$ rpki-client -vvf rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa File: 323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa (raw, json) Hash identifier: D1Bs40msN4T1EsFyFt+7hA3fUVZ3Ox4prYQv9dgFW30= Subject key identifier: BC:40:7C:6F:43:05:0E:27:16:0C:D3:E3:DF:18:C8:5D:E7:4C:11:5A Certificate issuer: /CN=33A70133EE15A92F98C43BE642D1CCF7C2B07E6F Certificate serial: 4CD67A9CA4C55D17BA2D989D0C3FC7B92803C8EB Authority key identifier: 33:A7:01:33:EE:15:A9:2F:98:C4:3B:E6:42:D1:CC:F7:C2:B0:7E:6F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa Signing time: Sun 03 May 2026 02:34:28 +0000 ROA not before: Sun 03 May 2026 02:29:28 +0000 ROA not after: Sun 02 May 2027 02:34:28 +0000 asID: 139419 IP address blocks: 2405:6740:a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:d6:7a:9c:a4:c5:5d:17:ba:2d:98:9d:0c:3f:c7:b9:28:03:c8:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33A70133EE15A92F98C43BE642D1CCF7C2B07E6F Validity Not Before: May 3 02:29:28 2026 GMT Not After : May 2 02:34:28 2027 GMT Subject: CN=BC407C6F43050E27160CD3E3DF18C85DE74C115A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b4:e7:86:43:e9:98:a7:79:e9:53:11:69:b2: 4a:8b:85:4f:32:90:00:03:00:4b:79:e4:7e:15:3b: 59:a1:fe:c1:b7:54:74:9d:87:02:99:58:e8:ac:76: bf:e2:b4:a8:a0:cd:74:bc:ee:93:55:8f:a8:1c:08: c5:e7:f1:ec:fa:35:cf:55:5e:3e:ef:ce:fc:2b:b9: 6e:4e:e8:5d:77:e3:d6:a2:25:1b:8c:58:c7:24:c2: 5c:7a:82:86:a1:ed:8d:36:f9:83:9e:e6:36:87:cd: ab:9a:b6:7c:d7:25:c7:14:af:5b:b2:57:e7:b9:5f: d4:ce:e4:f6:b0:78:85:4b:b0:36:8d:53:70:e9:d7: 80:5e:26:cb:ab:16:cc:3a:6f:a1:3a:4b:10:bf:6a: 6f:c4:2d:24:64:5f:ba:00:74:49:fd:9f:b9:87:64: 70:3b:95:87:81:97:81:3f:d8:63:8b:35:0c:c6:70: 20:32:78:35:a9:eb:f8:b4:fb:a4:23:d0:61:23:ae: 34:48:5a:c4:cb:52:74:d7:b4:dc:9a:ec:af:6b:80: e6:b2:2b:fb:26:dc:a7:44:c7:50:a0:71:9b:9c:7f: 51:ee:62:75:b7:f2:94:21:a0:46:61:b8:c1:d6:f0: d0:db:13:3f:5e:2b:12:36:d7:48:8e:04:e6:27:1a: 11:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:40:7C:6F:43:05:0E:27:16:0C:D3:E3:DF:18:C8:5D:E7:4C:11:5A X509v3 Authority Key Identifier: keyid:33:A7:01:33:EE:15:A9:2F:98:C4:3B:E6:42:D1:CC:F7:C2:B0:7E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:6740:a0::/48 Signature Algorithm: sha256WithRSAEncryption a2:37:91:41:11:a0:29:5c:dc:39:bc:82:ae:7d:64:65:a2:4a: 75:aa:bd:80:9d:91:aa:13:e0:1b:3a:fc:d2:7c:e1:9c:16:33: d6:29:55:bd:9d:b9:0a:aa:9e:22:72:26:0c:e9:93:66:10:ae: 5e:26:cd:38:24:2e:1a:5a:6c:a2:ab:27:67:9f:c4:3c:56:9a: ae:d3:c2:c6:da:82:35:dc:50:a9:a0:2f:7c:77:c0:96:82:71: 05:7c:7b:f8:15:ce:bc:00:e3:d6:90:c7:49:0d:85:22:50:43: e7:ca:26:eb:18:25:b3:79:e1:ee:e6:25:7f:8a:af:ad:c3:26: 81:28:36:c0:37:fc:44:dc:c2:b5:66:c5:c5:f3:32:d1:9d:d3: 31:70:ca:7d:b4:8d:84:04:19:cb:d9:b2:ab:fd:bf:9f:f6:89: a5:4d:91:92:40:1d:4e:ac:26:4d:40:3a:f7:25:53:25:29:73: 2d:96:7c:65:e0:8c:47:27:07:99:31:d5:db:c8:7a:1e:dd:e7: 39:d8:49:61:97:0f:24:1e:fd:58:b6:82:b6:5d:cc:e9:7d:5e: 64:65:6a:b7:4b:61:04:e0:ba:6e:af:26:57:7b:24:b2:8f:b4: 37:ea:4e:0e:ad:24:90:7d:2e:9d:e2:a7:dc:fa:a2:d5:e9:b1: 43:bb:1a:03 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUTNZ6nKTFXRe6LZidDD/HuSgDyOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNBNzAxMzNFRTE1QTkyRjk4QzQzQkU2NDJEMUNDRjdD MkIwN0U2RjAeFw0yNjA1MDMwMjI5MjhaFw0yNzA1MDIwMjM0MjhaMDMxMTAvBgNV BAMTKEJDNDA3QzZGNDMwNTBFMjcxNjBDRDNFM0RGMThDODVERTc0QzExNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCktOeGQ+mYp3npUxFpskqLhU8y kAADAEt55H4VO1mh/sG3VHSdhwKZWOisdr/itKigzXS87pNVj6gcCMXn8ez6Nc9V Xj7vzvwruW5O6F1349aiJRuMWMckwlx6goah7Y02+YOe5jaHzauatnzXJccUr1uy V+e5X9TO5PaweIVLsDaNU3Dp14BeJsurFsw6b6E6SxC/am/ELSRkX7oAdEn9n7mH ZHA7lYeBl4E/2GOLNQzGcCAyeDWp6/i0+6Qj0GEjrjRIWsTLUnTXtNya7K9rgOay K/sm3KdEx1CgcZucf1HuYnW38pQhoEZhuMHW8NDbEz9eKxI210iOBOYnGhGLAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUvEB8b0MFDicWDNPj3xjIXedMEVowHwYDVR0j BBgwFoAUM6cBM+4VqS+YxDvmQtHM98Kwfm8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTcxM2ZjMTctNTdmMS00NjcxLThhMTYtZjg1OGRkZDdkYTQzLzAvMzNBNzAxMzNF RTE1QTkyRjk4QzQzQkU2NDJEMUNDRjdDMkIwN0U2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0E3MDEzM0VFMTVBOTJGOThDNDNCRTY0MkQxQ0NGN0MyQjA3 RTZGLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzU3MTNmYzE3LTU3ZjEtNDY3MS04 YTE2LWY4NThkZGQ3ZGE0My8wLzMyMzQzMDM1M2EzNjM3MzQzMDNhNjEzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzOTM0MzEzOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQFZ0AA oDANBgkqhkiG9w0BAQsFAAOCAQEAojeRQRGgKVzcObyCrn1kZaJKdaq9gJ2RqhPg Gzr80nzhnBYz1ilVvZ25CqqeInImDOmTZhCuXibNOCQuGlpsoqsnZ5/EPFaartPC xtqCNdxQqaAvfHfAloJxBXx7+BXOvADj1pDHSQ2FIlBD58om6xgls3nh7uYlf4qv rcMmgSg2wDf8RNzCtWbFxfMy0Z3TMXDKfbSNhAQZy9myq/2/n/aJpU2RkkAdTqwm TUA69yVTJSlzLZZ8ZeCMRycHmTHV28h6Ht3nOdhJYZcPJB79WLaCtl3M6X1eZGVq t0thBOC6bq8mV3skso+0N+pODq0kkH0uneKn3Pqi1emxQ7saAw== -----END CERTIFICATE-----Generated at Wed May 13 16:19:31 2026 by rpki-client