$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32303a3a2f34382d3438203d3e20313437313337.roa File: 323430303a343661303a32303a3a2f34382d3438203d3e20313437313337.roa (raw, json) Hash identifier: AzVrbmw1D35LXqWCeqtZ4xDM2Ov824Fl8I4Xi69Tl/A= Subject key identifier: 34:73:43:13:E0:8C:33:9B:0A:09:FE:30:3C:C2:9D:D1:96:30:B0:4E Certificate issuer: /CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9 Certificate serial: 05522BB1DBC5690BEA59C84924067052615EBCC0 Authority key identifier: C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32303a3a2f34382d3438203d3e20313437313337.roa Signing time: Sun 03 May 2026 02:26:33 +0000 ROA not before: Sun 03 May 2026 02:21:33 +0000 ROA not after: Sun 02 May 2027 02:26:33 +0000 asID: 147137 IP address blocks: 2400:46a0:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:52:2b:b1:db:c5:69:0b:ea:59:c8:49:24:06:70:52:61:5e:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9 Validity Not Before: May 3 02:21:33 2026 GMT Not After : May 2 02:26:33 2027 GMT Subject: CN=34734313E08C339B0A09FE303CC29DD19630B04E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:89:24:c3:c9:01:90:61:c0:b2:ee:19:30:c5: 04:91:b1:8a:80:9c:2b:b9:c4:e7:a8:37:da:cf:97: a5:6c:64:58:a7:d7:58:ff:fe:ae:e2:cc:5e:c9:df: c7:0d:ef:ee:45:aa:27:97:2d:2d:4b:55:7e:7c:7c: 96:d9:8d:57:30:6b:75:0a:2e:cc:cd:2c:cd:d0:90: 06:cb:1d:10:54:ce:d1:39:ba:cc:3a:b6:a8:c3:26: e1:7e:4a:0b:84:34:f6:fc:4c:1f:f1:f1:94:9c:d2: 59:15:f4:dd:d7:16:55:59:3b:5f:aa:5b:94:90:eb: 5c:38:b4:dc:d0:f0:14:05:64:45:68:0f:69:6d:46: 1e:8e:3b:44:41:b6:9d:41:35:1c:7d:71:6c:86:9b: 49:50:ae:c0:5e:9e:ef:73:7e:94:bb:6d:2d:d4:87: b1:b1:97:99:87:f1:c7:40:48:20:4d:a0:d4:90:81: 1a:f4:e7:75:09:74:8d:6e:51:c4:b0:ab:09:aa:f2: c1:89:35:28:36:ac:c3:f3:62:5d:72:ca:b1:b1:03: 4b:b5:c6:ef:a8:6a:18:1b:5a:2e:aa:52:79:25:8d: 98:2d:be:40:30:69:13:93:7a:77:06:33:06:8b:97: 77:42:f0:f6:c0:e6:d9:5e:ef:d7:57:67:63:1c:9c: 46:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:73:43:13:E0:8C:33:9B:0A:09:FE:30:3C:C2:9D:D1:96:30:B0:4E X509v3 Authority Key Identifier: keyid:C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32303a3a2f34382d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0:20::/48 Signature Algorithm: sha256WithRSAEncryption 68:fb:f3:75:b2:33:bd:66:11:d3:72:29:f4:64:bc:d7:2c:f4: ad:cf:07:2a:2e:61:57:08:7d:7c:99:4f:e6:a6:ca:88:1c:43: ab:f9:27:b2:b5:9b:9f:a2:d7:de:76:c8:c3:8b:a8:34:95:a0: 51:9a:f2:69:55:29:e6:57:ad:6f:b0:a1:99:ab:1f:84:28:10: 68:cf:34:fa:c5:6c:b5:0c:20:e8:d3:11:e5:bb:41:9d:c4:7e: b0:29:2b:57:f0:15:9d:32:fd:f3:9e:95:59:0d:c1:30:6e:de: 87:55:c5:46:0a:73:12:30:2c:99:93:ee:10:c2:56:eb:ba:28: 56:6b:84:06:50:cc:9d:a3:6a:65:e7:28:48:d9:0a:8d:9f:50: ba:3a:21:7c:d8:db:1f:c0:29:a3:db:3b:7f:36:70:b3:c1:af: af:86:08:e3:b1:34:b0:d7:06:b3:a9:3f:99:2f:e5:b0:a5:dd: 00:59:21:2c:64:02:55:fe:38:3f:e6:39:5f:0a:2f:df:92:54: ba:79:d4:c2:00:50:28:c5:19:21:0d:f5:a8:6b:11:0d:5c:2b: 5e:42:f7:a1:7f:4c:5e:67:14:b3:bf:c4:cd:0f:5c:9a:8e:8a: 3a:bd:d1:15:72:c4:84:d7:26:93:e3:ad:47:b9:ff:33:16:20: 74:c2:84:1f -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUBVIrsdvFaQvqWchJJAZwUmFevMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBENzAyOEMwRkE2MjgzNDhBRTIyNDVERDBDQzAyRDND NURDQjNGOTAeFw0yNjA1MDMwMjIxMzNaFw0yNzA1MDIwMjI2MzNaMDMxMTAvBgNV BAMTKDM0NzM0MzEzRTA4QzMzOUIwQTA5RkUzMDNDQzI5REQxOTYzMEIwNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpiSTDyQGQYcCy7hkwxQSRsYqA nCu5xOeoN9rPl6VsZFin11j//q7izF7J38cN7+5FqieXLS1LVX58fJbZjVcwa3UK LszNLM3QkAbLHRBUztE5usw6tqjDJuF+SguENPb8TB/x8ZSc0lkV9N3XFlVZO1+q W5SQ61w4tNzQ8BQFZEVoD2ltRh6OO0RBtp1BNRx9cWyGm0lQrsBenu9zfpS7bS3U h7Gxl5mH8cdASCBNoNSQgRr053UJdI1uUcSwqwmq8sGJNSg2rMPzYl1yyrGxA0u1 xu+oahgbWi6qUnkljZgtvkAwaROTencGMwaLl3dC8PbA5tle79dXZ2McnEZLAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUNHNDE+CMM5sKCf4wPMKd0ZYwsE4wHwYDVR0j BBgwFoAUwNcCjA+mKDSK4iRd0MwC08Xcs/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E2NjVjMzItNmRhZi00NzJiLWJjZTYtMzE3ZDVkNmM3ODllLzAvQzBENzAyOEMw RkE2MjgzNDhBRTIyNDVERDBDQzAyRDNDNURDQjNGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMEQ3MDI4QzBGQTYyODM0OEFFMjI0NUREMENDMDJEM0M1RENC M0Y5LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzIzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzNzMxMzMzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQARqAA IDANBgkqhkiG9w0BAQsFAAOCAQEAaPvzdbIzvWYR03Ip9GS81yz0rc8HKi5hVwh9 fJlP5qbKiBxDq/knsrWbn6LX3nbIw4uoNJWgUZryaVUp5letb7ChmasfhCgQaM80 +sVstQwg6NMR5btBncR+sCkrV/AVnTL9856VWQ3BMG7eh1XFRgpzEjAsmZPuEMJW 67ooVmuEBlDMnaNqZecoSNkKjZ9QujohfNjbH8Apo9s7fzZws8Gvr4YI47E0sNcG s6k/mS/lsKXdAFkhLGQCVf44P+Y5Xwov35JUunnUwgBQKMUZIQ31qGsRDVwrXkL3 oX9MXmcUs7/EzQ9cmo6KOr3RFXLEhNcmk+OtR7n/MxYgdMKEHw== -----END CERTIFICATE-----Generated at Wed May 13 11:59:02 2026 by rpki-client