$ rpki-client -vvf rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a31343a3a2f34382d3438203d3e20313337333330.roa File: 323430323a616134303a31343a3a2f34382d3438203d3e20313337333330.roa (raw, json) Hash identifier: fIOsFhpM6mZ0ay8plNzxJPKpFufwY8tJJSS7oqgYcsg= Subject key identifier: 73:63:BE:47:31:82:5A:3E:86:87:74:F5:33:3C:C4:76:A4:0F:36:37 Certificate issuer: /CN=42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1 Certificate serial: 7690EB52EDB2BD6CF640EBF55023B792C4C8871A Authority key identifier: 42:BC:C9:3C:15:AC:4D:18:51:A2:24:0C:9F:7B:E2:F9:C9:F5:1E:F1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a31343a3a2f34382d3438203d3e20313337333330.roa Signing time: Sun 03 May 2026 02:12:58 +0000 ROA not before: Sun 03 May 2026 02:07:58 +0000 ROA not after: Sun 02 May 2027 02:12:58 +0000 asID: 137330 IP address blocks: 2402:aa40:14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.crl rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:90:eb:52:ed:b2:bd:6c:f6:40:eb:f5:50:23:b7:92:c4:c8:87:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1 Validity Not Before: May 3 02:07:58 2026 GMT Not After : May 2 02:12:58 2027 GMT Subject: CN=7363BE4731825A3E868774F5333CC476A40F3637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:51:32:f7:19:fc:a5:59:6c:90:4b:f9:0e:75: 86:bc:7e:52:69:0a:ab:26:97:73:05:89:16:92:1c: 2e:7b:cf:15:97:53:35:0e:07:b8:88:a6:a4:f1:ce: 58:c4:3d:dd:52:ff:5a:db:9a:03:62:6e:6a:72:39: 50:1a:b0:45:d8:d6:af:b0:e0:b1:a8:cc:2a:c6:54: 93:fe:5e:ac:33:1b:56:0a:ba:2f:c0:c7:d0:25:95: 96:d3:a0:13:a3:83:be:35:00:77:8a:ec:bc:ce:45: 54:81:8e:aa:92:6d:c7:60:80:78:20:49:1a:12:9e: 4d:17:16:8f:4e:dd:6f:97:bc:63:26:95:ff:eb:da: 94:1f:1d:9a:e3:ff:24:64:d1:d6:d0:10:1c:d3:27: 3b:6f:36:0a:8a:93:ea:67:9b:7d:6d:02:93:ac:30: 9b:1a:db:a6:7b:d5:59:f5:63:a3:a1:25:64:37:71: b8:3e:3b:13:a4:f3:cc:a1:72:99:64:5e:36:26:0a: 96:38:65:f4:a4:2e:69:92:42:44:44:19:eb:6a:43: f1:35:e2:94:42:37:5f:18:fe:39:35:44:24:23:c3: ae:ec:a4:6e:59:36:6e:56:61:17:c5:58:1a:71:1d: 3f:99:a5:ee:05:55:8e:9f:95:d5:50:d6:62:06:5a: 60:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:63:BE:47:31:82:5A:3E:86:87:74:F5:33:3C:C4:76:A4:0F:36:37 X509v3 Authority Key Identifier: keyid:42:BC:C9:3C:15:AC:4D:18:51:A2:24:0C:9F:7B:E2:F9:C9:F5:1E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a31343a3a2f34382d3438203d3e20313337333330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:aa40:14::/48 Signature Algorithm: sha256WithRSAEncryption 63:23:77:c9:21:41:8b:67:ed:d8:7c:ca:44:03:e1:13:d1:95: 83:1b:fd:fc:5e:71:f0:d0:8c:cd:64:7e:4e:6b:8e:64:b0:77: b7:5b:3d:5f:0a:71:3c:a3:9e:46:98:c7:ac:0e:4e:e8:31:f2: fa:cb:ae:d0:12:8c:a4:e5:ce:28:42:c5:b8:1b:ed:81:f2:54: 0a:ee:c4:8d:e7:6b:dc:cf:ef:47:06:d4:cd:27:91:9e:13:3e: 89:96:b0:8f:53:af:d5:6d:42:47:85:a7:51:47:00:4c:45:33: f3:5b:06:0a:a6:16:cd:46:f2:1f:3b:f9:38:4d:7b:2b:07:6f: b5:a6:b3:14:4a:63:de:16:17:6d:fe:a6:60:70:5b:01:df:78: 1e:46:d1:98:2e:47:72:e8:57:47:4e:6b:ce:5f:5f:0b:d3:07: be:20:5d:1e:04:54:14:66:6c:32:fa:38:bf:65:b5:dc:f5:9b: 7e:cb:98:77:27:ca:f5:fa:7b:83:dd:9d:e5:0b:1c:75:81:6b: 27:85:a4:ce:3c:44:0d:20:2f:5b:b5:2d:bd:dc:19:f8:d5:1b: 95:f0:d7:95:a4:ea:72:58:42:c2:52:9c:8b:ee:5e:80:9a:1d: 11:b6:5e:4b:8e:7c:c6:a9:a1:86:ec:79:f9:07:87:2f:00:8a: 94:c9:98:5e -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUdpDrUu2yvWz2QOv1UCO3ksTIhxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJCQ0M5M0MxNUFDNEQxODUxQTIyNDBDOUY3QkUyRjlD OUY1MUVGMTAeFw0yNjA1MDMwMjA3NThaFw0yNzA1MDIwMjEyNThaMDMxMTAvBgNV BAMTKDczNjNCRTQ3MzE4MjVBM0U4Njg3NzRGNTMzM0NDNDc2QTQwRjM2MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcUTL3GfylWWyQS/kOdYa8flJp Cqsml3MFiRaSHC57zxWXUzUOB7iIpqTxzljEPd1S/1rbmgNibmpyOVAasEXY1q+w 4LGozCrGVJP+XqwzG1YKui/Ax9AllZbToBOjg741AHeK7LzORVSBjqqSbcdggHgg SRoSnk0XFo9O3W+XvGMmlf/r2pQfHZrj/yRk0dbQEBzTJztvNgqKk+pnm31tApOs MJsa26Z71Vn1Y6OhJWQ3cbg+OxOk88yhcplkXjYmCpY4ZfSkLmmSQkREGetqQ/E1 4pRCN18Y/jk1RCQjw67spG5ZNm5WYRfFWBpxHT+Zpe4FVY6fldVQ1mIGWmCrAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUc2O+RzGCWj6Gh3T1MzzEdqQPNjcwHwYDVR0j BBgwFoAUQrzJPBWsTRhRoiQMn3vi+cn1HvEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGMzNGZmMDgtZDIxZi00MjBiLTg3ZGYtNTMxMDNiNmRjMjUzLzAvNDJCQ0M5M0Mx NUFDNEQxODUxQTIyNDBDOUY3QkUyRjlDOUY1MUVGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MkJDQzkzQzE1QUM0RDE4NTFBMjI0MEM5RjdCRTJGOUM5RjUx RUYxLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04 N2RmLTUzMTAzYjZkYzI1My8wLzMyMzQzMDMyM2E2MTYxMzQzMDNhMzEzNDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNzMzMzMzMC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQCqkAA FDANBgkqhkiG9w0BAQsFAAOCAQEAYyN3ySFBi2ft2HzKRAPhE9GVgxv9/F5x8NCM zWR+TmuOZLB3t1s9XwpxPKOeRpjHrA5O6DHy+suu0BKMpOXOKELFuBvtgfJUCu7E jedr3M/vRwbUzSeRnhM+iZawj1Ov1W1CR4WnUUcATEUz81sGCqYWzUbyHzv5OE17 KwdvtaazFEpj3hYXbf6mYHBbAd94HkbRmC5HcuhXR05rzl9fC9MHviBdHgRUFGZs Mvo4v2W13PWbfsuYdyfK9fp7g92d5QscdYFrJ4WkzjxEDSAvW7UtvdwZ+NUblfDX laTqclhCwlKci+5egJodEbZeS458xqmhhux5+QeHLwCKlMmYXg== -----END CERTIFICATE-----Generated at Wed May 13 13:27:37 2026 by rpki-client