$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a353a3a2f34382d3438203d3e20313437313337.roa File: 323430303a343661303a353a3a2f34382d3438203d3e20313437313337.roa (raw, json) Hash identifier: b3pQDI/eP+0SwgVnsmQmkeZ1d2w8eSJ1YWWJnGvXDz8= Subject key identifier: 34:38:E8:18:61:B2:59:FB:07:F4:16:A0:3F:BA:90:56:3B:EA:2A:83 Certificate issuer: /CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9 Certificate serial: 4AD9158679512E777DF341D08A2F5D5A7A2E5D99 Authority key identifier: C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a353a3a2f34382d3438203d3e20313437313337.roa Signing time: Sun 03 May 2026 02:26:38 +0000 ROA not before: Sun 03 May 2026 02:21:38 +0000 ROA not after: Sun 02 May 2027 02:26:38 +0000 asID: 147137 IP address blocks: 2400:46a0:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d9:15:86:79:51:2e:77:7d:f3:41:d0:8a:2f:5d:5a:7a:2e:5d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9 Validity Not Before: May 3 02:21:38 2026 GMT Not After : May 2 02:26:38 2027 GMT Subject: CN=3438E81861B259FB07F416A03FBA90563BEA2A83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:38:eb:d0:07:0b:19:e6:68:e3:1a:1d:8e:11: d6:2d:20:08:6e:e4:64:51:2d:59:04:b6:8c:ec:6e: 31:f6:75:85:84:86:6f:73:6c:e6:f5:14:2d:32:2f: e7:57:67:aa:9c:b3:c3:1f:73:ea:e8:24:46:3b:27: f2:b7:4e:55:19:95:bc:30:a8:33:4d:ec:63:4a:a4: 08:f0:ba:ff:95:c3:bc:ca:38:90:d8:d6:ef:05:eb: 07:ee:89:26:22:52:f5:0b:dd:4b:09:89:08:61:10: e6:ed:60:ab:84:11:5c:a6:dd:ed:1f:85:e4:25:f6: c9:2a:e9:d8:8d:f7:36:12:f5:5e:6f:da:5c:13:d2: 4c:17:43:c3:0a:a1:16:15:d7:4d:7a:fb:a4:e8:a3: 96:96:ae:5d:2f:f8:94:5e:81:18:d7:e1:e3:a8:8b: cc:b6:d5:a3:1a:52:a3:b8:bd:f2:6c:26:a6:74:3c: 01:d0:fc:0e:eb:ca:34:36:74:22:ee:6f:07:41:53: 23:74:a3:1b:11:d8:34:fa:23:09:d7:f0:9e:61:3a: 0f:5b:40:31:71:ff:e5:76:04:f2:83:c2:04:23:95: 01:ad:82:3e:1f:05:14:1e:19:ab:75:cf:81:13:e8: b6:90:b4:b7:e5:92:df:bb:e6:20:4b:3f:7b:56:86: 17:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:38:E8:18:61:B2:59:FB:07:F4:16:A0:3F:BA:90:56:3B:EA:2A:83 X509v3 Authority Key Identifier: keyid:C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a353a3a2f34382d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0:5::/48 Signature Algorithm: sha256WithRSAEncryption 4f:55:25:86:0b:e8:6e:47:6e:c4:9d:ad:7a:6e:90:71:18:5f: ef:24:1c:a0:fa:bc:89:ac:ce:76:64:bc:14:ac:ff:51:34:78: bb:36:53:87:14:58:4d:50:93:ba:94:88:fe:bd:b1:51:54:18: a6:43:51:25:c1:72:c1:d6:d1:d3:ba:7a:0f:cf:35:65:27:f9: 70:b0:1b:be:07:06:8a:41:35:84:3b:bd:08:9d:0f:11:ac:77: 35:e2:56:95:ac:0e:52:2e:c2:9f:f0:c0:e8:3a:da:74:b1:8b: 08:01:41:b9:64:a1:ee:6e:f4:f5:b3:48:a2:e9:31:86:90:41: 09:1c:91:1b:cf:f9:59:f1:9c:d5:cd:93:90:d4:30:0e:fe:6f: a3:bd:30:30:ad:c4:92:65:54:99:1a:26:73:fd:c5:ed:46:af: 51:fe:48:89:68:6a:fb:a3:21:fa:6c:ec:d8:2f:f6:27:a8:38: 2d:81:64:ff:62:62:25:23:cb:28:cb:38:61:ef:ea:a8:42:14: d0:6a:c7:e7:50:5a:0f:b8:f3:5b:20:33:99:fd:6f:ab:88:99: 81:b6:c2:94:f9:a9:84:14:33:b0:0a:e3:d6:e7:5a:2d:30:9b: 62:ce:89:67:19:0a:ef:83:e7:ae:b4:5e:ea:e9:a6:4f:c4:67: c9:a9:db:a5 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUStkVhnlRLnd980HQii9dWnouXZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBENzAyOEMwRkE2MjgzNDhBRTIyNDVERDBDQzAyRDND NURDQjNGOTAeFw0yNjA1MDMwMjIxMzhaFw0yNzA1MDIwMjI2MzhaMDMxMTAvBgNV BAMTKDM0MzhFODE4NjFCMjU5RkIwN0Y0MTZBMDNGQkE5MDU2M0JFQTJBODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOOOvQBwsZ5mjjGh2OEdYtIAhu 5GRRLVkEtozsbjH2dYWEhm9zbOb1FC0yL+dXZ6qcs8Mfc+roJEY7J/K3TlUZlbww qDNN7GNKpAjwuv+Vw7zKOJDY1u8F6wfuiSYiUvUL3UsJiQhhEObtYKuEEVym3e0f heQl9skq6diN9zYS9V5v2lwT0kwXQ8MKoRYV1016+6Too5aWrl0v+JRegRjX4eOo i8y21aMaUqO4vfJsJqZ0PAHQ/A7ryjQ2dCLubwdBUyN0oxsR2DT6IwnX8J5hOg9b QDFx/+V2BPKDwgQjlQGtgj4fBRQeGat1z4ET6LaQtLflkt+75iBLP3tWhhdpAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUNDjoGGGyWfsH9BagP7qQVjvqKoMwHwYDVR0j BBgwFoAUwNcCjA+mKDSK4iRd0MwC08Xcs/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E2NjVjMzItNmRhZi00NzJiLWJjZTYtMzE3ZDVkNmM3ODllLzAvQzBENzAyOEMw RkE2MjgzNDhBRTIyNDVERDBDQzAyRDNDNURDQjNGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMEQ3MDI4QzBGQTYyODM0OEFFMjI0NUREMENDMDJEM0M1RENC M0Y5LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzUzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzczMTMzMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAEagAAUw DQYJKoZIhvcNAQELBQADggEBAE9VJYYL6G5HbsSdrXpukHEYX+8kHKD6vImsznZk vBSs/1E0eLs2U4cUWE1Qk7qUiP69sVFUGKZDUSXBcsHW0dO6eg/PNWUn+XCwG74H BopBNYQ7vQidDxGsdzXiVpWsDlIuwp/wwOg62nSxiwgBQblkoe5u9PWzSKLpMYaQ QQkckRvP+VnxnNXNk5DUMA7+b6O9MDCtxJJlVJkaJnP9xe1Gr1H+SIloavujIfps 7Ngv9ieoOC2BZP9iYiUjyyjLOGHv6qhCFNBqx+dQWg+481sgM5n9b6uImYG2wpT5 qYQUM7AK49bnWi0wm2LOiWcZCu+D5660Xurppk/EZ8mp26U= -----END CERTIFICATE-----Generated at Wed May 13 10:03:53 2026 by rpki-client