$ rpki-client -vvf rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3a2f33322d3332203d3e203233363739.roa File: 323430313a323930303a3a2f33322d3332203d3e203233363739.roa (raw, json) Hash identifier: umQuSajLjHNrRb7P/ar5HERp0a9oX9sKo9cNca6ptuo= Subject key identifier: 52:BD:9A:A2:56:F8:F1:AD:9D:95:00:B9:18:B9:94:65:B3:C9:29:63 Certificate issuer: /CN=D09EA95FF10C0166C2954C997A8A4989BD890A87 Certificate serial: 7378A190F9908A8A882E5736407D422670735D4C Authority key identifier: D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3a2f33322d3332203d3e203233363739.roa Signing time: Sun 03 May 2026 02:18:50 +0000 ROA not before: Sun 03 May 2026 02:13:50 +0000 ROA not after: Sun 02 May 2027 02:18:50 +0000 asID: 23679 IP address blocks: 2401:2900::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:78:a1:90:f9:90:8a:8a:88:2e:57:36:40:7d:42:26:70:73:5d:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D09EA95FF10C0166C2954C997A8A4989BD890A87 Validity Not Before: May 3 02:13:50 2026 GMT Not After : May 2 02:18:50 2027 GMT Subject: CN=52BD9AA256F8F1AD9D9500B918B99465B3C92963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4f:45:76:65:e0:00:8b:e7:05:e7:6a:e1:ce: e5:8c:d8:68:2b:b6:69:75:9b:9a:f0:f8:dd:5a:08: a5:40:2b:c4:58:81:a9:12:b4:3b:44:c0:4b:81:e8: f4:00:8d:a9:00:62:0f:30:3d:ec:d5:66:8c:e6:33: 22:3e:b5:79:2d:57:2d:4a:51:98:57:bd:ea:f8:a5: 0e:92:ea:85:45:27:99:b6:d2:f6:38:54:23:59:37: bd:38:02:af:bf:90:8c:2d:4e:33:e3:d1:8a:6c:26: 97:6e:a1:d2:28:d1:c8:bd:8e:12:24:b8:48:31:59: 9b:6b:0c:3c:fe:8e:52:ae:1c:3a:44:9b:34:a9:9b: 6e:56:45:66:76:39:fb:0d:96:c0:63:0e:81:78:f3: b5:47:1d:a5:78:62:f1:79:8d:24:23:fd:c7:ff:ed: ba:25:ed:4e:8b:3d:55:19:af:96:b4:be:53:9c:b6: 75:de:12:91:86:28:5d:45:09:36:d6:cc:6b:1a:f1: 8b:58:ae:6b:ea:d5:95:8f:20:bd:5d:a1:a3:e6:a5: e0:a1:7d:90:59:6d:88:93:27:0f:aa:7c:b3:3e:4a: 65:cd:b8:5a:11:49:90:7f:fb:83:99:94:bf:2a:e5: 50:ec:4d:e3:c9:3a:db:c4:77:10:1e:24:8d:9e:00: 20:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BD:9A:A2:56:F8:F1:AD:9D:95:00:B9:18:B9:94:65:B3:C9:29:63 X509v3 Authority Key Identifier: keyid:D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3a2f33322d3332203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2900::/32 Signature Algorithm: sha256WithRSAEncryption 1d:89:ec:41:13:68:c4:d0:4a:83:89:e9:44:b5:48:3f:d2:8f: f0:81:3b:a1:05:a6:3a:c1:88:a0:25:08:0a:73:3c:3f:95:3e: 3d:ae:9b:93:14:b4:00:36:28:50:24:f6:7a:e8:c8:47:1b:6e: e6:6e:ef:47:f9:88:9d:23:bc:a8:c0:77:e7:33:06:25:4c:ac: 7a:8e:59:32:d2:f9:2b:a1:50:a8:3e:3a:fb:09:73:a0:f5:ac: 50:27:fe:cc:78:96:a5:dd:93:50:12:fd:7e:5b:62:93:de:c4: 71:bc:1e:5a:37:33:1e:6f:12:f6:dd:dd:cc:4f:cd:f8:4b:c7: 81:a1:43:35:ac:a5:00:0a:48:04:69:ea:48:f0:ca:3d:f3:de: a8:66:86:b7:b6:e1:06:8d:c2:30:d4:e6:60:13:d4:4c:6a:e4: e1:fd:63:fa:5a:35:1d:1f:00:1c:3e:91:41:f9:bd:93:82:8c: 50:7d:6e:27:af:42:f1:26:9a:40:9a:6d:5d:8a:e3:e3:ba:9c: 13:1a:8c:92:ff:04:b3:0a:d4:b2:f9:1f:d1:97:bc:de:d2:a8: 49:d8:37:fb:2e:fa:d3:de:c1:25:ce:bd:08:77:25:dd:34:a9: 34:20:da:a6:6d:39:31:a0:db:40:1c:22:e9:41:63:ec:7f:a0: 71:0d:c2:e8 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUc3ihkPmQioqILlc2QH1CJnBzXUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA5RUE5NUZGMTBDMDE2NkMyOTU0Qzk5N0E4QTQ5ODlC RDg5MEE4NzAeFw0yNjA1MDMwMjEzNTBaFw0yNzA1MDIwMjE4NTBaMDMxMTAvBgNV BAMTKDUyQkQ5QUEyNTZGOEYxQUQ5RDk1MDBCOTE4Qjk5NDY1QjNDOTI5NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/T0V2ZeAAi+cF52rhzuWM2Ggr tml1m5rw+N1aCKVAK8RYgakStDtEwEuB6PQAjakAYg8wPezVZozmMyI+tXktVy1K UZhXver4pQ6S6oVFJ5m20vY4VCNZN704Aq+/kIwtTjPj0YpsJpduodIo0ci9jhIk uEgxWZtrDDz+jlKuHDpEmzSpm25WRWZ2OfsNlsBjDoF487VHHaV4YvF5jSQj/cf/ 7bol7U6LPVUZr5a0vlOctnXeEpGGKF1FCTbWzGsa8YtYrmvq1ZWPIL1doaPmpeCh fZBZbYiTJw+qfLM+SmXNuFoRSZB/+4OZlL8q5VDsTePJOtvEdxAeJI2eACAVAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUUr2aolb48a2dlQC5GLmUZbPJKWMwHwYDVR0j BBgwFoAU0J6pX/EMAWbClUyZeopJib2JCocwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAxNDMyY2MtM2JjOS00ODU4LWI1MDYtMjE4YWFiMGIwODljLzAvRDA5RUE5NUZG MTBDMDE2NkMyOTU0Qzk5N0E4QTQ5ODlCRDg5MEE4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMDlFQTk1RkYxMEMwMTY2QzI5NTRDOTk3QThBNDk4OUJEODkw QTg3LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMyMzMzNjM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkASkAMA0GCSqGSIb3 DQEBCwUAA4IBAQAdiexBE2jE0EqDielEtUg/0o/wgTuhBaY6wYigJQgKczw/lT49 rpuTFLQANihQJPZ66MhHG27mbu9H+YidI7yowHfnMwYlTKx6jlky0vkroVCoPjr7 CXOg9axQJ/7MeJal3ZNQEv1+W2KT3sRxvB5aNzMebxL23d3MT834S8eBoUM1rKUA CkgEaepI8Mo9896oZoa3tuEGjcIw1OZgE9RMauTh/WP6WjUdHwAcPpFB+b2TgoxQ fW4nr0LxJppAmm1diuPjupwTGoyS/wSzCtSy+R/Rl7ze0qhJ2Df7LvrT3sElzr0I dyXdNKk0INqmbTkxoNtAHCLpQWPsf6BxDcLo -----END CERTIFICATE-----Generated at Wed May 13 12:28:20 2026 by rpki-client