$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a383a3a2f34382d3438203d3e20313437313337.roa File: 323430303a343661303a383a3a2f34382d3438203d3e20313437313337.roa (raw, json) Hash identifier: zV398UgRTlptT97Qc1/wsPkzfK97ViGntlsJokWgHgg= Subject key identifier: 1F:B9:EE:1F:D2:8C:B8:76:ED:F4:96:77:88:C5:D1:AE:2B:12:1C:15 Certificate issuer: /CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9 Certificate serial: 16864BEA773625E1D236E41F15D60D666009581D Authority key identifier: C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a383a3a2f34382d3438203d3e20313437313337.roa Signing time: Sun 03 May 2026 02:26:36 +0000 ROA not before: Sun 03 May 2026 02:21:36 +0000 ROA not after: Sun 02 May 2027 02:26:36 +0000 asID: 147137 IP address blocks: 2400:46a0:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:86:4b:ea:77:36:25:e1:d2:36:e4:1f:15:d6:0d:66:60:09:58:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9 Validity Not Before: May 3 02:21:36 2026 GMT Not After : May 2 02:26:36 2027 GMT Subject: CN=1FB9EE1FD28CB876EDF4967788C5D1AE2B121C15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4f:73:4f:09:1d:11:81:cd:48:d0:3f:57:d6: 67:8d:21:92:81:d5:20:e6:d9:88:fa:e9:56:86:be: d9:53:da:d8:31:8e:45:61:3d:62:b5:d9:16:1f:7a: 25:51:09:12:29:f0:dc:8f:fb:1b:1b:87:ed:f5:be: ba:47:11:03:4f:8a:43:bf:10:a5:b0:1e:e6:56:08: e0:3a:7e:c0:e7:1a:0c:53:ac:88:8c:57:3b:4a:02: 86:2b:c5:3e:1f:42:32:e9:72:b1:be:3c:12:b0:85: 12:9f:1f:f5:c1:6e:ea:2c:b7:58:b2:5c:c4:4d:31: 06:38:b6:1d:31:54:ae:f3:53:42:f2:ca:84:5b:66: 43:22:eb:f9:9f:07:90:b3:2f:5d:12:b8:37:e6:6e: 81:20:73:c3:0e:09:78:7a:17:b2:3d:fc:94:49:aa: 57:d1:f0:42:bb:d0:e7:02:27:fd:dd:63:e0:65:a0: 0c:54:96:ed:d0:83:ad:6b:2f:26:6e:0f:fa:04:ab: 7e:bc:81:84:7c:96:ce:b7:10:11:8b:d3:5b:0f:74: 98:f0:ff:6f:ad:a3:42:2b:7a:84:15:e3:c6:ae:59: 7f:ce:b9:80:5c:d3:25:89:ef:66:f6:56:1e:57:ed: 29:3b:f9:6d:47:a9:65:3e:c2:5d:9d:74:cf:8c:06: 94:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B9:EE:1F:D2:8C:B8:76:ED:F4:96:77:88:C5:D1:AE:2B:12:1C:15 X509v3 Authority Key Identifier: keyid:C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a383a3a2f34382d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0:8::/48 Signature Algorithm: sha256WithRSAEncryption 18:7b:db:00:63:53:e6:f0:8f:7c:b5:7b:43:9c:60:1e:ab:7e: c2:ae:1a:3a:9a:34:2d:eb:86:bd:c7:4c:45:4b:3e:cb:73:b4: 69:2f:9b:18:86:3f:11:07:cc:22:14:3f:3d:9e:9f:8d:89:17: b6:88:67:ed:c4:de:ab:20:55:b9:21:df:4c:06:e1:d4:75:ec: 4a:49:90:d0:f7:2b:c1:ec:ad:5d:82:bb:bd:33:76:57:fd:e8: 3c:c3:79:60:0b:b8:a9:8e:ff:6e:6d:23:76:5f:bc:c1:c7:9c: 9d:fe:37:e2:47:c5:6f:dd:8c:2f:ce:b6:1a:da:ab:76:6c:15: 45:f3:ad:83:4b:8a:46:29:cb:fe:8f:94:ca:03:1b:22:92:71: 22:00:0f:72:94:4f:84:0c:cc:b4:eb:48:d1:48:c5:06:2b:d7: 1f:1a:7b:19:76:e1:a9:07:7c:e5:57:3d:77:ce:0e:85:93:8d: 56:db:fb:c0:38:a5:29:1a:8d:4f:bd:62:4d:50:be:c1:b9:4c: 12:cb:5a:52:96:23:fb:a4:50:71:2e:c5:07:5e:db:7c:77:e2: ff:78:3f:0e:bc:7b:96:8e:be:7f:c6:8e:e0:4d:44:49:69:23: 4a:46:e7:52:3f:89:0e:cd:d5:1b:d0:d6:7f:1e:b9:06:6c:bc: b2:67:01:97 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUFoZL6nc2JeHSNuQfFdYNZmAJWB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBENzAyOEMwRkE2MjgzNDhBRTIyNDVERDBDQzAyRDND NURDQjNGOTAeFw0yNjA1MDMwMjIxMzZaFw0yNzA1MDIwMjI2MzZaMDMxMTAvBgNV BAMTKDFGQjlFRTFGRDI4Q0I4NzZFREY0OTY3Nzg4QzVEMUFFMkIxMjFDMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1T3NPCR0Rgc1I0D9X1meNIZKB 1SDm2Yj66VaGvtlT2tgxjkVhPWK12RYfeiVRCRIp8NyP+xsbh+31vrpHEQNPikO/ EKWwHuZWCOA6fsDnGgxTrIiMVztKAoYrxT4fQjLpcrG+PBKwhRKfH/XBbuost1iy XMRNMQY4th0xVK7zU0LyyoRbZkMi6/mfB5CzL10SuDfmboEgc8MOCXh6F7I9/JRJ qlfR8EK70OcCJ/3dY+BloAxUlu3Qg61rLyZuD/oEq368gYR8ls63EBGL01sPdJjw /2+to0IreoQV48auWX/OuYBc0yWJ72b2Vh5X7Sk7+W1HqWU+wl2ddM+MBpR9AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUH7nuH9KMuHbt9JZ3iMXRrisSHBUwHwYDVR0j BBgwFoAUwNcCjA+mKDSK4iRd0MwC08Xcs/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E2NjVjMzItNmRhZi00NzJiLWJjZTYtMzE3ZDVkNmM3ODllLzAvQzBENzAyOEMw RkE2MjgzNDhBRTIyNDVERDBDQzAyRDNDNURDQjNGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMEQ3MDI4QzBGQTYyODM0OEFFMjI0NUREMENDMDJEM0M1RENC M0Y5LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzgzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzczMTMzMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAEagAAgw DQYJKoZIhvcNAQELBQADggEBABh72wBjU+bwj3y1e0OcYB6rfsKuGjqaNC3rhr3H TEVLPstztGkvmxiGPxEHzCIUPz2en42JF7aIZ+3E3qsgVbkh30wG4dR17EpJkND3 K8HsrV2Cu70zdlf96DzDeWALuKmO/25tI3ZfvMHHnJ3+N+JHxW/djC/Othraq3Zs FUXzrYNLikYpy/6PlMoDGyKScSIAD3KUT4QMzLTrSNFIxQYr1x8aexl24akHfOVX PXfODoWTjVbb+8A4pSkajU+9Yk1QvsG5TBLLWlKWI/ukUHEuxQde23x34v94Pw68 e5aOvn/GjuBNRElpI0pG51I/iQ7N1RvQ1n8euQZsvLJnAZc= -----END CERTIFICATE-----Generated at Wed May 13 10:39:48 2026 by rpki-client