$ rpki-client -vvf rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a3130303a3a2f34382d3438203d3e20313336383431.roa File: 323430313a626534303a3130303a3a2f34382d3438203d3e20313336383431.roa (raw, json) Hash identifier: Q+ngoFu885sNrsbrQRL3AeApBJ1Eb5cBUZ33V1u7hNU= Subject key identifier: 4E:8C:22:D3:0B:09:19:76:C8:52:6D:7A:40:BD:F7:78:92:A9:47:A8 Certificate issuer: /CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Certificate serial: 74B44E75028A9B1C5B57EB062E87A5B9D2372AE4 Authority key identifier: 4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a3130303a3a2f34382d3438203d3e20313336383431.roa Signing time: Sun 03 May 2026 02:12:05 +0000 ROA not before: Sun 03 May 2026 02:07:05 +0000 ROA not after: Sun 02 May 2027 02:12:05 +0000 asID: 136841 IP address blocks: 2401:be40:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:42:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:b4:4e:75:02:8a:9b:1c:5b:57:eb:06:2e:87:a5:b9:d2:37:2a:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Validity Not Before: May 3 02:07:05 2026 GMT Not After : May 2 02:12:05 2027 GMT Subject: CN=4E8C22D30B091976C8526D7A40BDF77892A947A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:93:68:9f:24:ae:6b:04:66:de:8c:68:7d:46: 38:71:b2:71:66:d2:1b:c1:2c:4c:5b:25:cd:c4:bc: f4:a7:79:24:e7:4a:7d:c8:b6:24:e3:68:57:ca:9e: f7:12:61:91:b1:0d:34:21:1b:1a:a9:7d:1a:54:8a: fa:d4:ad:5e:3d:08:a2:ff:69:4c:d2:6b:ce:5d:d9: 05:3f:6e:b6:b4:7d:cf:9c:d0:ee:1b:5f:c5:e8:04: 4e:1b:47:84:5e:7b:bf:51:1a:49:21:95:66:3e:83: 74:f4:6e:2e:6a:f0:2e:dc:64:f5:da:a5:7b:56:d5: ac:26:46:b0:17:b3:0e:bb:f1:72:8f:b8:18:b2:16: 67:fe:7e:b0:b1:6f:60:dc:5d:99:0a:ff:22:e7:f1: 99:b1:c5:29:db:43:fc:83:8d:b1:1c:fd:33:af:a3: 4d:44:ff:7a:95:cf:42:1e:06:92:87:58:8a:19:f8: 19:32:f2:25:7d:d0:63:66:21:0b:4c:3d:6b:d7:a6: b4:79:1c:d5:a7:9a:6c:b1:34:b4:1f:6f:37:01:b3: d5:a5:dd:a5:88:91:b4:7f:33:2f:21:f2:42:d9:64: 73:4d:7b:e6:df:bd:a5:2e:c6:16:2c:78:16:31:3f: c7:95:49:8b:a4:f3:5e:e1:06:d4:b2:63:ac:60:fb: 1e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:8C:22:D3:0B:09:19:76:C8:52:6D:7A:40:BD:F7:78:92:A9:47:A8 X509v3 Authority Key Identifier: keyid:4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a3130303a3a2f34382d3438203d3e20313336383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:be40:100::/48 Signature Algorithm: sha256WithRSAEncryption 37:d4:e5:95:ca:fd:ce:0f:76:e8:f6:12:e5:92:cd:ce:74:79: 71:35:47:8d:76:8f:8f:03:cf:42:6d:18:bb:29:5f:0e:07:8d: b0:ab:5d:10:fb:09:4f:e0:6c:6e:f2:d7:70:5e:ff:62:17:a8: e1:99:bb:1c:ec:04:72:7d:28:b7:fb:7a:a2:69:d6:36:9c:94: c2:ef:81:9a:a4:70:b9:cc:ff:a7:4d:e7:e7:9f:c9:9c:e7:d7: f1:bc:d3:d3:22:e1:03:a5:0a:28:d8:e9:18:ba:7c:5d:82:be: f5:e8:99:79:77:5b:ea:6c:02:4f:3d:05:3a:ab:22:40:bf:ef: 42:02:0a:d0:ba:e8:d5:34:a9:4f:0d:e8:44:2a:f2:44:e6:7b: cb:f8:7f:e0:2b:12:a6:13:38:31:fd:91:d6:29:27:8e:d2:50: 94:78:f0:12:fd:47:f4:cb:bd:50:d5:c3:02:6e:b1:a0:31:71: 16:8f:a8:a8:27:62:d5:78:b4:eb:57:78:15:9a:93:e6:6b:87: a5:1a:d1:69:ee:6e:d5:6b:24:85:8d:71:e2:4a:fc:6d:81:39: 9b:04:25:0e:30:b4:2d:8c:e4:10:52:ce:c2:67:27:be:88:74: 26:ea:3b:81:76:8d:e3:34:30:5f:6d:17:ea:32:d8:21:a4:00: d7:04:bb:34 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUdLROdQKKmxxbV+sGLoeludI3KuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERBMTFENUFGNUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVF NTdENTI0NDAeFw0yNjA1MDMwMjA3MDVaFw0yNzA1MDIwMjEyMDVaMDMxMTAvBgNV BAMTKDRFOEMyMkQzMEIwOTE5NzZDODUyNkQ3QTQwQkRGNzc4OTJBOTQ3QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbk2ifJK5rBGbejGh9RjhxsnFm 0hvBLExbJc3EvPSneSTnSn3ItiTjaFfKnvcSYZGxDTQhGxqpfRpUivrUrV49CKL/ aUzSa85d2QU/bra0fc+c0O4bX8XoBE4bR4Ree79RGkkhlWY+g3T0bi5q8C7cZPXa pXtW1awmRrAXsw678XKPuBiyFmf+frCxb2DcXZkK/yLn8ZmxxSnbQ/yDjbEc/TOv o01E/3qVz0IeBpKHWIoZ+Bky8iV90GNmIQtMPWvXprR5HNWnmmyxNLQfbzcBs9Wl 3aWIkbR/My8h8kLZZHNNe+bfvaUuxhYseBYxP8eVSYuk817hBtSyY6xg+x57AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUTowi0wsJGXbIUm16QL33eJKpR6gwHwYDVR0j BBgwFoAUTaEdWvXxeucWUZ+EomPhpeV9UkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDczMDRiODMtMzBhYS00YmJmLTlmZDctMmZjZWFkYmYwMDMwLzAvNERBMTFENUFG NUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVFNTdENTI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REExMUQ1QUY1RjE3QUU3MTY1MTlGODRBMjYzRTFBNUU1N0Q1 MjQ0LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA3MzA0YjgzLTMwYWEtNGJiZi05 ZmQ3LTJmY2VhZGJmMDAzMC8wLzMyMzQzMDMxM2E2MjY1MzQzMDNhMzEzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzgzNDMxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAG+ QAEAMA0GCSqGSIb3DQEBCwUAA4IBAQA31OWVyv3OD3bo9hLlks3OdHlxNUeNdo+P A89CbRi7KV8OB42wq10Q+wlP4Gxu8tdwXv9iF6jhmbsc7ARyfSi3+3qiadY2nJTC 74GapHC5zP+nTefnn8mc59fxvNPTIuEDpQoo2OkYunxdgr716Jl5d1vqbAJPPQU6 qyJAv+9CAgrQuujVNKlPDehEKvJE5nvL+H/gKxKmEzgx/ZHWKSeO0lCUePAS/Uf0 y71Q1cMCbrGgMXEWj6ioJ2LVeLTrV3gVmpPma4elGtFp7m7VaySFjXHiSvxtgTmb BCUOMLQtjOQQUs7CZye+iHQm6juBdo3jNDBfbRfqMtghpADXBLs0 -----END CERTIFICATE-----Generated at Wed May 13 10:16:51 2026 by rpki-client