$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa File: 323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa (raw, json) Hash identifier: sfzwSxhwf93yzsApW5cK5kJn4eNAyyEFWMZjQtMY6Ok= Subject key identifier: F5:BA:37:9C:0A:35:14:DC:12:40:85:FD:0A:27:7A:A6:64:71:B0:45 Certificate issuer: /CN=AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A Certificate serial: 2B64D5C86A03C2179999BF9846865D56CB26BE93 Authority key identifier: AA:7E:83:DE:74:35:AB:78:AD:E6:13:7B:1E:AC:FD:C6:F6:BC:95:8A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa Signing time: Sun 03 May 2026 02:35:20 +0000 ROA not before: Sun 03 May 2026 02:30:20 +0000 ROA not after: Sun 02 May 2027 02:35:20 +0000 asID: 138866 IP address blocks: 2404:fec0:250::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:23:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:64:d5:c8:6a:03:c2:17:99:99:bf:98:46:86:5d:56:cb:26:be:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A Validity Not Before: May 3 02:30:20 2026 GMT Not After : May 2 02:35:20 2027 GMT Subject: CN=F5BA379C0A3514DC124085FD0A277AA66471B045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2f:1e:01:0e:92:16:5b:f5:6b:e0:18:8f:78: cf:78:23:e2:91:80:6b:c8:25:77:31:83:c1:df:a7: 6a:cd:02:32:3e:61:70:73:27:cc:89:8a:4f:7d:cd: 47:5d:74:11:0d:a8:28:e7:35:89:15:80:2c:c6:6d: 7d:24:f0:45:81:41:fd:e2:45:a9:d3:78:7c:f4:ab: 15:41:9a:de:93:1c:3e:8f:26:1a:38:71:e3:c9:4b: c4:37:28:6f:05:1a:5c:18:82:f9:35:b0:6d:68:58: 59:31:a6:57:0e:15:bc:e5:12:22:87:61:0b:02:76: bc:cf:1f:58:58:e0:66:df:1a:c9:54:8d:ea:68:cc: d8:a7:0c:8a:0e:f2:e0:4c:9d:a3:14:3c:06:a4:85: 14:5d:0d:fc:eb:3c:12:44:74:bb:06:00:69:c7:09: 88:5e:bb:8f:87:88:9f:b6:55:a6:79:dd:fe:aa:fa: b0:e1:1b:4a:2d:0c:5b:79:f8:27:57:4f:fe:24:a7: 61:f9:01:cf:41:e5:49:77:bb:56:fa:e9:5b:cc:70: cf:e9:d4:a4:c2:fb:b1:66:9b:62:fb:2b:4c:7d:d8: a1:21:5a:d1:19:d0:35:2c:18:2d:d9:69:96:39:4a: 67:f6:99:5c:51:a5:db:8e:5e:a1:82:4d:89:e9:70: 5a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:BA:37:9C:0A:35:14:DC:12:40:85:FD:0A:27:7A:A6:64:71:B0:45 X509v3 Authority Key Identifier: keyid:AA:7E:83:DE:74:35:AB:78:AD:E6:13:7B:1E:AC:FD:C6:F6:BC:95:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fec0:250::/48 Signature Algorithm: sha256WithRSAEncryption 07:6d:ac:93:36:8f:e4:f0:d2:64:29:df:89:d5:89:5b:e3:f1: 21:2c:7d:10:56:c2:0b:5f:a3:60:20:d4:b9:07:09:8a:82:b9: ec:f7:5f:19:79:83:f8:0e:24:16:db:80:f8:ab:a7:ff:27:d6: de:c8:e8:94:69:c5:fe:d6:5a:f6:4b:61:87:5c:dd:ed:91:0c: 49:31:38:bb:3f:60:38:4a:32:3e:74:e1:dc:cf:3a:c7:15:af: a3:31:4e:52:ec:6c:da:36:63:af:13:ec:80:db:cb:e3:91:52: 45:35:c8:48:68:3f:ae:76:b9:2f:81:90:62:51:97:d5:e5:21: bb:85:be:3d:37:af:e3:40:a6:29:2d:4b:b1:bd:59:f9:53:a1: e1:fd:56:c9:55:75:b0:e4:61:7e:a8:d1:70:b6:87:b9:d2:6e: 26:5d:4d:28:8c:ea:eb:e5:88:7b:fc:6a:af:fa:c6:fb:d8:a3: 1c:51:c5:40:39:96:d6:58:db:02:62:0a:b6:45:75:3e:3d:b6: c1:38:ee:2d:e9:b5:7d:ba:2b:5a:70:4d:7a:d4:8d:0a:8b:03: da:b5:a7:24:b9:49:93:d2:59:c5:47:4b:e9:89:6d:e3:03:d6: 0b:d8:dd:e3:a2:e2:49:ba:2a:b3:13:97:07:4e:a3:23:03:b1: ac:53:7b:f1 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUK2TVyGoDwheZmb+YRoZdVssmvpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3RTgzREU3NDM1QUI3OEFERTYxMzdCMUVBQ0ZEQzZG NkJDOTU4QTAeFw0yNjA1MDMwMjMwMjBaFw0yNzA1MDIwMjM1MjBaMDMxMTAvBgNV BAMTKEY1QkEzNzlDMEEzNTE0REMxMjQwODVGRDBBMjc3QUE2NjQ3MUIwNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyLx4BDpIWW/Vr4BiPeM94I+KR gGvIJXcxg8Hfp2rNAjI+YXBzJ8yJik99zUdddBENqCjnNYkVgCzGbX0k8EWBQf3i RanTeHz0qxVBmt6THD6PJho4cePJS8Q3KG8FGlwYgvk1sG1oWFkxplcOFbzlEiKH YQsCdrzPH1hY4GbfGslUjepozNinDIoO8uBMnaMUPAakhRRdDfzrPBJEdLsGAGnH CYheu4+HiJ+2VaZ53f6q+rDhG0otDFt5+CdXT/4kp2H5Ac9B5Ul3u1b66VvMcM/p 1KTC+7Fmm2L7K0x92KEhWtEZ0DUsGC3ZaZY5Smf2mVxRpduOXqGCTYnpcFoHAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU9bo3nAo1FNwSQIX9Cid6pmRxsEUwHwYDVR0j BBgwFoAUqn6D3nQ1q3it5hN7Hqz9xva8lYowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWE1MTlhZWItNWM1Ni00Y2IzLTk0YTAtMGY0MDBlYTZhMzc1LzAvQUE3RTgzREU3 NDM1QUI3OEFERTYxMzdCMUVBQ0ZEQzZGNkJDOTU4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQTdFODNERTc0MzVBQjc4QURFNjEzN0IxRUFDRkRDNkY2QkM5 NThBLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVhNTE5YWViLTVjNTYtNGNiMy05 NGEwLTBmNDAwZWE2YTM3NS8wLzMyMzQzMDM0M2E2NjY1NjMzMDNhMzIzNTMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM4MzgzNjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAT+ wAJQMA0GCSqGSIb3DQEBCwUAA4IBAQAHbayTNo/k8NJkKd+J1Ylb4/EhLH0QVsIL X6NgINS5BwmKgrns918ZeYP4DiQW24D4q6f/J9beyOiUacX+1lr2S2GHXN3tkQxJ MTi7P2A4SjI+dOHczzrHFa+jMU5S7GzaNmOvE+yA28vjkVJFNchIaD+udrkvgZBi UZfV5SG7hb49N6/jQKYpLUuxvVn5U6Hh/VbJVXWw5GF+qNFwtoe50m4mXU0ojOrr 5Yh7/Gqv+sb72KMcUcVAOZbWWNsCYgq2RXU+PbbBOO4t6bV9uitacE161I0KiwPa tackuUmT0lnFR0vpiW3jA9YL2N3jouJJuiqzE5cHTqMjA7GsU3vx -----END CERTIFICATE-----Generated at Wed May 13 12:42:56 2026 by rpki-client