$ rpki-client -vvf rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa File: 323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa (raw, json) Hash identifier: 0GUMhzS+5NIthW1wvl37lL5c5ztTRVnrHP+oCvOX4MA= Subject key identifier: 4A:CA:46:6F:B9:03:C5:B4:A8:A9:57:2D:4E:58:5E:03:F9:1F:4F:B0 Certificate issuer: /CN=2C1233B548C07507C6EF58E2A03DD8309F820753 Certificate serial: 6A536CFF9C407016B9D1F83C196ADDF7CD4B71B8 Authority key identifier: 2C:12:33:B5:48:C0:75:07:C6:EF:58:E2:A0:3D:D8:30:9F:82:07:53 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa Signing time: Sun 03 May 2026 02:32:57 +0000 ROA not before: Sun 03 May 2026 02:27:57 +0000 ROA not after: Sun 02 May 2027 02:32:57 +0000 asID: 38496 IP address blocks: 2407:3e80:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.crl rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:53:6c:ff:9c:40:70:16:b9:d1:f8:3c:19:6a:dd:f7:cd:4b:71:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C1233B548C07507C6EF58E2A03DD8309F820753 Validity Not Before: May 3 02:27:57 2026 GMT Not After : May 2 02:32:57 2027 GMT Subject: CN=4ACA466FB903C5B4A8A9572D4E585E03F91F4FB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:10:e3:3d:ac:18:ee:04:e2:8f:9e:33:62:2f: f3:3b:5a:90:70:41:2b:00:d3:74:0c:4f:e6:40:84: 9d:ce:cc:35:21:6f:54:b1:02:b7:5b:30:fe:f9:5d: a4:42:93:2a:8b:07:cf:eb:45:54:0e:9b:86:00:17: 59:9c:fd:0f:9f:84:10:7d:05:73:37:50:e6:32:fe: d2:c3:12:16:ac:00:20:33:75:fc:79:2e:71:9f:0a: 1a:68:08:9c:2f:c7:8c:10:53:ae:35:33:43:e5:be: 2d:c9:20:42:d3:12:02:e0:cb:05:a2:08:09:06:f5: 67:b5:f6:aa:eb:1f:3d:e9:90:79:ff:0f:a7:66:db: 3e:f1:74:31:7b:b3:fa:f1:7a:89:c0:21:39:42:e8: b9:82:01:a6:ef:19:50:f8:59:85:17:74:f7:d2:88: dd:1c:b4:92:59:4d:82:f8:8c:f1:38:3e:54:87:e1: 0c:3d:0b:e1:99:05:96:3f:6a:73:a8:d5:c4:37:4f: 3c:1e:d5:15:ed:93:18:6a:25:d0:04:b8:ce:7c:1a: a4:9f:3f:33:9b:f8:36:7e:8f:68:0a:19:f0:c0:67: f8:70:36:9d:31:ab:7a:6d:69:30:da:e1:c7:fe:e1: 69:54:e7:60:27:df:4b:5f:45:62:ed:b1:17:f6:7c: 6c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CA:46:6F:B9:03:C5:B4:A8:A9:57:2D:4E:58:5E:03:F9:1F:4F:B0 X509v3 Authority Key Identifier: keyid:2C:12:33:B5:48:C0:75:07:C6:EF:58:E2:A0:3D:D8:30:9F:82:07:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:3e80:6::/48 Signature Algorithm: sha256WithRSAEncryption a3:c4:68:fd:f7:a9:0d:c3:6c:da:31:44:41:4e:2e:00:d6:c1: ba:00:db:fa:e6:8e:fe:10:e1:c2:42:36:da:f9:4d:3b:7c:c3: 7c:20:ef:d5:2f:f1:b2:9c:e8:88:f4:92:78:37:fb:af:bd:ff: 3b:dd:08:14:91:f3:4a:95:d0:a7:71:56:6d:0a:91:07:88:ef: cd:63:4f:a6:a2:ff:b1:ee:13:48:ed:fe:90:c7:70:a4:b7:2e: 3f:6a:2b:fe:f2:5a:d9:0b:b7:75:6e:1f:8e:5a:f1:c9:f7:81: ed:9a:b9:e8:fd:bc:33:30:ac:52:84:6a:5e:74:9c:f8:73:48: b1:d9:cb:82:43:0f:e0:56:bd:d9:6f:e2:04:fc:46:04:81:f2: c3:05:0e:a7:1a:76:b7:0b:fa:78:8f:fa:63:57:f5:41:c1:79: e3:82:3c:ae:40:61:3b:57:b8:42:e4:7c:05:cb:c4:ab:90:d1: 47:77:34:21:51:78:95:ba:36:e7:97:ac:ef:8e:f9:ff:1a:99: b8:bd:b6:40:1a:9c:dc:65:8d:e5:5f:18:ee:00:36:44:cb:ac: 2f:64:63:e1:1b:a1:59:2c:f5:fb:1b:d5:83:af:cc:ac:ea:f5: a1:95:89:4d:ea:e1:53:46:ec:3f:8d:5d:0c:8c:06:ce:65:96: b1:67:1f:68 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUalNs/5xAcBa50fg8GWrd981LcbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkMxMjMzQjU0OEMwNzUwN0M2RUY1OEUyQTAzREQ4MzA5 RjgyMDc1MzAeFw0yNjA1MDMwMjI3NTdaFw0yNzA1MDIwMjMyNTdaMDMxMTAvBgNV BAMTKDRBQ0E0NjZGQjkwM0M1QjRBOEE5NTcyRDRFNTg1RTAzRjkxRjRGQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcEOM9rBjuBOKPnjNiL/M7WpBw QSsA03QMT+ZAhJ3OzDUhb1SxArdbMP75XaRCkyqLB8/rRVQOm4YAF1mc/Q+fhBB9 BXM3UOYy/tLDEhasACAzdfx5LnGfChpoCJwvx4wQU641M0Plvi3JIELTEgLgywWi CAkG9We19qrrHz3pkHn/D6dm2z7xdDF7s/rxeonAITlC6LmCAabvGVD4WYUXdPfS iN0ctJJZTYL4jPE4PlSH4Qw9C+GZBZY/anOo1cQ3Tzwe1RXtkxhqJdAEuM58GqSf PzOb+DZ+j2gKGfDAZ/hwNp0xq3ptaTDa4cf+4WlU52An30tfRWLtsRf2fGzvAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUSspGb7kDxbSoqVctTlheA/kfT7AwHwYDVR0j BBgwFoAULBIztUjAdQfG71jioD3YMJ+CB1MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTFlOTQyNDMtODdmMC00MjZmLWE5Y2EtNGMxOWVkYjA2YjQyLzAvMkMxMjMzQjU0 OEMwNzUwN0M2RUY1OEUyQTAzREQ4MzA5RjgyMDc1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQzEyMzNCNTQ4QzA3NTA3QzZFRjU4RTJBMDNERDgzMDlGODIw NzUzLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzUxZTk0MjQzLTg3ZjAtNDI2Zi1h OWNhLTRjMTllZGIwNmI0Mi8wLzMyMzQzMDM3M2EzMzY1MzgzMDNhMzYzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzQzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAc+gAAGMA0G CSqGSIb3DQEBCwUAA4IBAQCjxGj996kNw2zaMURBTi4A1sG6ANv65o7+EOHCQjba +U07fMN8IO/VL/GynOiI9JJ4N/uvvf873QgUkfNKldCncVZtCpEHiO/NY0+mov+x 7hNI7f6Qx3Ckty4/aiv+8lrZC7d1bh+OWvHJ94Htmrno/bwzMKxShGpedJz4c0ix 2cuCQw/gVr3Zb+IE/EYEgfLDBQ6nGna3C/p4j/pjV/VBwXnjgjyuQGE7V7hC5HwF y8SrkNFHdzQhUXiVujbnl6zvjvn/Gpm4vbZAGpzcZY3lXxjuADZEy6wvZGPhG6FZ LPX7G9WDr8ys6vWhlYlN6uFTRuw/jV0MjAbOZZaxZx9o -----END CERTIFICATE-----Generated at Wed May 13 02:59:45 2026 by rpki-client