$ rpki-client -vvf rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/323430323a663038303a613a3a2f34382d3438203d3e203338313530.roa File: 323430323a663038303a613a3a2f34382d3438203d3e203338313530.roa (raw, json) Hash identifier: YlFXyFkcnhrnLUhhbwfxblxgALA+vv77xuVIntax+TQ= Subject key identifier: ED:F4:15:D1:61:45:A6:8D:10:7F:E8:B1:52:39:7D:DE:4D:1F:8B:BA Certificate issuer: /CN=102CB228255AC59C06F56BF9291AABDD49CD72E1 Certificate serial: 323C61430515408100FF1929B72D53A0ABBF8DF5 Authority key identifier: 10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/323430323a663038303a613a3a2f34382d3438203d3e203338313530.roa Signing time: Sun 03 May 2026 02:15:59 +0000 ROA not before: Sun 03 May 2026 02:10:59 +0000 ROA not after: Sun 02 May 2027 02:15:59 +0000 asID: 38150 IP address blocks: 2402:f080:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:3c:61:43:05:15:40:81:00:ff:19:29:b7:2d:53:a0:ab:bf:8d:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=102CB228255AC59C06F56BF9291AABDD49CD72E1 Validity Not Before: May 3 02:10:59 2026 GMT Not After : May 2 02:15:59 2027 GMT Subject: CN=EDF415D16145A68D107FE8B152397DDE4D1F8BBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:17:dc:b7:51:8a:f9:74:6a:db:79:77:a4:10: 31:d4:82:60:7e:70:2c:98:b2:85:ee:1d:41:32:26: 93:85:19:92:8f:b7:43:6a:58:df:28:fd:35:20:4f: 34:bd:94:02:7e:28:19:6e:45:f2:e0:18:bd:9e:d2: d7:d1:ab:6a:55:cb:4f:de:2c:48:89:ad:64:49:19: e4:81:31:e5:e1:ca:99:57:e7:77:38:09:cd:5d:34: 9b:ed:f1:4c:6a:cd:b0:84:52:84:47:e5:30:4c:bd: 17:de:04:71:6c:ee:6e:dc:62:6d:75:22:d0:3f:17: 0f:23:b1:81:6f:ba:7f:f5:e5:83:9e:8d:cf:1d:f9: 45:76:f5:71:86:0f:78:53:1a:2a:c0:e7:64:3a:db: 95:39:be:66:8f:9d:25:9a:33:30:da:a2:64:d3:e8: e9:5a:d0:fe:b9:4c:af:23:53:e6:e6:d6:9c:41:61: 5c:a7:59:11:c5:0b:89:67:79:1e:63:60:c8:a3:a7: 5a:18:6d:3d:49:70:4c:02:56:72:c2:1d:1c:0e:17: a6:24:46:7b:48:da:d8:16:78:db:bb:a0:9c:97:72: 6b:04:62:dd:7d:86:d8:89:f6:2b:70:38:8b:64:47: f8:e4:1b:a9:2a:91:d0:10:8f:cc:df:82:ba:82:8b: 31:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F4:15:D1:61:45:A6:8D:10:7F:E8:B1:52:39:7D:DE:4D:1F:8B:BA X509v3 Authority Key Identifier: keyid:10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/323430323a663038303a613a3a2f34382d3438203d3e203338313530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:f080:a::/48 Signature Algorithm: sha256WithRSAEncryption 64:7c:2e:5f:dd:29:70:15:56:43:37:1b:a8:3b:04:96:16:75: d2:ea:4c:bf:37:ef:a9:74:9d:a4:77:77:0e:e5:33:f8:83:f7: 10:b3:96:8f:6d:37:fe:9a:0e:8d:86:65:65:15:a8:78:12:10: 96:f2:70:3b:7a:96:92:79:f6:cd:fe:88:30:8d:6a:a2:21:d6: 53:5c:08:3c:b3:58:84:f2:aa:2a:ee:a4:db:be:9e:02:31:ae: 51:1e:7b:5f:35:6e:ac:fc:f0:66:d1:79:cb:f0:b5:09:e1:c5: 34:86:b9:12:de:05:47:1e:b9:26:3b:3e:e2:c5:09:86:a6:ee: 3f:e3:64:26:9c:df:80:f9:9a:24:00:df:32:81:07:4f:c7:ae: 47:8c:c7:e8:c9:72:91:67:60:60:2d:c6:c7:43:59:e3:2c:1c: b2:86:97:a0:c0:d7:c9:7b:3e:87:98:07:5d:b6:de:3c:1b:8f: c0:35:fc:b6:20:ee:19:3a:3c:95:32:bf:4a:e9:d9:67:87:99: 1a:7e:74:a9:2d:8c:d6:6f:6d:89:77:79:75:8e:52:e5:27:8d: 89:74:64:ce:a1:fc:90:e4:3c:d8:88:0f:eb:3d:de:db:ce:09: 73:5c:10:79:32:ec:80:c7:5e:93:47:ff:2d:0a:95:61:e3:f1: e9:fa:37:54 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUMjxhQwUVQIEA/xkpty1ToKu/jfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAyQ0IyMjgyNTVBQzU5QzA2RjU2QkY5MjkxQUFCREQ0 OUNENzJFMTAeFw0yNjA1MDMwMjEwNTlaFw0yNzA1MDIwMjE1NTlaMDMxMTAvBgNV BAMTKEVERjQxNUQxNjE0NUE2OEQxMDdGRThCMTUyMzk3RERFNEQxRjhCQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsF9y3UYr5dGrbeXekEDHUgmB+ cCyYsoXuHUEyJpOFGZKPt0NqWN8o/TUgTzS9lAJ+KBluRfLgGL2e0tfRq2pVy0/e LEiJrWRJGeSBMeXhyplX53c4Cc1dNJvt8UxqzbCEUoRH5TBMvRfeBHFs7m7cYm11 ItA/Fw8jsYFvun/15YOejc8d+UV29XGGD3hTGirA52Q625U5vmaPnSWaMzDaomTT 6Ola0P65TK8jU+bm1pxBYVynWRHFC4lneR5jYMijp1oYbT1JcEwCVnLCHRwOF6Yk RntI2tgWeNu7oJyXcmsEYt19htiJ9itwOItkR/jkG6kqkdAQj8zfgrqCizGhAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQU7fQV0WFFpo0Qf+ixUjl93k0fi7owHwYDVR0j BBgwFoAUECyyKCVaxZwG9Wv5KRqr3UnNcuEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTdlNjViNjctOTA1Yy00MDNjLThjNzktMjMxNTY1OTY2OGFhLzAvMTAyQ0IyMjgy NTVBQzU5QzA2RjU2QkY5MjkxQUFCREQ0OUNENzJFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDJDQjIyODI1NUFDNTlDMDZGNTZCRjkyOTFBQUJERDQ5Q0Q3 MkUxLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE3ZTY1YjY3LTkwNWMtNDAzYy04 Yzc5LTIzMTU2NTk2NjhhYS8wLzMyMzQzMDMyM2E2NjMwMzgzMDNhNjEzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzEzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJALwgAAKMA0G CSqGSIb3DQEBCwUAA4IBAQBkfC5f3SlwFVZDNxuoOwSWFnXS6ky/N++pdJ2kd3cO 5TP4g/cQs5aPbTf+mg6NhmVlFah4EhCW8nA7epaSefbN/ogwjWqiIdZTXAg8s1iE 8qoq7qTbvp4CMa5RHntfNW6s/PBm0XnL8LUJ4cU0hrkS3gVHHrkmOz7ixQmGpu4/ 42QmnN+A+ZokAN8ygQdPx65HjMfoyXKRZ2BgLcbHQ1njLByyhpegwNfJez6HmAdd tt48G4/ANfy2IO4ZOjyVMr9K6dlnh5kafnSpLYzWb22Jd3l1jlLlJ42JdGTOofyQ 5DzYiA/rPd7bzglzXBB5MuyAx16TR/8tCpVh4/Hp+jdU -----END CERTIFICATE-----Generated at Wed May 13 13:33:57 2026 by rpki-client