$ rpki-client -vvf rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/323430303a386238303a3a2f33322d3332203d3e20313331373637.roa File: 323430303a386238303a3a2f33322d3332203d3e20313331373637.roa (raw, json) Hash identifier: a7s2l3O6pvc7GKZk3g5ud7YbwEz/lUPAccNQa0TiOHo= Subject key identifier: 08:AE:69:1D:1F:EB:F1:E9:1D:0F:1F:13:79:0F:02:E7:6C:23:35:01 Certificate issuer: /CN=781BE026701DAFA391758F44794F58BDFF3C7E68 Certificate serial: 4F111822C4A20D87F4F5E555B6B0FD21B2599E9E Authority key identifier: 78:1B:E0:26:70:1D:AF:A3:91:75:8F:44:79:4F:58:BD:FF:3C:7E:68 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/781BE026701DAFA391758F44794F58BDFF3C7E68.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/323430303a386238303a3a2f33322d3332203d3e20313331373637.roa Signing time: Sun 03 May 2026 02:20:22 +0000 ROA not before: Sun 03 May 2026 02:15:22 +0000 ROA not after: Sun 02 May 2027 02:20:22 +0000 asID: 131767 IP address blocks: 2400:8b80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.crl rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/781BE026701DAFA391758F44794F58BDFF3C7E68.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:11:18:22:c4:a2:0d:87:f4:f5:e5:55:b6:b0:fd:21:b2:59:9e:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=781BE026701DAFA391758F44794F58BDFF3C7E68 Validity Not Before: May 3 02:15:22 2026 GMT Not After : May 2 02:20:22 2027 GMT Subject: CN=08AE691D1FEBF1E91D0F1F13790F02E76C233501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:14:ff:65:71:37:3e:39:ba:11:89:e8:dd:12: 4a:b3:f5:27:fb:31:9a:7e:84:7f:65:f2:85:41:63: 5f:da:9f:1a:8a:05:60:74:7c:6b:f6:59:c4:bb:fa: cc:66:d8:ca:be:1a:80:f1:af:93:c5:1b:fd:a7:fb: 5a:cb:26:6d:e2:7c:f8:0f:42:32:0c:dd:f1:e0:6d: e9:61:f2:f8:0f:44:55:1b:6b:9c:cf:dd:95:08:a9: 22:b8:5d:ea:82:f5:5d:19:4c:31:66:61:bb:f3:61: a1:bb:23:ce:a8:c8:fb:b6:90:a6:fa:f3:0d:1b:86: 9e:39:a2:17:0a:e3:a1:3c:95:ff:01:76:71:75:19: 0e:ed:c0:8d:1e:aa:e5:97:63:87:fb:dc:f4:c5:00: 53:36:5e:8f:6f:8f:76:56:be:08:69:ee:23:a4:a5: 90:ec:a7:9a:7b:81:d7:c4:a5:57:ab:92:a0:32:95: a4:23:7d:e8:01:99:46:91:7a:c6:60:8b:a5:42:cb: b2:54:0f:f6:5d:6e:fb:4f:7b:39:fc:84:6e:d9:08: 11:91:df:47:af:84:93:7f:0b:33:77:e0:3f:10:4f: 90:e8:fc:8e:f3:06:a8:4e:8c:31:0a:a2:72:ed:64: b9:01:b3:22:81:a8:a9:c2:54:d3:fa:20:d4:74:f7: fb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AE:69:1D:1F:EB:F1:E9:1D:0F:1F:13:79:0F:02:E7:6C:23:35:01 X509v3 Authority Key Identifier: keyid:78:1B:E0:26:70:1D:AF:A3:91:75:8F:44:79:4F:58:BD:FF:3C:7E:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/781BE026701DAFA391758F44794F58BDFF3C7E68.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/323430303a386238303a3a2f33322d3332203d3e20313331373637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:8b80::/32 Signature Algorithm: sha256WithRSAEncryption 79:04:da:ee:39:3d:db:7f:78:59:e4:b1:44:9a:85:bd:ba:72: 9a:96:68:9b:0a:e2:ef:43:c5:ba:6c:83:8e:3d:8d:5f:00:7b: ac:aa:48:09:3b:3b:ac:40:c6:40:6c:81:fc:9e:aa:82:32:7e: 4f:37:af:d6:ca:fb:76:99:0c:a1:5d:cd:a1:06:a6:d2:bf:7d: c6:6e:45:04:01:db:6a:d1:b5:35:d3:06:69:d2:02:37:78:62: 4e:62:d3:db:ae:2e:14:83:77:89:93:cc:36:c1:71:4d:09:05: 16:75:49:38:91:60:03:c4:d3:61:83:c2:1f:52:ed:8a:b0:82: f0:6b:51:2f:24:e2:a4:bb:f1:3e:fd:39:5d:0d:b8:3f:22:19: bd:41:84:0c:48:60:61:72:bc:94:85:cb:d9:ba:d5:f4:3b:e8: f4:1d:eb:ec:37:c7:c7:79:c5:5f:c9:1c:64:6a:c2:6c:17:0b: 6f:7e:81:8d:2c:a0:1f:3f:3d:38:1b:c1:88:1d:fc:29:3c:2d: 86:55:5a:5f:13:ba:cd:2f:c3:8c:ee:1b:33:6d:1c:18:4d:85: a3:fd:aa:36:39:66:9d:6d:37:7c:a6:e0:90:7c:08:27:f2:a8: f8:6c:b4:46:30:93:5f:53:e7:6f:99:17:05:f9:2e:35:e4:2f: 2f:99:ca:2c -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUTxEYIsSiDYf09eVVtrD9IbJZnp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgxQkUwMjY3MDFEQUZBMzkxNzU4RjQ0Nzk0RjU4QkRG RjNDN0U2ODAeFw0yNjA1MDMwMjE1MjJaFw0yNzA1MDIwMjIwMjJaMDMxMTAvBgNV BAMTKDA4QUU2OTFEMUZFQkYxRTkxRDBGMUYxMzc5MEYwMkU3NkMyMzM1MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsFP9lcTc+OboRiejdEkqz9Sf7 MZp+hH9l8oVBY1/anxqKBWB0fGv2WcS7+sxm2Mq+GoDxr5PFG/2n+1rLJm3ifPgP QjIM3fHgbelh8vgPRFUba5zP3ZUIqSK4XeqC9V0ZTDFmYbvzYaG7I86oyPu2kKb6 8w0bhp45ohcK46E8lf8BdnF1GQ7twI0equWXY4f73PTFAFM2Xo9vj3ZWvghp7iOk pZDsp5p7gdfEpVerkqAylaQjfegBmUaResZgi6VCy7JUD/ZdbvtPezn8hG7ZCBGR 30evhJN/CzN34D8QT5Do/I7zBqhOjDEKonLtZLkBsyKBqKnCVNP6INR09/v7AgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUCK5pHR/r8ekdDx8TeQ8C52wjNQEwHwYDVR0j BBgwFoAUeBvgJnAdr6ORdY9EeU9Yvf88fmgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjRkMTA4ZjctMDhiMi00MDlmLThhNzAtYTljNjdhZTVlZDIyLzAvNzgxQkUwMjY3 MDFEQUZBMzkxNzU4RjQ0Nzk0RjU4QkRGRjNDN0U2OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83ODFCRTAyNjcwMURBRkEzOTE3NThGNDQ3OTRGNThCREZGM0M3 RTY4LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzI0ZDEwOGY3LTA4YjItNDA5Zi04 YTcwLWE5YzY3YWU1ZWQyMi8wLzMyMzQzMDMwM2EzODYyMzgzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzMTM3MzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQAi4AwDQYJKoZI hvcNAQELBQADggEBAHkE2u45Pdt/eFnksUSahb26cpqWaJsK4u9Dxbpsg449jV8A e6yqSAk7O6xAxkBsgfyeqoIyfk83r9bK+3aZDKFdzaEGptK/fcZuRQQB22rRtTXT BmnSAjd4Yk5i09uuLhSDd4mTzDbBcU0JBRZ1STiRYAPE02GDwh9S7YqwgvBrUS8k 4qS78T79OV0NuD8iGb1BhAxIYGFyvJSFy9m61fQ76PQd6+w3x8d5xV/JHGRqwmwX C29+gY0soB8/PTgbwYgd/Ck8LYZVWl8Tus0vw4zuGzNtHBhNhaP9qjY5Zp1tN3ym 4JB8CCfyqPhstEYwk19T52+ZFwX5LjXkLy+Zyiw= -----END CERTIFICATE-----Generated at Wed May 13 12:21:18 2026 by rpki-client