$ rpki-client -vvf rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa File: 323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa (raw, json) Hash identifier: 8Y/jKSd9kB6rjelE/LuXNaRhi6lyjXnEf6P9Z4FudkE= Subject key identifier: 47:07:51:59:A2:9C:29:F0:4E:0F:0D:1E:27:9D:17:09:A1:F2:0C:19 Certificate issuer: /CN=42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1 Certificate serial: 7F5F85AA1BA0CB3C68EA6DAE872ED0D00EF4A276 Authority key identifier: 42:BC:C9:3C:15:AC:4D:18:51:A2:24:0C:9F:7B:E2:F9:C9:F5:1E:F1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa Signing time: Sun 03 May 2026 02:12:55 +0000 ROA not before: Sun 03 May 2026 02:07:55 +0000 ROA not after: Sun 02 May 2027 02:12:55 +0000 asID: 137330 IP address blocks: 2402:aa40:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.crl rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:5f:85:aa:1b:a0:cb:3c:68:ea:6d:ae:87:2e:d0:d0:0e:f4:a2:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1 Validity Not Before: May 3 02:07:55 2026 GMT Not After : May 2 02:12:55 2027 GMT Subject: CN=47075159A29C29F04E0F0D1E279D1709A1F20C19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e5:f3:4f:a7:2b:dd:d9:e2:34:1c:89:5d:a8: 6c:8f:dc:24:d0:f0:2b:e1:24:88:51:b8:b1:aa:c0: 43:d8:60:d2:bf:59:19:6b:e1:f5:90:a2:43:c5:c5: 65:0a:e1:11:15:65:e5:34:48:eb:6c:b9:25:ff:60: e4:22:6d:ce:d9:91:60:6d:46:58:93:86:f4:7a:38: 59:89:6f:b7:f1:97:4d:82:0d:aa:46:b4:2f:0b:f6: 3e:5a:b5:68:3a:97:31:52:dd:67:c1:c9:96:51:52: cb:97:d2:27:a7:e1:23:02:1a:89:ac:3d:65:03:b3: 64:72:36:09:1a:85:c3:f0:c0:22:54:24:47:d4:ea: b7:17:0f:a2:15:88:dd:cc:85:e3:dd:29:24:7b:3f: bb:fd:05:72:fb:c6:19:5c:09:4a:38:df:a6:9f:dc: 25:ad:9d:18:0e:06:86:cc:85:06:71:90:a0:19:be: 7d:87:7e:d8:55:df:b1:ad:b1:67:08:91:18:7e:d8: 3a:51:be:df:93:32:4b:db:5f:3a:c5:04:e8:27:ec: 45:99:d6:fe:5f:7d:b5:76:c6:1d:de:0d:3b:56:df: 4a:76:31:23:03:6e:9d:38:01:fc:10:39:a4:81:9a: 31:be:86:d4:75:b0:e9:d1:61:87:16:83:19:4a:c7: 3f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:07:51:59:A2:9C:29:F0:4E:0F:0D:1E:27:9D:17:09:A1:F2:0C:19 X509v3 Authority Key Identifier: keyid:42:BC:C9:3C:15:AC:4D:18:51:A2:24:0C:9F:7B:E2:F9:C9:F5:1E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:aa40:9::/48 Signature Algorithm: sha256WithRSAEncryption 64:85:c7:57:27:a2:99:f1:c0:ae:b3:7e:30:09:a3:09:11:f1: 15:39:ec:44:38:c7:06:70:fb:97:9d:95:47:d1:2b:13:41:18: 86:c5:77:b5:54:4d:65:93:22:d9:cb:23:d0:9a:ce:cc:ca:89: 5a:61:4d:ef:ab:9a:5e:ec:76:ca:a4:08:fc:5b:7c:fa:3d:95: eb:18:d7:0a:76:90:5c:cb:91:74:43:51:35:b3:b8:ef:78:35: cb:e4:47:8f:57:16:67:6c:29:1d:54:e7:8f:ff:9b:56:36:bd: 28:97:4e:f2:f0:8b:ac:ed:aa:83:08:88:c4:c4:02:03:e0:cd: 6a:60:ce:fe:66:c9:62:f1:a1:6e:0b:aa:f0:20:0c:3f:6e:1d: 6a:13:de:a0:2d:79:89:87:39:47:99:fb:0f:ec:ac:de:77:a9: e2:25:35:54:aa:f6:e8:4e:df:af:a3:ea:0e:b6:05:23:90:79: 28:c8:b1:9e:3e:1c:f5:f5:bb:d1:f2:59:5c:58:23:9a:2e:5b: fe:fe:4c:eb:fa:91:cd:ea:27:66:3c:59:ee:4c:dd:d9:b6:fc: 9d:da:0e:e2:7b:66:72:e3:6c:d5:dd:70:71:3a:81:84:b3:d9: 03:91:20:2c:4d:60:a5:37:cd:2f:32:a0:0d:b3:c5:15:73:38: 2c:a2:19:e8 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUf1+Fqhugyzxo6m2uhy7Q0A70onYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJCQ0M5M0MxNUFDNEQxODUxQTIyNDBDOUY3QkUyRjlD OUY1MUVGMTAeFw0yNjA1MDMwMjA3NTVaFw0yNzA1MDIwMjEyNTVaMDMxMTAvBgNV BAMTKDQ3MDc1MTU5QTI5QzI5RjA0RTBGMEQxRTI3OUQxNzA5QTFGMjBDMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC65fNPpyvd2eI0HIldqGyP3CTQ 8CvhJIhRuLGqwEPYYNK/WRlr4fWQokPFxWUK4REVZeU0SOtsuSX/YOQibc7ZkWBt RliThvR6OFmJb7fxl02CDapGtC8L9j5atWg6lzFS3WfByZZRUsuX0ien4SMCGoms PWUDs2RyNgkahcPwwCJUJEfU6rcXD6IViN3MhePdKSR7P7v9BXL7xhlcCUo436af 3CWtnRgOBobMhQZxkKAZvn2HfthV37GtsWcIkRh+2DpRvt+TMkvbXzrFBOgn7EWZ 1v5ffbV2xh3eDTtW30p2MSMDbp04AfwQOaSBmjG+htR1sOnRYYcWgxlKxz/hAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQURwdRWaKcKfBODw0eJ50XCaHyDBkwHwYDVR0j BBgwFoAUQrzJPBWsTRhRoiQMn3vi+cn1HvEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGMzNGZmMDgtZDIxZi00MjBiLTg3ZGYtNTMxMDNiNmRjMjUzLzAvNDJCQ0M5M0Mx NUFDNEQxODUxQTIyNDBDOUY3QkUyRjlDOUY1MUVGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MkJDQzkzQzE1QUM0RDE4NTFBMjI0MEM5RjdCRTJGOUM5RjUx RUYxLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04 N2RmLTUzMTAzYjZkYzI1My8wLzMyMzQzMDMyM2E2MTYxMzQzMDNhMzkzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzczMzMzMzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAqpAAAkw DQYJKoZIhvcNAQELBQADggEBAGSFx1cnopnxwK6zfjAJowkR8RU57EQ4xwZw+5ed lUfRKxNBGIbFd7VUTWWTItnLI9CazszKiVphTe+rml7sdsqkCPxbfPo9lesY1wp2 kFzLkXRDUTWzuO94NcvkR49XFmdsKR1U54//m1Y2vSiXTvLwi6ztqoMIiMTEAgPg zWpgzv5myWLxoW4LqvAgDD9uHWoT3qAteYmHOUeZ+w/srN53qeIlNVSq9uhO36+j 6g62BSOQeSjIsZ4+HPX1u9HyWVxYI5ouW/7+TOv6kc3qJ2Y8We5M3dm2/J3aDuJ7 ZnLjbNXdcHE6gYSz2QORICxNYKU3zS8yoA2zxRVzOCyiGeg= -----END CERTIFICATE-----Generated at Wed May 13 13:25:16 2026 by rpki-client