$ rpki-client -vvf rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/323430313a313363303a3a2f33322d3336203d3e20313332363532.roa File: 323430313a313363303a3a2f33322d3336203d3e20313332363532.roa (raw, json) Hash identifier: Zo6afGUZ+xANx2saBKFoToM4ZfJx6MQbAdVSKsyqc3E= Subject key identifier: 38:5F:ED:47:E7:B0:41:16:D8:9B:1E:5F:46:45:C8:E7:30:AD:9E:D9 Certificate issuer: /CN=7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1 Certificate serial: 010468DC52A220844A42157B68F54DD0522B2AE8 Authority key identifier: 7E:FC:34:6D:E3:A1:4C:30:30:37:D3:F3:BF:A4:1F:CD:81:FA:0E:E1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/323430313a313363303a3a2f33322d3336203d3e20313332363532.roa Signing time: Sun 03 May 2026 02:27:01 +0000 ROA not before: Sun 03 May 2026 02:22:01 +0000 ROA not after: Sun 02 May 2027 02:27:01 +0000 asID: 132652 IP address blocks: 2401:13c0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.crl rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:04:68:dc:52:a2:20:84:4a:42:15:7b:68:f5:4d:d0:52:2b:2a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1 Validity Not Before: May 3 02:22:01 2026 GMT Not After : May 2 02:27:01 2027 GMT Subject: CN=385FED47E7B04116D89B1E5F4645C8E730AD9ED9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3b:f5:4c:5c:c4:d6:88:bb:64:30:cd:82:db: 8d:aa:e1:25:02:4a:63:51:13:9d:95:ee:11:a7:3e: 22:04:67:ad:a6:bc:6d:44:fa:4b:50:ac:61:13:9f: 4c:a2:a6:35:4d:c7:56:a5:3f:f1:68:5b:6d:e0:f5: f5:e4:5e:e4:a7:9c:98:8c:17:9c:03:59:0e:99:76: a1:cc:17:46:a4:80:27:1d:0a:a4:a3:3d:44:cb:f7: 3d:86:b8:ec:68:44:db:3f:76:7e:a6:79:3f:71:37: 1f:85:89:54:d8:41:66:93:45:75:fe:2d:a8:77:eb: a8:e6:c5:03:10:93:18:71:74:49:47:51:7b:ce:53: db:d0:f5:ef:dc:86:45:b7:e1:ed:78:15:fd:50:7f: 70:5c:ca:50:a6:9e:d8:c8:74:7a:b2:45:e4:5d:95: eb:d3:05:dd:61:d4:8b:9d:7e:98:69:ed:54:f3:07: cd:df:08:ed:2b:9e:47:f3:4b:00:70:3a:7c:63:b6: f7:0d:4c:4b:f5:6b:e5:56:a1:9f:40:3e:3c:41:e1: 4b:f8:a3:4e:dc:40:de:36:6f:15:39:ad:3f:04:0b: 67:82:c1:63:af:03:98:d3:b2:a0:4f:58:56:49:09: d5:55:19:79:29:ad:02:72:f1:fa:f2:da:b1:78:aa: 00:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:5F:ED:47:E7:B0:41:16:D8:9B:1E:5F:46:45:C8:E7:30:AD:9E:D9 X509v3 Authority Key Identifier: keyid:7E:FC:34:6D:E3:A1:4C:30:30:37:D3:F3:BF:A4:1F:CD:81:FA:0E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/323430313a313363303a3a2f33322d3336203d3e20313332363532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:13c0::/32 Signature Algorithm: sha256WithRSAEncryption 5a:ae:66:ad:59:9b:de:93:9e:20:52:64:82:e8:bf:3f:fd:5b: f6:ec:1d:e4:f2:bf:ee:43:ca:99:06:99:12:e4:d9:b1:0c:20: e4:3b:67:a0:f7:e2:fb:11:c7:f8:41:85:16:c3:40:9d:9e:3a: b0:3b:89:5c:a4:00:57:50:83:d4:55:13:61:49:0f:7c:3d:5c: 82:7f:57:70:97:aa:41:16:60:b6:0f:22:3d:ac:bb:cb:0a:47: af:a8:b6:1f:55:11:64:29:86:1c:72:98:76:d8:3d:b4:cb:78: 27:ee:d8:1d:3f:2f:a2:e4:03:d0:aa:24:74:68:05:9d:d0:d0: ae:65:33:aa:fe:d1:92:f2:3d:61:23:aa:55:ca:b0:7a:e0:20: 21:3b:24:d3:e1:6b:69:78:52:c2:c8:74:af:bb:f9:0b:a7:65: bf:84:5c:af:56:ad:09:eb:13:b4:73:99:fd:16:8f:3c:98:ff: eb:b3:27:86:e5:4f:a2:ce:39:71:e8:af:07:ef:7f:f8:18:57: 23:95:53:cc:0e:26:af:42:bc:48:42:dc:ea:13:0e:e6:2d:c0: 15:02:3f:69:64:29:a8:2f:0a:25:ed:f3:1b:2c:84:e7:d2:45: 6a:a7:ae:2f:aa:41:d6:06:31:76:09:09:10:db:21:77:5e:eb: 5d:82:91:50 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUAQRo3FKiIIRKQhV7aPVN0FIrKugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGQzM0NkRFM0ExNEMzMDMwMzdEM0YzQkZBNDFGQ0Q4 MUZBMEVFMTAeFw0yNjA1MDMwMjIyMDFaFw0yNzA1MDIwMjI3MDFaMDMxMTAvBgNV BAMTKDM4NUZFRDQ3RTdCMDQxMTZEODlCMUU1RjQ2NDVDOEU3MzBBRDlFRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmO/VMXMTWiLtkMM2C242q4SUC SmNRE52V7hGnPiIEZ62mvG1E+ktQrGETn0yipjVNx1alP/FoW23g9fXkXuSnnJiM F5wDWQ6ZdqHMF0akgCcdCqSjPUTL9z2GuOxoRNs/dn6meT9xNx+FiVTYQWaTRXX+ Lah366jmxQMQkxhxdElHUXvOU9vQ9e/chkW34e14Ff1Qf3BcylCmntjIdHqyReRd levTBd1h1Iudfphp7VTzB83fCO0rnkfzSwBwOnxjtvcNTEv1a+VWoZ9APjxB4Uv4 o07cQN42bxU5rT8EC2eCwWOvA5jTsqBPWFZJCdVVGXkprQJy8fry2rF4qgDNAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUOF/tR+ewQRbYmx5fRkXI5zCtntkwHwYDVR0j BBgwFoAUfvw0beOhTDAwN9Pzv6QfzYH6DuEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2I2MzJhMmMtNDA2ZS00NWQ3LWEwMjgtMjYwNDc0Yzc3MDM4LzAvN0VGQzM0NkRF M0ExNEMzMDMwMzdEM0YzQkZBNDFGQ0Q4MUZBMEVFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RUZDMzQ2REUzQTE0QzMwMzAzN0QzRjNCRkE0MUZDRDgxRkEw RUUxLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNiNjMyYTJjLTQwNmUtNDVkNy1h MDI4LTI2MDQ3NGM3NzAzOC8wLzMyMzQzMDMxM2EzMTMzNjMzMDNhM2EyZjMzMzIy ZDMzMzYyMDNkM2UyMDMxMzMzMjM2MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQBE8AwDQYJKoZI hvcNAQELBQADggEBAFquZq1Zm96TniBSZILovz/9W/bsHeTyv+5DypkGmRLk2bEM IOQ7Z6D34vsRx/hBhRbDQJ2eOrA7iVykAFdQg9RVE2FJD3w9XIJ/V3CXqkEWYLYP Ij2su8sKR6+oth9VEWQphhxymHbYPbTLeCfu2B0/L6LkA9CqJHRoBZ3Q0K5lM6r+ 0ZLyPWEjqlXKsHrgICE7JNPha2l4UsLIdK+7+QunZb+EXK9WrQnrE7Rzmf0WjzyY /+uzJ4blT6LOOXHorwfvf/gYVyOVU8wOJq9CvEhC3OoTDuYtwBUCP2lkKagvCiXt 8xsshOfSRWqnri+qQdYGMXYJCRDbIXde612CkVA= -----END CERTIFICATE-----Generated at Wed May 13 12:39:48 2026 by rpki-client