$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313034383a3a2f34382d3438203d3e203633383539.roa File: 323430323a383738303a313034383a3a2f34382d3438203d3e203633383539.roa (raw, json) Hash identifier: gavXjP1843btT/INQ5H4TJbB2kVozgzR0wx4AZmGfs4= Subject key identifier: 3A:86:77:0B:FF:CA:D8:C9:B8:87:8D:79:BE:A1:B7:4C:D3:DA:81:EC Certificate issuer: /CN=63C42504F704E536ADDF4D41DF027965A62F7B11 Certificate serial: 718B6F6B0C4C19033F431458D6A3EBF6F6396E98 Authority key identifier: 63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313034383a3a2f34382d3438203d3e203633383539.roa Signing time: Sun 03 May 2026 02:27:15 +0000 ROA not before: Sun 03 May 2026 02:22:15 +0000 ROA not after: Sun 02 May 2027 02:27:15 +0000 asID: 63859 IP address blocks: 2402:8780:1048::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:8b:6f:6b:0c:4c:19:03:3f:43:14:58:d6:a3:eb:f6:f6:39:6e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63C42504F704E536ADDF4D41DF027965A62F7B11 Validity Not Before: May 3 02:22:15 2026 GMT Not After : May 2 02:27:15 2027 GMT Subject: CN=3A86770BFFCAD8C9B8878D79BEA1B74CD3DA81EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e8:20:55:fc:35:96:ed:c4:b4:9c:0b:0f:53: 1d:cb:58:7b:be:b5:af:b0:a0:2c:93:80:ea:9b:71: 88:7d:6f:2e:6d:ef:96:72:b9:91:ea:09:32:ab:99: 9a:38:f6:80:62:cd:1f:bb:58:d6:55:11:8d:7e:c3: 77:a5:34:a9:3a:6f:6c:ba:84:ce:e7:fe:37:ae:25: 73:ce:da:96:32:1c:0e:53:42:b6:88:34:cf:3a:02: ba:f8:be:48:a4:c1:dc:0e:ae:ae:a6:cf:f6:c4:d1: 1f:49:c9:be:22:ea:c6:fe:c0:22:3c:80:56:0c:fc: 0d:14:c3:2d:16:69:67:57:0d:32:c0:59:e4:66:be: 9c:9b:58:66:86:38:46:09:5e:08:8f:af:e2:c1:54: 25:db:82:bf:3a:35:27:52:11:70:a9:b8:57:df:28: 96:4c:ec:cb:a2:f9:ef:bf:e4:19:de:c1:32:cb:c0: e1:71:dc:2f:34:e5:16:28:c6:42:a5:4d:f1:64:3c: a9:5e:97:bb:77:06:12:11:60:e8:12:55:0e:cd:8f: 54:01:e6:c5:00:20:f8:89:b4:e3:e0:d4:1e:c1:d5: 28:f4:0f:4d:f6:6a:09:b0:d2:b8:e0:5e:49:39:71: a8:0f:d8:97:66:e2:7a:3d:d6:9f:20:12:5d:d1:d9: 06:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:86:77:0B:FF:CA:D8:C9:B8:87:8D:79:BE:A1:B7:4C:D3:DA:81:EC X509v3 Authority Key Identifier: keyid:63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313034383a3a2f34382d3438203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:8780:1048::/48 Signature Algorithm: sha256WithRSAEncryption 4c:b5:3b:8b:ea:07:0d:60:fe:51:bb:f0:d3:25:03:c9:d3:7f: 7b:6f:4e:00:9c:bd:a6:2e:04:8b:9c:09:95:ec:32:66:ec:d7: 09:9a:4e:83:84:ee:e2:80:95:01:e4:f3:d1:2c:fc:52:2f:a5: e8:25:e6:a8:73:c4:40:14:9f:39:5a:d8:31:64:d9:0d:37:21: a2:e9:a5:f7:5e:b4:a7:5e:e8:f2:d4:fb:60:75:71:5e:94:4f: 5b:7d:12:82:15:14:24:19:4d:1e:a5:c9:6d:af:0a:48:56:cc: 07:a2:92:9e:1d:21:b9:e9:80:cb:e4:c5:a1:9a:c1:33:25:03: 37:1d:3f:6d:6f:02:a9:19:5c:64:41:cb:fd:9e:4d:e9:39:d6: ff:87:6b:a1:2e:dc:ab:ac:98:3c:df:36:c9:b0:a6:c0:9d:f0: 3a:78:9d:0a:99:dd:09:eb:23:97:28:8a:fe:19:6c:39:9d:ca: b7:26:8c:78:88:96:db:5f:e9:9e:79:d6:f2:39:21:a5:d1:44: 38:ee:c9:da:b6:f4:d3:52:79:cc:c4:07:1d:d0:98:cb:38:5c: 91:2b:03:f0:57:ce:30:d7:ae:e9:6a:1d:69:0e:50:f0:f4:f8: 15:72:0e:6b:8f:79:a5:73:b3:d2:b6:75:ad:27:18:d8:2e:36: ea:ae:9e:6a -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUcYtvawxMGQM/QxRY1qPr9vY5bpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNDNDI1MDRGNzA0RTUzNkFEREY0RDQxREYwMjc5NjVB NjJGN0IxMTAeFw0yNjA1MDMwMjIyMTVaFw0yNzA1MDIwMjI3MTVaMDMxMTAvBgNV BAMTKDNBODY3NzBCRkZDQUQ4QzlCODg3OEQ3OUJFQTFCNzRDRDNEQTgxRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu6CBV/DWW7cS0nAsPUx3LWHu+ ta+woCyTgOqbcYh9by5t75ZyuZHqCTKrmZo49oBizR+7WNZVEY1+w3elNKk6b2y6 hM7n/jeuJXPO2pYyHA5TQraINM86Arr4vkikwdwOrq6mz/bE0R9Jyb4i6sb+wCI8 gFYM/A0Uwy0WaWdXDTLAWeRmvpybWGaGOEYJXgiPr+LBVCXbgr86NSdSEXCpuFff KJZM7Mui+e+/5BnewTLLwOFx3C805RYoxkKlTfFkPKlel7t3BhIRYOgSVQ7Nj1QB 5sUAIPiJtOPg1B7B1Sj0D032agmw0rjgXkk5cagP2Jdm4no91p8gEl3R2QZfAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUOoZ3C//K2Mm4h415vqG3TNPagewwHwYDVR0j BBgwFoAUY8QlBPcE5Tat301B3wJ5ZaYvexEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2JiYjI3MzQtZTVmYS00MGViLTg1OTgtYjdjZDEwMTM0M2NhLzEvNjNDNDI1MDRG NzA0RTUzNkFEREY0RDQxREYwMjc5NjVBNjJGN0IxMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82M0M0MjUwNEY3MDRFNTM2QURERjRENDFERjAyNzk2NUE2MkY3 QjExLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8xLzMyMzQzMDMyM2EzODM3MzgzMDNhMzEzMDM0Mzgz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAKH gBBIMA0GCSqGSIb3DQEBCwUAA4IBAQBMtTuL6gcNYP5Ru/DTJQPJ0397b04AnL2m LgSLnAmV7DJm7NcJmk6DhO7igJUB5PPRLPxSL6XoJeaoc8RAFJ85WtgxZNkNNyGi 6aX3XrSnXujy1PtgdXFelE9bfRKCFRQkGU0epcltrwpIVswHopKeHSG56YDL5MWh msEzJQM3HT9tbwKpGVxkQcv9nk3pOdb/h2uhLtyrrJg83zbJsKbAnfA6eJ0Kmd0J 6yOXKIr+GWw5ncq3Jox4iJbbX+meedbyOSGl0UQ47snatvTTUnnMxAcd0JjLOFyR KwPwV84w167pah1pDlDw9PgVcg5rj3mlc7PStnWtJxjYLjbqrp5q -----END CERTIFICATE-----Generated at Wed May 13 05:14:34 2026 by rpki-client