$ rpki-client -vvf rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/323430313a383034303a3a2f33322d3332203d3e20313336313237.roa File: 323430313a383034303a3a2f33322d3332203d3e20313336313237.roa (raw, json) Hash identifier: Dj85ZEdEHR8+WCo+8/1VIzd5RABBzm91ckkaaPaldnM= Subject key identifier: B4:7F:D4:1C:12:21:AB:A5:C7:FD:03:63:6B:6D:B0:B8:A2:04:1B:38 Certificate issuer: /CN=509D7A005D22B25F29771D4736A9F3273A87402B Certificate serial: 3B1EBB41839416A1368580EA8283E22AD847CDC1 Authority key identifier: 50:9D:7A:00:5D:22:B2:5F:29:77:1D:47:36:A9:F3:27:3A:87:40:2B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/509D7A005D22B25F29771D4736A9F3273A87402B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/323430313a383034303a3a2f33322d3332203d3e20313336313237.roa Signing time: Sun 03 May 2026 02:29:55 +0000 ROA not before: Sun 03 May 2026 02:24:55 +0000 ROA not after: Sun 02 May 2027 02:29:55 +0000 asID: 136127 IP address blocks: 2401:8040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.crl rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/509D7A005D22B25F29771D4736A9F3273A87402B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:1e:bb:41:83:94:16:a1:36:85:80:ea:82:83:e2:2a:d8:47:cd:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509D7A005D22B25F29771D4736A9F3273A87402B Validity Not Before: May 3 02:24:55 2026 GMT Not After : May 2 02:29:55 2027 GMT Subject: CN=B47FD41C1221ABA5C7FD03636B6DB0B8A2041B38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a9:bd:6a:28:43:ec:87:2a:41:20:85:0c:91: 66:e0:64:c8:d2:60:ff:70:5b:6a:2d:d2:6e:fe:95: ae:27:a0:6e:2c:26:8d:ac:e5:39:c4:4b:df:5f:49: 55:00:82:90:c5:e4:4d:66:ed:76:bc:2d:96:83:bc: b2:f4:00:86:55:ec:54:e1:ae:e7:2d:39:35:b2:d1: 0e:41:4b:b2:b1:ba:ee:42:35:55:47:ee:8c:42:eb: 7f:d5:19:ee:a4:cf:f8:bc:39:83:cd:fa:35:47:ba: 6a:fe:3a:68:2a:52:0a:e6:35:e7:db:eb:07:0f:dc: a1:67:24:a8:72:2b:4a:f4:3e:3f:e6:13:44:f4:72: dc:36:0a:b4:ae:8e:ed:0a:a9:69:8c:3a:fc:a4:44: 92:77:de:69:4a:e5:3f:6f:0f:4b:71:20:3b:52:37: 46:64:e1:4e:ea:5a:18:5f:93:51:40:f8:1d:e6:a6: 76:e3:4e:97:37:fe:ae:c0:c1:64:a6:26:3b:33:8c: 6d:d7:d5:7f:0f:9f:08:4b:be:dd:2e:b4:7c:54:97: 29:45:86:97:6a:75:92:5f:35:a5:9c:f5:82:6c:eb: a6:ac:cd:3f:7e:4d:a2:9a:cb:96:92:85:c0:20:3c: 30:d4:f3:6f:53:4f:79:e1:9d:25:5b:99:aa:4d:74: c3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:7F:D4:1C:12:21:AB:A5:C7:FD:03:63:6B:6D:B0:B8:A2:04:1B:38 X509v3 Authority Key Identifier: keyid:50:9D:7A:00:5D:22:B2:5F:29:77:1D:47:36:A9:F3:27:3A:87:40:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/509D7A005D22B25F29771D4736A9F3273A87402B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/323430313a383034303a3a2f33322d3332203d3e20313336313237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:8040::/32 Signature Algorithm: sha256WithRSAEncryption 67:da:2b:08:f6:33:b5:03:b9:d4:61:17:4f:99:d4:3a:f2:a0: ab:76:cd:eb:b7:2a:09:e7:15:86:94:80:7c:f1:e3:6f:0b:ff: 34:35:8d:c0:72:88:40:52:ff:aa:ec:c7:e3:4f:c9:e6:bc:9c: de:7e:c6:1d:dd:be:69:3d:de:b4:8e:8a:50:c2:42:72:5f:45: d6:b3:6e:44:36:6f:d5:f6:15:e9:41:8c:f3:6a:f2:2e:4f:be: 20:6a:1f:56:e2:a4:60:8d:0d:83:4c:8c:19:53:19:42:22:7d: dc:61:65:77:0e:d0:05:2d:9e:1c:fb:1c:9f:10:50:c1:aa:0a: ef:96:c2:10:af:38:2c:74:5b:7d:c1:d9:98:44:ef:2e:b3:f2: cb:44:5d:c5:2f:71:a5:16:db:e1:fc:46:be:f0:a1:d6:83:6a: 13:55:23:8d:5b:58:46:bb:03:5b:68:bd:6e:16:30:49:57:c8: 5b:90:ad:9b:e9:f5:84:26:f8:79:9a:31:27:e5:8c:5a:44:04: 10:b9:b6:41:95:75:31:eb:e5:0d:54:3b:70:e1:b0:d3:c5:ea: da:af:f7:01:39:0b:3b:9d:39:9f:af:85:f9:8a:73:26:67:d8: ce:ba:b2:0e:8d:6f:f6:d2:2b:45:bf:6c:cc:32:6b:2f:6b:df: 22:02:e1:8e -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUOx67QYOUFqE2hYDqgoPiKthHzcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA5RDdBMDA1RDIyQjI1RjI5NzcxRDQ3MzZBOUYzMjcz QTg3NDAyQjAeFw0yNjA1MDMwMjI0NTVaFw0yNzA1MDIwMjI5NTVaMDMxMTAvBgNV BAMTKEI0N0ZENDFDMTIyMUFCQTVDN0ZEMDM2MzZCNkRCMEI4QTIwNDFCMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIqb1qKEPshypBIIUMkWbgZMjS YP9wW2ot0m7+la4noG4sJo2s5TnES99fSVUAgpDF5E1m7Xa8LZaDvLL0AIZV7FTh ructOTWy0Q5BS7Kxuu5CNVVH7oxC63/VGe6kz/i8OYPN+jVHumr+OmgqUgrmNefb 6wcP3KFnJKhyK0r0Pj/mE0T0ctw2CrSuju0KqWmMOvykRJJ33mlK5T9vD0txIDtS N0Zk4U7qWhhfk1FA+B3mpnbjTpc3/q7AwWSmJjszjG3X1X8PnwhLvt0utHxUlylF hpdqdZJfNaWc9YJs66aszT9+TaKay5aShcAgPDDU829TT3nhnSVbmapNdMPlAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUtH/UHBIhq6XH/QNja22wuKIEGzgwHwYDVR0j BBgwFoAUUJ16AF0isl8pdx1HNqnzJzqHQCswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDRiMjczMDMtOWUzZC00ZDQyLWFmMjUtNmEwZjExODA4ZjI3LzAvNTA5RDdBMDA1 RDIyQjI1RjI5NzcxRDQ3MzZBOUYzMjczQTg3NDAyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MDlEN0EwMDVEMjJCMjVGMjk3NzFENDczNkE5RjMyNzNBODc0 MDJCLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ0YjI3MzAzLTllM2QtNGQ0Mi1h ZjI1LTZhMGYxMTgwOGYyNy8wLzMyMzQzMDMxM2EzODMwMzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzNjMxMzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQBgEAwDQYJKoZI hvcNAQELBQADggEBAGfaKwj2M7UDudRhF0+Z1DryoKt2zeu3KgnnFYaUgHzx428L /zQ1jcByiEBS/6rsx+NPyea8nN5+xh3dvmk93rSOilDCQnJfRdazbkQ2b9X2FelB jPNq8i5PviBqH1bipGCNDYNMjBlTGUIifdxhZXcO0AUtnhz7HJ8QUMGqCu+WwhCv OCx0W33B2ZhE7y6z8stEXcUvcaUW2+H8Rr7wodaDahNVI41bWEa7A1tovW4WMElX yFuQrZvp9YQm+HmaMSfljFpEBBC5tkGVdTHr5Q1UO3DhsNPF6tqv9wE5CzudOZ+v hfmKcyZn2M66sg6Nb/bSK0W/bMwyay9r3yIC4Y4= -----END CERTIFICATE-----Generated at Wed May 13 16:25:32 2026 by rpki-client