$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31653a3a2f34382d3438203d3e203536323436.roa File: 323430343a666430303a31653a3a2f34382d3438203d3e203536323436.roa (raw, json) Hash identifier: mSJ63CebvhDTn/7CyeCJz88fO+dYC3J8aQ67z4DlFVs= Subject key identifier: 2A:F3:CA:35:32:AA:48:E5:BE:B4:E7:F1:02:D2:9C:90:A6:E1:22:AD Certificate issuer: /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52 Certificate serial: 08B486596922133F48EF0FC4937A0E2A991FDC96 Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31653a3a2f34382d3438203d3e203536323436.roa Signing time: Sun 03 May 2026 02:36:31 +0000 ROA not before: Sun 03 May 2026 02:31:31 +0000 ROA not after: Sun 02 May 2027 02:36:31 +0000 asID: 56246 IP address blocks: 2404:fd00:1e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:b4:86:59:69:22:13:3f:48:ef:0f:c4:93:7a:0e:2a:99:1f:dc:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52 Validity Not Before: May 3 02:31:31 2026 GMT Not After : May 2 02:36:31 2027 GMT Subject: CN=2AF3CA3532AA48E5BEB4E7F102D29C90A6E122AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:31:52:6b:63:b7:84:9a:dd:22:3f:91:8d:99: 93:8d:56:0a:23:e8:fb:ff:c0:b2:2c:61:9f:fd:d2: 49:3b:cb:0d:74:36:16:c7:d1:57:04:8b:c9:ab:57: 30:5c:4b:8c:8b:dc:e4:50:7a:67:ca:c4:ff:aa:54: b5:51:a9:cb:e2:d6:04:4a:d5:35:60:59:55:21:27: 72:1b:43:57:2b:5d:55:4a:4d:1c:46:f9:ec:5d:f4: 7e:42:ca:85:7f:0a:8e:75:50:64:3a:eb:01:2f:e6: 98:a3:b1:a6:68:ed:97:b4:17:36:d2:a3:92:7e:6b: a3:cf:df:7b:1e:f2:82:bd:f1:5c:14:61:17:89:da: c4:51:56:c4:fd:39:6c:23:9d:29:da:1b:2f:bd:d2: b3:4e:86:32:26:6a:7b:25:0c:23:16:8f:ad:38:ab: 38:a5:2b:1f:c5:7e:9b:72:2a:8b:bf:5f:af:c4:38: d0:82:bf:64:c4:d4:50:b8:0f:be:f4:8a:1c:a2:bc: a9:53:3c:c6:06:6d:23:53:fd:89:7a:8c:5a:87:f1: 9b:8d:d5:e4:d7:0e:03:dd:77:ca:32:8c:a9:42:a5: 9a:36:b6:e3:10:ba:00:63:5d:ef:e9:37:0b:6f:51: 06:51:7f:72:d2:88:bf:7a:6b:4f:4f:8c:ee:0b:62: da:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F3:CA:35:32:AA:48:E5:BE:B4:E7:F1:02:D2:9C:90:A6:E1:22:AD X509v3 Authority Key Identifier: keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31653a3a2f34382d3438203d3e203536323436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fd00:1e::/48 Signature Algorithm: sha256WithRSAEncryption 5f:0c:03:61:4a:ff:06:cf:dd:0f:18:71:ae:3c:33:75:78:9b: 98:bc:ea:10:a7:a1:5f:78:2b:ee:98:da:29:30:83:d8:a1:8f: 0d:ae:a4:d0:16:49:9c:a2:2b:37:9a:3b:2b:0b:2a:36:85:27: 20:93:70:45:2a:9d:a0:b1:8e:71:3c:10:17:de:a0:1d:60:2d: 08:6d:ab:3c:ba:f9:48:6a:f7:4b:44:88:5b:d1:1d:10:3c:f9: 03:cb:2c:d2:7c:db:a7:72:72:48:0f:15:a7:30:c4:1f:1e:d8: cb:3f:ee:e0:55:92:cb:79:b4:af:96:9e:60:c9:cd:f5:5f:e1: a5:0e:39:3a:9d:93:2c:fc:ce:04:a5:94:29:5d:90:4d:78:2f: 6d:03:0c:e7:f0:45:7b:06:f4:1c:45:03:30:71:b5:58:a3:c9: 47:5d:7f:93:c2:21:dd:56:2f:40:2f:0f:b6:1a:3f:cf:ec:65: b3:29:d8:3f:c4:2f:e9:f8:7b:e3:12:6c:43:88:ff:a3:87:65: 4d:ba:21:3f:f6:74:37:a4:3a:3c:fe:c1:70:d4:8d:9d:82:10: 3d:d7:77:d5:c7:34:d1:43:9b:2e:41:99:6c:ff:2f:0e:93:23: bc:dc:ac:56:05:62:fd:a3:08:60:ae:a1:dc:b2:5e:36:10:50: 30:35:97:62 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUCLSGWWkiEz9I7w/Ek3oOKpkf3JYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBEQjJDNDRFMjZDQTJBMTQ2RUY3MzhEMzlGNTNDQkIw OTAxREI1MjAeFw0yNjA1MDMwMjMxMzFaFw0yNzA1MDIwMjM2MzFaMDMxMTAvBgNV BAMTKDJBRjNDQTM1MzJBQTQ4RTVCRUI0RTdGMTAyRDI5QzkwQTZFMTIyQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTMVJrY7eEmt0iP5GNmZONVgoj 6Pv/wLIsYZ/90kk7yw10NhbH0VcEi8mrVzBcS4yL3ORQemfKxP+qVLVRqcvi1gRK 1TVgWVUhJ3IbQ1crXVVKTRxG+exd9H5CyoV/Co51UGQ66wEv5pijsaZo7Ze0FzbS o5J+a6PP33se8oK98VwUYReJ2sRRVsT9OWwjnSnaGy+90rNOhjImanslDCMWj604 qzilKx/FfptyKou/X6/EONCCv2TE1FC4D770ihyivKlTPMYGbSNT/Yl6jFqH8ZuN 1eTXDgPdd8oyjKlCpZo2tuMQugBjXe/pNwtvUQZRf3LSiL96a09PjO4LYtp3AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUKvPKNTKqSOW+tOfxAtKckKbhIq0wHwYDVR0j BBgwFoAUENssROJsoqFG73ONOfU8uwkB21IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQyMjdkYmUtNGExYy00MGIwLTk0YTYtNzkzYmRiZGEzNzc3LzAvMTBEQjJDNDRF MjZDQTJBMTQ2RUY3MzhEMzlGNTNDQkIwOTAxREI1Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMERCMkM0NEUyNkNBMkExNDZFRjczOEQzOUY1M0NCQjA5MDFE QjUyLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMyMzQzMDM0M2E2NjY0MzAzMDNhMzE2NTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzYzMjM0MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBP0AAB4w DQYJKoZIhvcNAQELBQADggEBAF8MA2FK/wbP3Q8Yca48M3V4m5i86hCnoV94K+6Y 2ikwg9ihjw2upNAWSZyiKzeaOysLKjaFJyCTcEUqnaCxjnE8EBfeoB1gLQhtqzy6 +Uhq90tEiFvRHRA8+QPLLNJ826dyckgPFacwxB8e2Ms/7uBVkst5tK+WnmDJzfVf 4aUOOTqdkyz8zgSllCldkE14L20DDOfwRXsG9BxFAzBxtVijyUddf5PCId1WL0Av D7YaP8/sZbMp2D/EL+n4e+MSbEOI/6OHZU26IT/2dDekOjz+wXDUjZ2CED3Xd9XH NNFDmy5BmWz/Lw6TI7zcrFYFYv2jCGCuodyyXjYQUDA1l2I= -----END CERTIFICATE-----Generated at Wed May 13 09:11:51 2026 by rpki-client