$ rpki-client -vvf rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/323430323a326334303a3a2f34382d3438203d3e20313336383734.roa File: 323430323a326334303a3a2f34382d3438203d3e20313336383734.roa (raw, json) Hash identifier: zi1G9BahVDm/M7Dcf6hyf4kk3uCGA92haLufy2kBDKs= Subject key identifier: 3E:E9:B4:EA:70:EE:A8:17:FA:89:0C:38:3D:F4:C6:52:CE:E3:92:83 Certificate issuer: /CN=E88BC8A7F27D2A5B7520E87760889CD042853ADE Certificate serial: 6BF4617B25EFA297D7FC7BFB69616A84BE137EA1 Authority key identifier: E8:8B:C8:A7:F2:7D:2A:5B:75:20:E8:77:60:88:9C:D0:42:85:3A:DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/323430323a326334303a3a2f34382d3438203d3e20313336383734.roa Signing time: Sun 03 May 2026 02:30:33 +0000 ROA not before: Sun 03 May 2026 02:25:33 +0000 ROA not after: Sun 02 May 2027 02:30:33 +0000 asID: 136874 IP address blocks: 2402:2c40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:51:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:f4:61:7b:25:ef:a2:97:d7:fc:7b:fb:69:61:6a:84:be:13:7e:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E88BC8A7F27D2A5B7520E87760889CD042853ADE Validity Not Before: May 3 02:25:33 2026 GMT Not After : May 2 02:30:33 2027 GMT Subject: CN=3EE9B4EA70EEA817FA890C383DF4C652CEE39283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d7:19:ef:dc:86:c7:ce:f3:1f:51:a7:ab:20: 10:d1:fc:3a:39:b7:d1:db:1c:1d:d5:53:64:f7:e0: da:35:b3:85:f8:53:5c:6b:d0:d9:89:12:5d:64:dd: da:bd:bf:8d:5c:57:49:19:dd:00:c7:9b:ee:74:44: 4f:11:09:84:61:e6:98:a7:53:37:73:aa:4d:fc:cf: 38:34:55:7c:18:15:92:63:3b:3f:62:e8:e1:d1:5b: 7f:68:f7:b6:87:01:d7:18:f5:b6:35:cf:79:4f:e9: 1a:d2:46:27:43:e4:a8:f1:13:00:50:62:ce:ee:82: 5a:d2:aa:57:da:c6:ba:f7:c9:c6:4c:c9:fc:fb:d3: 69:86:1e:d2:9e:5a:80:f6:b5:4b:85:93:ed:75:0f: 7f:7c:22:21:4e:e4:37:b7:b0:32:48:69:2b:06:98: 28:2e:33:c6:14:84:28:6b:e7:27:ec:b3:84:95:4e: fd:7e:94:d8:1d:51:10:4a:5f:6d:45:9e:e9:4c:3c: 1e:8c:8b:2a:6f:3b:07:57:d1:cc:05:29:57:2c:e4: 57:36:d9:b9:a9:97:89:71:d4:f6:01:13:cc:eb:d7: a6:02:c9:47:b4:37:05:49:51:0e:ed:72:db:de:02: cb:fc:1e:dc:1f:24:08:22:09:66:9e:87:ba:02:f8: 5b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E9:B4:EA:70:EE:A8:17:FA:89:0C:38:3D:F4:C6:52:CE:E3:92:83 X509v3 Authority Key Identifier: keyid:E8:8B:C8:A7:F2:7D:2A:5B:75:20:E8:77:60:88:9C:D0:42:85:3A:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/323430323a326334303a3a2f34382d3438203d3e20313336383734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:2c40::/48 Signature Algorithm: sha256WithRSAEncryption 56:54:6e:7f:e5:f7:07:f0:74:ee:9d:ab:c6:b7:92:b9:41:bd: 26:16:72:47:9d:34:c5:b1:a3:0c:40:30:a4:82:7c:58:9a:b2: f7:62:9c:df:15:84:3b:5d:28:3d:1a:0e:e2:91:68:18:48:0d: 6e:0b:57:a4:7e:1a:09:cd:02:0f:28:b8:01:14:6b:37:e1:ce: 17:23:eb:f7:cc:42:82:03:9b:5a:b1:6b:90:90:7f:cf:93:0c: 45:d2:0d:25:0c:ee:78:9b:63:ce:14:a2:98:c4:b4:2e:2b:47: 53:d9:aa:81:37:8f:12:d5:8d:df:45:2c:c2:87:67:1d:b7:1d: b5:0c:71:e9:02:eb:67:76:c2:7d:99:b1:a3:d4:1a:37:22:4c: fd:9d:69:ec:eb:a0:64:0c:da:d1:67:c7:70:9b:44:32:7e:17: 25:18:cb:6f:e0:01:7d:61:c4:9b:66:30:d0:7b:69:67:b7:72: d4:4b:88:44:35:73:69:40:d4:78:62:53:8c:6c:76:d4:03:ce: a3:af:42:7d:08:00:57:36:2a:dd:9e:4c:78:86:93:ff:1e:62: 13:ba:ff:ba:ed:ad:56:54:8b:28:13:c4:42:bc:6e:f6:5a:12: 36:9f:7f:60:05:17:76:04:be:8a:f4:b1:49:29:3c:8c:88:86: a9:4c:b2:1f -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUa/RheyXvopfX/Hv7aWFqhL4TfqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg4QkM4QTdGMjdEMkE1Qjc1MjBFODc3NjA4ODlDRDA0 Mjg1M0FERTAeFw0yNjA1MDMwMjI1MzNaFw0yNzA1MDIwMjMwMzNaMDMxMTAvBgNV BAMTKDNFRTlCNEVBNzBFRUE4MTdGQTg5MEMzODNERjRDNjUyQ0VFMzkyODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM1xnv3IbHzvMfUaerIBDR/Do5 t9HbHB3VU2T34No1s4X4U1xr0NmJEl1k3dq9v41cV0kZ3QDHm+50RE8RCYRh5pin Uzdzqk38zzg0VXwYFZJjOz9i6OHRW39o97aHAdcY9bY1z3lP6RrSRidD5KjxEwBQ Ys7uglrSqlfaxrr3ycZMyfz702mGHtKeWoD2tUuFk+11D398IiFO5De3sDJIaSsG mCguM8YUhChr5yfss4SVTv1+lNgdURBKX21FnulMPB6MiypvOwdX0cwFKVcs5Fc2 2bmpl4lx1PYBE8zr16YCyUe0NwVJUQ7tctveAsv8HtwfJAgiCWaeh7oC+FtLAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUPum06nDuqBf6iQw4PfTGUs7jkoMwHwYDVR0j BBgwFoAU6IvIp/J9Klt1IOh3YIic0EKFOt4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDc3YmMzZDItNGFiMy00Y2ZiLTkyMjItNjZjNmVhOTQ0N2UzLzAvRTg4QkM4QTdG MjdEMkE1Qjc1MjBFODc3NjA4ODlDRDA0Mjg1M0FERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FODhCQzhBN0YyN0QyQTVCNzUyMEU4Nzc2MDg4OUNEMDQyODUz QURFLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ3N2JjM2QyLTRhYjMtNGNmYi05 MjIyLTY2YzZlYTk0NDdlMy8wLzMyMzQzMDMyM2EzMjYzMzQzMDNhM2EyZjM0Mzgy ZDM0MzgyMDNkM2UyMDMxMzMzNjM4MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQCLEAAADANBgkq hkiG9w0BAQsFAAOCAQEAVlRuf+X3B/B07p2rxreSuUG9JhZyR500xbGjDEAwpIJ8 WJqy92Kc3xWEO10oPRoO4pFoGEgNbgtXpH4aCc0CDyi4ARRrN+HOFyPr98xCggOb WrFrkJB/z5MMRdINJQzueJtjzhSimMS0LitHU9mqgTePEtWN30UswodnHbcdtQxx 6QLrZ3bCfZmxo9QaNyJM/Z1p7OugZAza0WfHcJtEMn4XJRjLb+ABfWHEm2Yw0Htp Z7dy1EuIRDVzaUDUeGJTjGx21APOo69CfQgAVzYq3Z5MeIaT/x5iE7r/uu2tVlSL KBPEQrxu9loSNp9/YAUXdgS+ivSxSSk8jIiGqUyyHw== -----END CERTIFICATE-----Generated at Wed May 13 07:56:37 2026 by rpki-client