$ rpki-client -vvf rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a3a2f33322d3332203d3e20313337333330.roa File: 323430323a616134303a3a2f33322d3332203d3e20313337333330.roa (raw, json) Hash identifier: uvzX2Nd7Q12fzL8hXRUKfJ8C5BrMMOuiXcXxFdsf69M= Subject key identifier: A0:D4:32:1E:CE:3E:85:A1:60:0D:37:EE:74:3A:EF:38:C9:25:6D:54 Certificate issuer: /CN=42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1 Certificate serial: 5B21EE4B3BEDEAF66950D5810AFA95592400E589 Authority key identifier: 42:BC:C9:3C:15:AC:4D:18:51:A2:24:0C:9F:7B:E2:F9:C9:F5:1E:F1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a3a2f33322d3332203d3e20313337333330.roa Signing time: Sun 03 May 2026 02:12:55 +0000 ROA not before: Sun 03 May 2026 02:07:55 +0000 ROA not after: Sun 02 May 2027 02:12:55 +0000 asID: 137330 IP address blocks: 2402:aa40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.crl rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:21:ee:4b:3b:ed:ea:f6:69:50:d5:81:0a:fa:95:59:24:00:e5:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1 Validity Not Before: May 3 02:07:55 2026 GMT Not After : May 2 02:12:55 2027 GMT Subject: CN=A0D4321ECE3E85A1600D37EE743AEF38C9256D54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:62:88:ef:d7:de:f6:e8:6b:b6:b6:55:7b:80: 59:67:af:16:06:77:22:25:cc:a9:1e:6a:ba:aa:02: 6f:2a:b7:c7:95:fe:fb:40:20:43:c8:18:ed:5c:ed: f8:8b:c9:9a:39:af:d6:6d:dc:3a:d8:df:ed:e2:e4: 18:0a:c0:da:5e:86:20:d3:12:bd:19:7b:f5:ad:0f: 92:9c:11:07:3d:5b:2e:f2:c5:d2:f0:bc:15:be:c0: 40:0c:21:02:ea:43:d8:af:2a:e5:bf:2b:d4:f6:19: a7:63:16:31:00:b9:c6:bd:e4:5f:f0:33:82:7e:f0: 01:80:b8:21:ec:b5:88:a3:92:10:57:08:03:6f:d9: 79:bb:6f:50:04:f7:50:26:12:1b:46:2b:d4:82:28: 1b:2b:40:29:a1:1f:51:80:c3:5a:93:5d:62:bf:d0: 35:90:e4:55:d4:ac:6a:c0:a7:d2:4b:57:48:24:a7: ca:9b:ed:4a:fc:6a:45:a1:4b:3c:4a:b3:32:0c:11: 64:bf:45:5d:d2:09:43:04:e5:61:25:6b:49:85:e0: 9c:2b:9b:38:60:b2:ff:a0:27:c7:37:d2:e6:12:b8: e1:45:50:2f:89:b3:73:73:ae:fa:7d:fe:d7:1a:a7: a5:05:06:86:61:ab:a5:f8:b5:10:73:8b:3d:26:84: 11:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D4:32:1E:CE:3E:85:A1:60:0D:37:EE:74:3A:EF:38:C9:25:6D:54 X509v3 Authority Key Identifier: keyid:42:BC:C9:3C:15:AC:4D:18:51:A2:24:0C:9F:7B:E2:F9:C9:F5:1E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a3a2f33322d3332203d3e20313337333330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:aa40::/32 Signature Algorithm: sha256WithRSAEncryption 14:62:0a:f6:8e:b0:be:c7:a3:6a:90:89:ab:3a:43:91:be:6a: b1:06:3e:ee:76:57:bb:63:bc:f3:be:69:4b:84:4e:8a:a6:df: 1a:c5:84:68:34:56:e7:a2:9c:60:00:19:b2:8c:c8:59:97:97: 44:e1:d3:7e:40:3f:2d:ca:15:b6:ee:d0:65:0b:1e:19:53:2c: ee:4c:f2:f2:8b:03:98:9e:da:3d:70:90:e0:25:71:f1:d9:c4: 8f:04:bc:79:16:9b:84:ba:7b:b5:e3:27:89:95:c8:ea:ce:6b: 78:77:d4:4b:07:1e:2b:35:7b:31:06:a3:07:23:66:76:30:89: 9b:5e:b2:56:88:79:fc:7a:3d:37:15:d5:8f:69:2e:c3:ef:c1: ea:78:d9:72:ba:4f:0c:aa:ce:b2:bc:a0:9a:18:26:2b:b0:8c: b0:cd:1d:70:aa:ad:3f:38:56:03:1e:10:2a:75:3a:de:24:c6: 4e:49:4f:86:ec:dc:1e:86:7d:8b:c1:c3:7a:a2:1f:55:ac:8a: a8:76:db:a5:64:ac:cd:04:9b:a5:17:a3:74:4e:2e:8e:fd:cf: 13:46:74:a4:24:ae:11:11:0f:2c:45:62:cb:32:9f:55:9c:e0: 2f:b7:d3:02:6f:0a:48:a8:2d:d6:02:e6:12:d8:89:ac:88:43: 82:d8:16:b6 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUWyHuSzvt6vZpUNWBCvqVWSQA5YkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJCQ0M5M0MxNUFDNEQxODUxQTIyNDBDOUY3QkUyRjlD OUY1MUVGMTAeFw0yNjA1MDMwMjA3NTVaFw0yNzA1MDIwMjEyNTVaMDMxMTAvBgNV BAMTKEEwRDQzMjFFQ0UzRTg1QTE2MDBEMzdFRTc0M0FFRjM4QzkyNTZENTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnYojv19726Gu2tlV7gFlnrxYG dyIlzKkearqqAm8qt8eV/vtAIEPIGO1c7fiLyZo5r9Zt3DrY3+3i5BgKwNpehiDT Er0Ze/WtD5KcEQc9Wy7yxdLwvBW+wEAMIQLqQ9ivKuW/K9T2GadjFjEAuca95F/w M4J+8AGAuCHstYijkhBXCANv2Xm7b1AE91AmEhtGK9SCKBsrQCmhH1GAw1qTXWK/ 0DWQ5FXUrGrAp9JLV0gkp8qb7Ur8akWhSzxKszIMEWS/RV3SCUME5WEla0mF4Jwr mzhgsv+gJ8c30uYSuOFFUC+Js3Nzrvp9/tcap6UFBoZhq6X4tRBziz0mhBHdAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUoNQyHs4+haFgDTfudDrvOMklbVQwHwYDVR0j BBgwFoAUQrzJPBWsTRhRoiQMn3vi+cn1HvEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGMzNGZmMDgtZDIxZi00MjBiLTg3ZGYtNTMxMDNiNmRjMjUzLzAvNDJCQ0M5M0Mx NUFDNEQxODUxQTIyNDBDOUY3QkUyRjlDOUY1MUVGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MkJDQzkzQzE1QUM0RDE4NTFBMjI0MEM5RjdCRTJGOUM5RjUx RUYxLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04 N2RmLTUzMTAzYjZkYzI1My8wLzMyMzQzMDMyM2E2MTYxMzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzNzMzMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQCqkAwDQYJKoZI hvcNAQELBQADggEBABRiCvaOsL7Ho2qQias6Q5G+arEGPu52V7tjvPO+aUuEToqm 3xrFhGg0VueinGAAGbKMyFmXl0Th035APy3KFbbu0GULHhlTLO5M8vKLA5ie2j1w kOAlcfHZxI8EvHkWm4S6e7XjJ4mVyOrOa3h31EsHHis1ezEGowcjZnYwiZteslaI efx6PTcV1Y9pLsPvwep42XK6TwyqzrK8oJoYJiuwjLDNHXCqrT84VgMeECp1Ot4k xk5JT4bs3B6GfYvBw3qiH1Wsiqh226VkrM0Em6UXo3ROLo79zxNGdKQkrhERDyxF Yssyn1Wc4C+30wJvCkioLdYC5hLYiayIQ4LYFrY= -----END CERTIFICATE-----Generated at Wed May 13 14:27:22 2026 by rpki-client