$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31313a3a2f34382d3438203d3e20313437313337.roa File: 323430303a343661303a31313a3a2f34382d3438203d3e20313437313337.roa (raw, json) Hash identifier: VEWKVQt8y/8GPWkN8tAdK8b4mgUdgFzyKGEQfkduN98= Subject key identifier: 6F:3C:DC:38:5F:BE:CA:00:00:AD:B9:87:A1:F9:EB:44:E3:87:53:AC Certificate issuer: /CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9 Certificate serial: 4B21876F171DF028000C4EF9401184D419A78436 Authority key identifier: C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31313a3a2f34382d3438203d3e20313437313337.roa Signing time: Sun 03 May 2026 02:26:32 +0000 ROA not before: Sun 03 May 2026 02:21:32 +0000 ROA not after: Sun 02 May 2027 02:26:32 +0000 asID: 147137 IP address blocks: 2400:46a0:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:21:87:6f:17:1d:f0:28:00:0c:4e:f9:40:11:84:d4:19:a7:84:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9 Validity Not Before: May 3 02:21:32 2026 GMT Not After : May 2 02:26:32 2027 GMT Subject: CN=6F3CDC385FBECA0000ADB987A1F9EB44E38753AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:46:04:7e:8b:93:ff:72:9f:e8:d0:c1:1c:28: d2:75:20:e8:75:10:e3:86:6e:71:6e:6b:59:93:f4: 31:1d:34:ef:a2:61:ad:cd:05:71:f9:ed:b5:2e:77: bf:71:24:30:6e:f7:fa:89:af:29:7e:0b:ec:44:86: 7d:4d:cd:a5:48:13:41:0d:2f:da:7e:02:c9:84:e4: d3:f1:ae:60:50:5c:32:4a:bd:16:1e:ed:3f:74:33: 1b:9d:70:64:22:f0:84:f8:76:82:f4:04:09:ed:47: f4:0f:16:8e:ea:49:d1:ec:c2:b2:e0:5a:24:ea:ed: f4:13:0e:a9:41:93:78:f0:70:93:03:5f:29:77:aa: ff:06:a8:42:01:61:2e:7e:9a:c1:fd:32:3e:92:94: 39:9b:69:25:0d:50:91:cb:23:8b:b2:38:6f:d1:8c: 02:c4:18:12:f9:91:89:4a:01:73:ec:3f:5c:cb:c1: 72:6b:02:cd:0f:e1:ef:a1:db:72:c4:e0:a5:e7:35: 60:ca:dc:38:bb:ca:4d:4f:1c:7e:04:15:42:81:70: f4:c5:10:c5:62:48:5a:5b:0b:07:0e:19:e3:11:74: 43:cd:b0:bb:7e:ee:49:e3:fb:12:b5:f0:85:5e:4b: 15:e1:91:07:1a:3c:bb:d2:a8:fc:94:4e:66:13:cc: 79:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:3C:DC:38:5F:BE:CA:00:00:AD:B9:87:A1:F9:EB:44:E3:87:53:AC X509v3 Authority Key Identifier: keyid:C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31313a3a2f34382d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0:11::/48 Signature Algorithm: sha256WithRSAEncryption 9c:36:6f:78:81:42:5c:27:db:1e:32:d1:97:c9:f8:f8:81:34: e0:c8:aa:3c:f8:fe:a8:0b:b1:73:c8:9f:64:22:06:d8:95:fc: 33:a9:7e:bf:9e:18:cc:bd:f5:6f:89:b3:30:e5:c4:63:47:4a: 0b:d5:37:a9:0c:4d:31:98:83:7e:fd:e6:e5:fa:a3:23:b8:2e: 70:21:7d:d3:ed:ac:0a:0f:60:5e:e4:27:1f:b5:24:15:59:19: bd:f7:03:f4:2a:90:47:42:87:d2:88:df:61:9d:d8:64:09:12: ac:08:a0:2e:0c:94:3f:b0:21:dd:ae:ab:41:de:2f:c4:d7:8f: 0b:68:0e:c7:eb:e4:0d:f8:ef:63:84:6e:b8:f3:f6:1e:e1:b7: d0:1e:4b:34:4f:f4:16:83:7b:b9:df:67:cd:d5:19:de:50:fa: 99:8d:e1:ae:f7:3b:f1:3b:8a:34:af:5b:7c:16:cb:b8:1a:60: df:53:35:6b:47:f6:a6:6f:fa:64:e8:cb:ea:a8:e5:fc:3a:82: b3:16:2b:7c:34:81:ff:df:d0:08:72:f1:18:2a:ca:67:d5:49: 5e:80:ee:69:54:4d:5d:44:d8:6c:75:3d:8b:de:72:3e:df:a0: b0:87:4e:84:d4:94:a8:e7:74:60:17:cf:ae:54:7c:fc:dd:3b: e6:ae:28:6c -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUSyGHbxcd8CgADE75QBGE1BmnhDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBENzAyOEMwRkE2MjgzNDhBRTIyNDVERDBDQzAyRDND NURDQjNGOTAeFw0yNjA1MDMwMjIxMzJaFw0yNzA1MDIwMjI2MzJaMDMxMTAvBgNV BAMTKDZGM0NEQzM4NUZCRUNBMDAwMEFEQjk4N0ExRjlFQjQ0RTM4NzUzQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClRgR+i5P/cp/o0MEcKNJ1IOh1 EOOGbnFua1mT9DEdNO+iYa3NBXH57bUud79xJDBu9/qJryl+C+xEhn1NzaVIE0EN L9p+AsmE5NPxrmBQXDJKvRYe7T90MxudcGQi8IT4doL0BAntR/QPFo7qSdHswrLg WiTq7fQTDqlBk3jwcJMDXyl3qv8GqEIBYS5+msH9Mj6SlDmbaSUNUJHLI4uyOG/R jALEGBL5kYlKAXPsP1zLwXJrAs0P4e+h23LE4KXnNWDK3Di7yk1PHH4EFUKBcPTF EMViSFpbCwcOGeMRdEPNsLt+7knj+xK18IVeSxXhkQcaPLvSqPyUTmYTzHnfAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUbzzcOF++ygAArbmHofnrROOHU6wwHwYDVR0j BBgwFoAUwNcCjA+mKDSK4iRd0MwC08Xcs/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E2NjVjMzItNmRhZi00NzJiLWJjZTYtMzE3ZDVkNmM3ODllLzAvQzBENzAyOEMw RkE2MjgzNDhBRTIyNDVERDBDQzAyRDNDNURDQjNGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMEQ3MDI4QzBGQTYyODM0OEFFMjI0NUREMENDMDJEM0M1RENC M0Y5LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzEzMTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzNzMxMzMzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQARqAA ETANBgkqhkiG9w0BAQsFAAOCAQEAnDZveIFCXCfbHjLRl8n4+IE04MiqPPj+qAux c8ifZCIG2JX8M6l+v54YzL31b4mzMOXEY0dKC9U3qQxNMZiDfv3m5fqjI7gucCF9 0+2sCg9gXuQnH7UkFVkZvfcD9CqQR0KH0ojfYZ3YZAkSrAigLgyUP7Ah3a6rQd4v xNePC2gOx+vkDfjvY4RuuPP2HuG30B5LNE/0FoN7ud9nzdUZ3lD6mY3hrvc78TuK NK9bfBbLuBpg31M1a0f2pm/6ZOjL6qjl/DqCsxYrfDSB/9/QCHLxGCrKZ9VJXoDu aVRNXUTYbHU9i95yPt+gsIdOhNSUqOd0YBfPrlR8/N075q4obA== -----END CERTIFICATE-----Generated at Wed May 13 11:21:41 2026 by rpki-client