$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31353a3a2f34382d3438203d3e20313437313337.roa File: 323430303a343661303a31353a3a2f34382d3438203d3e20313437313337.roa (raw, json) Hash identifier: 5IqA+aFlD3C+qm5E4iE8TertLT23UTTXA9Svn7QpuMk= Subject key identifier: E9:51:7A:F9:04:9E:D0:58:A5:C1:92:A9:26:5A:77:34:1E:2E:EB:29 Certificate issuer: /CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9 Certificate serial: 054EC2A71D9B3BE44F2310378E1B84199D7AE839 Authority key identifier: C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31353a3a2f34382d3438203d3e20313437313337.roa Signing time: Sun 03 May 2026 02:26:35 +0000 ROA not before: Sun 03 May 2026 02:21:35 +0000 ROA not after: Sun 02 May 2027 02:26:35 +0000 asID: 147137 IP address blocks: 2400:46a0:15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:4e:c2:a7:1d:9b:3b:e4:4f:23:10:37:8e:1b:84:19:9d:7a:e8:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9 Validity Not Before: May 3 02:21:35 2026 GMT Not After : May 2 02:26:35 2027 GMT Subject: CN=E9517AF9049ED058A5C192A9265A77341E2EEB29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:18:0d:c9:f9:3f:f1:a2:0f:f8:d9:31:b1:17: c3:2f:43:ea:9d:0b:4f:e8:66:8d:2f:82:56:30:48: 35:7d:a2:31:4d:18:12:2b:18:fa:97:5e:12:83:c0: 08:08:d1:5e:ba:e2:53:9a:ce:53:73:34:92:ff:54: 3a:4a:3e:fc:24:ef:2b:15:7d:a6:0e:f7:6e:1e:80: f2:b1:8d:da:b3:c4:9c:b2:9a:6c:fc:94:c1:46:a2: 3c:41:fc:5d:9e:12:23:be:1d:e4:2b:2a:38:e3:d3: 6f:fd:15:79:96:36:5a:21:d2:44:2d:44:95:71:59: 8f:8c:0d:a9:25:65:6e:1c:b8:7e:4a:b3:67:05:0a: 45:6b:04:af:7f:76:af:f2:3b:35:b8:31:62:f9:f4: 95:61:49:de:e3:b6:11:7b:ef:64:ac:9b:56:63:7c: 01:e7:46:0b:a0:ee:5f:e0:17:08:f2:28:fb:17:c9: 38:84:68:9f:b0:df:50:ef:87:fa:36:cb:b3:d1:fb: a7:ea:d0:eb:e7:13:32:b1:7c:17:93:0f:02:34:fa: 2c:b7:bf:a8:23:45:46:98:a1:4e:5f:da:e3:cc:34: 3a:4c:e1:56:16:03:99:bc:d4:0e:b7:3e:68:79:05: b0:4c:e8:80:a0:f8:1b:d5:e8:73:ff:6e:34:79:4c: c5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:51:7A:F9:04:9E:D0:58:A5:C1:92:A9:26:5A:77:34:1E:2E:EB:29 X509v3 Authority Key Identifier: keyid:C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31353a3a2f34382d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0:15::/48 Signature Algorithm: sha256WithRSAEncryption 3d:17:5f:51:30:17:3a:da:83:97:e3:5a:a3:cd:5b:20:e0:4c: c8:67:c1:0b:bf:b8:77:d8:5e:54:c7:8d:7b:9b:09:c0:5f:1e: 36:14:88:eb:64:c9:18:c6:5c:85:07:6f:05:a4:28:8c:4b:9e: 82:f3:89:0a:4e:fe:8b:1e:4b:44:12:09:18:f1:c7:68:3d:0c: 64:ae:60:6c:a0:df:c1:b2:de:15:59:87:8d:11:31:25:8e:26: c5:23:83:af:5c:6d:65:f7:dc:e5:74:b5:72:e1:11:ac:d1:f2: 9c:86:bf:28:e1:7e:a7:e0:c5:8e:9c:a3:c2:6b:55:6a:ae:91: 62:b3:6c:19:72:81:f6:68:fb:e9:8b:38:a2:37:14:c1:64:ae: 46:aa:19:d5:f8:2a:96:1d:7a:d3:63:c2:01:cc:d7:b7:32:12: fa:c4:a5:1d:ff:90:cb:d7:7b:69:f0:66:ba:95:bf:3a:a2:2c: 05:c3:b0:ca:2c:24:b8:22:55:00:cf:cb:e7:8c:b2:59:03:bd: b0:9f:78:0e:71:e2:2e:b0:fd:53:1e:4c:98:55:12:80:9b:d8: 6a:f8:55:cc:ea:7d:22:bf:da:4a:f9:ff:f2:2f:af:96:7f:3e: b9:74:e7:9b:c2:5f:18:d3:99:99:2f:85:da:99:55:6a:67:57: ec:1b:5b:e9 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUBU7Cpx2bO+RPIxA3jhuEGZ166DkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBENzAyOEMwRkE2MjgzNDhBRTIyNDVERDBDQzAyRDND NURDQjNGOTAeFw0yNjA1MDMwMjIxMzVaFw0yNzA1MDIwMjI2MzVaMDMxMTAvBgNV BAMTKEU5NTE3QUY5MDQ5RUQwNThBNUMxOTJBOTI2NUE3NzM0MUUyRUVCMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0GA3J+T/xog/42TGxF8MvQ+qd C0/oZo0vglYwSDV9ojFNGBIrGPqXXhKDwAgI0V664lOazlNzNJL/VDpKPvwk7ysV faYO924egPKxjdqzxJyymmz8lMFGojxB/F2eEiO+HeQrKjjj02/9FXmWNloh0kQt RJVxWY+MDaklZW4cuH5Ks2cFCkVrBK9/dq/yOzW4MWL59JVhSd7jthF772Ssm1Zj fAHnRgug7l/gFwjyKPsXyTiEaJ+w31Dvh/o2y7PR+6fq0OvnEzKxfBeTDwI0+iy3 v6gjRUaYoU5f2uPMNDpM4VYWA5m81A63Pmh5BbBM6ICg+BvV6HP/bjR5TMV1AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU6VF6+QSe0FilwZKpJlp3NB4u6ykwHwYDVR0j BBgwFoAUwNcCjA+mKDSK4iRd0MwC08Xcs/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E2NjVjMzItNmRhZi00NzJiLWJjZTYtMzE3ZDVkNmM3ODllLzAvQzBENzAyOEMw RkE2MjgzNDhBRTIyNDVERDBDQzAyRDNDNURDQjNGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMEQ3MDI4QzBGQTYyODM0OEFFMjI0NUREMENDMDJEM0M1RENC M0Y5LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzEzNTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzNzMxMzMzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQARqAA FTANBgkqhkiG9w0BAQsFAAOCAQEAPRdfUTAXOtqDl+Nao81bIOBMyGfBC7+4d9he VMeNe5sJwF8eNhSI62TJGMZchQdvBaQojEuegvOJCk7+ix5LRBIJGPHHaD0MZK5g bKDfwbLeFVmHjRExJY4mxSODr1xtZffc5XS1cuERrNHynIa/KOF+p+DFjpyjwmtV aq6RYrNsGXKB9mj76Ys4ojcUwWSuRqoZ1fgqlh1602PCAczXtzIS+sSlHf+Qy9d7 afBmupW/OqIsBcOwyiwkuCJVAM/L54yyWQO9sJ94DnHiLrD9Ux5MmFUSgJvYavhV zOp9Ir/aSvn/8i+vln8+uXTnm8JfGNOZmS+F2plVamdX7Btb6Q== -----END CERTIFICATE-----Generated at Wed May 13 10:54:29 2026 by rpki-client