$ rpki-client -vvf rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a383030303a3a2f33362d3336203d3e203538333639.roa File: 323430333a666438303a383030303a3a2f33362d3336203d3e203538333639.roa (raw, json) Hash identifier: TD4wQKEtqb65HpoJQ6SvfNMlJnyg9JtoqoYNJvXKoF8= Subject key identifier: B1:32:1E:4F:99:A0:93:9B:0C:DD:83:1D:FC:9D:D9:42:23:FC:51:A0 Certificate issuer: /CN=4C5D523097061FD420EF89872EF55D7D42F9D537 Certificate serial: 09FA0F41D6B8385B2D9082178714C2A0607E73BE Authority key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a383030303a3a2f33362d3336203d3e203538333639.roa Signing time: Sun 03 May 2026 02:15:25 +0000 ROA not before: Sun 03 May 2026 02:10:25 +0000 ROA not after: Sun 02 May 2027 02:15:25 +0000 asID: 58369 IP address blocks: 2403:fd80:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:fa:0f:41:d6:b8:38:5b:2d:90:82:17:87:14:c2:a0:60:7e:73:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C5D523097061FD420EF89872EF55D7D42F9D537 Validity Not Before: May 3 02:10:25 2026 GMT Not After : May 2 02:15:25 2027 GMT Subject: CN=B1321E4F99A0939B0CDD831DFC9DD94223FC51A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0a:fd:63:cc:45:37:0c:fb:1a:a4:79:90:d2: d5:58:17:30:8d:ea:8d:1d:81:f3:35:ad:15:39:eb: d0:82:da:36:d3:b9:d3:14:78:cb:d1:4e:f5:c1:3b: d9:0a:09:d7:5a:66:7c:8d:7b:a5:e9:46:41:11:64: 0c:c2:4a:70:02:af:b5:37:49:5a:ca:d2:7e:04:b7: bd:95:0d:fe:8a:39:4c:09:55:5a:b7:bf:c2:bd:c2: 6c:2a:b4:5f:57:b4:29:4f:5b:94:74:a9:8d:2f:1e: 51:78:79:83:00:6a:09:cf:6f:84:f0:80:d6:71:db: 59:d3:c2:57:23:59:32:51:f7:c4:83:3f:6b:e7:37: 11:88:17:9b:5f:46:e0:fc:ca:70:9b:47:41:99:e8: 3e:36:03:15:4b:24:a6:85:01:30:fe:31:ee:f8:a8: 5e:9e:88:fc:81:3b:86:74:24:3c:3b:27:cd:96:86: 8e:5d:47:1d:9a:1e:95:5d:0f:04:60:18:5e:9c:ca: ee:12:97:fe:31:07:37:c3:44:a2:bc:0b:d0:c3:98: d5:fe:a2:e6:94:4f:72:04:16:ac:56:fd:06:5e:74: 27:f6:da:98:c8:a1:09:60:68:6d:54:b2:3f:14:80: 69:9c:5f:1a:5f:ba:4c:52:82:23:20:45:10:fe:6a: 44:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:32:1E:4F:99:A0:93:9B:0C:DD:83:1D:FC:9D:D9:42:23:FC:51:A0 X509v3 Authority Key Identifier: keyid:4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a383030303a3a2f33362d3336203d3e203538333639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:fd80:8000::/36 Signature Algorithm: sha256WithRSAEncryption ce:08:ad:9d:2d:12:f6:d7:3a:8b:42:7a:fa:dd:fc:8d:ca:ab: 26:d8:00:46:db:e1:68:59:f7:43:d0:ce:4c:4d:b9:d0:85:16: ff:e8:83:42:43:ef:b6:77:0d:7d:db:ea:06:1c:27:ae:31:65: 86:f4:1f:f1:78:8d:30:ee:6d:d2:2b:28:55:20:6d:fc:2a:3d: 98:9c:b3:fd:cb:89:4f:f8:a3:a5:91:83:64:6e:3e:9f:98:86: 90:92:ec:38:cb:9c:1f:ad:f5:fe:e2:f7:01:2c:0a:71:3e:a5: 47:f5:ab:fd:a6:d9:a3:da:66:49:9e:24:b7:7d:c1:b3:c2:b5: 5d:45:de:82:8a:92:9e:29:89:7b:8d:dd:06:ba:89:73:c1:99: e1:af:57:a4:56:85:4f:29:b5:05:3b:88:9e:df:6d:2f:3a:76: 2e:80:bd:97:70:a4:eb:ad:72:81:68:13:26:28:c8:58:3d:41: 2a:95:a5:7b:46:9a:10:07:76:23:10:97:e1:ee:69:ea:1a:2a: c4:a6:e6:08:1c:ef:ef:bc:dd:0f:5e:26:f7:64:bb:04:f5:45: d6:5e:32:26:81:3a:dd:2f:09:8f:07:5a:4f:c9:9f:3b:04:29: b6:51:b4:d7:24:83:8c:91:3b:cf:31:f6:20:dd:e3:89:74:6a: 7a:62:da:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCfoPQda4OFstkIIXhxTCoGB+c74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM1RDUyMzA5NzA2MUZENDIwRUY4OTg3MkVGNTVEN0Q0 MkY5RDUzNzAeFw0yNjA1MDMwMjEwMjVaFw0yNzA1MDIwMjE1MjVaMDMxMTAvBgNV BAMTKEIxMzIxRTRGOTlBMDkzOUIwQ0REODMxREZDOUREOTQyMjNGQzUxQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLCv1jzEU3DPsapHmQ0tVYFzCN 6o0dgfM1rRU569CC2jbTudMUeMvRTvXBO9kKCddaZnyNe6XpRkERZAzCSnACr7U3 SVrK0n4Et72VDf6KOUwJVVq3v8K9wmwqtF9XtClPW5R0qY0vHlF4eYMAagnPb4Tw gNZx21nTwlcjWTJR98SDP2vnNxGIF5tfRuD8ynCbR0GZ6D42AxVLJKaFATD+Me74 qF6eiPyBO4Z0JDw7J82Who5dRx2aHpVdDwRgGF6cyu4Sl/4xBzfDRKK8C9DDmNX+ ouaUT3IEFqxW/QZedCf22pjIoQlgaG1Usj8UgGmcXxpfukxSgiMgRRD+akTXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsTIeT5mgk5sM3YMd/J3ZQiP8UaAwHwYDVR0j BBgwFoAUTF1SMJcGH9Qg74mHLvVdfUL51TcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTZhODExODItN2NlYi00NjVjLWE1YjUtYTE0ZWM3MzliZjk5LzAvNEM1RDUyMzA5 NzA2MUZENDIwRUY4OTg3MkVGNTVEN0Q0MkY5RDUzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QzVENTIzMDk3MDYxRkQ0MjBFRjg5ODcyRUY1NUQ3RDQyRjlE NTM3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE2YTgxMTgyLTdjZWItNDY1Yy1h NWI1LWExNGVjNzM5YmY5OS8wLzMyMzQzMDMzM2E2NjY0MzgzMDNhMzgzMDMwMzAz YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzNTM4MzMzNjM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJAP9 gIAwDQYJKoZIhvcNAQELBQADggEBAM4IrZ0tEvbXOotCevrd/I3KqybYAEbb4WhZ 90PQzkxNudCFFv/og0JD77Z3DX3b6gYcJ64xZYb0H/F4jTDubdIrKFUgbfwqPZic s/3LiU/4o6WRg2RuPp+YhpCS7DjLnB+t9f7i9wEsCnE+pUf1q/2m2aPaZkmeJLd9 wbPCtV1F3oKKkp4piXuN3Qa6iXPBmeGvV6RWhU8ptQU7iJ7fbS86di6AvZdwpOut coFoEyYoyFg9QSqVpXtGmhAHdiMQl+HuaeoaKsSm5ggc7++83Q9eJvdkuwT1RdZe MiaBOt0vCY8HWk/JnzsEKbZRtNckg4yRO88x9iDd44l0anpi2rc= -----END CERTIFICATE-----Generated at Wed May 13 14:08:43 2026 by rpki-client