$ rpki-client -vvf rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a31303a3a2f34382d3438203d3e20313337333330.roa File: 323430323a616134303a31303a3a2f34382d3438203d3e20313337333330.roa (raw, json) Hash identifier: b9GNtI2wwQoxk4bwsvnVud13Q339KjqEN4XsWPttMMU= Subject key identifier: 90:C4:12:98:FA:E3:18:99:67:48:39:39:31:6B:04:F6:D7:4E:C6:C5 Certificate issuer: /CN=42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1 Certificate serial: 2417A8A6683030F4631A9BB1E88A277BF9FFBA1C Authority key identifier: 42:BC:C9:3C:15:AC:4D:18:51:A2:24:0C:9F:7B:E2:F9:C9:F5:1E:F1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a31303a3a2f34382d3438203d3e20313337333330.roa Signing time: Sun 03 May 2026 02:12:51 +0000 ROA not before: Sun 03 May 2026 02:07:51 +0000 ROA not after: Sun 02 May 2027 02:12:51 +0000 asID: 137330 IP address blocks: 2402:aa40:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.crl rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:17:a8:a6:68:30:30:f4:63:1a:9b:b1:e8:8a:27:7b:f9:ff:ba:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1 Validity Not Before: May 3 02:07:51 2026 GMT Not After : May 2 02:12:51 2027 GMT Subject: CN=90C41298FAE3189967483939316B04F6D74EC6C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8a:ec:a6:81:a0:33:3c:e9:3f:5e:4c:65:e3: fe:7b:58:06:0b:87:22:cc:40:49:a9:e8:00:99:ac: 74:b0:7d:aa:34:4f:8d:e9:5b:48:4b:1e:07:f1:52: fd:97:b4:f4:78:bd:38:8a:6c:46:0e:f4:26:bc:a5: 90:14:cf:3d:2f:cc:89:d9:18:36:57:33:ff:58:d1: 9b:71:57:e0:15:42:38:20:ab:a3:28:7d:e1:98:cf: 1d:a7:43:a7:cf:7d:7d:f1:49:6b:1a:0d:75:ae:6a: ba:e5:b4:d3:59:7d:1d:a9:57:87:dc:46:a9:6c:94: 45:07:b3:a2:8c:d8:0b:42:c7:5b:da:c1:06:ad:cc: 28:23:d2:cb:c2:5e:39:b2:30:c8:20:a9:e0:ef:30: dd:07:51:68:11:5d:a6:7f:b9:25:35:1b:04:64:a3: 87:6b:9f:92:83:09:23:fa:22:b0:90:6e:d7:d5:4d: ae:07:d5:41:02:1c:5f:e5:eb:b6:ee:71:8d:fa:b7: ed:1c:01:d2:79:53:49:f8:0c:5c:0a:9a:3e:9d:38: 55:2c:98:14:ac:20:ba:91:7f:06:c5:28:55:23:0b: 00:e4:1f:e0:dd:1e:aa:4b:74:13:91:cb:ad:52:e9: 6f:f8:f4:74:48:c7:48:df:5a:c6:e7:ff:a9:bf:75: 54:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C4:12:98:FA:E3:18:99:67:48:39:39:31:6B:04:F6:D7:4E:C6:C5 X509v3 Authority Key Identifier: keyid:42:BC:C9:3C:15:AC:4D:18:51:A2:24:0C:9F:7B:E2:F9:C9:F5:1E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a31303a3a2f34382d3438203d3e20313337333330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:aa40:10::/48 Signature Algorithm: sha256WithRSAEncryption 38:a6:dc:2a:5e:0e:9b:9b:03:13:14:d4:cd:ea:e9:1d:bd:bb: 7b:bf:54:27:d1:f0:c8:70:6f:4e:93:a2:ea:d4:64:aa:65:2f: f4:77:ef:33:88:36:85:b6:b1:7b:00:cb:a9:a8:0e:ee:2a:c1: 3c:f7:e6:28:93:e1:03:68:c9:6f:38:48:c5:49:18:6e:b9:ba: 33:ed:61:41:2f:9a:3f:d6:fb:f9:62:38:01:cd:cf:2f:85:d0: 2d:52:81:2f:f6:56:a2:16:4b:44:3b:27:d6:81:97:90:64:e4: 9a:cd:c0:3e:a7:01:6c:9d:09:c2:f5:68:d7:fe:92:e6:82:84: f7:f5:ee:62:52:7e:dd:72:a2:a7:dc:5b:11:31:db:be:a4:dd: f5:4c:e3:05:b4:33:cc:08:ed:33:72:0c:7e:98:fc:74:96:d4: 3e:25:dd:9a:0d:bf:b8:80:2d:a7:8a:1c:a3:6d:15:20:14:57: 86:09:aa:3c:22:e6:83:a1:a7:64:b5:95:56:83:0b:1a:5a:29: fe:1d:1f:11:31:8f:93:c3:93:3d:ff:e9:1e:eb:43:4d:65:bb: 66:a9:6a:12:d9:56:90:98:3a:b1:94:75:de:15:24:98:15:51: be:1a:9a:af:13:dc:b6:48:49:16:5e:67:b8:a8:01:03:07:c1: 0c:1a:0c:49 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUJBeopmgwMPRjGpux6Ione/n/uhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJCQ0M5M0MxNUFDNEQxODUxQTIyNDBDOUY3QkUyRjlD OUY1MUVGMTAeFw0yNjA1MDMwMjA3NTFaFw0yNzA1MDIwMjEyNTFaMDMxMTAvBgNV BAMTKDkwQzQxMjk4RkFFMzE4OTk2NzQ4MzkzOTMxNkIwNEY2RDc0RUM2QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsiuymgaAzPOk/Xkxl4/57WAYL hyLMQEmp6ACZrHSwfao0T43pW0hLHgfxUv2XtPR4vTiKbEYO9Ca8pZAUzz0vzInZ GDZXM/9Y0ZtxV+AVQjggq6MofeGYzx2nQ6fPfX3xSWsaDXWuarrltNNZfR2pV4fc RqlslEUHs6KM2AtCx1vawQatzCgj0svCXjmyMMggqeDvMN0HUWgRXaZ/uSU1GwRk o4drn5KDCSP6IrCQbtfVTa4H1UECHF/l67bucY36t+0cAdJ5U0n4DFwKmj6dOFUs mBSsILqRfwbFKFUjCwDkH+DdHqpLdBORy61S6W/49HRIx0jfWsbn/6m/dVSfAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUkMQSmPrjGJlnSDk5MWsE9tdOxsUwHwYDVR0j BBgwFoAUQrzJPBWsTRhRoiQMn3vi+cn1HvEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGMzNGZmMDgtZDIxZi00MjBiLTg3ZGYtNTMxMDNiNmRjMjUzLzAvNDJCQ0M5M0Mx NUFDNEQxODUxQTIyNDBDOUY3QkUyRjlDOUY1MUVGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MkJDQzkzQzE1QUM0RDE4NTFBMjI0MEM5RjdCRTJGOUM5RjUx RUYxLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04 N2RmLTUzMTAzYjZkYzI1My8wLzMyMzQzMDMyM2E2MTYxMzQzMDNhMzEzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNzMzMzMzMC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQCqkAA EDANBgkqhkiG9w0BAQsFAAOCAQEAOKbcKl4Om5sDExTUzerpHb27e79UJ9HwyHBv TpOi6tRkqmUv9HfvM4g2hbaxewDLqagO7irBPPfmKJPhA2jJbzhIxUkYbrm6M+1h QS+aP9b7+WI4Ac3PL4XQLVKBL/ZWohZLRDsn1oGXkGTkms3APqcBbJ0JwvVo1/6S 5oKE9/XuYlJ+3XKip9xbETHbvqTd9UzjBbQzzAjtM3IMfpj8dJbUPiXdmg2/uIAt p4oco20VIBRXhgmqPCLmg6GnZLWVVoMLGlop/h0fETGPk8OTPf/pHutDTWW7Zqlq EtlWkJg6sZR13hUkmBVRvhqarxPctkhJFl5nuKgBAwfBDBoMSQ== -----END CERTIFICATE-----Generated at Wed May 13 13:42:17 2026 by rpki-client