$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/323430333a333163303a3a2f33322d3332203d3e20313337333736.roa File: 323430333a333163303a3a2f33322d3332203d3e20313337333736.roa (raw, json) Hash identifier: 889d8hZgsoEONtwHkfZfmAhOTIvpzaLSt/rrvU4dZ6Y= Subject key identifier: 27:27:E2:6A:99:FE:BC:19:0B:F3:E2:33:BC:36:6E:A8:E4:41:56:65 Certificate issuer: /CN=4D73AF7813A396ABD7BDE23A979935F7C2E168E7 Certificate serial: 127E91C7A806AB3BACAAA9CF8EE28EE29AEF6BB4 Authority key identifier: 4D:73:AF:78:13:A3:96:AB:D7:BD:E2:3A:97:99:35:F7:C2:E1:68:E7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/323430333a333163303a3a2f33322d3332203d3e20313337333736.roa Signing time: Sun 03 May 2026 02:22:38 +0000 ROA not before: Sun 03 May 2026 02:17:38 +0000 ROA not after: Sun 02 May 2027 02:22:38 +0000 asID: 137376 IP address blocks: 2403:31c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.crl rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:24:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:7e:91:c7:a8:06:ab:3b:ac:aa:a9:cf:8e:e2:8e:e2:9a:ef:6b:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D73AF7813A396ABD7BDE23A979935F7C2E168E7 Validity Not Before: May 3 02:17:38 2026 GMT Not After : May 2 02:22:38 2027 GMT Subject: CN=2727E26A99FEBC190BF3E233BC366EA8E4415665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:10:d8:c3:17:db:47:cd:4f:85:91:69:b2:11: 74:49:76:00:be:06:58:d5:1b:60:f7:57:96:0d:62: d1:be:4b:9b:61:40:43:fb:b8:64:0c:b3:dd:25:99: 4f:bb:d9:13:12:5a:4f:1d:22:37:43:24:96:b8:b1: 3d:aa:16:9e:45:4f:31:bb:a0:fd:e4:02:e8:86:3d: 63:45:72:ab:59:d5:69:d4:2f:b4:7a:86:e9:3e:98: 46:ae:a6:6b:14:b4:94:09:dc:ac:df:dd:e5:8a:61: b1:f9:80:91:2d:62:d0:7e:ff:97:05:b4:60:03:f0: 01:d6:90:33:e2:03:31:a8:84:b0:6a:ec:75:37:ce: 39:ce:80:c1:d6:22:18:77:a9:9a:5c:ff:c8:49:69: eb:0c:43:60:98:88:11:4c:24:74:7e:74:7a:2d:d5: d0:4d:0a:e6:cf:51:7e:09:63:98:5b:6e:ce:f3:14: b3:56:7d:59:ec:82:1b:a9:32:ea:03:b0:9f:c5:e4: 30:4c:00:d4:71:c3:ff:4f:06:16:a5:15:2d:39:28: 1d:9f:63:f2:2e:2a:69:ca:c7:56:83:f2:9c:54:7c: e0:16:61:00:0d:46:e0:0c:dc:30:a6:0c:9c:c3:5d: 03:3f:ae:03:4c:e6:9b:5a:1e:a6:5c:e1:02:7c:de: 83:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:27:E2:6A:99:FE:BC:19:0B:F3:E2:33:BC:36:6E:A8:E4:41:56:65 X509v3 Authority Key Identifier: keyid:4D:73:AF:78:13:A3:96:AB:D7:BD:E2:3A:97:99:35:F7:C2:E1:68:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/323430333a333163303a3a2f33322d3332203d3e20313337333736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:31c0::/32 Signature Algorithm: sha256WithRSAEncryption 5e:51:ed:9d:f3:cb:6c:90:23:2a:04:e5:40:4b:1c:81:74:28: bb:14:bb:63:3c:2d:5b:6c:d7:c0:81:f5:e9:37:ab:b9:3e:9f: 80:96:ea:6c:10:91:45:98:9f:97:ef:42:f5:72:34:a5:d2:2a: f2:f1:dc:93:34:cc:13:5a:05:8e:29:f1:43:cf:6e:92:97:f1: 83:46:13:1b:8f:38:45:44:1d:e6:93:b2:dc:db:98:42:b3:e0: 4a:04:c8:2b:eb:25:9e:f9:da:7c:68:48:14:bd:f9:17:84:7c: 22:10:bb:8d:80:06:06:8a:6e:e0:29:30:d8:ea:4f:3d:29:d2: 05:e1:46:43:fe:9d:98:0c:96:79:51:fb:b2:8e:e7:f5:ba:f1: 73:f3:c6:c9:aa:cd:b5:7b:7f:a1:94:26:50:d4:d9:1a:ac:64: e2:ee:32:88:06:90:83:f2:f4:ef:d4:ff:03:4b:91:7c:87:80: b4:34:32:28:94:0a:44:2f:5e:1d:b0:1c:29:66:87:41:77:00: fb:77:11:bf:62:ca:9f:0c:32:3c:1e:1c:f5:29:40:e5:be:ca: bf:05:18:3d:23:1c:c0:a9:2a:04:8a:99:da:7d:39:9e:f8:0a: e3:cb:2d:89:14:49:37:3f:12:6e:d0:6e:f8:d9:e7:f7:93:eb: c8:69:ad:fa -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUEn6Rx6gGqzusqqnPjuKO4prva7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ3M0FGNzgxM0EzOTZBQkQ3QkRFMjNBOTc5OTM1RjdD MkUxNjhFNzAeFw0yNjA1MDMwMjE3MzhaFw0yNzA1MDIwMjIyMzhaMDMxMTAvBgNV BAMTKDI3MjdFMjZBOTlGRUJDMTkwQkYzRTIzM0JDMzY2RUE4RTQ0MTU2NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpENjDF9tHzU+FkWmyEXRJdgC+ BljVG2D3V5YNYtG+S5thQEP7uGQMs90lmU+72RMSWk8dIjdDJJa4sT2qFp5FTzG7 oP3kAuiGPWNFcqtZ1WnUL7R6huk+mEaupmsUtJQJ3Kzf3eWKYbH5gJEtYtB+/5cF tGAD8AHWkDPiAzGohLBq7HU3zjnOgMHWIhh3qZpc/8hJaesMQ2CYiBFMJHR+dHot 1dBNCubPUX4JY5hbbs7zFLNWfVnsghupMuoDsJ/F5DBMANRxw/9PBhalFS05KB2f Y/IuKmnKx1aD8pxUfOAWYQANRuAM3DCmDJzDXQM/rgNM5ptaHqZc4QJ83oM1AgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUJyfiapn+vBkL8+IzvDZuqORBVmUwHwYDVR0j BBgwFoAUTXOveBOjlqvXveI6l5k198LhaOcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQyYTViNTEtYmMwMC00ZDZiLTg3NjEtYzdkMGQzZjZkZTEyLzAvNEQ3M0FGNzgx M0EzOTZBQkQ3QkRFMjNBOTc5OTM1RjdDMkUxNjhFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDczQUY3ODEzQTM5NkFCRDdCREUyM0E5Nzk5MzVGN0MyRTE2 OEU3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJkMmE1YjUxLWJjMDAtNGQ2Yi04 NzYxLWM3ZDBkM2Y2ZGUxMi8wLzMyMzQzMDMzM2EzMzMxNjMzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzNzMzMzczNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQDMcAwDQYJKoZI hvcNAQELBQADggEBAF5R7Z3zy2yQIyoE5UBLHIF0KLsUu2M8LVts18CB9ek3q7k+ n4CW6mwQkUWYn5fvQvVyNKXSKvLx3JM0zBNaBY4p8UPPbpKX8YNGExuPOEVEHeaT stzbmEKz4EoEyCvrJZ752nxoSBS9+ReEfCIQu42ABgaKbuApMNjqTz0p0gXhRkP+ nZgMlnlR+7KO5/W68XPzxsmqzbV7f6GUJlDU2RqsZOLuMogGkIPy9O/U/wNLkXyH gLQ0MiiUCkQvXh2wHClmh0F3APt3Eb9iyp8MMjweHPUpQOW+yr8FGD0jHMCpKgSK mdp9OZ74CuPLLYkUSTc/Em7QbvjZ5/eT68hprfo= -----END CERTIFICATE-----Generated at Wed May 13 08:27:54 2026 by rpki-client