$ rpki-client -vvf rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/323430343a393538303a34383a3a2f34382d3438203d3e203234353334.roa File: 323430343a393538303a34383a3a2f34382d3438203d3e203234353334.roa (raw, json) Hash identifier: WeOhDg4+1D/xGbcSeIMZ7j4SOySS9cPgnu2CQca06BY= Subject key identifier: 27:30:8F:B9:87:24:88:47:FC:F9:1B:25:5E:42:5E:61:13:B5:97:76 Certificate issuer: /CN=54A9AA4CF14C7CF2ED286484218857A15AE91E9A Certificate serial: 0DE65C23DB73E6EAEE2FD0C9374E5A3A51A95DFD Authority key identifier: 54:A9:AA:4C:F1:4C:7C:F2:ED:28:64:84:21:88:57:A1:5A:E9:1E:9A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/323430343a393538303a34383a3a2f34382d3438203d3e203234353334.roa Signing time: Sun 03 May 2026 02:11:36 +0000 ROA not before: Sun 03 May 2026 02:06:36 +0000 ROA not after: Sun 02 May 2027 02:11:36 +0000 asID: 24534 IP address blocks: 2404:9580:48::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.crl rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:31:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:e6:5c:23:db:73:e6:ea:ee:2f:d0:c9:37:4e:5a:3a:51:a9:5d:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54A9AA4CF14C7CF2ED286484218857A15AE91E9A Validity Not Before: May 3 02:06:36 2026 GMT Not After : May 2 02:11:36 2027 GMT Subject: CN=27308FB987248847FCF91B255E425E6113B59776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e5:6a:42:e4:2a:eb:7d:2d:a1:9e:ce:d4:7d: 43:d9:8c:8a:dc:c5:e9:23:4e:20:98:8f:b0:93:e1: f3:18:f8:db:b2:d9:4a:99:25:bb:e4:cb:d0:84:33: 2d:27:28:05:d6:1b:9b:01:f4:56:39:96:be:08:ce: 18:3c:1f:79:83:83:36:81:a4:2a:ea:89:92:85:40: a4:6e:e6:21:f9:3a:b2:cf:9f:d6:b1:5c:0f:03:07: bf:ec:4f:1e:5f:d5:c8:8d:57:c5:3c:a3:71:0c:32: 98:b1:fa:a6:4f:a5:99:7a:17:8d:4a:d8:87:b3:98: 44:49:e9:83:57:6f:70:30:b2:a4:29:16:2d:d0:db: f3:44:62:ca:20:de:34:8e:72:0e:11:fb:53:2b:14: b3:05:6c:93:42:e2:1b:d4:96:01:58:78:89:eb:09: 87:65:35:26:89:5f:39:0f:45:d6:3d:df:c3:7f:b0: c6:e9:78:06:23:2b:f7:f8:e8:46:70:20:8c:db:ad: fc:df:98:bf:43:00:1f:0a:b1:93:e8:ab:e6:d5:2e: eb:ba:62:3c:ee:13:8e:d8:53:a2:e3:ca:1b:6b:0f: 99:4b:69:34:50:7b:6b:2b:38:19:0b:d8:7d:d2:19: 8e:b7:95:9a:8b:d5:bf:94:8e:b5:09:b6:ca:9e:e9: a6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:30:8F:B9:87:24:88:47:FC:F9:1B:25:5E:42:5E:61:13:B5:97:76 X509v3 Authority Key Identifier: keyid:54:A9:AA:4C:F1:4C:7C:F2:ED:28:64:84:21:88:57:A1:5A:E9:1E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/323430343a393538303a34383a3a2f34382d3438203d3e203234353334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:9580:48::/48 Signature Algorithm: sha256WithRSAEncryption 6e:80:7a:d8:07:15:28:53:78:52:a3:40:61:97:6c:2e:97:c3: f0:bf:be:74:34:b4:ee:b4:8e:37:ad:85:e7:88:0a:0b:b3:9f: 83:ff:f4:a3:4e:60:f0:89:1c:f8:63:ae:af:ac:50:bd:df:ce: d7:54:0f:6c:d4:7a:10:ae:e7:a2:01:ce:16:18:22:1c:f4:99: 1c:76:04:c2:76:62:5e:1c:61:4a:8e:d6:3e:dd:22:c3:5a:32: 9f:40:89:bc:85:48:c7:7b:59:72:4d:da:fe:ef:56:0e:ba:a7: 38:c1:db:ca:81:fe:dc:ff:c9:48:ad:5d:ba:4d:e5:8d:20:66: cf:f4:fe:49:19:37:33:d0:eb:b9:42:71:a3:fb:20:bf:9e:d5: bc:84:4e:be:8a:c5:4f:5a:e3:e2:d5:c1:07:8e:5b:7f:80:fe: bf:5d:46:d8:3b:3f:66:a2:d8:a2:e6:7c:60:9d:ff:b7:fc:7f: 03:47:d8:2f:db:05:56:09:69:e9:f9:4b:53:75:4f:f8:9d:2a: ff:c4:b3:c0:7d:4e:73:22:d3:70:7d:29:09:85:c3:fe:f8:a0: a1:b5:36:01:75:a1:09:32:cc:83:33:7f:6a:b4:ad:c7:81:c4: a8:9a:f4:81:34:a2:9b:09:30:25:20:a9:55:2b:9b:3c:55:06: b1:2c:cd:50 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUDeZcI9tz5uruL9DJN05aOlGpXf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTRBOUFBNENGMTRDN0NGMkVEMjg2NDg0MjE4ODU3QTE1 QUU5MUU5QTAeFw0yNjA1MDMwMjA2MzZaFw0yNzA1MDIwMjExMzZaMDMxMTAvBgNV BAMTKDI3MzA4RkI5ODcyNDg4NDdGQ0Y5MUIyNTVFNDI1RTYxMTNCNTk3NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL5WpC5CrrfS2hns7UfUPZjIrc xekjTiCYj7CT4fMY+Nuy2UqZJbvky9CEMy0nKAXWG5sB9FY5lr4Izhg8H3mDgzaB pCrqiZKFQKRu5iH5OrLPn9axXA8DB7/sTx5f1ciNV8U8o3EMMpix+qZPpZl6F41K 2IezmERJ6YNXb3AwsqQpFi3Q2/NEYsog3jSOcg4R+1MrFLMFbJNC4hvUlgFYeInr CYdlNSaJXzkPRdY938N/sMbpeAYjK/f46EZwIIzbrfzfmL9DAB8KsZPoq+bVLuu6 YjzuE47YU6LjyhtrD5lLaTRQe2srOBkL2H3SGY63lZqL1b+UjrUJtsqe6abPAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUJzCPuYckiEf8+RslXkJeYRO1l3YwHwYDVR0j BBgwFoAUVKmqTPFMfPLtKGSEIYhXoVrpHpowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDYyNDA1MmUtMjIwNS00OGYzLWEzY2ItY2U4YjMyNmI4ZjcxLzAvNTRBOUFBNENG MTRDN0NGMkVEMjg2NDg0MjE4ODU3QTE1QUU5MUU5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NEE5QUE0Q0YxNEM3Q0YyRUQyODY0ODQyMTg4NTdBMTVBRTkx RTlBLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA2MjQwNTJlLTIyMDUtNDhmMy1h M2NiLWNlOGIzMjZiOGY3MS8wLzMyMzQzMDM0M2EzOTM1MzgzMDNhMzQzODNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzQzNTMzMzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBJWAAEgw DQYJKoZIhvcNAQELBQADggEBAG6AetgHFShTeFKjQGGXbC6Xw/C/vnQ0tO60jjet heeICguzn4P/9KNOYPCJHPhjrq+sUL3fztdUD2zUehCu56IBzhYYIhz0mRx2BMJ2 Yl4cYUqO1j7dIsNaMp9AibyFSMd7WXJN2v7vVg66pzjB28qB/tz/yUitXbpN5Y0g Zs/0/kkZNzPQ67lCcaP7IL+e1byETr6KxU9a4+LVwQeOW3+A/r9dRtg7P2ai2KLm fGCd/7f8fwNH2C/bBVYJaen5S1N1T/idKv/Es8B9TnMi03B9KQmFw/74oKG1NgF1 oQkyzIMzf2q0rceBxKia9IE0opsJMCUgqVUrmzxVBrEszVA= -----END CERTIFICATE-----Generated at Wed May 13 13:00:05 2026 by rpki-client