$ rpki-client -vvf rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/323430303a346563303a3a2f33322d3438203d3e203634333030.roa File: 323430303a346563303a3a2f33322d3438203d3e203634333030.roa (raw, json) Hash identifier: +c51V8VPvLdRJzVzsvsfm1mPoM5H0OBSu1SWRMxqOYg= Subject key identifier: BA:77:3D:06:01:2D:2C:A7:FF:02:47:29:29:28:A9:03:F2:35:3A:5D Certificate issuer: /CN=A33230767964863363DEE33E7BD3F5C204182D74 Certificate serial: 4059E52D9E349F1C4075A7A75AF5FD6BD066C46D Authority key identifier: A3:32:30:76:79:64:86:33:63:DE:E3:3E:7B:D3:F5:C2:04:18:2D:74 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A33230767964863363DEE33E7BD3F5C204182D74.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/323430303a346563303a3a2f33322d3438203d3e203634333030.roa Signing time: Sun 03 May 2026 02:34:53 +0000 ROA not before: Sun 03 May 2026 02:29:53 +0000 ROA not after: Sun 02 May 2027 02:34:53 +0000 asID: 64300 IP address blocks: 2400:4ec0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.crl rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A33230767964863363DEE33E7BD3F5C204182D74.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:51:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:59:e5:2d:9e:34:9f:1c:40:75:a7:a7:5a:f5:fd:6b:d0:66:c4:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A33230767964863363DEE33E7BD3F5C204182D74 Validity Not Before: May 3 02:29:53 2026 GMT Not After : May 2 02:34:53 2027 GMT Subject: CN=BA773D06012D2CA7FF0247292928A903F2353A5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e3:58:40:38:cf:75:8c:4e:60:5d:a0:fe:cd: 42:05:18:12:a2:60:e6:57:ee:39:8f:63:4a:a7:85: 7a:f2:68:78:3d:91:81:c7:9b:a9:82:9d:89:7a:16: 9c:25:19:86:84:eb:c4:d1:30:9e:c7:4c:2e:f6:24: e0:44:a3:7d:9b:7e:f2:4d:b6:ab:48:49:36:02:ab: a7:1d:67:82:5b:2b:51:97:5e:34:5b:7d:fb:5c:c7: c3:d6:16:95:8e:95:62:69:e9:65:76:94:41:74:58: f1:34:e9:d6:ab:d5:51:27:96:d6:a3:6c:ec:38:67: 35:e6:a5:6a:ab:10:4e:e2:81:3a:ed:8e:12:05:71: 55:aa:0a:73:9c:74:32:7e:c9:66:00:32:67:9f:69: bd:63:8e:8f:04:c4:fe:b6:f2:f3:83:e1:40:e8:60: ad:85:7e:6c:52:8d:2e:d6:0f:39:4e:33:58:81:94: 15:60:d7:9b:eb:6f:68:ce:c8:5b:43:91:42:23:d5: 8c:74:0d:3a:26:69:c3:36:a1:76:e1:64:d3:ca:6d: 8c:2f:d9:0b:47:58:c0:77:a2:f9:cb:39:fe:ce:23: 73:3f:98:66:53:79:2f:07:57:23:73:12:a7:9f:e9: 24:48:ae:84:04:e2:95:ec:82:ce:83:40:4d:c6:54: 1d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:77:3D:06:01:2D:2C:A7:FF:02:47:29:29:28:A9:03:F2:35:3A:5D X509v3 Authority Key Identifier: keyid:A3:32:30:76:79:64:86:33:63:DE:E3:3E:7B:D3:F5:C2:04:18:2D:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A33230767964863363DEE33E7BD3F5C204182D74.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/323430303a346563303a3a2f33322d3438203d3e203634333030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:4ec0::/32 Signature Algorithm: sha256WithRSAEncryption 57:b2:50:35:f0:18:4b:76:26:a9:1d:15:30:0a:83:fd:33:e1: 2d:8f:80:a8:bf:b7:b1:ee:c3:a5:98:1e:cf:68:5a:95:de:e7: 9e:ff:73:b2:b3:1f:ed:d2:83:40:01:1c:f7:68:06:ad:0c:00: 8e:84:31:24:ad:03:ef:bd:7a:6b:07:99:5c:88:78:7e:f6:92: e6:a4:32:95:15:3e:67:87:1c:90:52:cf:77:08:87:4d:fa:26: c8:65:0b:f4:7e:53:3f:c4:47:38:52:17:02:27:9f:ce:17:13: 18:07:94:1d:48:2c:0b:de:0b:6d:6b:76:d5:33:28:13:61:33: e0:52:dd:db:68:08:64:d3:e2:c3:a8:e5:b1:6e:1a:07:99:73: ae:8b:48:b5:05:3a:61:ff:3d:21:f2:ec:e8:08:d5:5a:f9:3d: e9:e9:d7:d0:20:66:29:57:f7:60:c4:10:44:1a:4d:7b:bf:13: 23:29:98:b3:79:32:51:fd:1c:74:15:ec:1b:c7:2b:e8:b3:78: 8f:93:69:da:46:16:f6:51:1d:fd:b9:f3:6c:13:5a:ea:c4:24: 63:c9:45:e1:67:77:98:6e:6b:d1:26:59:59:99:c2:1c:c7:83: 60:64:82:cc:f0:0d:00:e4:5b:9f:fe:5a:02:63:61:09:2b:f5: 4a:46:f5:e8 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUQFnlLZ40nxxAdaenWvX9a9BmxG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMzMjMwNzY3OTY0ODYzMzYzREVFMzNFN0JEM0Y1QzIw NDE4MkQ3NDAeFw0yNjA1MDMwMjI5NTNaFw0yNzA1MDIwMjM0NTNaMDMxMTAvBgNV BAMTKEJBNzczRDA2MDEyRDJDQTdGRjAyNDcyOTI5MjhBOTAzRjIzNTNBNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCF41hAOM91jE5gXaD+zUIFGBKi YOZX7jmPY0qnhXryaHg9kYHHm6mCnYl6FpwlGYaE68TRMJ7HTC72JOBEo32bfvJN tqtISTYCq6cdZ4JbK1GXXjRbfftcx8PWFpWOlWJp6WV2lEF0WPE06dar1VEnltaj bOw4ZzXmpWqrEE7igTrtjhIFcVWqCnOcdDJ+yWYAMmefab1jjo8ExP628vOD4UDo YK2FfmxSjS7WDzlOM1iBlBVg15vrb2jOyFtDkUIj1Yx0DTomacM2oXbhZNPKbYwv 2QtHWMB3ovnLOf7OI3M/mGZTeS8HVyNzEqef6SRIroQE4pXsgs6DQE3GVB0RAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUunc9BgEtLKf/AkcpKSipA/I1Ol0wHwYDVR0j BBgwFoAUozIwdnlkhjNj3uM+e9P1wgQYLXQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTg2ZDM2MzctOTJiNC00YWM3LWE3NWItOTljYjBiMDU2NWIwLzAvQTMzMjMwNzY3 OTY0ODYzMzYzREVFMzNFN0JEM0Y1QzIwNDE4MkQ3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzMyMzA3Njc5NjQ4NjMzNjNERUUzM0U3QkQzRjVDMjA0MTgy RDc0LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzU4NmQzNjM3LTkyYjQtNGFjNy1h NzViLTk5Y2IwYjA1NjViMC8wLzMyMzQzMDMwM2EzNDY1NjMzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDM2MzQzMzMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAE7AMA0GCSqGSIb3 DQEBCwUAA4IBAQBXslA18BhLdiapHRUwCoP9M+Etj4Cov7ex7sOlmB7PaFqV3uee /3Oysx/t0oNAARz3aAatDACOhDEkrQPvvXprB5lciHh+9pLmpDKVFT5nhxyQUs93 CIdN+ibIZQv0flM/xEc4UhcCJ5/OFxMYB5QdSCwL3gtta3bVMygTYTPgUt3baAhk 0+LDqOWxbhoHmXOui0i1BTph/z0h8uzoCNVa+T3p6dfQIGYpV/dgxBBEGk17vxMj KZizeTJR/Rx0Fewbxyvos3iPk2naRhb2UR39ufNsE1rqxCRjyUXhZ3eYbmvRJllZ mcIcx4NgZILM8A0A5Fuf/loCY2EJK/VKRvXo -----END CERTIFICATE-----Generated at Wed May 13 07:38:28 2026 by rpki-client