$ rpki-client -vvf rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/323430373a396538303a3a2f33322d3332203d3e203634323937.roa File: 323430373a396538303a3a2f33322d3332203d3e203634323937.roa (raw, json) Hash identifier: E6tR5JFlnt4a2SDzp1URSec/UvlgqLYhcsF8yth51R4= Subject key identifier: 79:F1:37:FA:1F:64:1F:BE:EF:79:60:E9:1D:0B:B9:80:D5:EB:8D:BC Certificate issuer: /CN=D83D6E3A344960D91E10884AA1CEE3A3461E1BF9 Certificate serial: 136EBB30E751DE2938C27935BF2B9B82993B070A Authority key identifier: D8:3D:6E:3A:34:49:60:D9:1E:10:88:4A:A1:CE:E3:A3:46:1E:1B:F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/323430373a396538303a3a2f33322d3332203d3e203634323937.roa Signing time: Sun 03 May 2026 02:31:05 +0000 ROA not before: Sun 03 May 2026 02:26:05 +0000 ROA not after: Sun 02 May 2027 02:31:05 +0000 asID: 64297 IP address blocks: 2407:9e80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.crl rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:6e:bb:30:e7:51:de:29:38:c2:79:35:bf:2b:9b:82:99:3b:07:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D83D6E3A344960D91E10884AA1CEE3A3461E1BF9 Validity Not Before: May 3 02:26:05 2026 GMT Not After : May 2 02:31:05 2027 GMT Subject: CN=79F137FA1F641FBEEF7960E91D0BB980D5EB8DBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:69:bc:64:ae:c0:67:04:cf:12:cd:83:48:d5: 1f:d6:83:43:97:48:29:b5:1a:13:93:00:f3:ca:0e: 74:87:27:72:4e:a0:85:1e:a6:00:56:e7:78:ab:ac: 3d:7e:1b:7e:e7:4b:57:54:09:a6:41:bb:81:f7:29: 8a:f0:d1:fd:69:e1:08:06:f6:85:be:fe:c6:2c:1f: 1c:d0:df:0e:07:e3:9f:68:bb:11:b2:7c:d6:62:37: 37:55:8e:a7:fe:1c:c4:2a:3b:59:b9:f0:bb:e2:60: 5f:c8:f0:68:74:16:8b:a9:8a:30:d7:52:a6:11:8b: cd:6a:b3:b8:de:60:76:c5:f6:e0:59:d1:b9:e9:85: 74:1f:b6:79:09:02:fc:55:6a:c4:11:ff:b9:94:d5: b7:60:dc:60:7c:e9:e2:d9:4f:80:38:b0:59:0d:94: fc:14:f4:cc:5c:23:11:c0:20:66:1f:fb:47:f7:f8: 4f:b3:98:e0:e2:e4:97:75:6e:6a:51:af:25:91:91: b3:db:a5:c8:ae:b5:50:6b:28:e3:95:a6:94:f3:70: 02:91:7f:53:51:c0:41:92:86:52:74:9e:3a:c8:32: 8e:38:60:14:54:fc:72:11:cf:9e:21:df:5c:ed:3c: 99:55:e6:3f:95:82:7f:88:54:18:d0:5c:47:66:64: 08:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F1:37:FA:1F:64:1F:BE:EF:79:60:E9:1D:0B:B9:80:D5:EB:8D:BC X509v3 Authority Key Identifier: keyid:D8:3D:6E:3A:34:49:60:D9:1E:10:88:4A:A1:CE:E3:A3:46:1E:1B:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/323430373a396538303a3a2f33322d3332203d3e203634323937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:9e80::/32 Signature Algorithm: sha256WithRSAEncryption 89:a8:ee:ea:07:85:ca:52:c3:2d:13:45:9b:d0:e6:eb:a2:54: bf:4e:09:e8:4d:db:2e:43:b0:74:75:c3:37:60:b3:27:45:51: b9:a0:b6:31:32:1b:52:e4:96:e1:97:34:39:a3:18:a8:93:c4: 96:d3:86:ee:7e:3e:c3:51:2e:28:a9:23:63:b6:1d:f7:72:a5: da:9c:da:e3:38:36:7d:d8:6d:26:47:41:cc:aa:85:a1:f8:7f: 79:a3:94:56:73:ad:84:3e:93:a7:1d:7a:7b:54:ab:f1:5d:fc: 1e:7b:6b:f3:1d:d8:04:b0:95:fc:a0:f1:e1:c7:1d:68:7b:e1: 69:8c:7c:57:5e:e0:7f:08:96:09:fc:b3:c1:ea:73:05:f3:35: 4e:60:c7:5f:fe:31:cd:07:0a:fe:3a:91:24:c2:54:15:38:65: 2c:71:0b:ef:ca:61:c9:ca:8e:28:ab:1d:80:f1:39:bf:79:b7: 20:9a:5b:d5:3b:67:81:d1:f8:1b:5e:20:ec:08:6e:4a:a4:7b: 36:8d:59:db:33:5c:3f:db:10:32:6f:5c:fb:5f:fb:13:82:70: c7:b5:b7:aa:b6:37:51:b1:53:43:69:7e:99:e2:14:a0:98:68: 2a:0a:45:5d:95:6d:77:2f:dd:28:be:87:3e:7a:05:a4:26:19: e5:3b:a2:20 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUE267MOdR3ik4wnk1vyubgpk7BwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDgzRDZFM0EzNDQ5NjBEOTFFMTA4ODRBQTFDRUUzQTM0 NjFFMUJGOTAeFw0yNjA1MDMwMjI2MDVaFw0yNzA1MDIwMjMxMDVaMDMxMTAvBgNV BAMTKDc5RjEzN0ZBMUY2NDFGQkVFRjc5NjBFOTFEMEJCOTgwRDVFQjhEQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhabxkrsBnBM8SzYNI1R/Wg0OX SCm1GhOTAPPKDnSHJ3JOoIUepgBW53irrD1+G37nS1dUCaZBu4H3KYrw0f1p4QgG 9oW+/sYsHxzQ3w4H459ouxGyfNZiNzdVjqf+HMQqO1m58LviYF/I8Gh0FoupijDX UqYRi81qs7jeYHbF9uBZ0bnphXQftnkJAvxVasQR/7mU1bdg3GB86eLZT4A4sFkN lPwU9MxcIxHAIGYf+0f3+E+zmODi5Jd1bmpRryWRkbPbpciutVBrKOOVppTzcAKR f1NRwEGShlJ0njrIMo44YBRU/HIRz54h31ztPJlV5j+Vgn+IVBjQXEdmZAjBAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUefE3+h9kH77veWDpHQu5gNXrjbwwHwYDVR0j BBgwFoAU2D1uOjRJYNkeEIhKoc7jo0YeG/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDlkYTdiNmEtNGUxYS00MWZmLWI4ZWItOGMzNjRjZDI2NGIxLzAvRDgzRDZFM0Ez NDQ5NjBEOTFFMTA4ODRBQTFDRUUzQTM0NjFFMUJGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODNENkUzQTM0NDk2MEQ5MUUxMDg4NEFBMUNFRTNBMzQ2MUUx QkY5LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ5ZGE3YjZhLTRlMWEtNDFmZi1i OGViLThjMzY0Y2QyNjRiMS8wLzMyMzQzMDM3M2EzOTY1MzgzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDM2MzQzMjM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB56AMA0GCSqGSIb3 DQEBCwUAA4IBAQCJqO7qB4XKUsMtE0Wb0ObrolS/TgnoTdsuQ7B0dcM3YLMnRVG5 oLYxMhtS5JbhlzQ5oxiok8SW04bufj7DUS4oqSNjth33cqXanNrjODZ92G0mR0HM qoWh+H95o5RWc62EPpOnHXp7VKvxXfwee2vzHdgEsJX8oPHhxx1oe+FpjHxXXuB/ CJYJ/LPB6nMF8zVOYMdf/jHNBwr+OpEkwlQVOGUscQvvymHJyo4oqx2A8Tm/ebcg mlvVO2eB0fgbXiDsCG5KpHs2jVnbM1w/2xAyb1z7X/sTgnDHtbeqtjdRsVNDaX6Z 4hSgmGgqCkVdlW13L90ovoc+egWkJhnlO6Ig -----END CERTIFICATE-----Generated at Wed May 13 03:47:42 2026 by rpki-client