$ rpki-client -vvf rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/323430303a636438303a3a2f33322d3438203d3e203536323432.roa File: 323430303a636438303a3a2f33322d3438203d3e203536323432.roa (raw, json) Hash identifier: fi/7+4zEIqvSpKlVqvbMDeqY2YCrGnjUpksCJ4fAKrA= Subject key identifier: 37:32:9E:8B:39:B2:F3:A3:4D:98:73:3F:F4:A0:69:A7:E9:68:34:12 Certificate issuer: /CN=C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9 Certificate serial: 76437F92CAE392151508EEA10FF15D80FD46A931 Authority key identifier: C7:6F:AE:70:E7:14:64:49:6E:F4:FA:8E:EE:F0:DF:5C:93:12:C7:C9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/323430303a636438303a3a2f33322d3438203d3e203536323432.roa Signing time: Sun 03 May 2026 02:15:50 +0000 ROA not before: Sun 03 May 2026 02:10:50 +0000 ROA not after: Sun 02 May 2027 02:15:50 +0000 asID: 56242 IP address blocks: 2400:cd80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:48:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:43:7f:92:ca:e3:92:15:15:08:ee:a1:0f:f1:5d:80:fd:46:a9:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9 Validity Not Before: May 3 02:10:50 2026 GMT Not After : May 2 02:15:50 2027 GMT Subject: CN=37329E8B39B2F3A34D98733FF4A069A7E9683412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8b:55:f4:0f:8c:3a:4f:25:65:8c:f3:dd:92: b2:93:cb:96:ae:14:94:5a:20:82:8c:7d:f3:ae:35: 8e:0f:4b:07:c1:20:92:92:b0:5f:74:52:7e:58:6e: 24:6e:e4:0e:d2:b3:97:6f:40:c7:8e:15:0f:c1:97: 82:09:79:36:f2:9f:60:ce:23:a4:66:60:1b:ca:2a: 03:c6:ee:b0:4b:a7:5c:3e:9a:c6:b8:cc:f0:ca:82: 94:eb:b3:3e:62:0b:da:c2:23:07:ed:86:f4:05:80: 2d:37:e2:b7:94:98:c7:4f:4d:ef:49:34:f0:48:70: 11:b4:60:ad:1b:64:d8:58:a4:35:00:a2:a3:1f:99: 86:8f:af:e6:33:8f:f2:0d:11:dc:39:1f:b7:69:69: e5:97:58:8f:b5:e7:ea:da:65:00:6f:9b:40:2b:df: d3:74:9f:1a:f5:49:70:f5:64:35:f2:6b:50:67:b1: 06:20:5f:06:35:dd:45:36:3b:54:e6:50:d2:fa:85: 9a:e3:b4:75:38:18:be:7e:29:69:aa:de:0d:02:4b: d2:7f:3a:82:59:db:e0:8c:06:c3:a8:4a:eb:9b:e3: 14:24:d3:5a:f5:3f:6f:35:31:5a:a2:48:ac:2d:71: 0f:79:80:d7:f1:9f:95:49:40:97:43:35:86:c1:1a: e9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:32:9E:8B:39:B2:F3:A3:4D:98:73:3F:F4:A0:69:A7:E9:68:34:12 X509v3 Authority Key Identifier: keyid:C7:6F:AE:70:E7:14:64:49:6E:F4:FA:8E:EE:F0:DF:5C:93:12:C7:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/323430303a636438303a3a2f33322d3438203d3e203536323432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:cd80::/32 Signature Algorithm: sha256WithRSAEncryption 4a:97:4a:4b:ee:07:cb:89:68:d1:a9:6e:9a:ae:a7:33:1d:d6: c1:8b:21:c2:d8:9c:33:3b:45:9e:1a:23:90:ae:9c:3b:62:78: 20:2a:19:60:31:0e:88:56:0c:c3:9a:f1:d3:2b:1c:38:ad:3b: 57:62:ec:4e:66:bc:80:9a:96:67:22:f1:c4:1e:ff:72:70:6b: 80:e1:2e:05:88:c6:d9:01:bf:c3:02:9c:be:14:a6:20:80:48: 36:10:04:0a:55:74:15:57:16:78:b0:7c:1b:f5:e5:d8:38:63: 46:32:f5:4a:1d:13:a4:be:22:11:76:cd:c3:c4:bc:c5:f4:06: d4:36:57:ae:0a:8a:26:56:f1:f6:f6:cc:e0:a9:00:0f:f2:48: d3:e2:24:a6:4f:9e:79:0b:23:53:b9:84:2e:b7:c7:d1:61:12: 9d:78:ec:77:56:5e:56:c0:16:51:b7:0a:b8:63:ec:5e:58:d4: 2d:6e:66:53:f2:db:6f:79:34:9b:b3:c3:93:d5:de:3e:97:e0: 74:a6:b9:f8:8c:b3:49:4c:e4:c9:a5:2e:57:d1:70:a3:1b:81: e0:87:ea:ff:0e:f6:fa:47:ad:13:af:cb:30:e0:eb:6a:e6:16: 8f:f5:4c:5b:20:18:c3:3a:04:7c:79:a1:fc:b0:13:19:a2:c8: ca:a3:15:27 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUdkN/ksrjkhUVCO6hD/FdgP1GqTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc2RkFFNzBFNzE0NjQ0OTZFRjRGQThFRUVGMERGNUM5 MzEyQzdDOTAeFw0yNjA1MDMwMjEwNTBaFw0yNzA1MDIwMjE1NTBaMDMxMTAvBgNV BAMTKDM3MzI5RThCMzlCMkYzQTM0RDk4NzMzRkY0QTA2OUE3RTk2ODM0MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWi1X0D4w6TyVljPPdkrKTy5au FJRaIIKMffOuNY4PSwfBIJKSsF90Un5YbiRu5A7Ss5dvQMeOFQ/Bl4IJeTbyn2DO I6RmYBvKKgPG7rBLp1w+msa4zPDKgpTrsz5iC9rCIwfthvQFgC034reUmMdPTe9J NPBIcBG0YK0bZNhYpDUAoqMfmYaPr+Yzj/INEdw5H7dpaeWXWI+15+raZQBvm0Ar 39N0nxr1SXD1ZDXya1BnsQYgXwY13UU2O1TmUNL6hZrjtHU4GL5+KWmq3g0CS9J/ OoJZ2+CMBsOoSuub4xQk01r1P281MVqiSKwtcQ95gNfxn5VJQJdDNYbBGumZAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUNzKeizmy86NNmHM/9KBpp+loNBIwHwYDVR0j BBgwFoAUx2+ucOcUZElu9PqO7vDfXJMSx8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTdhMmQyNWItY2IxOC00NWJlLTlmYTEtMTU0Y2ExNTc5MjIzLzAvQzc2RkFFNzBF NzE0NjQ0OTZFRjRGQThFRUVGMERGNUM5MzEyQzdDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzZGQUU3MEU3MTQ2NDQ5NkVGNEZBOEVFRUYwREY1QzkzMTJD N0M5LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE3YTJkMjViLWNiMTgtNDViZS05 ZmExLTE1NGNhMTU3OTIyMy8wLzMyMzQzMDMwM2E2MzY0MzgzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDM1MzYzMjM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAM2AMA0GCSqGSIb3 DQEBCwUAA4IBAQBKl0pL7gfLiWjRqW6arqczHdbBiyHC2JwzO0WeGiOQrpw7Yngg KhlgMQ6IVgzDmvHTKxw4rTtXYuxOZryAmpZnIvHEHv9ycGuA4S4FiMbZAb/DApy+ FKYggEg2EAQKVXQVVxZ4sHwb9eXYOGNGMvVKHROkviIRds3DxLzF9AbUNleuCoom VvH29szgqQAP8kjT4iSmT555CyNTuYQut8fRYRKdeOx3Vl5WwBZRtwq4Y+xeWNQt bmZT8ttveTSbs8OT1d4+l+B0prn4jLNJTOTJpS5X0XCjG4Hgh+r/Dvb6R60Tr8sw 4Otq5haP9UxbIBjDOgR8eaH8sBMZosjKoxUn -----END CERTIFICATE-----Generated at Wed May 13 09:51:24 2026 by rpki-client