$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32383a3a2f34382d3438203d3e20313437313337.roa File: 323430303a343661303a32383a3a2f34382d3438203d3e20313437313337.roa (raw, json) Hash identifier: 8i1yDAIM/jiddL2Dyt3x+4fTdzbaN44q0VQUxOtuXgI= Subject key identifier: 90:94:6B:08:3C:CE:69:A0:97:EB:42:80:0F:B2:3E:B0:97:C8:55:67 Certificate issuer: /CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9 Certificate serial: 3C1A76C18373CB3E5C0448C5AD1D32C58C7EEC8A Authority key identifier: C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32383a3a2f34382d3438203d3e20313437313337.roa Signing time: Sun 03 May 2026 02:26:39 +0000 ROA not before: Sun 03 May 2026 02:21:39 +0000 ROA not after: Sun 02 May 2027 02:26:39 +0000 asID: 147137 IP address blocks: 2400:46a0:28::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:1a:76:c1:83:73:cb:3e:5c:04:48:c5:ad:1d:32:c5:8c:7e:ec:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9 Validity Not Before: May 3 02:21:39 2026 GMT Not After : May 2 02:26:39 2027 GMT Subject: CN=90946B083CCE69A097EB42800FB23EB097C85567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:31:b1:87:e8:af:c0:4b:e9:87:05:6f:ff:74: 96:3e:d0:85:a8:f5:46:97:e5:42:c8:bc:ee:d4:69: 41:a9:29:3f:52:21:35:7e:19:23:b0:b8:f3:d4:1e: ef:c3:9e:4e:08:21:ec:1d:16:fa:07:d2:a6:d1:3c: 8c:36:d2:d5:6b:ce:e4:d7:6a:9c:48:33:5a:ef:09: 29:c3:a0:13:e2:d0:14:d4:a6:d2:1b:a3:b3:d1:7a: a0:6c:25:87:11:99:14:81:f8:2b:59:9d:62:e6:d9: 73:d3:4d:83:7e:3e:e2:da:66:cb:50:46:37:22:f1: e0:f9:58:5e:09:37:fa:de:61:4b:b9:86:25:b3:da: cf:07:d6:ea:66:2f:dd:f5:4d:7d:47:82:7d:3c:f4: 2d:65:d0:66:19:6e:f2:68:9f:d1:d8:71:26:63:00: 5b:59:7a:18:a8:57:4b:79:82:98:22:6f:1d:80:d7: 83:d4:48:63:6f:37:fe:02:2f:f2:1c:87:59:72:f4: e7:f3:56:bb:31:91:94:2f:1b:a5:1d:07:e4:2f:70: ee:4b:f9:98:56:6f:3e:9e:82:dc:d9:36:ad:d6:41: 64:91:b6:ad:4b:43:85:e1:4c:4c:0b:39:bc:eb:5b: 18:82:4b:8a:d1:85:f5:da:dc:48:8d:75:1f:fd:55: f4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:94:6B:08:3C:CE:69:A0:97:EB:42:80:0F:B2:3E:B0:97:C8:55:67 X509v3 Authority Key Identifier: keyid:C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32383a3a2f34382d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0:28::/48 Signature Algorithm: sha256WithRSAEncryption 78:ca:ee:39:5c:78:c4:f6:de:7e:30:d9:58:c1:f8:53:9d:81: 41:2c:bb:b3:15:e0:7f:6d:57:34:5d:34:e6:c5:9f:9a:0f:d9: 8d:21:b3:f3:95:d5:4b:6d:3b:c5:4b:d4:be:73:7a:c2:f3:89: fe:de:6c:e8:d0:54:0f:59:c2:ec:cc:0c:43:04:ef:fb:8b:e5: 98:b1:da:b2:92:12:a7:00:33:ae:a7:8b:e6:26:a9:e7:e8:f1: 1b:cf:f2:37:af:07:6c:6e:0a:20:16:66:71:c8:b7:73:5b:41: c7:58:8e:ac:57:f5:ff:bf:c7:8a:17:87:6e:40:2d:71:f8:37: bc:b5:f1:1d:34:8c:02:b7:50:b9:97:95:05:7f:d3:47:d1:9d: 1b:25:05:33:78:b7:8a:bf:04:c2:72:a7:38:09:18:84:8f:3b: e0:7f:39:b0:a6:e9:00:96:eb:67:3c:3b:0a:01:2d:c8:c8:cb: 1d:cd:05:96:fe:85:0b:09:8e:db:d7:20:e0:40:08:50:26:d5: 80:16:80:67:16:aa:e1:4e:d6:f6:a4:ef:12:b3:3a:68:2e:cb: 71:fa:49:b3:90:8b:7a:0a:2f:e7:4a:66:d5:99:92:92:6c:4f: 02:02:6f:32:35:9e:2e:38:f5:78:fa:17:99:ac:55:e2:fb:e3: 4e:01:d7:34 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUPBp2wYNzyz5cBEjFrR0yxYx+7IowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBENzAyOEMwRkE2MjgzNDhBRTIyNDVERDBDQzAyRDND NURDQjNGOTAeFw0yNjA1MDMwMjIxMzlaFw0yNzA1MDIwMjI2MzlaMDMxMTAvBgNV BAMTKDkwOTQ2QjA4M0NDRTY5QTA5N0VCNDI4MDBGQjIzRUIwOTdDODU1NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWMbGH6K/AS+mHBW//dJY+0IWo 9UaX5ULIvO7UaUGpKT9SITV+GSOwuPPUHu/Dnk4IIewdFvoH0qbRPIw20tVrzuTX apxIM1rvCSnDoBPi0BTUptIbo7PReqBsJYcRmRSB+CtZnWLm2XPTTYN+PuLaZstQ Rjci8eD5WF4JN/reYUu5hiWz2s8H1upmL931TX1Hgn089C1l0GYZbvJon9HYcSZj AFtZehioV0t5gpgibx2A14PUSGNvN/4CL/Ich1ly9OfzVrsxkZQvG6UdB+QvcO5L +ZhWbz6egtzZNq3WQWSRtq1LQ4XhTEwLObzrWxiCS4rRhfXa3EiNdR/9VfSzAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUkJRrCDzOaaCX60KAD7I+sJfIVWcwHwYDVR0j BBgwFoAUwNcCjA+mKDSK4iRd0MwC08Xcs/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E2NjVjMzItNmRhZi00NzJiLWJjZTYtMzE3ZDVkNmM3ODllLzAvQzBENzAyOEMw RkE2MjgzNDhBRTIyNDVERDBDQzAyRDNDNURDQjNGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMEQ3MDI4QzBGQTYyODM0OEFFMjI0NUREMENDMDJEM0M1RENC M0Y5LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzIzODNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzNzMxMzMzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQARqAA KDANBgkqhkiG9w0BAQsFAAOCAQEAeMruOVx4xPbefjDZWMH4U52BQSy7sxXgf21X NF005sWfmg/ZjSGz85XVS207xUvUvnN6wvOJ/t5s6NBUD1nC7MwMQwTv+4vlmLHa spISpwAzrqeL5iap5+jxG8/yN68HbG4KIBZmcci3c1tBx1iOrFf1/7/HiheHbkAt cfg3vLXxHTSMArdQuZeVBX/TR9GdGyUFM3i3ir8EwnKnOAkYhI874H85sKbpAJbr Zzw7CgEtyMjLHc0Flv6FCwmO29cg4EAIUCbVgBaAZxaq4U7W9qTvErM6aC7LcfpJ s5CLegov50pm1ZmSkmxPAgJvMjWeLjj1ePoXmaxV4vvjTgHXNA== -----END CERTIFICATE-----Generated at Wed May 13 11:22:26 2026 by rpki-client