$ rpki-client -vvf rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/323430373a373263303a3a2f33322d3438203d3e203538383230.roa File: 323430373a373263303a3a2f33322d3438203d3e203538383230.roa (raw, json) Hash identifier: FEgS5ex34lgarvKtqbdAVQc0toy/dLHosJymf/4jCzU= Subject key identifier: DA:E6:53:6A:F6:CD:48:D1:93:F6:54:A3:CE:95:F8:26:FB:46:8C:D8 Certificate issuer: /CN=C8C1A31E42E799E9EDC0FAB813163052945845AC Certificate serial: 0FA6475AA59F78E6A21BF1416BA035F6B7CA5404 Authority key identifier: C8:C1:A3:1E:42:E7:99:E9:ED:C0:FA:B8:13:16:30:52:94:58:45:AC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8C1A31E42E799E9EDC0FAB813163052945845AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/323430373a373263303a3a2f33322d3438203d3e203538383230.roa Signing time: Sun 03 May 2026 02:26:06 +0000 ROA not before: Sun 03 May 2026 02:21:06 +0000 ROA not after: Sun 02 May 2027 02:26:06 +0000 asID: 58820 IP address blocks: 2407:72c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.crl rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8C1A31E42E799E9EDC0FAB813163052945845AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:38:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:a6:47:5a:a5:9f:78:e6:a2:1b:f1:41:6b:a0:35:f6:b7:ca:54:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8C1A31E42E799E9EDC0FAB813163052945845AC Validity Not Before: May 3 02:21:06 2026 GMT Not After : May 2 02:26:06 2027 GMT Subject: CN=DAE6536AF6CD48D193F654A3CE95F826FB468CD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fd:7c:bc:26:7c:e7:b2:9e:b2:c9:8e:70:d2: a7:c9:d8:60:96:b1:19:e2:c2:b5:c8:f4:56:e8:25: 15:36:06:db:a2:db:4b:0f:cb:94:a2:cc:1d:66:74: 4e:7f:d3:a0:dd:9c:d7:f3:65:9c:8b:8b:6f:fe:fc: b6:6c:7f:46:0f:a0:fe:ad:b9:62:9e:f6:59:e0:86: 2c:ca:eb:21:f3:c0:5f:5d:50:c5:5f:e0:bd:cc:74: e6:b3:33:25:bc:73:01:49:05:fe:2c:17:c2:9d:65: e2:f2:f8:85:5b:9e:81:0e:cd:09:82:13:37:40:1f: ce:21:43:68:4d:b4:f6:b3:94:80:43:3c:5e:ed:74: 2e:71:a8:f3:08:31:35:40:fa:78:fc:fa:14:de:7a: 0c:26:47:f7:f7:8e:ba:a2:22:ed:03:ee:90:97:23: 2b:bd:3b:e4:c9:47:bd:c8:21:43:3a:67:7a:77:65: c0:5c:0e:30:b4:9b:b2:68:ed:b8:f6:28:a1:29:5c: 89:54:81:9c:01:92:8c:36:a0:37:68:aa:8b:85:bf: df:11:f1:ae:af:d4:19:46:29:04:7f:cf:bb:9c:67: 02:72:e7:9e:cd:d8:a5:d5:ad:47:66:8f:b1:b5:34: 8d:3f:4d:3c:5f:af:be:68:a0:b1:d4:1b:31:a5:57: 2f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E6:53:6A:F6:CD:48:D1:93:F6:54:A3:CE:95:F8:26:FB:46:8C:D8 X509v3 Authority Key Identifier: keyid:C8:C1:A3:1E:42:E7:99:E9:ED:C0:FA:B8:13:16:30:52:94:58:45:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8C1A31E42E799E9EDC0FAB813163052945845AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/323430373a373263303a3a2f33322d3438203d3e203538383230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:72c0::/32 Signature Algorithm: sha256WithRSAEncryption 28:be:99:d2:b8:a2:3d:48:1b:dd:00:7d:c0:98:e2:72:ef:9f: b3:cc:96:6c:57:fe:64:1c:a1:3f:c1:96:a9:70:e9:72:30:77: e6:c5:f1:bf:93:4a:62:cc:23:37:d7:4a:8d:99:b6:dc:af:ff: bb:7c:43:b6:78:0a:31:d5:96:c0:19:ae:b0:b2:a1:55:2c:6a: c5:61:d7:bc:7d:03:1f:81:b0:5f:53:14:f4:15:33:3a:21:0b: 05:ca:76:7c:85:c1:90:43:eb:e9:94:fb:6e:12:1c:cb:0a:c4: 49:b0:95:1b:6d:a8:fa:2b:45:fc:97:e7:02:9e:55:a8:a8:15: a7:4d:b6:45:a0:45:c9:7c:3c:ba:db:0b:8f:d8:1d:04:b4:ac: 19:f6:1f:cf:e3:51:56:35:fb:71:72:ba:8c:00:2c:b2:4b:3b: 35:4a:fb:65:49:a8:8f:69:b8:d6:cf:1b:ad:41:6f:da:11:52: 74:72:77:8e:9d:6b:4a:90:c4:e4:d3:cc:17:80:53:0e:68:fb: c6:89:96:c8:46:63:4e:89:4a:2c:79:5a:4f:58:67:e2:59:70: 7e:ec:61:63:60:53:df:9e:b4:2c:11:3c:c0:1e:39:4d:37:ea: 85:df:6d:d8:8a:c3:54:d5:df:fd:7a:89:39:74:2f:42:53:e0: d3:a6:68:37 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUD6ZHWqWfeOaiG/FBa6A19rfKVAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhDMUEzMUU0MkU3OTlFOUVEQzBGQUI4MTMxNjMwNTI5 NDU4NDVBQzAeFw0yNjA1MDMwMjIxMDZaFw0yNzA1MDIwMjI2MDZaMDMxMTAvBgNV BAMTKERBRTY1MzZBRjZDRDQ4RDE5M0Y2NTRBM0NFOTVGODI2RkI0NjhDRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO/Xy8Jnznsp6yyY5w0qfJ2GCW sRniwrXI9FboJRU2Btui20sPy5SizB1mdE5/06DdnNfzZZyLi2/+/LZsf0YPoP6t uWKe9lnghizK6yHzwF9dUMVf4L3MdOazMyW8cwFJBf4sF8KdZeLy+IVbnoEOzQmC EzdAH84hQ2hNtPazlIBDPF7tdC5xqPMIMTVA+nj8+hTeegwmR/f3jrqiIu0D7pCX Iyu9O+TJR73IIUM6Z3p3ZcBcDjC0m7Jo7bj2KKEpXIlUgZwBkow2oDdoqouFv98R 8a6v1BlGKQR/z7ucZwJy557N2KXVrUdmj7G1NI0/TTxfr75ooLHUGzGlVy+1AgMB AAGjggIxMIICLTAdBgNVHQ4EFgQU2uZTavbNSNGT9lSjzpX4JvtGjNgwHwYDVR0j BBgwFoAUyMGjHkLnmentwPq4ExYwUpRYRawwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzhjOWMyNTItZjdjYS00ZGQ1LTg4ZjYtMjJhZGRjODkzNGIzLzAvQzhDMUEzMUU0 MkU3OTlFOUVEQzBGQUI4MTMxNjMwNTI5NDU4NDVBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEMxQTMxRTQyRTc5OUU5RURDMEZBQjgxMzE2MzA1Mjk0NTg0 NUFDLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzM4YzljMjUyLWY3Y2EtNGRkNS04 OGY2LTIyYWRkYzg5MzRiMy8wLzMyMzQzMDM3M2EzNzMyNjMzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDM1MzgzODMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB3LAMA0GCSqGSIb3 DQEBCwUAA4IBAQAovpnSuKI9SBvdAH3AmOJy75+zzJZsV/5kHKE/wZapcOlyMHfm xfG/k0pizCM310qNmbbcr/+7fEO2eAox1ZbAGa6wsqFVLGrFYde8fQMfgbBfUxT0 FTM6IQsFynZ8hcGQQ+vplPtuEhzLCsRJsJUbbaj6K0X8l+cCnlWoqBWnTbZFoEXJ fDy62wuP2B0EtKwZ9h/P41FWNftxcrqMACyySzs1SvtlSaiPabjWzxutQW/aEVJ0 cneOnWtKkMTk08wXgFMOaPvGiZbIRmNOiUoseVpPWGfiWXB+7GFjYFPfnrQsETzA HjlNN+qF323YisNU1d/9eok5dC9CU+DTpmg3 -----END CERTIFICATE-----Generated at Wed May 13 13:41:15 2026 by rpki-client