$ rpki-client -vvf rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/323430353a63303a3a2f33322d3438203d3e20313338383831.roa File: 323430353a63303a3a2f33322d3438203d3e20313338383831.roa (raw, json) Hash identifier: A51y95Y2VvHOxleNisrOn7Mw2CXWlCwKbBD4RKfiRXo= Subject key identifier: A2:6B:38:07:66:BE:4D:44:FC:69:76:CE:B3:EE:ED:8E:14:0E:F0:38 Certificate issuer: /CN=8644EF5CAFD6FF2C753833B588D6D5E40AD9C077 Certificate serial: 5A095BD90092AA7E204AF014747514BF651C33E4 Authority key identifier: 86:44:EF:5C:AF:D6:FF:2C:75:38:33:B5:88:D6:D5:E4:0A:D9:C0:77 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/323430353a63303a3a2f33322d3438203d3e20313338383831.roa Signing time: Sun 03 May 2026 02:10:29 +0000 ROA not before: Sun 03 May 2026 02:05:29 +0000 ROA not after: Sun 02 May 2027 02:10:29 +0000 asID: 138881 IP address blocks: 2405:c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.crl rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:24:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:09:5b:d9:00:92:aa:7e:20:4a:f0:14:74:75:14:bf:65:1c:33:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8644EF5CAFD6FF2C753833B588D6D5E40AD9C077 Validity Not Before: May 3 02:05:29 2026 GMT Not After : May 2 02:10:29 2027 GMT Subject: CN=A26B380766BE4D44FC6976CEB3EEED8E140EF038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:57:bc:1b:0f:bd:34:68:61:91:5a:4c:0c:61: 45:c4:01:f9:0d:0c:2b:e3:dc:e7:d8:0b:44:01:bb: 8e:3c:eb:48:3e:5a:97:2d:b3:7b:84:c8:13:87:05: 84:6a:f6:06:1d:68:5b:46:80:4d:29:32:b8:15:32: 3c:9e:4c:ea:9b:09:91:9a:3c:33:47:b4:1a:0d:73: e1:68:a7:93:f3:0b:62:cc:23:26:d4:d5:f5:3c:88: 7f:f7:f8:09:a8:4d:e3:9a:1a:22:d6:13:46:36:07: ae:76:da:2f:59:ba:8e:fb:e2:9c:34:1e:e1:58:1b: 50:df:9c:b7:4b:c5:f4:23:b3:48:1f:3b:5a:ec:1a: a6:10:27:b4:4b:cb:2b:9f:b2:7e:e5:b7:56:34:ab: 22:56:92:13:e9:00:b2:36:85:ae:f6:82:45:cd:1f: 20:9d:5c:de:ba:2c:ff:e1:4d:a4:55:9b:36:50:47: 34:6a:5f:df:5c:e9:9a:e3:31:6d:e6:20:61:ec:45: 76:99:43:f9:0e:29:0d:a1:8e:10:06:5c:af:d6:49: 2b:c0:68:d9:39:89:81:43:c0:38:0f:51:99:2c:76: c7:b7:38:0a:a6:27:70:fb:80:2e:26:1f:12:63:b3: 73:4c:96:37:19:64:2a:e7:8f:b8:14:bd:40:5a:15: 9b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6B:38:07:66:BE:4D:44:FC:69:76:CE:B3:EE:ED:8E:14:0E:F0:38 X509v3 Authority Key Identifier: keyid:86:44:EF:5C:AF:D6:FF:2C:75:38:33:B5:88:D6:D5:E4:0A:D9:C0:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/323430353a63303a3a2f33322d3438203d3e20313338383831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:c0::/32 Signature Algorithm: sha256WithRSAEncryption 6d:24:c8:cd:84:0e:30:04:53:24:ae:19:de:08:1a:ca:4c:9a: bb:f4:75:f7:49:4e:93:fb:c7:40:65:f2:b5:d6:62:07:02:b9: d2:11:f7:77:f3:a5:d8:12:9f:88:b5:73:09:93:25:ef:68:ab: 18:c0:f1:06:e5:d4:2e:31:45:f0:cc:fc:16:2d:fa:eb:9b:d7: 91:4a:52:f2:c3:54:b5:28:eb:da:fb:79:77:9b:95:eb:82:75: 58:07:d8:e5:0c:ed:c7:80:69:a3:bc:df:b0:d7:5f:6f:04:10: 50:e9:86:26:62:0f:fe:3e:7b:84:91:4c:52:65:39:c4:9a:97: ec:bf:79:da:eb:ed:48:4d:2f:14:ba:e0:42:27:56:f3:68:f1: 5e:a2:46:24:b0:b5:87:89:84:8c:b2:76:c2:81:aa:eb:16:e2: 1a:08:38:b8:02:c8:3b:d7:4c:26:b7:77:a1:bf:f4:47:77:b0: 34:65:80:80:c3:b5:ea:44:e8:74:86:b5:77:23:2e:88:83:8c: 41:1a:10:45:52:1c:8c:ba:f8:4a:29:41:16:b9:c3:90:f6:5d: 88:83:0e:db:c0:0a:2b:c2:5a:bb:d4:86:66:a8:d6:c5:66:51: 86:0a:ba:9f:c1:3e:d4:e7:0f:08:bb:6b:44:7a:40:51:23:e7: c3:bf:1a:3e -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUWglb2QCSqn4gSvAUdHUUv2UcM+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY0NEVGNUNBRkQ2RkYyQzc1MzgzM0I1ODhENkQ1RTQw QUQ5QzA3NzAeFw0yNjA1MDMwMjA1MjlaFw0yNzA1MDIwMjEwMjlaMDMxMTAvBgNV BAMTKEEyNkIzODA3NjZCRTRENDRGQzY5NzZDRUIzRUVFRDhFMTQwRUYwMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiV7wbD700aGGRWkwMYUXEAfkN DCvj3OfYC0QBu44860g+Wpcts3uEyBOHBYRq9gYdaFtGgE0pMrgVMjyeTOqbCZGa PDNHtBoNc+Fop5PzC2LMIybU1fU8iH/3+AmoTeOaGiLWE0Y2B6522i9Zuo774pw0 HuFYG1DfnLdLxfQjs0gfO1rsGqYQJ7RLyyufsn7lt1Y0qyJWkhPpALI2ha72gkXN HyCdXN66LP/hTaRVmzZQRzRqX99c6ZrjMW3mIGHsRXaZQ/kOKQ2hjhAGXK/WSSvA aNk5iYFDwDgPUZksdse3OAqmJ3D7gC4mHxJjs3NMljcZZCrnj7gUvUBaFZuvAgMB AAGjggIuMIICKjAdBgNVHQ4EFgQUoms4B2a+TUT8aXbOs+7tjhQO8DgwHwYDVR0j BBgwFoAUhkTvXK/W/yx1ODO1iNbV5ArZwHcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDJjYjBiM2EtNjkyZC00NDJlLTkzMDgtOTAzYzAyZDU3MThmLzAvODY0NEVGNUNB RkQ2RkYyQzc1MzgzM0I1ODhENkQ1RTQwQUQ5QzA3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjQ0RUY1Q0FGRDZGRjJDNzUzODMzQjU4OEQ2RDVFNDBBRDlD MDc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDJjYjBiM2EtNjkyZC00NDJlLTkz MDgtOTAzYzAyZDU3MThmLzAvMzIzNDMwMzUzYTYzMzAzYTNhMmYzMzMyMmQzNDM4 MjAzZDNlMjAzMTMzMzgzODM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBQDAMA0GCSqGSIb3DQEB CwUAA4IBAQBtJMjNhA4wBFMkrhneCBrKTJq79HX3SU6T+8dAZfK11mIHArnSEfd3 86XYEp+ItXMJkyXvaKsYwPEG5dQuMUXwzPwWLfrrm9eRSlLyw1S1KOva+3l3m5Xr gnVYB9jlDO3HgGmjvN+w119vBBBQ6YYmYg/+PnuEkUxSZTnEmpfsv3na6+1ITS8U uuBCJ1bzaPFeokYksLWHiYSMsnbCgarrFuIaCDi4Asg710wmt3ehv/RHd7A0ZYCA w7XqROh0hrV3Iy6Ig4xBGhBFUhyMuvhKKUEWucOQ9l2Igw7bwAorwlq71IZmqNbF ZlGGCrqfwT7U5w8Iu2tEekBRI+fDvxo+ -----END CERTIFICATE-----Generated at Wed May 13 11:55:36 2026 by rpki-client