$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/323430363a366434303a3131373a3a2f34382d3438203d3e20313431303536.roa File: 323430363a366434303a3131373a3a2f34382d3438203d3e20313431303536.roa (raw, json) Hash identifier: BPV+6AVtXTtCqmAeTgWPqzztODjS6FnhMhNhFeIQf6s= Subject key identifier: 82:28:90:BC:4E:C1:08:32:12:C9:E4:2A:BD:06:F3:A0:AB:A2:80:36 Certificate issuer: /CN=330092B238160780852731102A871D6304465F70 Certificate serial: 31EA9919E317D8874EE3F707425BB69C152F0232 Authority key identifier: 33:00:92:B2:38:16:07:80:85:27:31:10:2A:87:1D:63:04:46:5F:70 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/323430363a366434303a3131373a3a2f34382d3438203d3e20313431303536.roa Signing time: Sun 03 May 2026 02:28:23 +0000 ROA not before: Sun 03 May 2026 02:23:23 +0000 ROA not after: Sun 02 May 2027 02:28:23 +0000 asID: 141056 IP address blocks: 2406:6d40:117::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.crl rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:19:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ea:99:19:e3:17:d8:87:4e:e3:f7:07:42:5b:b6:9c:15:2f:02:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=330092B238160780852731102A871D6304465F70 Validity Not Before: May 3 02:23:23 2026 GMT Not After : May 2 02:28:23 2027 GMT Subject: CN=822890BC4EC1083212C9E42ABD06F3A0ABA28036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:af:ea:54:f6:84:0b:f6:8d:1d:fd:18:b8:cf: 20:f6:7c:9a:b8:13:75:9c:6c:f0:4c:18:9b:ff:3f: cb:0b:63:18:22:c8:72:5c:2f:9f:5c:43:94:82:fd: c8:d1:3c:45:54:c7:73:11:6f:15:43:86:5e:cc:56: e1:b1:cc:77:30:84:a2:aa:3b:e6:35:38:0e:2c:da: 5a:d7:a2:a8:66:f8:61:ea:2c:e4:da:a4:de:58:27: ff:e0:37:95:35:1a:5e:40:e4:59:d9:0d:3f:c5:83: 59:1b:ba:ea:49:7d:05:17:e2:71:77:e1:a8:9d:71: 57:c1:3c:31:8e:9d:e3:d8:2b:b5:e1:c3:87:b5:b2: 80:57:99:c0:15:8b:de:c2:dc:ad:1b:b3:12:3c:f1: dc:87:11:36:10:70:f0:5c:86:6d:9e:78:39:2e:17: 92:5a:cd:3e:8a:02:c2:36:a1:5b:fc:02:d4:67:b3: 9c:98:d1:f4:d2:ed:9a:3c:b0:d7:5f:10:ae:d4:c8: 4f:97:6c:10:98:f3:fa:11:d9:31:10:78:d2:59:31: 40:b4:77:04:74:80:59:ea:c2:37:37:8a:48:3a:58: c1:29:f9:e2:21:e1:f2:a1:28:fb:ce:74:a0:8b:d0: da:7d:ac:47:53:67:ad:db:77:11:f9:df:29:63:dc: 68:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:28:90:BC:4E:C1:08:32:12:C9:E4:2A:BD:06:F3:A0:AB:A2:80:36 X509v3 Authority Key Identifier: keyid:33:00:92:B2:38:16:07:80:85:27:31:10:2A:87:1D:63:04:46:5F:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/323430363a366434303a3131373a3a2f34382d3438203d3e20313431303536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:6d40:117::/48 Signature Algorithm: sha256WithRSAEncryption 11:15:4a:a1:f4:94:03:e6:55:01:4f:97:2a:f2:e5:7f:ba:35: c1:8c:80:d4:02:72:57:c3:af:52:2c:57:d0:e3:35:d0:18:1c: 6c:c9:98:c2:d0:ac:aa:65:8c:5c:fc:21:21:d9:11:0b:71:1e: 4d:f0:cb:b0:07:3c:90:11:b9:69:cd:b5:73:05:51:eb:75:b1: 73:a0:dd:24:d6:91:98:88:50:ff:56:64:8e:74:c0:f8:60:46: 5a:64:14:db:6b:5a:8c:43:c0:46:f7:00:4c:80:8d:6a:32:e4: a2:e0:53:ee:aa:82:b6:c0:57:ad:d4:8f:84:6a:a2:23:d4:dc: d0:f3:57:b1:2e:81:b9:44:ee:88:b8:f1:74:a4:07:b9:9c:e1: be:0a:3a:aa:57:b3:c8:53:9d:a7:ca:3d:fe:c7:27:4c:8e:42: 09:ae:ba:45:a3:69:c1:15:65:03:e8:ba:7a:86:a4:b7:10:dd: d6:43:a2:8a:35:eb:95:f9:0d:19:98:f2:40:37:14:8a:0f:5f: 9d:6f:d5:f7:b9:4e:53:31:5f:b2:6b:90:1c:09:b3:50:07:8e: 64:ee:74:76:25:9e:19:ef:51:6b:6f:e4:bd:a4:cf:76:ae:51: db:ac:b6:f4:34:31:f8:51:3a:8a:5a:73:f1:ef:d5:95:35:94: bd:82:46:c0 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUMeqZGeMX2IdO4/cHQlu2nBUvAjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMwMDkyQjIzODE2MDc4MDg1MjczMTEwMkE4NzFENjMw NDQ2NUY3MDAeFw0yNjA1MDMwMjIzMjNaFw0yNzA1MDIwMjI4MjNaMDMxMTAvBgNV BAMTKDgyMjg5MEJDNEVDMTA4MzIxMkM5RTQyQUJEMDZGM0EwQUJBMjgwMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChr+pU9oQL9o0d/Ri4zyD2fJq4 E3WcbPBMGJv/P8sLYxgiyHJcL59cQ5SC/cjRPEVUx3MRbxVDhl7MVuGxzHcwhKKq O+Y1OA4s2lrXoqhm+GHqLOTapN5YJ//gN5U1Gl5A5FnZDT/Fg1kbuupJfQUX4nF3 4aidcVfBPDGOnePYK7Xhw4e1soBXmcAVi97C3K0bsxI88dyHETYQcPBchm2eeDku F5JazT6KAsI2oVv8AtRns5yY0fTS7Zo8sNdfEK7UyE+XbBCY8/oR2TEQeNJZMUC0 dwR0gFnqwjc3ikg6WMEp+eIh4fKhKPvOdKCL0Np9rEdTZ63bdxH53ylj3GhHAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUgiiQvE7BCDISyeQqvQbzoKuigDYwHwYDVR0j BBgwFoAUMwCSsjgWB4CFJzEQKocdYwRGX3AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2UyYzQ4MTUtYjJkYS00YzIwLWJjMzEtNTAzYWRmNDliNDkwLzAvMzMwMDkyQjIz ODE2MDc4MDg1MjczMTEwMkE4NzFENjMwNDQ2NUY3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMzAwOTJCMjM4MTYwNzgwODUyNzMxMTAyQTg3MUQ2MzA0NDY1 RjcwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNlMmM0ODE1LWIyZGEtNGMyMC1i YzMxLTUwM2FkZjQ5YjQ5MC8wLzMyMzQzMDM2M2EzNjY0MzQzMDNhMzEzMTM3M2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMxMzAzNTM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAZt QAEXMA0GCSqGSIb3DQEBCwUAA4IBAQARFUqh9JQD5lUBT5cq8uV/ujXBjIDUAnJX w69SLFfQ4zXQGBxsyZjC0KyqZYxc/CEh2RELcR5N8MuwBzyQEblpzbVzBVHrdbFz oN0k1pGYiFD/VmSOdMD4YEZaZBTba1qMQ8BG9wBMgI1qMuSi4FPuqoK2wFet1I+E aqIj1NzQ81exLoG5RO6IuPF0pAe5nOG+CjqqV7PIU52nyj3+xydMjkIJrrpFo2nB FWUD6Lp6hqS3EN3WQ6KKNeuV+Q0ZmPJANxSKD1+db9X3uU5TMV+ya5AcCbNQB45k 7nR2JZ4Z71Frb+S9pM92rlHbrLb0NDH4UTqKWnPx79WVNZS9gkbA -----END CERTIFICATE-----Generated at Wed May 13 09:17:44 2026 by rpki-client