$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a363a3a2f34382d3438203d3e203539323832.roa File: 323430303a643638303a363a3a2f34382d3438203d3e203539323832.roa (raw, json) Hash identifier: cjnevU0RPzXKOiUMI3NVUlG7JVEKvWFFOPDxZT7zvG0= Subject key identifier: BD:34:4B:68:8E:6A:AD:B6:F9:07:8D:69:26:1A:85:30:53:65:14:F0 Certificate issuer: /CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D Certificate serial: 5FBE85A663F038649294CA369206B82E01697A21 Authority key identifier: 69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a363a3a2f34382d3438203d3e203539323832.roa Signing time: Sun 03 May 2026 02:57:46 +0000 ROA not before: Sun 03 May 2026 02:52:46 +0000 ROA not after: Sun 02 May 2027 02:57:46 +0000 asID: 59282 IP address blocks: 2400:d680:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 12:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:be:85:a6:63:f0:38:64:92:94:ca:36:92:06:b8:2e:01:69:7a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D Validity Not Before: May 3 02:52:46 2026 GMT Not After : May 2 02:57:46 2027 GMT Subject: CN=BD344B688E6AADB6F9078D69261A8530536514F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3c:3c:2e:7a:00:8f:c3:18:b1:e2:0a:bd:c1: cf:dc:89:6d:a5:9f:2e:aa:20:39:b4:7c:db:8f:18: 32:8e:4e:0a:ab:77:dc:c5:27:5c:f8:17:b8:69:a5: 68:22:8c:e3:1c:e6:09:ed:fb:37:9e:d0:d7:c6:77: a1:58:8a:c9:58:f7:bb:f3:ac:52:d2:27:b3:7d:3f: 80:41:06:4a:df:5f:f9:71:7b:a3:d7:b9:39:04:31: 07:a6:4e:be:81:e7:7a:ef:29:90:28:ed:83:6d:ee: d9:10:6d:96:67:a6:b7:27:b7:10:2e:b6:25:6d:da: 05:1b:af:0c:9d:fe:4a:06:44:86:1a:66:7b:21:5b: f6:ae:e5:49:df:4b:d9:7f:cd:c5:86:55:8e:3b:23: 64:3e:65:3e:91:1c:ea:34:f6:f9:f4:23:a4:83:74: cd:a3:6b:67:fa:4b:8d:5f:b4:3a:83:d3:8c:46:b2: 75:1f:7f:fd:74:cf:be:62:5c:6b:56:0b:d8:1c:be: fc:f3:c6:15:df:24:ad:c2:6e:a2:3f:ad:7b:5d:54: 21:8e:6c:49:31:89:ba:5f:5a:06:2d:d3:07:04:0e: ce:5f:d2:c3:39:80:d5:20:c5:26:82:3e:01:6a:e5: f5:4f:0f:ff:fd:98:af:12:24:ec:92:ad:57:11:e4: 15:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:34:4B:68:8E:6A:AD:B6:F9:07:8D:69:26:1A:85:30:53:65:14:F0 X509v3 Authority Key Identifier: keyid:69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a363a3a2f34382d3438203d3e203539323832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:d680:6::/48 Signature Algorithm: sha256WithRSAEncryption 2b:4e:d6:63:1e:fc:10:7c:0e:b3:6c:d3:1b:6c:67:78:8b:b8: c6:17:00:46:c5:04:ee:49:55:6e:33:e8:b9:72:70:11:4a:e1: ac:b0:6b:c0:85:b9:35:14:ea:35:95:77:ce:59:86:de:ac:a4: 24:06:34:22:c1:ec:a7:c0:fb:d6:23:10:88:a8:52:95:2a:18: e3:66:2e:85:45:73:31:4f:5d:e3:b3:70:67:4b:37:57:41:4f: 90:c6:28:ad:fe:88:4c:4f:d9:9c:09:f3:8c:04:62:f2:ee:51: 21:a0:8c:9a:75:da:63:9a:19:26:b6:54:1f:5a:00:51:ad:d3: a6:a0:3a:1c:60:6b:fc:a8:b8:4e:39:0b:6e:70:a4:b1:ab:b4: e7:7c:9b:d6:38:fb:67:0e:86:f7:87:2e:1d:3e:ad:69:12:72: 2c:cc:89:32:65:61:37:60:f0:1c:46:66:59:41:95:da:a0:43: 80:da:d7:ba:f8:71:d0:8d:a5:2c:59:03:24:6b:9a:c7:79:82: ce:de:86:67:1c:b4:5b:24:a4:f3:84:51:22:38:0e:49:5c:8e: c2:4d:15:34:b2:be:c9:e2:a5:31:b1:22:65:22:cb:c0:2e:c9: 89:cc:1d:6d:fe:f5:d6:06:a9:a1:6d:f8:49:40:db:dc:4f:0d: c1:cb:8a:ef -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUX76FpmPwOGSSlMo2kga4LgFpeiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk5NTVGQzczRjEyODgwMjRFN0NBRjBDMUQ4MjVFODM4 OUI2QjI1RDAeFw0yNjA1MDMwMjUyNDZaFw0yNzA1MDIwMjU3NDZaMDMxMTAvBgNV BAMTKEJEMzQ0QjY4OEU2QUFEQjZGOTA3OEQ2OTI2MUE4NTMwNTM2NTE0RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrPDwuegCPwxix4gq9wc/ciW2l ny6qIDm0fNuPGDKOTgqrd9zFJ1z4F7hppWgijOMc5gnt+zee0NfGd6FYislY97vz rFLSJ7N9P4BBBkrfX/lxe6PXuTkEMQemTr6B53rvKZAo7YNt7tkQbZZnprcntxAu tiVt2gUbrwyd/koGRIYaZnshW/au5UnfS9l/zcWGVY47I2Q+ZT6RHOo09vn0I6SD dM2ja2f6S41ftDqD04xGsnUff/10z75iXGtWC9gcvvzzxhXfJK3CbqI/rXtdVCGO bEkxibpfWgYt0wcEDs5f0sM5gNUgxSaCPgFq5fVPD//9mK8SJOySrVcR5BWRAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUvTRLaI5qrbb5B41pJhqFMFNlFPAwHwYDVR0j BBgwFoAUaZVfxz8SiAJOfK8MHYJeg4m2sl0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg0NjRhNWItMmZjZS00N2RhLTgwNDctNjhkMmJkNjNjOWMzLzAvNjk5NTVGQzcz RjEyODgwMjRFN0NBRjBDMUQ4MjVFODM4OUI2QjI1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OTk1NUZDNzNGMTI4ODAyNEU3Q0FGMEMxRDgyNUU4Mzg5QjZC MjVELmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04 MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzYzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzNTM5MzIzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJADWgAAGMA0G CSqGSIb3DQEBCwUAA4IBAQArTtZjHvwQfA6zbNMbbGd4i7jGFwBGxQTuSVVuM+i5 cnARSuGssGvAhbk1FOo1lXfOWYberKQkBjQiweynwPvWIxCIqFKVKhjjZi6FRXMx T13js3BnSzdXQU+Qxiit/ohMT9mcCfOMBGLy7lEhoIyaddpjmhkmtlQfWgBRrdOm oDocYGv8qLhOOQtucKSxq7TnfJvWOPtnDob3hy4dPq1pEnIszIkyZWE3YPAcRmZZ QZXaoEOA2te6+HHQjaUsWQMka5rHeYLO3oZnHLRbJKTzhFEiOA5JXI7CTRU0sr7J 4qUxsSJlIsvALsmJzB1t/vXWBqmhbfhJQNvcTw3By4rv -----END CERTIFICATE-----Generated at Tue May 5 21:03:31 2026 by rpki-client