$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a393a3a2f34382d3438203d3e20313437313337.roa File: 323430303a343661303a393a3a2f34382d3438203d3e20313437313337.roa (raw, json) Hash identifier: +wm/VK77fHrWVU/ZkF+Uqbjn7YBt3NYF+N/EiT1H9LU= Subject key identifier: CF:C6:CE:BA:D0:C9:8B:AC:9B:FA:1E:3E:FA:55:0E:1C:C9:29:DD:75 Certificate issuer: /CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9 Certificate serial: 20A8E2E9FC0781EE7C7F9D4C02552122EF83C734 Authority key identifier: C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a393a3a2f34382d3438203d3e20313437313337.roa Signing time: Sun 03 May 2026 02:26:30 +0000 ROA not before: Sun 03 May 2026 02:21:30 +0000 ROA not after: Sun 02 May 2027 02:26:30 +0000 asID: 147137 IP address blocks: 2400:46a0:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a8:e2:e9:fc:07:81:ee:7c:7f:9d:4c:02:55:21:22:ef:83:c7:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9 Validity Not Before: May 3 02:21:30 2026 GMT Not After : May 2 02:26:30 2027 GMT Subject: CN=CFC6CEBAD0C98BAC9BFA1E3EFA550E1CC929DD75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4b:d6:cf:cc:01:1b:f6:88:d9:10:9a:cd:57: 58:ea:45:5a:05:02:57:c9:d8:6e:2c:8e:fd:59:e9: 72:fc:f8:ab:d1:a8:97:23:24:53:18:bd:d0:9d:45: 29:fb:b5:68:1b:7b:8e:7b:dc:56:d4:6d:25:de:20: 74:58:cb:3b:a9:32:d6:c8:c4:4a:96:5c:b0:93:c0: e9:0e:36:30:e6:fd:3f:74:36:2f:65:ce:5d:97:4f: 0e:5e:5d:21:97:e8:f5:bb:b2:8b:9c:36:b8:29:ee: 05:7c:ac:80:31:fe:4f:27:d7:6b:81:c1:81:4e:df: 5d:30:15:f8:40:ff:10:86:74:54:83:1b:65:67:b1: e6:5f:a3:a7:93:9f:69:90:f9:ff:b2:59:aa:6b:cb: 8c:3b:f0:be:d8:e9:97:a4:00:0b:08:fc:ac:f1:f7: a0:ef:56:29:6b:18:3d:9f:2c:0f:50:2d:cf:52:49: 75:89:6c:4d:97:69:b1:cf:ac:e5:bc:b8:c3:f0:f0: 28:f7:22:40:37:df:d9:23:64:a1:e2:74:6c:12:b9: 6b:b8:60:64:1a:8f:7e:a9:0b:35:3b:7c:14:fe:8a: 59:9d:62:08:50:1f:da:0c:52:58:fc:84:be:f4:e5: 7b:c6:43:00:3c:d2:da:b4:d3:30:ea:88:e0:06:a6: ef:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C6:CE:BA:D0:C9:8B:AC:9B:FA:1E:3E:FA:55:0E:1C:C9:29:DD:75 X509v3 Authority Key Identifier: keyid:C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a393a3a2f34382d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0:9::/48 Signature Algorithm: sha256WithRSAEncryption 78:42:6f:2e:0e:82:82:7b:ff:e2:c1:9d:43:9e:d2:4b:91:d7: 06:f9:a6:b6:89:b1:07:93:58:36:ca:3b:f4:d1:a1:2d:a1:56: 77:c3:d4:d4:73:0d:b5:e0:3f:24:87:7c:0a:83:93:3b:48:89: b7:18:60:e6:da:e4:1d:ce:30:84:9e:44:e3:2f:f8:7c:04:4c: 25:6b:ad:c8:00:69:dc:23:ee:69:83:61:70:0a:0f:31:a1:e8: 41:14:05:a7:df:95:3f:8a:62:03:bf:14:c2:b9:8a:9f:d8:45: 6d:56:af:c9:5c:47:5c:f6:49:26:da:ff:03:99:de:70:a1:f3: e4:71:4d:fb:b2:6a:25:9e:c7:f6:6d:de:c3:0c:31:c4:5f:18: 4b:7c:a1:c3:a6:fe:a3:3a:19:5f:87:c2:25:5d:cf:f5:f7:30: 34:ab:9e:19:aa:7e:25:0c:5d:8d:31:dd:69:c4:c1:1f:9f:71: aa:06:cc:ac:af:fa:e6:90:a8:75:71:f6:87:9f:5c:d3:02:8f: 18:4f:58:22:0b:fd:40:2a:e2:39:a4:01:c6:22:67:43:18:78: 2e:ba:de:e1:de:12:56:94:b5:1a:82:20:f7:db:9d:db:1d:49: 64:cc:9f:ce:9d:74:35:d4:26:1b:1a:d2:fa:e6:8a:62:3e:8e: 88:1b:c7:ce -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUIKji6fwHge58f51MAlUhIu+DxzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBENzAyOEMwRkE2MjgzNDhBRTIyNDVERDBDQzAyRDND NURDQjNGOTAeFw0yNjA1MDMwMjIxMzBaFw0yNzA1MDIwMjI2MzBaMDMxMTAvBgNV BAMTKENGQzZDRUJBRDBDOThCQUM5QkZBMUUzRUZBNTUwRTFDQzkyOURENzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYS9bPzAEb9ojZEJrNV1jqRVoF AlfJ2G4sjv1Z6XL8+KvRqJcjJFMYvdCdRSn7tWgbe4573FbUbSXeIHRYyzupMtbI xEqWXLCTwOkONjDm/T90Ni9lzl2XTw5eXSGX6PW7soucNrgp7gV8rIAx/k8n12uB wYFO310wFfhA/xCGdFSDG2VnseZfo6eTn2mQ+f+yWapry4w78L7Y6ZekAAsI/Kzx 96DvVilrGD2fLA9QLc9SSXWJbE2XabHPrOW8uMPw8Cj3IkA339kjZKHidGwSuWu4 YGQaj36pCzU7fBT+ilmdYghQH9oMUlj8hL705XvGQwA80tq00zDqiOAGpu9TAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUz8bOutDJi6yb+h4++lUOHMkp3XUwHwYDVR0j BBgwFoAUwNcCjA+mKDSK4iRd0MwC08Xcs/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E2NjVjMzItNmRhZi00NzJiLWJjZTYtMzE3ZDVkNmM3ODllLzAvQzBENzAyOEMw RkE2MjgzNDhBRTIyNDVERDBDQzAyRDNDNURDQjNGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMEQ3MDI4QzBGQTYyODM0OEFFMjI0NUREMENDMDJEM0M1RENC M0Y5LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzkzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzczMTMzMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAEagAAkw DQYJKoZIhvcNAQELBQADggEBAHhCby4OgoJ7/+LBnUOe0kuR1wb5praJsQeTWDbK O/TRoS2hVnfD1NRzDbXgPySHfAqDkztIibcYYOba5B3OMISeROMv+HwETCVrrcgA adwj7mmDYXAKDzGh6EEUBafflT+KYgO/FMK5ip/YRW1Wr8lcR1z2SSba/wOZ3nCh 8+RxTfuyaiWex/Zt3sMMMcRfGEt8ocOm/qM6GV+HwiVdz/X3MDSrnhmqfiUMXY0x 3WnEwR+fcaoGzKyv+uaQqHVx9oefXNMCjxhPWCIL/UAq4jmkAcYiZ0MYeC663uHe ElaUtRqCIPfbndsdSWTMn86ddDXUJhsa0vrmimI+jogbx84= -----END CERTIFICATE-----Generated at Wed May 13 10:16:41 2026 by rpki-client