$ rpki-client -vvf rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/323430313a396230303a3a2f33322d3438203d3e203338313438.roa File: 323430313a396230303a3a2f33322d3438203d3e203338313438.roa (raw, json) Hash identifier: cgIEuYKpgRxefyDoprlhU36lSQZoW3T5mu05arwSfsg= Subject key identifier: 34:92:F8:6B:74:B3:67:08:CD:D5:3E:06:A9:1E:72:00:86:B3:23:E3 Certificate issuer: /CN=4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83 Certificate serial: 63B0004D8F28764139F665C3D76E4AB98C8D3BFD Authority key identifier: 4F:D9:C4:CB:62:40:81:CE:C4:77:48:A0:AB:67:BE:27:BC:DF:8B:83 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/323430313a396230303a3a2f33322d3438203d3e203338313438.roa Signing time: Sun 03 May 2026 02:15:05 +0000 ROA not before: Sun 03 May 2026 02:10:05 +0000 ROA not after: Sun 02 May 2027 02:15:05 +0000 asID: 38148 IP address blocks: 2401:9b00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.crl rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:42:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:b0:00:4d:8f:28:76:41:39:f6:65:c3:d7:6e:4a:b9:8c:8d:3b:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83 Validity Not Before: May 3 02:10:05 2026 GMT Not After : May 2 02:15:05 2027 GMT Subject: CN=3492F86B74B36708CDD53E06A91E720086B323E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b8:a5:a5:a5:5b:18:83:97:96:d8:bf:75:d6: 67:73:04:0f:d9:c9:eb:b4:c7:15:dc:1b:32:d7:2b: 48:a4:97:d1:93:19:0f:6c:71:42:57:56:b5:2a:3b: 49:14:9d:cd:88:3d:d0:8e:14:35:20:44:84:1a:7e: 1a:a0:c3:3e:ce:0d:29:7a:ee:41:6e:fc:db:e6:30: b6:9e:9f:56:9a:32:c0:f5:53:8e:29:a5:81:e4:9a: e2:be:48:75:17:f8:0a:5d:5a:50:52:d9:57:9c:99: 0b:14:5f:65:72:ee:d4:a8:e0:08:3d:f2:ae:fe:85: 81:af:85:98:bb:9a:28:8f:8a:c0:ab:69:64:a5:b5: cf:b0:38:f0:42:14:c7:77:95:d5:7e:13:1e:d9:b6: 48:d5:22:18:74:3e:83:fb:bd:af:3b:09:fa:23:05: 76:ce:46:b4:80:b2:c4:c5:00:1f:6e:cd:5c:95:5b: 55:de:2c:d4:22:8d:0b:3b:c2:7c:04:d3:47:c3:05: 17:2a:f3:82:fc:54:df:92:16:6c:fc:bd:b1:5e:39: 28:7e:fa:44:aa:0a:04:45:30:97:fe:e7:1d:e5:f7: e6:a4:88:dc:6a:99:61:f2:f4:9f:ef:56:e6:b1:fd: af:56:c3:dc:f3:c3:d1:02:f3:64:97:8f:ac:ff:90: 90:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:92:F8:6B:74:B3:67:08:CD:D5:3E:06:A9:1E:72:00:86:B3:23:E3 X509v3 Authority Key Identifier: keyid:4F:D9:C4:CB:62:40:81:CE:C4:77:48:A0:AB:67:BE:27:BC:DF:8B:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/323430313a396230303a3a2f33322d3438203d3e203338313438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:9b00::/32 Signature Algorithm: sha256WithRSAEncryption a9:af:fd:d9:59:99:b8:31:79:9d:74:ce:04:dd:bf:0d:f5:18: 2a:d5:83:86:fe:70:33:6f:ac:4d:4a:85:5d:0d:79:42:3d:c4: 36:21:53:74:77:63:5e:52:00:51:a4:e0:74:41:fd:77:76:00: d4:1f:b4:1e:b2:ec:d2:ab:b7:c6:9a:bd:1e:f2:ea:04:1a:47: e3:bc:da:16:2d:86:79:e3:4e:b3:ef:53:9e:49:10:53:57:b5: 7f:87:3d:9d:ba:b4:69:e8:8e:18:76:11:77:fd:70:de:fe:dd: 8d:ed:e4:09:92:c2:63:6e:56:92:be:57:72:4e:e7:1e:55:20: 38:40:74:82:5b:5e:f1:aa:6f:58:55:ee:91:85:38:11:ce:29: 2e:c0:7e:27:f9:cf:75:3c:69:bc:3f:5f:9a:62:4b:bf:85:7a: e1:0a:0a:ec:9a:6f:ee:7f:f9:6d:0e:4a:81:fa:cb:32:fc:d0: 8e:15:7d:ac:3c:af:4a:1c:ef:57:a3:ef:0c:6c:eb:34:71:61: 87:ba:c9:68:7b:92:fe:ba:e4:10:12:9b:0d:87:38:7b:5e:af: 00:c7:a2:5e:c5:b0:3c:a0:bc:ad:b5:96:57:b3:fc:fc:3c:82: cc:dc:ef:81:c1:bb:f3:de:e4:dd:bf:7e:fb:eb:9d:15:17:ff: c4:fc:18:1a -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUY7AATY8odkE59mXD125KuYyNO/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZEOUM0Q0I2MjQwODFDRUM0Nzc0OEEwQUI2N0JFMjdC Q0RGOEI4MzAeFw0yNjA1MDMwMjEwMDVaFw0yNzA1MDIwMjE1MDVaMDMxMTAvBgNV BAMTKDM0OTJGODZCNzRCMzY3MDhDREQ1M0UwNkE5MUU3MjAwODZCMzIzRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXuKWlpVsYg5eW2L911mdzBA/Z yeu0xxXcGzLXK0ikl9GTGQ9scUJXVrUqO0kUnc2IPdCOFDUgRIQafhqgwz7ODSl6 7kFu/NvmMLaen1aaMsD1U44ppYHkmuK+SHUX+ApdWlBS2VecmQsUX2Vy7tSo4Ag9 8q7+hYGvhZi7miiPisCraWSltc+wOPBCFMd3ldV+Ex7ZtkjVIhh0PoP7va87Cfoj BXbORrSAssTFAB9uzVyVW1XeLNQijQs7wnwE00fDBRcq84L8VN+SFmz8vbFeOSh+ +kSqCgRFMJf+5x3l9+akiNxqmWHy9J/vVuax/a9Ww9zzw9EC82SXj6z/kJDJAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUNJL4a3SzZwjN1T4GqR5yAIazI+MwHwYDVR0j BBgwFoAUT9nEy2JAgc7Ed0igq2e+J7zfi4MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTU5MmMyNzQtMTFkYi00MTI3LWJhYmItYWVhZTk5Mjg0YjAwLzAvNEZEOUM0Q0I2 MjQwODFDRUM0Nzc0OEEwQUI2N0JFMjdCQ0RGOEI4My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RkQ5QzRDQjYyNDA4MUNFQzQ3NzQ4QTBBQjY3QkUyN0JDREY4 QjgzLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE1OTJjMjc0LTExZGItNDEyNy1i YWJiLWFlYWU5OTI4NGIwMC8wLzMyMzQzMDMxM2EzOTYyMzAzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMzMzgzMTM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAZsAMA0GCSqGSIb3 DQEBCwUAA4IBAQCpr/3ZWZm4MXmddM4E3b8N9Rgq1YOG/nAzb6xNSoVdDXlCPcQ2 IVN0d2NeUgBRpOB0Qf13dgDUH7QesuzSq7fGmr0e8uoEGkfjvNoWLYZ5406z71Oe SRBTV7V/hz2durRp6I4YdhF3/XDe/t2N7eQJksJjblaSvldyTuceVSA4QHSCW17x qm9YVe6RhTgRzikuwH4n+c91PGm8P1+aYku/hXrhCgrsmm/uf/ltDkqB+ssy/NCO FX2sPK9KHO9Xo+8MbOs0cWGHusloe5L+uuQQEpsNhzh7Xq8Ax6JexbA8oLyttZZX s/z8PILM3O+Bwbvz3uTdv377650VF//E/Bga -----END CERTIFICATE-----Generated at Wed May 13 12:56:29 2026 by rpki-client