$ rpki-client -vvf rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a343031303a3a2f34382d3438203d3e20333937373633.roa File: 323430323a393830303a343031303a3a2f34382d3438203d3e20333937373633.roa (raw, json) Hash identifier: 3RYDjA/+VvPujec42HS91/3r7mFQlTmv45kE99bt1R0= Subject key identifier: F3:5D:59:17:DF:7B:51:7D:D0:71:F1:8E:B9:42:69:C1:74:BF:C5:BE Certificate issuer: /CN=E6E6F523D42F21D74E4B720AEC452D61205E5B6A Certificate serial: 78B73785E6C0B9A3DA9DCA04131B453ACF243C46 Authority key identifier: E6:E6:F5:23:D4:2F:21:D7:4E:4B:72:0A:EC:45:2D:61:20:5E:5B:6A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a343031303a3a2f34382d3438203d3e20333937373633.roa Signing time: Sun 03 May 2026 02:30:40 +0000 ROA not before: Sun 03 May 2026 02:25:40 +0000 ROA not after: Sun 02 May 2027 02:30:40 +0000 asID: 397763 IP address blocks: 2402:9800:4010::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.crl rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:b7:37:85:e6:c0:b9:a3:da:9d:ca:04:13:1b:45:3a:cf:24:3c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6E6F523D42F21D74E4B720AEC452D61205E5B6A Validity Not Before: May 3 02:25:40 2026 GMT Not After : May 2 02:30:40 2027 GMT Subject: CN=F35D5917DF7B517DD071F18EB94269C174BFC5BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:aa:7f:a6:9d:ab:6f:fb:26:03:6d:38:13:5f: 1d:f6:29:ba:ff:5a:ff:af:8e:6a:36:c5:89:b9:c8: 7c:de:30:03:58:6e:01:d4:dc:01:21:04:b4:44:8e: 3d:de:f1:a3:dc:6d:e7:e0:b3:4c:99:c7:c0:a3:4d: 83:10:77:d7:da:64:72:a6:69:86:fe:d3:89:50:09: 85:c2:a3:3a:da:37:2e:97:53:6e:ef:a2:b5:95:ab: 82:ad:97:f4:ad:de:0c:23:66:76:92:69:7b:db:9d: b1:41:2f:f1:54:e3:ca:b5:d1:00:24:6f:d6:96:d0: cd:6b:6c:3d:da:7d:44:51:1c:52:10:c2:86:1d:c0: b8:91:89:2b:4c:4d:29:69:79:d9:16:45:c6:ed:86: 30:a3:c5:7a:77:d5:6a:40:54:01:e8:ed:89:66:9e: 47:5f:c7:00:11:87:20:59:48:d8:6c:6a:c0:c6:41: f4:c6:e8:cf:89:c6:d9:62:d7:5f:2f:f2:f2:b0:4e: 41:3b:32:47:5c:27:99:d5:77:aa:45:d5:95:2c:84: 69:b7:e1:5a:af:b2:a7:10:7d:32:36:13:a8:69:9d: 5b:b8:0e:f3:0c:9f:77:b4:a0:c3:04:8a:55:b3:a6: 9f:a2:57:95:36:a7:63:a1:29:47:05:91:2a:36:1f: 8c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:5D:59:17:DF:7B:51:7D:D0:71:F1:8E:B9:42:69:C1:74:BF:C5:BE X509v3 Authority Key Identifier: keyid:E6:E6:F5:23:D4:2F:21:D7:4E:4B:72:0A:EC:45:2D:61:20:5E:5B:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a343031303a3a2f34382d3438203d3e20333937373633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:9800:4010::/48 Signature Algorithm: sha256WithRSAEncryption 08:aa:1e:e3:d5:aa:06:cb:17:55:fd:31:8e:ab:b9:33:a1:4d: 18:b2:6a:68:e4:e0:60:ed:d4:f4:a5:54:45:cd:f3:ad:7b:6c: a1:a3:b0:27:f5:37:8b:72:eb:ac:f0:3e:14:10:9e:70:36:19: e9:62:c3:9c:4d:25:ea:37:ff:59:d4:79:27:85:5a:26:ed:c3: 51:d6:60:da:59:7f:fe:6c:52:2c:0d:bf:24:cd:10:d8:67:3a: 05:79:f8:6f:47:f7:fb:54:71:fd:6e:b1:b2:69:6b:16:1e:e9: a2:6f:31:51:93:75:a3:2c:55:fb:01:99:80:50:8f:f8:72:73: 0f:9e:22:12:a5:7a:23:f0:b5:fb:f3:ab:2c:c7:ec:c7:5f:f4: 5f:e0:d5:c8:0d:d8:b2:cb:ea:aa:0d:60:02:97:07:92:3f:d5: 63:46:91:01:da:38:da:e6:af:cc:e7:f8:cd:b8:84:00:d7:80: 03:93:09:0c:ad:5a:2b:ee:f7:81:f3:05:40:86:ab:11:09:b8: 30:af:dd:fa:f6:93:60:73:c9:af:6a:e6:81:64:48:7a:46:70: c3:c3:f1:01:09:4c:3e:c9:8c:21:9a:12:de:1d:b6:cc:58:ae: d9:21:7f:c1:09:84:63:93:7d:ae:9f:58:67:12:8e:6d:e9:9f: 4d:fd:4b:ce -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUeLc3hebAuaPancoEExtFOs8kPEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTZFNkY1MjNENDJGMjFENzRFNEI3MjBBRUM0NTJENjEy MDVFNUI2QTAeFw0yNjA1MDMwMjI1NDBaFw0yNzA1MDIwMjMwNDBaMDMxMTAvBgNV BAMTKEYzNUQ1OTE3REY3QjUxN0REMDcxRjE4RUI5NDI2OUMxNzRCRkM1QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVqn+mnatv+yYDbTgTXx32Kbr/ Wv+vjmo2xYm5yHzeMANYbgHU3AEhBLREjj3e8aPcbefgs0yZx8CjTYMQd9faZHKm aYb+04lQCYXCozraNy6XU27vorWVq4Ktl/St3gwjZnaSaXvbnbFBL/FU48q10QAk b9aW0M1rbD3afURRHFIQwoYdwLiRiStMTSlpedkWRcbthjCjxXp31WpAVAHo7Ylm nkdfxwARhyBZSNhsasDGQfTG6M+Jxtli118v8vKwTkE7MkdcJ5nVd6pF1ZUshGm3 4VqvsqcQfTI2E6hpnVu4DvMMn3e0oMMEilWzpp+iV5U2p2OhKUcFkSo2H4wNAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU811ZF997UX3QcfGOuUJpwXS/xb4wHwYDVR0j BBgwFoAU5ub1I9QvIddOS3IK7EUtYSBeW2owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDc4ZmQ0YWYtZmU2Ny00NWM4LTgwYjctMDZmYzExOGRmOGUyLzAvRTZFNkY1MjNE NDJGMjFENzRFNEI3MjBBRUM0NTJENjEyMDVFNUI2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNkU2RjUyM0Q0MkYyMUQ3NEU0QjcyMEFFQzQ1MkQ2MTIwNUU1 QjZBLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ3OGZkNGFmLWZlNjctNDVjOC04 MGI3LTA2ZmMxMThkZjhlMi8wLzMyMzQzMDMyM2EzOTM4MzAzMDNhMzQzMDMxMzAz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM5MzczNzM2MzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk ApgAQBAwDQYJKoZIhvcNAQELBQADggEBAAiqHuPVqgbLF1X9MY6ruTOhTRiyamjk 4GDt1PSlVEXN8617bKGjsCf1N4ty66zwPhQQnnA2Geliw5xNJeo3/1nUeSeFWibt w1HWYNpZf/5sUiwNvyTNENhnOgV5+G9H9/tUcf1usbJpaxYe6aJvMVGTdaMsVfsB mYBQj/hycw+eIhKleiPwtfvzqyzH7Mdf9F/g1cgN2LLL6qoNYAKXB5I/1WNGkQHa ONrmr8zn+M24hADXgAOTCQytWivu94HzBUCGqxEJuDCv3fr2k2Bzya9q5oFkSHpG cMPD8QEJTD7JjCGaEt4dtsxYrtkhf8EJhGOTfa6fWGcSjm3pn039S84= -----END CERTIFICATE-----Generated at Wed May 13 10:36:50 2026 by rpki-client