$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a33323a3a2f34382d3438203d3e20313437313337.roa File: 323430303a343661303a33323a3a2f34382d3438203d3e20313437313337.roa (raw, json) Hash identifier: rrbo9gFfKTg6spECSvy8Q2yWG7nEl4xu5sTVFZ6rz7o= Subject key identifier: 49:4B:6F:9B:24:E1:9C:0A:BE:8A:4C:E2:7E:31:72:7F:65:7E:CF:17 Certificate issuer: /CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9 Certificate serial: 6CACEF58E4E7F79C728769CA7FB25EA923F39C4A Authority key identifier: C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a33323a3a2f34382d3438203d3e20313437313337.roa Signing time: Sun 03 May 2026 02:26:35 +0000 ROA not before: Sun 03 May 2026 02:21:35 +0000 ROA not after: Sun 02 May 2027 02:26:35 +0000 asID: 147137 IP address blocks: 2400:46a0:32::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:ac:ef:58:e4:e7:f7:9c:72:87:69:ca:7f:b2:5e:a9:23:f3:9c:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9 Validity Not Before: May 3 02:21:35 2026 GMT Not After : May 2 02:26:35 2027 GMT Subject: CN=494B6F9B24E19C0ABE8A4CE27E31727F657ECF17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:98:14:5a:dc:a7:b4:85:bc:e8:10:2e:3f:d4: 19:dc:72:cf:c2:1f:18:ec:a6:22:9a:77:72:a9:b1: 1a:84:e4:d4:3e:0d:69:5e:b0:34:99:e8:17:11:ce: 0f:e2:92:60:97:1b:28:e6:e3:b9:78:33:44:2d:3d: 95:37:ce:81:5f:e1:ab:54:6a:3b:1f:10:ad:6d:c6: 82:3d:76:2b:09:ba:1f:53:5b:d9:66:36:83:a8:1d: 64:64:02:5a:2d:29:5a:5e:b9:ed:0a:42:e9:b3:d7: e2:45:09:5c:3a:36:ef:0f:3b:60:45:23:30:68:b6: b0:38:a2:f3:16:a8:f9:29:c8:0d:32:0b:b3:57:8a: c8:1a:6a:75:4c:b5:4f:5b:99:77:6c:8f:77:53:17: d7:ea:08:c1:31:ac:1c:e7:c7:cb:21:06:6d:07:45: 9a:fd:ef:6a:c4:80:ee:19:3a:6a:0d:99:52:7d:6a: eb:8d:0d:1f:b0:0d:9e:1b:a9:d2:c9:a3:46:9a:6e: d2:4e:45:cf:d9:57:d7:ed:40:8f:ea:b2:e2:6c:10: a5:93:c2:c7:76:e3:88:39:e8:4a:6c:44:a4:65:06: 84:f9:fe:c1:ae:2b:e7:66:58:f1:d3:cc:32:7f:c7: 8f:af:0f:4f:60:89:55:ac:69:05:6b:f6:04:72:1f: 15:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4B:6F:9B:24:E1:9C:0A:BE:8A:4C:E2:7E:31:72:7F:65:7E:CF:17 X509v3 Authority Key Identifier: keyid:C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a33323a3a2f34382d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0:32::/48 Signature Algorithm: sha256WithRSAEncryption 2e:97:c7:8f:50:7b:02:d2:8a:06:47:57:59:3a:d3:b6:0e:29: 58:5a:30:fa:68:30:ec:b3:7f:9b:45:93:2a:e1:db:40:21:00: 16:1b:cf:7b:3b:3e:c4:6d:8f:f1:7f:05:4b:05:51:8b:7d:29: 53:23:5a:7d:2b:93:f8:4f:1d:bd:cc:6a:2e:2e:90:a7:9c:45: e4:c8:f0:37:f0:75:89:2e:20:7b:ae:d6:01:f6:30:91:50:2b: 48:a7:a3:31:7b:ed:95:28:72:3a:92:ef:83:b3:58:76:3a:8c: ee:54:2b:15:d8:f6:1d:c8:53:40:1f:dc:4d:55:ba:83:8f:59: 98:dd:be:4a:c6:47:97:3f:7e:6e:1a:e4:d0:05:94:2a:d0:8c: ec:23:2c:29:63:7a:49:c0:b6:5d:e5:39:a0:67:a7:37:9d:2f: 32:48:f5:49:c6:74:5e:91:c3:63:5e:fc:2a:f4:ac:0b:8c:ec: cc:f2:34:36:e4:7f:4b:8e:29:2b:75:16:bc:70:14:38:6a:f0: 34:af:72:a7:ba:2c:4a:2e:2f:b0:a3:90:58:a3:91:ee:67:25: 2b:af:81:cc:28:09:ca:4d:b2:dc:f4:0f:52:24:16:01:cb:06: 41:20:14:0c:5c:76:f2:f0:f5:d5:ed:15:2c:ee:ca:ea:ec:9b: 12:38:f8:d6 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUbKzvWOTn95xyh2nKf7JeqSPznEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBENzAyOEMwRkE2MjgzNDhBRTIyNDVERDBDQzAyRDND NURDQjNGOTAeFw0yNjA1MDMwMjIxMzVaFw0yNzA1MDIwMjI2MzVaMDMxMTAvBgNV BAMTKDQ5NEI2RjlCMjRFMTlDMEFCRThBNENFMjdFMzE3MjdGNjU3RUNGMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRmBRa3Ke0hbzoEC4/1Bnccs/C HxjspiKad3KpsRqE5NQ+DWlesDSZ6BcRzg/ikmCXGyjm47l4M0QtPZU3zoFf4atU ajsfEK1txoI9disJuh9TW9lmNoOoHWRkAlotKVpeue0KQumz1+JFCVw6Nu8PO2BF IzBotrA4ovMWqPkpyA0yC7NXisgaanVMtU9bmXdsj3dTF9fqCMExrBznx8shBm0H RZr972rEgO4ZOmoNmVJ9auuNDR+wDZ4bqdLJo0aabtJORc/ZV9ftQI/qsuJsEKWT wsd244g56EpsRKRlBoT5/sGuK+dmWPHTzDJ/x4+vD09giVWsaQVr9gRyHxVnAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUSUtvmyThnAq+ikzifjFyf2V+zxcwHwYDVR0j BBgwFoAUwNcCjA+mKDSK4iRd0MwC08Xcs/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E2NjVjMzItNmRhZi00NzJiLWJjZTYtMzE3ZDVkNmM3ODllLzAvQzBENzAyOEMw RkE2MjgzNDhBRTIyNDVERDBDQzAyRDNDNURDQjNGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMEQ3MDI4QzBGQTYyODM0OEFFMjI0NUREMENDMDJEM0M1RENC M0Y5LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzMzMjNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzNzMxMzMzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQARqAA MjANBgkqhkiG9w0BAQsFAAOCAQEALpfHj1B7AtKKBkdXWTrTtg4pWFow+mgw7LN/ m0WTKuHbQCEAFhvPezs+xG2P8X8FSwVRi30pUyNafSuT+E8dvcxqLi6Qp5xF5Mjw N/B1iS4ge67WAfYwkVArSKejMXvtlShyOpLvg7NYdjqM7lQrFdj2HchTQB/cTVW6 g49ZmN2+SsZHlz9+bhrk0AWUKtCM7CMsKWN6ScC2XeU5oGenN50vMkj1ScZ0XpHD Y178KvSsC4zszPI0NuR/S44pK3UWvHAUOGrwNK9yp7osSi4vsKOQWKOR7mclK6+B zCgJyk2y3PQPUiQWAcsGQSAUDFx28vD11e0VLO7K6uybEjj41g== -----END CERTIFICATE-----Generated at Wed May 13 11:52:47 2026 by rpki-client