$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a3a2f33322d3332203d3e20313338383636.roa File: 323430343a666563303a3a2f33322d3332203d3e20313338383636.roa (raw, json) Hash identifier: ry1zcsxyp5rx5aqnNqVzN9RbPAzFPE5OKy5fVA/tBsY= Subject key identifier: C9:8A:8C:63:6D:D7:A2:0B:A2:5E:24:C0:88:B4:D6:A4:96:2E:18:E2 Certificate issuer: /CN=AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A Certificate serial: 1FFA3076E22C14080A881C7B55066A221EE4A5E9 Authority key identifier: AA:7E:83:DE:74:35:AB:78:AD:E6:13:7B:1E:AC:FD:C6:F6:BC:95:8A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a3a2f33322d3332203d3e20313338383636.roa Signing time: Sun 03 May 2026 02:35:22 +0000 ROA not before: Sun 03 May 2026 02:30:22 +0000 ROA not after: Sun 02 May 2027 02:35:22 +0000 asID: 138866 IP address blocks: 2404:fec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:23:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:fa:30:76:e2:2c:14:08:0a:88:1c:7b:55:06:6a:22:1e:e4:a5:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A Validity Not Before: May 3 02:30:22 2026 GMT Not After : May 2 02:35:22 2027 GMT Subject: CN=C98A8C636DD7A20BA25E24C088B4D6A4962E18E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:08:ef:7a:13:f1:ab:73:c3:53:00:ff:d8:44: 73:35:cc:4c:af:b6:d0:d2:0a:40:9e:ed:03:da:c3: c5:db:2f:00:c1:ce:fa:0f:06:68:22:cf:0c:73:52: 5a:80:39:7b:24:17:e3:26:f4:68:72:25:6a:7d:3e: 0d:71:a2:aa:dd:0b:d0:25:3f:c5:b9:82:ed:01:a7: eb:a8:ff:c9:39:92:15:e1:b9:d8:03:7b:47:ad:cb: 47:dd:87:d1:95:c1:75:72:82:c0:6f:d2:15:c1:71: d5:5d:f8:f1:62:b7:d5:72:3a:61:d8:a4:ac:19:cb: f8:ed:b0:46:51:7b:96:17:73:d6:1e:d6:a0:74:b4: e0:01:08:68:e0:3e:e8:c4:43:62:9c:08:66:36:b9: 43:44:ce:51:e0:4e:8b:be:8a:92:ce:e3:14:a5:f9: 81:86:7a:7e:06:57:0d:de:3a:68:47:c3:b5:ad:eb: dc:71:6b:41:ee:b4:6a:4b:65:67:cf:04:fb:03:26: d9:01:1b:cf:31:c1:b5:03:fa:df:9b:70:df:1d:f9: bd:1b:a8:4a:26:20:cc:a9:8b:af:f5:32:72:25:cc: fa:5b:76:b7:5e:5f:83:da:d3:e3:2f:f1:63:35:4f: 74:2c:03:ec:7f:15:95:01:2e:86:b8:bf:cb:87:21: 30:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:8A:8C:63:6D:D7:A2:0B:A2:5E:24:C0:88:B4:D6:A4:96:2E:18:E2 X509v3 Authority Key Identifier: keyid:AA:7E:83:DE:74:35:AB:78:AD:E6:13:7B:1E:AC:FD:C6:F6:BC:95:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a3a2f33322d3332203d3e20313338383636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fec0::/32 Signature Algorithm: sha256WithRSAEncryption 77:c4:45:f1:ef:fd:0c:5e:9c:c9:3c:bf:cb:59:4e:81:6d:dd: 60:0a:ca:79:0e:9c:a7:ca:8b:58:bf:af:58:e9:42:3b:63:65: 60:01:47:a7:08:77:fa:90:40:e1:97:4f:2a:90:7e:c2:c3:09: 9f:ba:ad:33:bc:08:99:a2:21:f8:7c:82:9f:fc:3b:0d:da:af: 4d:37:89:82:1e:a9:83:42:95:36:3e:6f:dd:bb:7d:79:61:08: 89:91:45:b6:4e:c2:e7:a2:03:14:58:89:d1:17:b0:44:89:e1: 96:31:32:bb:f4:92:d3:a4:c3:c3:87:d2:86:cf:61:09:cd:9f: 08:fe:a0:ec:bf:a9:c4:09:0a:6d:9e:4c:fc:c4:a4:f2:60:06: 6e:b6:8b:c7:d6:c2:4f:df:31:92:fa:f8:51:70:b7:38:44:da: cf:23:43:78:ac:a8:36:4a:a7:7f:03:10:56:bf:cb:db:f1:77: e9:9c:68:cd:db:ed:71:3e:33:4c:9c:f3:da:9c:0b:ee:18:8f: 63:03:96:96:e1:df:c4:38:72:68:a1:8e:75:91:26:3d:39:e4: 13:82:c4:d4:09:94:01:eb:cc:ee:00:a7:03:28:72:46:ac:79: d1:94:6a:b4:09:15:84:84:c3:2d:85:9c:96:f5:f2:97:a6:c1: 35:79:10:b4 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUH/owduIsFAgKiBx7VQZqIh7kpekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3RTgzREU3NDM1QUI3OEFERTYxMzdCMUVBQ0ZEQzZG NkJDOTU4QTAeFw0yNjA1MDMwMjMwMjJaFw0yNzA1MDIwMjM1MjJaMDMxMTAvBgNV BAMTKEM5OEE4QzYzNkREN0EyMEJBMjVFMjRDMDg4QjRENkE0OTYyRTE4RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/CO96E/Grc8NTAP/YRHM1zEyv ttDSCkCe7QPaw8XbLwDBzvoPBmgizwxzUlqAOXskF+Mm9GhyJWp9Pg1xoqrdC9Al P8W5gu0Bp+uo/8k5khXhudgDe0ety0fdh9GVwXVygsBv0hXBcdVd+PFit9VyOmHY pKwZy/jtsEZRe5YXc9Ye1qB0tOABCGjgPujEQ2KcCGY2uUNEzlHgTou+ipLO4xSl +YGGen4GVw3eOmhHw7Wt69xxa0HutGpLZWfPBPsDJtkBG88xwbUD+t+bcN8d+b0b qEomIMypi6/1MnIlzPpbdrdeX4Pa0+Mv8WM1T3QsA+x/FZUBLoa4v8uHITAnAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUyYqMY23XoguiXiTAiLTWpJYuGOIwHwYDVR0j BBgwFoAUqn6D3nQ1q3it5hN7Hqz9xva8lYowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWE1MTlhZWItNWM1Ni00Y2IzLTk0YTAtMGY0MDBlYTZhMzc1LzAvQUE3RTgzREU3 NDM1QUI3OEFERTYxMzdCMUVBQ0ZEQzZGNkJDOTU4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQTdFODNERTc0MzVBQjc4QURFNjEzN0IxRUFDRkRDNkY2QkM5 NThBLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVhNTE5YWViLTVjNTYtNGNiMy05 NGEwLTBmNDAwZWE2YTM3NS8wLzMyMzQzMDM0M2E2NjY1NjMzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzODM4MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQE/sAwDQYJKoZI hvcNAQELBQADggEBAHfERfHv/QxenMk8v8tZToFt3WAKynkOnKfKi1i/r1jpQjtj ZWABR6cId/qQQOGXTyqQfsLDCZ+6rTO8CJmiIfh8gp/8Ow3ar003iYIeqYNClTY+ b927fXlhCImRRbZOwueiAxRYidEXsESJ4ZYxMrv0ktOkw8OH0obPYQnNnwj+oOy/ qcQJCm2eTPzEpPJgBm62i8fWwk/fMZL6+FFwtzhE2s8jQ3isqDZKp38DEFa/y9vx d+mcaM3b7XE+M0yc89qcC+4Yj2MDlpbh38Q4cmihjnWRJj055BOCxNQJlAHrzO4A pwMockasedGUarQJFYSEwy2FnJb18pemwTV5ELQ= -----END CERTIFICATE-----Generated at Wed May 13 11:49:29 2026 by rpki-client