$ rpki-client -vvf rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/323430313a643934303a3a2f33322d3332203d3e203234353330.roa File: 323430313a643934303a3a2f33322d3332203d3e203234353330.roa (raw, json) Hash identifier: GNdi5uU7mmpbww293clFlNy9lTQ5KrlF2tYcTj15jTw= Subject key identifier: CB:D4:6F:BE:C9:E8:7B:73:E3:2D:22:7C:EB:FD:10:E0:02:A4:84:B4 Certificate issuer: /CN=108BD2ED0D3114613C2725256398C38B9DBAD520 Certificate serial: 1B697B7910C0D59C8B75455E0F372CD97EF21D7D Authority key identifier: 10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/323430313a643934303a3a2f33322d3332203d3e203234353330.roa Signing time: Sun 03 May 2026 02:10:48 +0000 ROA not before: Sun 03 May 2026 02:05:48 +0000 ROA not after: Sun 02 May 2027 02:10:48 +0000 asID: 24530 IP address blocks: 2401:d940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:69:7b:79:10:c0:d5:9c:8b:75:45:5e:0f:37:2c:d9:7e:f2:1d:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108BD2ED0D3114613C2725256398C38B9DBAD520 Validity Not Before: May 3 02:05:48 2026 GMT Not After : May 2 02:10:48 2027 GMT Subject: CN=CBD46FBEC9E87B73E32D227CEBFD10E002A484B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:fa:a0:3c:15:ed:c9:1c:da:17:4c:91:56:61: ad:c8:16:f3:dd:cc:f5:4e:b3:c2:35:c7:c6:9c:5a: 3c:0c:a4:9e:53:6b:e7:57:6f:27:b7:da:de:36:ad: 4c:36:dc:a6:cc:bb:7b:2e:7e:f9:26:e2:9b:28:7e: 1c:0a:19:ed:f1:b7:27:2f:f3:21:7f:24:d7:f8:a3: be:71:cc:74:c3:77:2c:84:08:a0:c0:bf:a5:83:39: c9:fb:f1:96:36:eb:13:17:8e:ea:ec:14:6d:f6:68: 2f:fe:13:50:9b:dc:03:d2:dc:3c:55:c7:43:1e:8e: 74:0c:78:e8:4b:14:9e:33:42:21:4b:ad:ec:1a:97: b1:80:e0:d6:81:a5:2f:3a:e3:b6:20:2a:15:5a:02: 0d:7e:13:2c:e5:a7:49:81:d1:88:27:4d:79:16:b2: e9:2c:b1:0c:e8:ae:76:7d:ae:45:9c:67:cc:74:e5: 29:a9:55:f4:0c:fe:09:cd:0b:b8:f0:54:94:01:b7: e3:b5:b2:0e:a9:36:30:ea:eb:b1:6a:12:4d:18:a5: dc:5d:fc:92:d9:6f:7a:ff:00:f1:85:4b:9d:f8:a1: c7:59:9f:67:7f:d2:f4:3a:24:e6:38:8c:86:e1:00: 6a:28:d6:57:0b:b5:6e:ec:62:ca:62:14:58:5b:e3: cb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D4:6F:BE:C9:E8:7B:73:E3:2D:22:7C:EB:FD:10:E0:02:A4:84:B4 X509v3 Authority Key Identifier: keyid:10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/323430313a643934303a3a2f33322d3332203d3e203234353330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:d940::/32 Signature Algorithm: sha256WithRSAEncryption a5:16:12:2c:f5:92:f8:42:3f:04:c0:bb:93:82:6c:04:b1:fb: f3:17:b7:8f:01:a0:99:9e:56:92:71:41:e8:a2:6f:8d:8c:7a: 32:3a:9c:d4:f9:78:33:59:58:62:77:9d:10:a6:7b:92:9f:8f: c2:bb:a1:7e:f5:e2:46:8c:dc:c5:61:72:3c:0c:6c:5d:9e:38: f8:4f:ee:68:84:fe:dd:10:14:74:a7:27:17:7e:d4:29:29:4e: ab:c7:57:dd:91:8f:8a:1b:41:bc:2a:4c:41:31:78:f2:c0:a0: 3c:a9:2e:af:fa:7c:62:b4:dc:ee:24:2d:1a:ea:e5:84:c3:c0: 0a:77:05:cf:06:fe:f0:3a:28:7e:b1:77:64:0f:40:03:f4:ca: 7f:a4:d7:3f:1f:3a:18:94:2c:d7:23:d7:af:6c:bd:cd:ee:88: fc:66:cd:16:4b:6c:d2:1c:84:56:b5:d8:e2:1d:95:77:53:d0: 01:92:34:68:31:49:71:d3:57:82:77:0c:01:62:e3:73:38:21: 29:2b:98:a3:59:01:0d:e1:e0:0b:5e:31:7f:6c:d5:86:b8:68: 00:46:c1:de:04:1b:a6:6d:93:9f:76:5b:79:d3:45:62:2f:67: a5:f2:d2:b4:30:56:09:14:e5:b5:a1:2e:37:d7:70:f0:ef:f9: 1c:c1:66:8e -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUG2l7eRDA1ZyLdUVeDzcs2X7yHX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4QkQyRUQwRDMxMTQ2MTNDMjcyNTI1NjM5OEMzOEI5 REJBRDUyMDAeFw0yNjA1MDMwMjA1NDhaFw0yNzA1MDIwMjEwNDhaMDMxMTAvBgNV BAMTKENCRDQ2RkJFQzlFODdCNzNFMzJEMjI3Q0VCRkQxMEUwMDJBNDg0QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu+qA8Fe3JHNoXTJFWYa3IFvPd zPVOs8I1x8acWjwMpJ5Ta+dXbye32t42rUw23KbMu3sufvkm4psofhwKGe3xtycv 8yF/JNf4o75xzHTDdyyECKDAv6WDOcn78ZY26xMXjursFG32aC/+E1Cb3APS3DxV x0MejnQMeOhLFJ4zQiFLrewal7GA4NaBpS8647YgKhVaAg1+Eyzlp0mB0YgnTXkW sukssQzornZ9rkWcZ8x05SmpVfQM/gnNC7jwVJQBt+O1sg6pNjDq67FqEk0Ypdxd /JLZb3r/APGFS534ocdZn2d/0vQ6JOY4jIbhAGoo1lcLtW7sYspiFFhb48slAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUy9Rvvsnoe3PjLSJ86/0Q4AKkhLQwHwYDVR0j BBgwFoAUEIvS7Q0xFGE8JyUlY5jDi5261SAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQyMzQ0YmUtZjlmYi00NjM0LTkyZDYtODk0ZGQ1MzhjYWRmLzAvMTA4QkQyRUQw RDMxMTQ2MTNDMjcyNTI1NjM5OEMzOEI5REJBRDUyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDhCRDJFRDBEMzExNDYxM0MyNzI1MjU2Mzk4QzM4QjlEQkFE NTIwLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA0MjM0NGJlLWY5ZmItNDYzNC05 MmQ2LTg5NGRkNTM4Y2FkZi8wLzMyMzQzMDMxM2E2NDM5MzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMyMzQzNTMzMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAdlAMA0GCSqGSIb3 DQEBCwUAA4IBAQClFhIs9ZL4Qj8EwLuTgmwEsfvzF7ePAaCZnlaScUHoom+NjHoy OpzU+XgzWVhid50QpnuSn4/Cu6F+9eJGjNzFYXI8DGxdnjj4T+5ohP7dEBR0pycX ftQpKU6rx1fdkY+KG0G8KkxBMXjywKA8qS6v+nxitNzuJC0a6uWEw8AKdwXPBv7w Oih+sXdkD0AD9Mp/pNc/HzoYlCzXI9evbL3N7oj8Zs0WS2zSHIRWtdjiHZV3U9AB kjRoMUlx01eCdwwBYuNzOCEpK5ijWQEN4eALXjF/bNWGuGgARsHeBBumbZOfdlt5 00ViL2el8tK0MFYJFOW1oS4313Dw7/kcwWaO -----END CERTIFICATE-----Generated at Wed May 13 15:58:09 2026 by rpki-client