$ rpki-client -vvf rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030303a3a2f33332d3333203d3e203233363739.roa File: 323430313a323930303a383030303a3a2f33332d3333203d3e203233363739.roa (raw, json) Hash identifier: FHNFpGwuETcXZAQiq4Ia+x2hf4VLw+Bt/lmFpU/ad4M= Subject key identifier: BA:04:3A:34:0B:C9:3E:42:F8:77:0F:4D:31:AF:5D:65:93:1A:D4:AE Certificate issuer: /CN=D09EA95FF10C0166C2954C997A8A4989BD890A87 Certificate serial: 611417B896091F79DBE42611CCBAD45D2BE26067 Authority key identifier: D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030303a3a2f33332d3333203d3e203233363739.roa Signing time: Sun 03 May 2026 02:18:57 +0000 ROA not before: Sun 03 May 2026 02:13:57 +0000 ROA not after: Sun 02 May 2027 02:18:57 +0000 asID: 23679 IP address blocks: 2401:2900:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:14:17:b8:96:09:1f:79:db:e4:26:11:cc:ba:d4:5d:2b:e2:60:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D09EA95FF10C0166C2954C997A8A4989BD890A87 Validity Not Before: May 3 02:13:57 2026 GMT Not After : May 2 02:18:57 2027 GMT Subject: CN=BA043A340BC93E42F8770F4D31AF5D65931AD4AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:0c:70:5c:43:57:2a:ba:3c:2c:09:dc:b3:29: fe:bf:89:be:e4:2d:7c:f5:61:9f:15:c4:0b:2f:9a: 2d:5a:1b:aa:5b:e4:cc:fb:27:5e:65:b8:15:ad:23: ea:5d:c1:cc:6f:a5:11:f5:22:67:6f:b3:5c:dd:87: 41:d5:32:b8:e2:e3:6e:ed:ae:36:61:8a:34:32:f4: 20:96:b0:a5:b0:ec:d4:6b:dd:98:16:2c:2d:43:fd: 3b:d3:87:94:72:6e:08:5e:60:f1:40:8b:72:25:05: 34:74:1f:8f:4e:8d:e5:9b:0a:c7:81:3b:70:d9:d9: 0c:6d:7c:67:69:a2:63:17:16:ce:af:47:a7:a3:ed: 28:41:2e:37:40:bf:6a:5b:ec:78:20:e9:d9:34:61: 24:0c:e2:97:da:53:e7:cb:98:20:9c:8d:9e:f3:e2: 43:60:ac:9e:38:75:46:e3:f9:29:d4:ee:73:93:ec: 1d:cb:eb:f3:c7:7b:09:1e:98:4f:7b:2f:d8:c0:c6: 5a:01:66:aa:87:4e:f4:10:0f:99:10:02:8a:cd:e6: 53:71:65:14:e3:fc:90:2d:d5:e3:21:7a:fd:2d:89: ae:9e:f4:ff:b7:2d:7d:cc:b4:9f:d3:6a:f7:1b:68: e4:b2:06:ea:8c:ca:79:b4:10:21:ed:4c:13:b9:4a: 31:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:04:3A:34:0B:C9:3E:42:F8:77:0F:4D:31:AF:5D:65:93:1A:D4:AE X509v3 Authority Key Identifier: keyid:D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030303a3a2f33332d3333203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2900:8000::/33 Signature Algorithm: sha256WithRSAEncryption 84:5e:25:ee:91:e9:30:24:18:be:8a:2c:a7:b4:5f:52:82:06: 15:76:bf:bb:0a:53:ba:39:d0:64:fb:8c:62:81:ac:27:a1:fb: c7:41:81:fb:6d:cf:9a:c3:f3:e3:0d:c2:bd:01:ac:1b:35:cc: de:1f:50:c1:b4:87:51:ab:58:a5:14:74:c3:3d:a7:5e:00:24: 8d:ab:ed:b7:b1:ba:6c:ed:8b:20:1f:cd:04:15:44:6c:8a:81: 82:9c:c5:12:cf:7d:20:6d:b1:64:92:a7:9a:aa:15:bc:ff:bd: 98:b4:f1:09:8f:ef:a1:02:7c:c2:86:c2:6c:7b:13:f2:a4:81: fe:99:b8:42:ee:9f:43:2c:51:85:c2:e4:b3:f7:12:82:ee:12: 83:8d:a5:ab:0c:2f:48:2d:05:07:ab:db:d0:d2:b6:8d:db:8e: 0c:63:8d:bb:a8:96:d9:d3:70:91:2b:2c:a8:ae:21:46:a7:f0: 94:19:2e:08:6c:fd:17:4d:4d:7c:63:7c:b8:ac:7f:18:96:c2: 40:d4:73:72:5d:ec:1a:17:5e:7f:d1:b7:6c:9a:db:1a:b9:96: 0e:8a:94:76:c8:31:59:d0:e3:f9:30:18:0e:91:d4:31:e3:56: 40:46:30:28:f1:3d:f0:ba:11:16:ce:43:15:8f:71:11:17:5e: d2:b8:9b:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYRQXuJYJH3nb5CYRzLrUXSviYGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA5RUE5NUZGMTBDMDE2NkMyOTU0Qzk5N0E4QTQ5ODlC RDg5MEE4NzAeFw0yNjA1MDMwMjEzNTdaFw0yNzA1MDIwMjE4NTdaMDMxMTAvBgNV BAMTKEJBMDQzQTM0MEJDOTNFNDJGODc3MEY0RDMxQUY1RDY1OTMxQUQ0QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrDHBcQ1cqujwsCdyzKf6/ib7k LXz1YZ8VxAsvmi1aG6pb5Mz7J15luBWtI+pdwcxvpRH1Imdvs1zdh0HVMrji427t rjZhijQy9CCWsKWw7NRr3ZgWLC1D/TvTh5RybgheYPFAi3IlBTR0H49OjeWbCseB O3DZ2QxtfGdpomMXFs6vR6ej7ShBLjdAv2pb7Hgg6dk0YSQM4pfaU+fLmCCcjZ7z 4kNgrJ44dUbj+SnU7nOT7B3L6/PHewkemE97L9jAxloBZqqHTvQQD5kQAorN5lNx ZRTj/JAt1eMhev0tia6e9P+3LX3MtJ/TavcbaOSyBuqMynm0ECHtTBO5SjHlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUugQ6NAvJPkL4dw9NMa9dZZMa1K4wHwYDVR0j BBgwFoAU0J6pX/EMAWbClUyZeopJib2JCocwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAxNDMyY2MtM2JjOS00ODU4LWI1MDYtMjE4YWFiMGIwODljLzAvRDA5RUE5NUZG MTBDMDE2NkMyOTU0Qzk5N0E4QTQ5ODlCRDg5MEE4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMDlFQTk1RkYxMEMwMTY2QzI5NTRDOTk3QThBNDk4OUJEODkw QTg3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhMzgzMDMwMzAz YTNhMmYzMzMzMmQzMzMzMjAzZDNlMjAzMjMzMzYzNzM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHJAEp AIAwDQYJKoZIhvcNAQELBQADggEBAIReJe6R6TAkGL6KLKe0X1KCBhV2v7sKU7o5 0GT7jGKBrCeh+8dBgfttz5rD8+MNwr0BrBs1zN4fUMG0h1GrWKUUdMM9p14AJI2r 7bexumztiyAfzQQVRGyKgYKcxRLPfSBtsWSSp5qqFbz/vZi08QmP76ECfMKGwmx7 E/Kkgf6ZuELun0MsUYXC5LP3EoLuEoONpasML0gtBQer29DSto3bjgxjjbuoltnT cJErLKiuIUan8JQZLghs/RdNTXxjfLisfxiWwkDUc3Jd7BoXXn/Rt2ya2xq5lg6K lHbIMVnQ4/kwGA6R1DHjVkBGMCjxPfC6ERbOQxWPcREXXtK4m34= -----END CERTIFICATE-----Generated at Wed May 13 14:24:16 2026 by rpki-client