$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31633a3a2f34382d3438203d3e203538353532.roa File: 323430343a666430303a31633a3a2f34382d3438203d3e203538353532.roa (raw, json) Hash identifier: GKaAQWlTjNiHofn0YNbOdwMDyHroArQYXwbYVsORVM0= Subject key identifier: 5F:A4:9C:40:E5:F3:AB:78:B7:37:01:CD:08:FA:93:C7:F5:B7:02:D6 Certificate issuer: /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52 Certificate serial: 367A0D2E31B803940DCE85CFFE182E53EDC2200E Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31633a3a2f34382d3438203d3e203538353532.roa Signing time: Sun 03 May 2026 02:36:32 +0000 ROA not before: Sun 03 May 2026 02:31:32 +0000 ROA not after: Sun 02 May 2027 02:36:32 +0000 asID: 58552 IP address blocks: 2404:fd00:1c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:7a:0d:2e:31:b8:03:94:0d:ce:85:cf:fe:18:2e:53:ed:c2:20:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52 Validity Not Before: May 3 02:31:32 2026 GMT Not After : May 2 02:36:32 2027 GMT Subject: CN=5FA49C40E5F3AB78B73701CD08FA93C7F5B702D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ba:23:5b:ce:42:fb:88:6a:cf:cb:bc:08:87: df:be:d4:ce:cc:31:a6:87:f1:63:08:10:4c:64:82: 9c:e1:e6:e9:df:0d:22:bf:64:30:dd:96:2e:ea:98: 04:75:95:e9:1c:77:bf:3c:b6:fc:66:40:8e:bf:53: 7e:21:5a:5e:d5:6e:7b:ce:99:da:d0:dd:cf:b5:d6: 7c:8d:45:0b:e4:ec:06:d7:c2:9e:36:01:c6:41:da: 4a:10:0e:36:19:3a:28:d4:fa:76:cb:54:fb:00:29: 2c:d3:89:d2:7c:27:75:4e:08:5f:c6:ad:44:4c:e3: fc:09:78:6a:b3:5d:3f:2c:11:a1:83:14:1e:f6:96: fc:45:14:7c:18:20:d7:e3:8e:62:91:eb:18:80:1f: 76:80:7b:13:77:fe:78:3e:65:83:95:a6:f9:7f:24: ba:32:f7:ec:dc:f7:b8:87:f1:96:f9:70:dd:ae:aa: 67:a0:14:8f:37:00:63:c2:e1:aa:6e:f0:5d:e4:85: e4:07:62:ef:12:7b:f8:30:40:ce:ec:af:fa:91:79: a8:92:a1:bc:a7:16:32:ed:c7:0f:8d:79:2d:3e:5f: db:29:4f:6e:22:ce:f3:79:9d:af:14:11:94:60:30: b2:1e:42:a2:5b:38:bd:d9:de:95:e1:c7:4c:62:e0: 85:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A4:9C:40:E5:F3:AB:78:B7:37:01:CD:08:FA:93:C7:F5:B7:02:D6 X509v3 Authority Key Identifier: keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31633a3a2f34382d3438203d3e203538353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fd00:1c::/48 Signature Algorithm: sha256WithRSAEncryption 59:5f:9a:7a:65:a9:33:4a:35:83:50:36:ea:74:e2:21:5d:3a: 50:72:b3:07:69:50:b9:03:cc:ff:0b:e8:70:77:92:a8:26:92: 59:a6:3a:35:f9:b6:a7:a4:c3:d8:01:41:3f:e9:e2:a8:05:eb: 6c:2b:3e:97:19:1e:2a:ef:b7:94:ab:07:b2:5e:67:86:cc:0e: e3:f9:ea:2d:b1:4b:d3:22:b5:a3:0c:5a:50:00:ac:dc:9f:29: 92:e1:4d:1a:b9:d2:04:d4:b3:66:79:97:20:a2:1d:2b:23:88: 81:59:90:24:47:69:8e:d5:e3:bc:a6:7d:dc:66:b3:d5:ac:44: b6:60:b4:ef:b3:f9:db:a4:6f:5c:ad:93:1e:16:14:12:c0:68: e9:88:df:e1:3c:aa:1b:bb:31:43:54:2d:c2:4b:aa:07:be:a3: 7d:e0:e8:66:d1:b9:3a:9a:98:00:1b:a5:d5:e3:04:22:e9:34: 13:43:93:93:90:36:5b:4d:5b:4b:c3:db:e7:7b:1d:94:66:0f: 19:dc:21:4e:29:62:06:24:ba:ea:70:bd:c7:6e:b6:f1:84:53: 6e:e0:d6:35:70:97:1a:53:a4:e3:c7:86:76:85:47:fd:12:67: a0:26:a3:86:fa:23:26:a3:57:81:23:d3:22:50:76:0e:3a:8a: 48:e7:2d:3d -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUNnoNLjG4A5QNzoXP/hguU+3CIA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBEQjJDNDRFMjZDQTJBMTQ2RUY3MzhEMzlGNTNDQkIw OTAxREI1MjAeFw0yNjA1MDMwMjMxMzJaFw0yNzA1MDIwMjM2MzJaMDMxMTAvBgNV BAMTKDVGQTQ5QzQwRTVGM0FCNzhCNzM3MDFDRDA4RkE5M0M3RjVCNzAyRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQuiNbzkL7iGrPy7wIh9++1M7M MaaH8WMIEExkgpzh5unfDSK/ZDDdli7qmAR1lekcd788tvxmQI6/U34hWl7VbnvO mdrQ3c+11nyNRQvk7AbXwp42AcZB2koQDjYZOijU+nbLVPsAKSzTidJ8J3VOCF/G rURM4/wJeGqzXT8sEaGDFB72lvxFFHwYINfjjmKR6xiAH3aAexN3/ng+ZYOVpvl/ JLoy9+zc97iH8Zb5cN2uqmegFI83AGPC4apu8F3kheQHYu8Se/gwQM7sr/qReaiS obynFjLtxw+NeS0+X9spT24izvN5na8UEZRgMLIeQqJbOL3Z3pXhx0xi4IVvAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUX6ScQOXzq3i3NwHNCPqTx/W3AtYwHwYDVR0j BBgwFoAUENssROJsoqFG73ONOfU8uwkB21IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQyMjdkYmUtNGExYy00MGIwLTk0YTYtNzkzYmRiZGEzNzc3LzAvMTBEQjJDNDRF MjZDQTJBMTQ2RUY3MzhEMzlGNTNDQkIwOTAxREI1Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMERCMkM0NEUyNkNBMkExNDZFRjczOEQzOUY1M0NCQjA5MDFE QjUyLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMyMzQzMDM0M2E2NjY0MzAzMDNhMzE2MzNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzgzNTM1MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBP0AABww DQYJKoZIhvcNAQELBQADggEBAFlfmnplqTNKNYNQNup04iFdOlByswdpULkDzP8L 6HB3kqgmklmmOjX5tqekw9gBQT/p4qgF62wrPpcZHirvt5SrB7JeZ4bMDuP56i2x S9MitaMMWlAArNyfKZLhTRq50gTUs2Z5lyCiHSsjiIFZkCRHaY7V47ymfdxms9Ws RLZgtO+z+dukb1ytkx4WFBLAaOmI3+E8qhu7MUNULcJLqge+o33g6GbRuTqamAAb pdXjBCLpNBNDk5OQNltNW0vD2+d7HZRmDxncIU4pYgYkuupwvcdutvGEU27g1jVw lxpTpOPHhnaFR/0SZ6Amo4b6IyajV4Ej0yJQdg46ikjnLT0= -----END CERTIFICATE-----Generated at Wed May 13 07:35:09 2026 by rpki-client