$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/323430323a623234303a3a2f34372d3437203d3e203234313938.roa File: 323430323a623234303a3a2f34372d3437203d3e203234313938.roa (raw, json) Hash identifier: Os0dOUCAo82Ro4JJGXlWsdYmgpvswgP/lGrJ/rFU8kQ= Subject key identifier: D0:0E:5B:E2:E8:49:3D:E0:D8:C7:32:5A:CD:DF:CD:B8:76:19:EC:3F Certificate issuer: /CN=65DBBEC678177B7159AD901A4023BA57AA4096DC Certificate serial: 4B2741D4CA86B7A947B2616CFE42AEB4D4658F74 Authority key identifier: 65:DB:BE:C6:78:17:7B:71:59:AD:90:1A:40:23:BA:57:AA:40:96:DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/323430323a623234303a3a2f34372d3437203d3e203234313938.roa Signing time: Sun 03 May 2026 02:35:44 +0000 ROA not before: Sun 03 May 2026 02:30:44 +0000 ROA not after: Sun 02 May 2027 02:35:44 +0000 asID: 24198 IP address blocks: 2402:b240::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.crl rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:27:41:d4:ca:86:b7:a9:47:b2:61:6c:fe:42:ae:b4:d4:65:8f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65DBBEC678177B7159AD901A4023BA57AA4096DC Validity Not Before: May 3 02:30:44 2026 GMT Not After : May 2 02:35:44 2027 GMT Subject: CN=D00E5BE2E8493DE0D8C7325ACDDFCDB87619EC3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:2b:d6:f8:83:bc:86:1f:dc:c0:9c:96:a6:5c: 94:77:a7:45:6a:c7:e4:82:e3:63:c6:35:d1:f9:a3: 7a:fc:bd:b4:05:cd:4f:a5:23:0d:85:12:83:e9:2a: eb:6c:99:11:a3:da:73:60:cb:71:82:93:2e:59:10: 5f:b8:ab:31:1e:42:34:3d:2d:63:f5:c1:bd:eb:00: 38:9e:e5:bf:86:28:2d:cc:9e:64:71:6c:16:67:d2: 96:17:8e:32:55:42:de:8a:fc:89:08:95:74:3e:fc: 0c:cb:a7:1a:bb:f9:69:9f:91:90:26:c5:69:35:ed: 92:1c:c7:64:f3:29:e2:81:95:32:14:ee:b8:ec:64: 5b:37:d4:ee:fd:83:63:7e:15:db:18:40:76:a1:46: 65:99:74:94:93:08:ef:f2:5a:39:8f:8d:9a:c7:34: 7d:ac:89:3d:00:b3:27:eb:5a:80:2c:28:7f:dd:09: 65:46:f8:ca:69:44:76:fc:9f:32:b8:e5:ab:e3:07: 71:75:85:17:90:f0:10:4e:32:e2:cc:f9:49:67:52: 06:41:93:b9:af:ae:2a:4e:c8:41:3c:08:ef:a9:86: 96:f0:b5:30:7e:74:3e:2b:30:85:b0:a3:92:ca:1d: 2b:53:c4:3a:b0:b2:7b:39:86:c5:39:8e:6b:bd:0b: 19:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0E:5B:E2:E8:49:3D:E0:D8:C7:32:5A:CD:DF:CD:B8:76:19:EC:3F X509v3 Authority Key Identifier: keyid:65:DB:BE:C6:78:17:7B:71:59:AD:90:1A:40:23:BA:57:AA:40:96:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/323430323a623234303a3a2f34372d3437203d3e203234313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:b240::/47 Signature Algorithm: sha256WithRSAEncryption b1:07:d0:40:65:97:70:c4:b0:48:90:20:1b:9c:e2:7c:6e:36: 4f:f8:a0:9b:a9:a1:43:46:b9:54:d1:fe:b5:ad:dd:0f:75:af: c6:57:26:cc:ef:69:35:3e:7d:93:ff:0c:98:41:7a:50:e0:d3: 8b:50:8a:f3:b8:20:18:64:50:e9:4e:84:bb:e9:a4:99:7d:58: 24:d3:cf:26:60:11:1a:d1:a9:9b:59:8d:97:59:42:5e:e3:a6: 2b:79:22:14:d9:cd:82:b0:43:25:80:ff:7f:93:13:65:9c:73: 10:dd:45:ae:f6:d3:01:bc:b4:95:5b:5c:06:1b:de:0a:ec:60: 8a:32:85:ed:ec:0a:07:9e:08:22:e6:53:a3:8a:cb:da:1a:20: 0b:50:08:22:87:b2:da:57:be:88:1e:d1:4e:b5:52:1d:27:a4: 32:32:f9:a6:eb:ee:aa:43:f8:fc:77:14:ae:75:c4:4b:5c:8c: 1e:3d:27:03:2b:0d:91:a4:b7:a5:af:0c:1c:be:26:14:02:40: c9:0c:27:3a:17:57:32:39:6a:87:b7:f2:92:78:72:21:52:89: ec:40:fc:57:b3:70:2e:86:77:de:2f:97:04:e9:a6:91:c1:44: 7a:fa:f2:46:73:77:ea:d9:21:6b:e1:25:57:bf:43:09:6d:cd: 85:0c:82:c4 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUSydB1MqGt6lHsmFs/kKutNRlj3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVEQkJFQzY3ODE3N0I3MTU5QUQ5MDFBNDAyM0JBNTdB QTQwOTZEQzAeFw0yNjA1MDMwMjMwNDRaFw0yNzA1MDIwMjM1NDRaMDMxMTAvBgNV BAMTKEQwMEU1QkUyRTg0OTNERTBEOEM3MzI1QUNEREZDREI4NzYxOUVDM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpK9b4g7yGH9zAnJamXJR3p0Vq x+SC42PGNdH5o3r8vbQFzU+lIw2FEoPpKutsmRGj2nNgy3GCky5ZEF+4qzEeQjQ9 LWP1wb3rADie5b+GKC3MnmRxbBZn0pYXjjJVQt6K/IkIlXQ+/AzLpxq7+WmfkZAm xWk17ZIcx2TzKeKBlTIU7rjsZFs31O79g2N+FdsYQHahRmWZdJSTCO/yWjmPjZrH NH2siT0AsyfrWoAsKH/dCWVG+MppRHb8nzK45avjB3F1hReQ8BBOMuLM+UlnUgZB k7mvripOyEE8CO+phpbwtTB+dD4rMIWwo5LKHStTxDqwsns5hsU5jmu9CxmVAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQU0A5b4uhJPeDYxzJazd/NuHYZ7D8wHwYDVR0j BBgwFoAUZdu+xngXe3FZrZAaQCO6V6pAltwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWFkNmRjYzktMTcwMC00OGViLTkwOTktNjY3OGY5MWJmNDRlLzAvNjVEQkJFQzY3 ODE3N0I3MTU5QUQ5MDFBNDAyM0JBNTdBQTQwOTZEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NURCQkVDNjc4MTc3QjcxNTlBRDkwMUE0MDIzQkE1N0FBNDA5 NkRDLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVhZDZkY2M5LTE3MDAtNDhlYi05 MDk5LTY2NzhmOTFiZjQ0ZS8wLzMyMzQzMDMyM2E2MjMyMzQzMDNhM2EyZjM0Mzcy ZDM0MzcyMDNkM2UyMDMyMzQzMTM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwEkArJAAAAwDQYJKoZI hvcNAQELBQADggEBALEH0EBll3DEsEiQIBuc4nxuNk/4oJupoUNGuVTR/rWt3Q91 r8ZXJszvaTU+fZP/DJhBelDg04tQivO4IBhkUOlOhLvppJl9WCTTzyZgERrRqZtZ jZdZQl7jpit5IhTZzYKwQyWA/3+TE2WccxDdRa720wG8tJVbXAYb3grsYIoyhe3s CgeeCCLmU6OKy9oaIAtQCCKHstpXvoge0U61Uh0npDIy+abr7qpD+Px3FK51xEtc jB49JwMrDZGkt6WvDBy+JhQCQMkMJzoXVzI5aoe38pJ4ciFSiexA/FezcC6Gd94v lwTpppHBRHr68kZzd+rZIWvhJVe/QwltzYUMgsQ= -----END CERTIFICATE-----Generated at Wed May 13 11:56:15 2026 by rpki-client