$ rpki-client -vvf rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3232313a3a2f34382d3438203d3e20313339393439.roa File: 323430353a616163303a3232313a3a2f34382d3438203d3e20313339393439.roa (raw, json) Hash identifier: XYxICLX+/f7ZO54ISlllPUXnMREujzuZEBysKGSvbEc= Subject key identifier: 54:C6:40:57:0F:2F:5E:AE:AF:BA:74:67:93:45:DB:05:F8:CB:30:C5 Certificate issuer: /CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0 Certificate serial: 02628B8BF36772ABD76ED1E670115CB8E71B1D1F Authority key identifier: 0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3232313a3a2f34382d3438203d3e20313339393439.roa Signing time: Sun 03 May 2026 02:28:13 +0000 ROA not before: Sun 03 May 2026 02:23:13 +0000 ROA not after: Sun 02 May 2027 02:28:13 +0000 asID: 139949 IP address blocks: 2405:aac0:221::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:62:8b:8b:f3:67:72:ab:d7:6e:d1:e6:70:11:5c:b8:e7:1b:1d:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0 Validity Not Before: May 3 02:23:13 2026 GMT Not After : May 2 02:28:13 2027 GMT Subject: CN=54C640570F2F5EAEAFBA74679345DB05F8CB30C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1a:34:a7:08:88:f5:8e:3e:cc:81:fc:f9:49: 65:10:2b:5a:5f:2d:a9:da:3d:07:4e:ae:fa:d6:81: fb:a9:82:41:bd:2b:bb:17:5d:51:ec:2a:ef:08:3b: 47:4c:a9:8a:bc:1f:9d:41:7a:01:49:3e:0e:5a:b9: 0d:64:14:38:3f:54:15:4e:db:01:6b:db:f7:a3:9c: a3:26:9a:99:0b:19:9b:8d:96:ef:1e:67:e6:be:db: e9:5e:21:7c:f1:6e:55:09:88:ef:0b:48:54:7c:51: 6b:4b:68:f9:fb:78:ef:a0:16:e6:02:d1:d3:b9:b1: 9b:38:74:4a:f8:5f:23:e9:fd:86:ce:90:11:9e:d6: 4e:9e:94:74:32:51:f3:5a:3a:55:87:45:72:e2:6b: b4:1f:67:d1:b4:1e:46:16:cb:56:6c:e3:fa:e3:94: 90:af:a0:7f:e2:4a:4a:3a:98:ef:61:da:4e:43:d7: d5:0b:bb:f5:fb:cf:86:9d:4b:3b:ff:22:59:fa:2f: d3:73:10:2c:3f:ab:3a:0b:f0:07:dd:30:f7:de:fc: 4b:bc:c4:dc:da:c1:b1:45:78:53:82:67:a1:90:05: 65:01:89:df:cf:6a:03:c2:2c:7a:ce:de:bd:bf:39: cc:24:22:fe:78:1b:f4:dc:94:ac:ed:80:b8:38:52: 61:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C6:40:57:0F:2F:5E:AE:AF:BA:74:67:93:45:DB:05:F8:CB:30:C5 X509v3 Authority Key Identifier: keyid:0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3232313a3a2f34382d3438203d3e20313339393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:aac0:221::/48 Signature Algorithm: sha256WithRSAEncryption b5:e6:9d:3c:2a:ab:a7:d0:c5:4d:58:9a:bb:8f:61:96:a2:b4: bc:a3:c6:a4:75:bc:d9:06:e7:0f:dc:35:ad:b2:33:a3:1f:4f: 00:b0:51:fa:f5:9c:73:71:05:c8:74:8b:16:b7:68:b1:d5:6a: 1a:e4:6f:0e:b0:98:35:9f:c2:19:9a:bc:c0:fa:23:49:d8:74: d3:74:1b:ec:a8:85:c5:3f:08:9a:1c:62:55:eb:45:d0:17:0c: 25:1b:cb:c7:70:0a:29:ca:a3:0a:ba:08:d1:ef:ab:50:41:e1: 08:8b:99:d3:13:6f:62:7f:dd:1d:a7:34:da:e5:bc:a3:a0:27: 33:3c:39:26:c7:ba:93:95:78:88:c3:1c:55:d6:e8:0c:9a:18: 40:88:36:bd:ec:96:d8:07:2a:52:4a:df:4d:86:fb:8f:86:24: 61:9f:29:ec:aa:ea:4c:2c:16:bd:51:e9:d4:26:a1:da:94:4f: 99:c4:6a:97:ff:be:93:7b:2b:49:6a:bc:72:bd:b5:9c:35:63: 1b:53:c3:7b:61:4e:09:4e:4b:c7:68:a3:39:8d:4c:96:78:9b: 7b:dc:8f:68:0f:d1:dc:8b:19:82:8f:bd:0b:35:e2:94:18:e2: 03:ca:bb:a3:f5:33:8b:23:b9:bf:59:0b:05:e2:a3:2e:82:fd: 6d:78:fb:bc -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUAmKLi/NncqvXbtHmcBFcuOcbHR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEwMjQ0NjJGRkRBN0UyNkU1RDM2NjYxQUFBREUyQzYw MUQwNjRGMDAeFw0yNjA1MDMwMjIzMTNaFw0yNzA1MDIwMjI4MTNaMDMxMTAvBgNV BAMTKDU0QzY0MDU3MEYyRjVFQUVBRkJBNzQ2NzkzNDVEQjA1RjhDQjMwQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcGjSnCIj1jj7Mgfz5SWUQK1pf LanaPQdOrvrWgfupgkG9K7sXXVHsKu8IO0dMqYq8H51BegFJPg5auQ1kFDg/VBVO 2wFr2/ejnKMmmpkLGZuNlu8eZ+a+2+leIXzxblUJiO8LSFR8UWtLaPn7eO+gFuYC 0dO5sZs4dEr4XyPp/YbOkBGe1k6elHQyUfNaOlWHRXLia7QfZ9G0HkYWy1Zs4/rj lJCvoH/iSko6mO9h2k5D19ULu/X7z4adSzv/Iln6L9NzECw/qzoL8AfdMPfe/Eu8 xNzawbFFeFOCZ6GQBWUBid/PagPCLHrO3r2/OcwkIv54G/TclKztgLg4UmHVAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUVMZAVw8vXq6vunRnk0XbBfjLMMUwHwYDVR0j BBgwFoAUCgJEYv/afibl02Zhqq3ixgHQZPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2RlZGMwMzMtY2Q0ZC00NjIwLTkzNzItZTZlMDM5ZmMwNmI5LzAvMEEwMjQ0NjJG RkRBN0UyNkU1RDM2NjYxQUFBREUyQzYwMUQwNjRGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQTAyNDQ2MkZGREE3RTI2RTVEMzY2NjFBQUFERTJDNjAxRDA2 NEYwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNkZWRjMDMzLWNkNGQtNDYyMC05 MzcyLWU2ZTAzOWZjMDZiOS8wLzMyMzQzMDM1M2E2MTYxNjMzMDNhMzIzMjMxM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM5MzkzNDM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAWq wAIhMA0GCSqGSIb3DQEBCwUAA4IBAQC15p08Kqun0MVNWJq7j2GWorS8o8akdbzZ BucP3DWtsjOjH08AsFH69ZxzcQXIdIsWt2ix1Woa5G8OsJg1n8IZmrzA+iNJ2HTT dBvsqIXFPwiaHGJV60XQFwwlG8vHcAopyqMKugjR76tQQeEIi5nTE29if90dpzTa 5byjoCczPDkmx7qTlXiIwxxV1ugMmhhAiDa97JbYBypSSt9NhvuPhiRhnynsqupM LBa9UenUJqHalE+ZxGqX/76TeytJarxyvbWcNWMbU8N7YU4JTkvHaKM5jUyWeJt7 3I9oD9HcixmCj70LNeKUGOIDyruj9TOLI7m/WQsF4qMugv1tePu8 -----END CERTIFICATE-----Generated at Wed May 13 09:15:03 2026 by rpki-client