EA8C74EA6CC5B93D2CF023FF752464C5F8E043 Authority key identifier: 69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a323a3a2f34382d3438203d3e203539323832.roa Signing time: Sun 03 May 2026 02:57:47 +0000 ROA not before: Sun 03 May 2026 02:52:47 +0000 ROA not after: Sun 02 May 2027 02:57:47 +0000 asID: 59282 IP address blocks: 2400:d680:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 12:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ea:8c:74:ea:6c:c5:b9:3d:2c:f0:23:ff:75:24:64:c5:f8:e0:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D Validity Not Before: May 3 02:52:47 2026 GMT Not After : May 2 02:57:47 2027 GMT Subject: CN=F4EE0A3CB195C6CEEE2A4EF46032840D15CADBA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d0:c3:cc:fb:a6:ed:a3:d2:f4:d2:7f:0f:73: 39:27:b1:ba:21:22:c4:3b:54:66:f0:30:ff:ad:9e: 7a:5e:43:2a:f2:30:e4:9a:d7:c6:09:35:53:59:26: 9f:75:4d:a5:3c:f4:7c:34:c0:be:44:4b:f6:19:ca: 76:0f:84:9d:d6:69:71:13:7d:71:c7:46:82:c8:68: cf:fa:20:97:b5:6c:7f:69:59:4d:bd:8e:92:74:ee: ee:a6:df:f3:ae:63:3a:8a:08:f2:07:60:9b:58:13: ae:60:eb:07:af:98:e7:dd:e7:c3:f2:59:d7:f8:c3: 2b:fc:03:18:ab:37:da:a5:af:27:aa:9e:87:13:c6: ba:c1:ee:92:d2:a9:13:44:87:89:39:53:d7:9a:e3: 3a:a7:8b:6c:7d:f1:02:14:96:d0:19:08:c7:af:90: 22:83:a9:4d:35:22:dc:4d:31:9f:ab:1f:7b:cd:a9: d6:31:e9:09:4a:1e:9f:40:1d:b3:7d:a4:2d:b9:11: 39:64:04:98:f1:4f:dc:66:5c:f6:95:f8:6f:fa:55: b4:bb:95:2c:06:73:dd:56:72:e6:74:7e:e9:78:c7: 77:44:d3:e3:71:84:69:20:0b:27:a6:82:5b:55:4a: 58:8c:62:d5:1f:d7:25:7e:58:28:e1:37:66:08:14: db:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:EE:0A:3C:B1:95:C6:CE:EE:2A:4E:F4:60:32:84:0D:15:CA:DB:A3 X509v3 Authority Key Identifier: keyid:69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a323a3a2f34382d3438203d3e203539323832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:d680:2::/48 Signature Algorithm: sha256WithRSAEncryption 5b:79:5a:b2:63:c4:40:2d:bb:d7:1a:ab:5c:d2:2f:4b:c5:99: d1:c8:e9:bf:cf:56:29:59:4d:78:c2:00:e0:90:ae:c3:20:3f: ad:21:cf:f3:3f:b4:4f:7d:c2:6a:fe:2f:81:ba:b3:70:cb:cc: 52:a4:5d:b4:7b:43:c0:fd:e0:6a:40:e6:e5:05:07:3c:6e:9b: 19:2d:2a:5a:ff:9f:87:be:b1:32:7b:1d:6c:94:a4:0a:18:43: 47:1c:59:c1:26:7b:5b:f2:2c:e7:8b:9f:e1:b2:dc:c7:2b:7f: 69:e7:c1:a9:7c:31:06:53:a9:6f:23:18:98:ea:04:c3:b2:ca: 16:ff:b1:eb:66:f2:58:9e:fd:a4:ec:bd:f0:0e:70:8a:79:9a: a7:46:07:c4:40:25:cb:86:37:ab:da:d6:dc:19:a4:b4:ea:65: bc:d7:f6:6f:49:0c:93:c5:e5:58:58:25:46:1d:82:aa:3e:da: 7c:0c:25:1d:89:fe:77:c7:03:de:b9:9b:a7:1a:29:ff:df:2f: 4f:5f:1a:01:42:3c:48:7c:da:3a:ef:4b:75:71:3d:70:45:6b: 1a:67:d2:be:74:15:6b:bf:b8:da:c1:c8:d1:31:8d:97:52:67: fa:2e:84:43:6c:07:a0:5c:e4:63:4a:a5:30:ed:cf:74:17:23: 47:c6:56:dd -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUBOqMdOpsxbk9LPAj/3UkZMX44EMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk5NTVGQzczRjEyODgwMjRFN0NBRjBDMUQ4MjVFODM4 OUI2QjI1RDAeFw0yNjA1MDMwMjUyNDdaFw0yNzA1MDIwMjU3NDdaMDMxMTAvBgNV BAMTKEY0RUUwQTNDQjE5NUM2Q0VFRTJBNEVGNDYwMzI4NDBEMTVDQURCQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF0MPM+6bto9L00n8Pczknsboh IsQ7VGbwMP+tnnpeQyryMOSa18YJNVNZJp91TaU89Hw0wL5ES/YZynYPhJ3WaXET fXHHRoLIaM/6IJe1bH9pWU29jpJ07u6m3/OuYzqKCPIHYJtYE65g6wevmOfd58Py Wdf4wyv8AxirN9qlryeqnocTxrrB7pLSqRNEh4k5U9ea4zqni2x98QIUltAZCMev kCKDqU01ItxNMZ+rH3vNqdYx6QlKHp9AHbN9pC25ETlkBJjxT9xmXPaV+G/6VbS7 lSwGc91WcuZ0ful4x3dE0+NxhGkgCyemgltVSliMYtUf1yV+WCjhN2YIFNvrAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQU9O4KPLGVxs7uKk70YDKEDRXK26MwHwYDVR0j BBgwFoAUaZVfxz8SiAJOfK8MHYJeg4m2sl0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg0NjRhNWItMmZjZS00N2RhLTgwNDctNjhkMmJkNjNjOWMzLzAvNjk5NTVGQzcz RjEyODgwMjRFN0NBRjBDMUQ4MjVFODM4OUI2QjI1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OTk1NUZDNzNGMTI4ODAyNEU3Q0FGMEMxRDgyNUU4Mzg5QjZC MjVELmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04 MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzIzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzNTM5MzIzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJADWgAACMA0G CSqGSIb3DQEBCwUAA4IBAQBbeVqyY8RALbvXGqtc0i9LxZnRyOm/z1YpWU14wgDg kK7DID+tIc/zP7RPfcJq/i+BurNwy8xSpF20e0PA/eBqQOblBQc8bpsZLSpa/5+H vrEyex1slKQKGENHHFnBJntb8izni5/hstzHK39p58GpfDEGU6lvIxiY6gTDssoW /7HrZvJYnv2k7L3wDnCKeZqnRgfEQCXLhjer2tbcGaS06mW81/ZvSQyTxeVYWCVG HYKqPtp8DCUdif53xwPeuZunGin/3y9PXxoBQjxIfNo670t1cT1wRWsaZ9K+dBVr v7jawcjRMY2XUmf6LoRDbAegXORjSqUw7c90FyNHxlbd -----END CERTIFICATE-----Generated at Tue May 5 21:07:22 2026 by rpki-client