$ rpki-client -vvf rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/323430333a38303a3a2f33322d3332203d3e20313334363233.roa File: 323430333a38303a3a2f33322d3332203d3e20313334363233.roa (raw, json) Hash identifier: inLR2m+CNyWZtV7tSrbcfy2w31JySfyEWxhtZ4Xzv1o= Subject key identifier: 7B:46:6F:1A:83:7C:C3:AB:14:B8:93:BC:C8:B4:C8:48:54:1C:7A:01 Certificate issuer: /CN=37CDF1E94BDAEC139CC5236CAC31B5BCC9698801 Certificate serial: 4FD901BEE97F1CD7E22CFA85426F315B710EB678 Authority key identifier: 37:CD:F1:E9:4B:DA:EC:13:9C:C5:23:6C:AC:31:B5:BC:C9:69:88:01 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/323430333a38303a3a2f33322d3332203d3e20313334363233.roa Signing time: Sun 03 May 2026 02:28:36 +0000 ROA not before: Sun 03 May 2026 02:23:36 +0000 ROA not after: Sun 02 May 2027 02:28:36 +0000 asID: 134623 IP address blocks: 2403:80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.crl rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:d9:01:be:e9:7f:1c:d7:e2:2c:fa:85:42:6f:31:5b:71:0e:b6:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37CDF1E94BDAEC139CC5236CAC31B5BCC9698801 Validity Not Before: May 3 02:23:36 2026 GMT Not After : May 2 02:28:36 2027 GMT Subject: CN=7B466F1A837CC3AB14B893BCC8B4C848541C7A01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:75:21:1a:27:a3:b9:9b:3a:e7:5a:ac:03:02: ef:cf:7b:b0:91:8f:8b:3b:0e:48:ee:2a:87:d9:34: ef:b7:f6:ea:68:8e:29:02:14:ad:53:48:8e:1e:55: ec:a0:fb:3d:67:ae:12:c2:1a:3e:ba:d2:50:05:dc: 6e:14:7a:43:76:52:2f:95:01:f6:7d:6d:dc:9d:ad: fb:5b:c5:4e:68:28:5e:de:d0:55:8f:c7:a6:78:40: 20:9c:4f:cf:7b:5b:72:72:c9:cc:7c:3d:1d:dc:2e: 7e:47:5d:7c:04:4d:4a:bc:9d:1c:8b:57:4b:13:6d: ae:92:67:84:41:ee:b2:64:4a:99:eb:1e:8a:5f:a8: 75:45:70:ef:c5:6d:0d:7e:ef:c1:fd:69:ad:41:1b: 8c:f2:af:e2:98:e8:ae:a2:e9:8e:79:f0:6c:73:4e: d6:ef:4e:73:be:f0:15:c9:35:65:6d:16:a4:81:30: 81:f7:08:6f:d1:16:38:db:a1:27:38:48:28:45:e9: f8:c8:89:d3:d1:98:06:84:90:2e:0b:b4:84:6f:60: 02:88:46:d3:7e:bc:cf:6f:47:e2:6d:93:95:ad:85: 79:e7:b1:63:32:15:a1:03:5b:ae:3e:97:bd:49:a7: 15:8a:90:75:ed:a0:1d:5f:a5:ed:22:3d:38:ed:d5: 4d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:46:6F:1A:83:7C:C3:AB:14:B8:93:BC:C8:B4:C8:48:54:1C:7A:01 X509v3 Authority Key Identifier: keyid:37:CD:F1:E9:4B:DA:EC:13:9C:C5:23:6C:AC:31:B5:BC:C9:69:88:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/323430333a38303a3a2f33322d3332203d3e20313334363233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:80::/32 Signature Algorithm: sha256WithRSAEncryption 45:f9:1c:eb:50:b1:6f:d2:4b:8f:6f:4f:6a:40:70:e9:d5:4d: ca:58:5a:a8:e7:20:c6:55:0e:e5:53:ba:6d:2b:df:8b:df:61: 4f:ad:80:e5:1a:7b:55:ee:29:00:21:81:21:20:18:bd:fc:cd: dd:ad:23:22:91:b7:0c:9f:a1:cd:31:35:59:37:dc:fb:28:17: a5:4c:37:0d:35:2e:a0:93:67:e8:73:e0:b5:6c:5d:d6:2d:16: 78:68:d7:78:de:2e:25:78:3b:f6:f9:44:f1:36:28:bb:e2:85: 8d:66:2d:57:90:5d:eb:e6:e4:5a:73:84:94:16:48:86:75:7d: 4a:83:01:e8:f6:32:31:04:3a:c1:3b:fc:b8:43:8d:c0:ef:53: 00:3d:0b:b0:20:06:30:b6:13:ba:c8:aa:2a:53:c7:58:d9:f8: 0d:42:86:73:75:af:af:76:bf:2c:32:ee:cb:50:8a:be:3c:7a: 7a:3b:ec:88:f5:ae:da:91:9b:c7:a3:c5:d7:46:75:b0:4b:05: 34:73:06:cc:7d:e7:fb:13:06:f0:95:4b:47:04:2c:8a:14:f5: 62:0f:07:6a:b5:b4:44:18:8a:71:62:eb:b3:db:e8:2c:d2:c1: d9:d9:e8:9b:cd:78:cc:62:2e:12:2c:63:86:18:d0:78:09:fe: 77:70:2b:8d -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUT9kBvul/HNfiLPqFQm8xW3EOtngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdDREYxRTk0QkRBRUMxMzlDQzUyMzZDQUMzMUI1QkND OTY5ODgwMTAeFw0yNjA1MDMwMjIzMzZaFw0yNzA1MDIwMjI4MzZaMDMxMTAvBgNV BAMTKDdCNDY2RjFBODM3Q0MzQUIxNEI4OTNCQ0M4QjRDODQ4NTQxQzdBMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVdSEaJ6O5mzrnWqwDAu/Pe7CR j4s7DkjuKofZNO+39upojikCFK1TSI4eVeyg+z1nrhLCGj660lAF3G4UekN2Ui+V AfZ9bdydrftbxU5oKF7e0FWPx6Z4QCCcT897W3Jyycx8PR3cLn5HXXwETUq8nRyL V0sTba6SZ4RB7rJkSpnrHopfqHVFcO/FbQ1+78H9aa1BG4zyr+KY6K6i6Y558Gxz TtbvTnO+8BXJNWVtFqSBMIH3CG/RFjjboSc4SChF6fjIidPRmAaEkC4LtIRvYAKI RtN+vM9vR+Jtk5WthXnnsWMyFaEDW64+l71JpxWKkHXtoB1fpe0iPTjt1U2lAgMB AAGjggIuMIICKjAdBgNVHQ4EFgQUe0ZvGoN8w6sUuJO8yLTISFQcegEwHwYDVR0j BBgwFoAUN83x6Uva7BOcxSNsrDG1vMlpiAEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2VkMTAwZGYtMDQ0MS00MzgxLWEzZmEtNTg3ZGI5ZTljMmYwLzAvMzdDREYxRTk0 QkRBRUMxMzlDQzUyMzZDQUMzMUI1QkNDOTY5ODgwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zN0NERjFFOTRCREFFQzEzOUNDNTIzNkNBQzMxQjVCQ0M5Njk4 ODAxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2VkMTAwZGYtMDQ0MS00MzgxLWEz ZmEtNTg3ZGI5ZTljMmYwLzAvMzIzNDMwMzMzYTM4MzAzYTNhMmYzMzMyMmQzMzMy MjAzZDNlMjAzMTMzMzQzNjMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAwCAMA0GCSqGSIb3DQEB CwUAA4IBAQBF+RzrULFv0kuPb09qQHDp1U3KWFqo5yDGVQ7lU7ptK9+L32FPrYDl GntV7ikAIYEhIBi9/M3drSMikbcMn6HNMTVZN9z7KBelTDcNNS6gk2foc+C1bF3W LRZ4aNd43i4leDv2+UTxNii74oWNZi1XkF3r5uRac4SUFkiGdX1KgwHo9jIxBDrB O/y4Q43A71MAPQuwIAYwthO6yKoqU8dY2fgNQoZzda+vdr8sMu7LUIq+PHp6O+yI 9a7akZvHo8XXRnWwSwU0cwbMfef7EwbwlUtHBCyKFPViDwdqtbREGIpxYuuz2+gs 0sHZ2eibzXjMYi4SLGOGGNB4Cf53cCuN -----END CERTIFICATE-----Generated at Wed May 13 05:14:24 2026 by rpki-client