$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a33333a3a2f34382d3438203d3e20313437313337.roa File: 323430303a343661303a33333a3a2f34382d3438203d3e20313437313337.roa (raw, json) Hash identifier: 5JKbjJnU69SJlm4fg3FPZyCqBIfVS060Z1KnNVEVtkw= Subject key identifier: FA:DB:92:8C:1B:50:46:7E:4F:73:E7:E1:13:37:71:B9:8D:47:F9:62 Certificate issuer: /CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9 Certificate serial: 6A63DF05489A2796D77CBF77CD36F449B8BB6F4C Authority key identifier: C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a33333a3a2f34382d3438203d3e20313437313337.roa Signing time: Sun 03 May 2026 02:26:33 +0000 ROA not before: Sun 03 May 2026 02:21:33 +0000 ROA not after: Sun 02 May 2027 02:26:33 +0000 asID: 147137 IP address blocks: 2400:46a0:33::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:63:df:05:48:9a:27:96:d7:7c:bf:77:cd:36:f4:49:b8:bb:6f:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9 Validity Not Before: May 3 02:21:33 2026 GMT Not After : May 2 02:26:33 2027 GMT Subject: CN=FADB928C1B50467E4F73E7E1133771B98D47F962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:07:92:46:35:81:c3:2b:df:d7:ef:48:3c:d1: 23:7c:3b:4f:4a:45:b5:4f:1f:44:9c:ef:9c:78:62: 6e:6e:32:72:a3:a4:ea:7a:59:4d:ce:8a:8d:fc:2a: 37:d8:08:ec:76:2c:25:6e:d3:b5:80:4c:ab:71:af: 74:11:93:43:6f:4e:ed:92:3b:38:26:41:a1:93:89: 25:35:4b:02:be:cd:5d:0a:01:c9:c5:4e:37:f7:eb: 5b:55:46:0c:ed:ba:a8:f4:21:d0:6e:1d:47:2b:8d: 0e:1e:33:eb:22:63:10:f9:3a:0a:f9:c5:ba:3d:9a: ea:a2:94:9c:74:25:d6:2e:b4:51:e6:6a:64:99:b2: aa:97:12:39:72:35:e4:5c:59:58:ba:13:0c:13:46: 67:ce:1d:32:d5:bb:be:f7:17:09:39:b9:2f:6b:b1: 8f:1b:64:7e:3c:a6:8f:cc:7c:ec:da:48:05:7c:b1: 1b:ff:ff:62:74:2e:19:77:a1:72:05:9e:d6:ba:f2: 30:9f:59:73:20:e9:02:57:84:bc:d7:aa:2d:a0:0f: c1:ac:5c:09:d1:b7:83:93:5c:d4:f7:b9:87:f2:c9: 37:cc:22:98:c4:a5:a8:7a:57:cf:68:4a:a7:33:55: df:24:1b:bb:46:ea:e8:45:07:51:34:87:65:d7:ab: f0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:DB:92:8C:1B:50:46:7E:4F:73:E7:E1:13:37:71:B9:8D:47:F9:62 X509v3 Authority Key Identifier: keyid:C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a33333a3a2f34382d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0:33::/48 Signature Algorithm: sha256WithRSAEncryption 64:b6:ad:c3:a2:5d:78:4c:5d:e3:a4:37:19:0e:e0:55:c0:43: ba:c4:56:6f:33:e8:82:17:2b:91:fe:26:e8:6f:75:16:de:ce: 93:c6:1e:c2:9c:1f:3b:72:3e:91:6a:4c:ac:5c:41:05:3c:8b: 54:de:6f:4e:2e:8b:37:80:c9:34:ff:f5:7f:b4:e8:7e:64:29: 76:1d:24:35:8a:e7:d8:6f:48:8a:c4:77:24:26:9d:88:7b:51: 01:cc:5a:40:5b:f2:2f:17:81:5c:09:8f:64:f5:ce:09:f6:d6: 90:84:b8:cd:95:a1:4d:fb:f3:48:f3:68:28:b8:3d:19:62:ad: 4a:ea:b2:cf:61:5a:31:d3:48:dc:9c:cb:30:e5:a7:36:1e:98: e5:09:9b:67:7b:30:8f:2b:45:fc:cf:74:e0:b5:b9:42:ed:51: e0:0a:c7:ab:d9:c5:24:75:8f:2d:3a:4d:06:41:c2:18:74:ee: 7a:ef:dd:83:e1:b6:53:04:d7:d6:e7:ea:ba:89:5e:8e:b5:00: a5:30:ff:0d:69:67:76:65:51:c1:66:80:4f:ef:c4:59:5e:ee: 7a:d6:87:2e:63:29:2d:55:61:a1:83:96:2b:aa:46:06:6e:75: 61:7c:a7:7f:f0:0f:a1:69:17:a3:30:38:a7:d8:06:9a:9c:8b: 0e:c1:7d:60 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUamPfBUiaJ5bXfL93zTb0Sbi7b0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBENzAyOEMwRkE2MjgzNDhBRTIyNDVERDBDQzAyRDND NURDQjNGOTAeFw0yNjA1MDMwMjIxMzNaFw0yNzA1MDIwMjI2MzNaMDMxMTAvBgNV BAMTKEZBREI5MjhDMUI1MDQ2N0U0RjczRTdFMTEzMzc3MUI5OEQ0N0Y5NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNB5JGNYHDK9/X70g80SN8O09K RbVPH0Sc75x4Ym5uMnKjpOp6WU3Oio38KjfYCOx2LCVu07WATKtxr3QRk0NvTu2S OzgmQaGTiSU1SwK+zV0KAcnFTjf361tVRgztuqj0IdBuHUcrjQ4eM+siYxD5Ogr5 xbo9muqilJx0JdYutFHmamSZsqqXEjlyNeRcWVi6EwwTRmfOHTLVu773Fwk5uS9r sY8bZH48po/MfOzaSAV8sRv//2J0Lhl3oXIFnta68jCfWXMg6QJXhLzXqi2gD8Gs XAnRt4OTXNT3uYfyyTfMIpjEpah6V89oSqczVd8kG7tG6uhFB1E0h2XXq/CbAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU+tuSjBtQRn5Pc+fhEzdxuY1H+WIwHwYDVR0j BBgwFoAUwNcCjA+mKDSK4iRd0MwC08Xcs/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E2NjVjMzItNmRhZi00NzJiLWJjZTYtMzE3ZDVkNmM3ODllLzAvQzBENzAyOEMw RkE2MjgzNDhBRTIyNDVERDBDQzAyRDNDNURDQjNGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMEQ3MDI4QzBGQTYyODM0OEFFMjI0NUREMENDMDJEM0M1RENC M0Y5LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzMzMzNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzNzMxMzMzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQARqAA MzANBgkqhkiG9w0BAQsFAAOCAQEAZLatw6JdeExd46Q3GQ7gVcBDusRWbzPoghcr kf4m6G91Ft7Ok8YewpwfO3I+kWpMrFxBBTyLVN5vTi6LN4DJNP/1f7TofmQpdh0k NYrn2G9IisR3JCadiHtRAcxaQFvyLxeBXAmPZPXOCfbWkIS4zZWhTfvzSPNoKLg9 GWKtSuqyz2FaMdNI3JzLMOWnNh6Y5QmbZ3swjytF/M904LW5Qu1R4ArHq9nFJHWP LTpNBkHCGHTueu/dg+G2UwTX1ufquolejrUApTD/DWlndmVRwWaAT+/EWV7uetaH LmMpLVVhoYOWK6pGBm51YXynf/APoWkXozA4p9gGmpyLDsF9YA== -----END CERTIFICATE-----Generated at Wed May 13 11:56:36 2026 by rpki-client