$ rpki-client -vvf rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030303a3a2f34382d3438203d3e203233363739.roa File: 323430313a323930303a383030303a3a2f34382d3438203d3e203233363739.roa (raw, json) Hash identifier: eAMN6SpYfDkha3yBkPDHZ0NFtztNg63USSO8x7GJta4= Subject key identifier: EB:13:84:47:1A:97:46:CA:9D:82:FE:02:6E:CB:10:17:80:09:58:E8 Certificate issuer: /CN=D09EA95FF10C0166C2954C997A8A4989BD890A87 Certificate serial: 7E20D86ECEA9C05ACE302C825A6C6E251C14A4DB Authority key identifier: D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030303a3a2f34382d3438203d3e203233363739.roa Signing time: Sun 03 May 2026 02:19:02 +0000 ROA not before: Sun 03 May 2026 02:14:02 +0000 ROA not after: Sun 02 May 2027 02:19:02 +0000 asID: 23679 IP address blocks: 2401:2900:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:20:d8:6e:ce:a9:c0:5a:ce:30:2c:82:5a:6c:6e:25:1c:14:a4:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D09EA95FF10C0166C2954C997A8A4989BD890A87 Validity Not Before: May 3 02:14:02 2026 GMT Not After : May 2 02:19:02 2027 GMT Subject: CN=EB1384471A9746CA9D82FE026ECB1017800958E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cf:54:fb:91:6d:18:65:e9:87:b0:64:6e:1b: 0a:b7:ce:8c:d2:d8:28:5c:1c:89:ca:eb:f8:79:73: 81:08:b0:35:29:1f:e7:38:28:be:6c:03:9e:62:07: 39:cc:3c:67:25:ca:91:6a:3e:b9:e1:99:26:5c:c5: d2:81:bb:47:70:0b:5d:4a:ae:cb:5c:49:83:5c:0f: c9:63:7b:14:1e:8e:3d:d7:ee:86:c7:af:09:f4:13: 5e:22:71:a3:43:88:20:6d:12:78:09:5d:e5:34:1d: b0:cf:12:09:5b:1a:c7:de:6e:8c:4d:cf:90:56:c1: fe:6a:34:e0:5a:b3:30:9e:bb:47:1e:c0:3c:bd:1c: d0:a9:b2:98:a9:29:ac:0a:ea:91:28:79:89:df:41: 3a:c3:bb:c9:94:6f:0f:d6:14:69:26:60:87:50:29: 2c:f3:99:d8:c5:cf:b5:92:df:0e:ef:e2:3d:25:57: be:6b:83:37:6d:5c:e3:8c:4c:9b:b8:42:d7:05:2d: f9:2b:37:d9:32:68:77:54:60:7a:4d:30:7b:2b:5c: c7:1a:44:b5:26:01:5b:e3:8a:48:ba:91:0b:8f:18: 8e:0e:b7:77:b6:94:e3:0b:90:8c:ad:24:ab:2f:d7: 43:03:2a:65:90:c5:77:e3:b1:c3:c4:0b:ae:3b:4f: dd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:13:84:47:1A:97:46:CA:9D:82:FE:02:6E:CB:10:17:80:09:58:E8 X509v3 Authority Key Identifier: keyid:D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030303a3a2f34382d3438203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2900:8000::/48 Signature Algorithm: sha256WithRSAEncryption 6d:b1:d3:a8:84:dc:1b:03:e7:87:e6:7e:43:48:86:4b:b2:b8: ad:43:f5:4f:0b:93:6a:08:a5:d2:e7:37:93:59:5a:a9:56:82: bb:23:62:79:7a:fe:3b:b5:d8:75:68:f2:e5:98:c8:e0:90:6c: 46:57:0c:e5:ef:45:d2:ee:84:7d:42:0d:95:8d:a3:16:70:39: 1b:f1:a4:c3:e7:d0:77:87:5c:00:db:5e:2b:0c:57:20:b1:ed: be:e8:a2:bb:e6:9b:85:71:7c:b3:09:b1:94:5a:63:58:f1:ff: e1:c0:40:b3:80:3d:48:25:39:1c:6f:d1:7a:76:e6:5a:5b:a3: 94:46:66:a6:92:11:84:f3:45:d8:d4:73:cf:04:37:c2:e6:00: 3f:60:f1:09:c8:20:30:bc:3d:5d:33:90:ec:bf:42:d5:cf:24: cc:5d:12:52:1d:bb:61:4b:c2:4a:b9:4b:aa:16:6d:65:28:a1: b5:92:4b:a0:fb:dc:23:5e:7e:c2:14:cb:85:ba:7f:d1:df:d9: 65:0c:7f:87:ea:ae:04:d6:4f:3d:e7:6c:cf:e6:51:d8:a9:0a: 03:be:04:c8:29:86:9d:f1:74:2b:21:92:1b:9a:ef:db:af:7c: 72:00:d4:14:fb:6a:88:e0:da:6c:75:9e:1a:54:be:82:b0:59: 55:37:4c:37 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUfiDYbs6pwFrOMCyCWmxuJRwUpNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA5RUE5NUZGMTBDMDE2NkMyOTU0Qzk5N0E4QTQ5ODlC RDg5MEE4NzAeFw0yNjA1MDMwMjE0MDJaFw0yNzA1MDIwMjE5MDJaMDMxMTAvBgNV BAMTKEVCMTM4NDQ3MUE5NzQ2Q0E5RDgyRkUwMjZFQ0IxMDE3ODAwOTU4RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxz1T7kW0YZemHsGRuGwq3zozS 2ChcHInK6/h5c4EIsDUpH+c4KL5sA55iBznMPGclypFqPrnhmSZcxdKBu0dwC11K rstcSYNcD8ljexQejj3X7obHrwn0E14icaNDiCBtEngJXeU0HbDPEglbGsfeboxN z5BWwf5qNOBaszCeu0cewDy9HNCpspipKawK6pEoeYnfQTrDu8mUbw/WFGkmYIdQ KSzzmdjFz7WS3w7v4j0lV75rgzdtXOOMTJu4QtcFLfkrN9kyaHdUYHpNMHsrXMca RLUmAVvjiki6kQuPGI4Ot3e2lOMLkIytJKsv10MDKmWQxXfjscPEC647T90/AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU6xOERxqXRsqdgv4CbssQF4AJWOgwHwYDVR0j BBgwFoAU0J6pX/EMAWbClUyZeopJib2JCocwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAxNDMyY2MtM2JjOS00ODU4LWI1MDYtMjE4YWFiMGIwODljLzAvRDA5RUE5NUZG MTBDMDE2NkMyOTU0Qzk5N0E4QTQ5ODlCRDg5MEE4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMDlFQTk1RkYxMEMwMTY2QzI5NTRDOTk3QThBNDk4OUJEODkw QTg3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhMzgzMDMwMzAz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMzMzYzNzM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEp AIAAMA0GCSqGSIb3DQEBCwUAA4IBAQBtsdOohNwbA+eH5n5DSIZLsritQ/VPC5Nq CKXS5zeTWVqpVoK7I2J5ev47tdh1aPLlmMjgkGxGVwzl70XS7oR9Qg2VjaMWcDkb 8aTD59B3h1wA214rDFcgse2+6KK75puFcXyzCbGUWmNY8f/hwECzgD1IJTkcb9F6 duZaW6OURmamkhGE80XY1HPPBDfC5gA/YPEJyCAwvD1dM5Dsv0LVzyTMXRJSHbth S8JKuUuqFm1lKKG1kkug+9wjXn7CFMuFun/R39llDH+H6q4E1k8952zP5lHYqQoD vgTIKYad8XQrIZIbmu/br3xyANQU+2qI4NpsdZ4aVL6CsFlVN0w3 -----END CERTIFICATE-----Generated at Wed May 13 14:43:09 2026 by rpki-client