$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/323430343a366338303a3a2f33322d3438203d3e20313334363538.roa File: 323430343a366338303a3a2f33322d3438203d3e20313334363538.roa (raw, json) Hash identifier: vbWvmbfXyDXP8OYXwRYd8ewAC5pZZAMFd2A+j8XIRO0= Subject key identifier: 61:B4:96:69:F3:91:20:BE:D1:36:8E:BA:E2:41:3C:3F:C7:DE:AA:E0 Certificate issuer: /CN=297248FCECD7534E50147B8F048420E637A10C3B Certificate serial: 2E4557F1124C1A236CB14846EEBFCF7C373C4BD4 Authority key identifier: 29:72:48:FC:EC:D7:53:4E:50:14:7B:8F:04:84:20:E6:37:A1:0C:3B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/297248FCECD7534E50147B8F048420E637A10C3B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/323430343a366338303a3a2f33322d3438203d3e20313334363538.roa Signing time: Sun 03 May 2026 02:22:43 +0000 ROA not before: Sun 03 May 2026 02:17:43 +0000 ROA not after: Sun 02 May 2027 02:22:43 +0000 asID: 134658 IP address blocks: 2404:6c80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.crl rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/297248FCECD7534E50147B8F048420E637A10C3B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 13:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:45:57:f1:12:4c:1a:23:6c:b1:48:46:ee:bf:cf:7c:37:3c:4b:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297248FCECD7534E50147B8F048420E637A10C3B Validity Not Before: May 3 02:17:43 2026 GMT Not After : May 2 02:22:43 2027 GMT Subject: CN=61B49669F39120BED1368EBAE2413C3FC7DEAAE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a4:19:86:05:cf:95:95:46:d7:e0:65:10:e6: 80:27:e0:74:3c:fd:85:3c:50:c4:c2:d4:fa:fa:a9: b9:47:42:ee:60:08:5c:62:21:b6:0e:48:7c:02:1e: 7c:cf:75:db:8a:8a:6e:61:cf:aa:7c:77:89:48:ee: a9:89:f7:f9:bb:b7:82:b8:0a:1a:08:63:b1:1c:73: 27:94:7c:a8:00:5a:30:50:4b:a1:dd:8a:a0:e8:f9: 43:a0:ee:2b:8f:90:df:57:b0:77:34:63:51:ce:35: 0b:b8:7b:23:3c:d1:15:ce:6d:95:90:d0:0d:7f:08: 97:5a:2f:0e:ef:7a:a6:7a:f1:d8:c6:2b:14:a9:1e: d0:ff:44:3c:c0:37:db:0f:5b:45:29:03:b5:fb:c0: d1:3b:d9:ac:fc:d8:12:91:ae:93:05:6e:dc:c8:0e: e8:91:4e:27:59:d3:eb:0d:df:ac:b5:fc:77:f6:6d: ec:cf:87:73:12:24:f7:96:b7:f8:f0:5d:53:0f:09: 45:83:55:31:3a:f9:bb:65:4c:3a:db:39:26:69:83: 9b:db:39:ce:99:5c:2d:68:d7:7d:36:a1:2f:ac:0a: e8:93:d7:0d:91:8f:b6:3d:d7:19:57:14:e5:12:22: 2d:53:8a:0e:d2:1d:9f:22:c1:97:2a:c1:6d:33:15: ad:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B4:96:69:F3:91:20:BE:D1:36:8E:BA:E2:41:3C:3F:C7:DE:AA:E0 X509v3 Authority Key Identifier: keyid:29:72:48:FC:EC:D7:53:4E:50:14:7B:8F:04:84:20:E6:37:A1:0C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/297248FCECD7534E50147B8F048420E637A10C3B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/323430343a366338303a3a2f33322d3438203d3e20313334363538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:6c80::/32 Signature Algorithm: sha256WithRSAEncryption 56:02:88:fd:80:5e:5e:8e:d9:70:33:85:47:2b:19:31:3d:26: ba:fe:7d:8c:f3:8b:34:65:70:c2:35:b7:5e:1f:8a:b1:57:1c: 07:c2:93:cd:32:74:1b:d5:8f:75:77:dd:cb:92:50:69:2a:44: f9:56:27:52:58:f5:3d:b4:8c:fb:40:98:24:91:d3:dd:7a:27: e9:d2:6e:6a:03:d2:aa:76:c5:d4:db:72:fa:23:cc:c3:70:64: c3:37:ef:b2:5a:be:09:83:50:8a:e7:f4:b9:dc:36:d6:5f:ad: 4a:c4:87:00:00:2c:30:1e:ee:8d:5a:de:f8:c3:71:16:9e:4f: 7c:9f:46:77:b7:91:6e:5c:8b:08:23:46:f2:5a:03:c3:ae:a5: 13:6e:ad:d7:77:da:34:7e:0b:4f:86:1a:b2:a2:62:fb:84:9b: 04:77:d0:33:90:9d:29:c2:f5:a4:09:62:56:1e:17:7d:fc:18: fd:5d:ee:e2:d9:ec:c4:dc:1c:9f:27:94:66:ab:20:96:47:42: 3c:a2:a2:64:7d:9c:21:a9:3b:5c:7e:79:71:5c:13:a0:ad:1c: fd:db:4e:b0:1a:a4:1b:fe:e8:ff:1d:db:6a:53:61:83:8c:ed: 16:6f:0d:4f:df:ab:85:91:83:19:4e:0d:32:7c:69:8c:49:eb: 68:73:75:f4 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIULkVX8RJMGiNssUhG7r/PfDc8S9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3MjQ4RkNFQ0Q3NTM0RTUwMTQ3QjhGMDQ4NDIwRTYz N0ExMEMzQjAeFw0yNjA1MDMwMjE3NDNaFw0yNzA1MDIwMjIyNDNaMDMxMTAvBgNV BAMTKDYxQjQ5NjY5RjM5MTIwQkVEMTM2OEVCQUUyNDEzQzNGQzdERUFBRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDpBmGBc+VlUbX4GUQ5oAn4HQ8 /YU8UMTC1Pr6qblHQu5gCFxiIbYOSHwCHnzPdduKim5hz6p8d4lI7qmJ9/m7t4K4 ChoIY7EccyeUfKgAWjBQS6HdiqDo+UOg7iuPkN9XsHc0Y1HONQu4eyM80RXObZWQ 0A1/CJdaLw7veqZ68djGKxSpHtD/RDzAN9sPW0UpA7X7wNE72az82BKRrpMFbtzI DuiRTidZ0+sN36y1/Hf2bezPh3MSJPeWt/jwXVMPCUWDVTE6+btlTDrbOSZpg5vb Oc6ZXC1o1302oS+sCuiT1w2Rj7Y91xlXFOUSIi1Tig7SHZ8iwZcqwW0zFa0BAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUYbSWafORIL7RNo664kE8P8fequAwHwYDVR0j BBgwFoAUKXJI/OzXU05QFHuPBIQg5jehDDswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ0ODczNjAtODczNS00MWQ3LTk3YTgtZGJiMzRkNzllZmY0LzAvMjk3MjQ4RkNF Q0Q3NTM0RTUwMTQ3QjhGMDQ4NDIwRTYzN0ExMEMzQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOTcyNDhGQ0VDRDc1MzRFNTAxNDdCOEYwNDg0MjBFNjM3QTEw QzNCLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJkNDg3MzYwLTg3MzUtNDFkNy05 N2E4LWRiYjM0ZDc5ZWZmNC8wLzMyMzQzMDM0M2EzNjYzMzgzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzMzNDM2MzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQEbIAwDQYJKoZI hvcNAQELBQADggEBAFYCiP2AXl6O2XAzhUcrGTE9Jrr+fYzzizRlcMI1t14firFX HAfCk80ydBvVj3V33cuSUGkqRPlWJ1JY9T20jPtAmCSR0916J+nSbmoD0qp2xdTb cvojzMNwZMM377JavgmDUIrn9LncNtZfrUrEhwAALDAe7o1a3vjDcRaeT3yfRne3 kW5ciwgjRvJaA8OupRNurdd32jR+C0+GGrKiYvuEmwR30DOQnSnC9aQJYlYeF338 GP1d7uLZ7MTcHJ8nlGarIJZHQjyiomR9nCGpO1x+eXFcE6CtHP3bTrAapBv+6P8d 22pTYYOM7RZvDU/fq4WRgxlODTJ8aYxJ62hzdfQ= -----END CERTIFICATE-----Generated at Wed May 13 04:10:00 2026 by rpki-client