$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32373a3a2f34382d3438203d3e20313437313337.roa File: 323430303a343661303a32373a3a2f34382d3438203d3e20313437313337.roa (raw, json) Hash identifier: QdXCuvjo6r6bGTPWedrJUM8DCfGtVmTE0qQwjHkmDQ4= Subject key identifier: 58:6B:1C:C7:CA:78:15:76:D8:35:2E:B6:8D:18:A6:FD:43:E9:9B:49 Certificate issuer: /CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9 Certificate serial: 4496D06A8FB922E20B62D0B95EAB3500D585C0F4 Authority key identifier: C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32373a3a2f34382d3438203d3e20313437313337.roa Signing time: Sun 03 May 2026 02:26:31 +0000 ROA not before: Sun 03 May 2026 02:21:31 +0000 ROA not after: Sun 02 May 2027 02:26:31 +0000 asID: 147137 IP address blocks: 2400:46a0:27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:96:d0:6a:8f:b9:22:e2:0b:62:d0:b9:5e:ab:35:00:d5:85:c0:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9 Validity Not Before: May 3 02:21:31 2026 GMT Not After : May 2 02:26:31 2027 GMT Subject: CN=586B1CC7CA781576D8352EB68D18A6FD43E99B49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:74:97:09:2f:b8:12:80:1f:71:f1:0a:d4:49: b1:e8:6d:05:e7:74:19:95:09:54:47:e8:49:d9:05: 54:30:08:f7:43:ba:e5:06:a5:04:60:d5:e8:b0:f8: 92:80:c0:62:71:b7:12:81:1c:8e:19:2b:97:f5:f5: 90:df:de:9c:0f:b9:05:6d:8a:d3:19:81:6d:a1:ce: 5a:d7:ca:e5:a8:1e:17:95:52:44:c5:91:7e:f3:9a: 92:ba:8e:12:28:fb:fb:51:70:a6:00:c7:f6:ca:b4: eb:3a:eb:95:b9:bf:34:0f:4f:0d:61:3b:3e:38:08: 48:4b:f8:b3:98:92:f4:0c:24:3d:95:d6:4e:fb:ed: dc:df:ae:4d:27:b5:94:fe:6a:5a:9a:66:55:49:44: 70:0b:f0:50:80:25:18:7d:ac:46:44:94:da:fe:19: 60:ec:1d:2b:74:17:79:12:f6:f9:58:54:0d:67:98: e1:fb:04:17:15:0f:c3:80:eb:3f:c7:ab:be:f4:2c: 4d:e7:7f:2d:6f:da:88:a6:e1:bb:8d:85:17:e1:2b: 9e:00:ae:82:40:ae:02:cc:8e:9b:ae:01:82:98:59: 5d:25:00:e2:4b:12:00:82:64:9e:55:bf:e9:fe:67: 21:47:93:13:d4:78:4a:b5:b2:a7:a4:6c:50:09:81: e3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6B:1C:C7:CA:78:15:76:D8:35:2E:B6:8D:18:A6:FD:43:E9:9B:49 X509v3 Authority Key Identifier: keyid:C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32373a3a2f34382d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0:27::/48 Signature Algorithm: sha256WithRSAEncryption 8f:70:b5:48:ab:bd:e2:b9:bd:2d:63:57:64:23:77:7b:8a:e0: 59:72:19:15:09:4a:d0:4d:4c:f6:93:2b:64:76:1b:c7:de:c8: 5b:58:07:18:fc:2d:36:d5:27:2e:78:75:4e:f5:50:3c:c3:10: 63:19:fb:b3:46:40:5c:95:0b:ac:17:c8:a3:1c:db:17:d4:4a: b0:8a:ad:62:7b:1c:a9:c4:b1:b4:49:10:4d:f7:d6:0e:e8:42: a7:0a:9f:ad:c7:16:bb:31:54:d5:b5:8e:0b:74:71:cb:80:60: f1:7c:e4:2b:07:41:cb:63:d3:80:89:72:c5:4d:1e:12:57:56: 50:fb:9a:09:9e:bb:ba:ef:2f:34:99:eb:dc:07:4a:58:d3:99: 70:37:59:4f:ad:6d:7b:67:79:eb:19:c2:02:1a:48:93:eb:79: 51:f2:da:07:ca:77:4e:80:4e:12:28:f8:90:33:9a:2d:a0:fc: cf:c2:64:e0:37:3c:0e:d4:83:b0:bb:f3:b0:d3:94:e7:5e:e8: 0f:d9:d9:c5:28:cf:81:0f:31:fe:94:fc:38:f3:71:97:88:a3: bf:26:77:d1:42:c0:e0:64:4b:39:3e:4a:f1:60:19:b8:ce:66: d9:56:43:c1:1c:d3:5a:c2:27:a4:e1:3f:fd:35:e8:55:82:e1: 98:40:1a:9e -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIURJbQao+5IuILYtC5Xqs1ANWFwPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBENzAyOEMwRkE2MjgzNDhBRTIyNDVERDBDQzAyRDND NURDQjNGOTAeFw0yNjA1MDMwMjIxMzFaFw0yNzA1MDIwMjI2MzFaMDMxMTAvBgNV BAMTKDU4NkIxQ0M3Q0E3ODE1NzZEODM1MkVCNjhEMThBNkZENDNFOTlCNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVdJcJL7gSgB9x8QrUSbHobQXn dBmVCVRH6EnZBVQwCPdDuuUGpQRg1eiw+JKAwGJxtxKBHI4ZK5f19ZDf3pwPuQVt itMZgW2hzlrXyuWoHheVUkTFkX7zmpK6jhIo+/tRcKYAx/bKtOs665W5vzQPTw1h Oz44CEhL+LOYkvQMJD2V1k777dzfrk0ntZT+alqaZlVJRHAL8FCAJRh9rEZElNr+ GWDsHSt0F3kS9vlYVA1nmOH7BBcVD8OA6z/Hq770LE3nfy1v2oim4buNhRfhK54A roJArgLMjpuuAYKYWV0lAOJLEgCCZJ5Vv+n+ZyFHkxPUeEq1sqekbFAJgePbAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUWGscx8p4FXbYNS62jRim/UPpm0kwHwYDVR0j BBgwFoAUwNcCjA+mKDSK4iRd0MwC08Xcs/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E2NjVjMzItNmRhZi00NzJiLWJjZTYtMzE3ZDVkNmM3ODllLzAvQzBENzAyOEMw RkE2MjgzNDhBRTIyNDVERDBDQzAyRDNDNURDQjNGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMEQ3MDI4QzBGQTYyODM0OEFFMjI0NUREMENDMDJEM0M1RENC M0Y5LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzIzNzNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzNzMxMzMzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQARqAA JzANBgkqhkiG9w0BAQsFAAOCAQEAj3C1SKu94rm9LWNXZCN3e4rgWXIZFQlK0E1M 9pMrZHYbx97IW1gHGPwtNtUnLnh1TvVQPMMQYxn7s0ZAXJULrBfIoxzbF9RKsIqt YnscqcSxtEkQTffWDuhCpwqfrccWuzFU1bWOC3Rxy4Bg8XzkKwdBy2PTgIlyxU0e EldWUPuaCZ67uu8vNJnr3AdKWNOZcDdZT61te2d56xnCAhpIk+t5UfLaB8p3ToBO Eij4kDOaLaD8z8Jk4Dc8DtSDsLvzsNOU517oD9nZxSjPgQ8x/pT8OPNxl4ijvyZ3 0ULA4GRLOT5K8WAZuM5m2VZDwRzTWsInpOE//TXoVYLhmEAang== -----END CERTIFICATE-----Generated at Wed May 13 12:25:01 2026 by rpki-client