$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a32313a3a2f34382d3438203d3e203538353532.roa File: 323430343a666430303a32313a3a2f34382d3438203d3e203538353532.roa (raw, json) Hash identifier: 2BdML6ayKoXRq4SGeOE0RzAoaVvBeRpd0rPWRlOiCxY= Subject key identifier: 91:03:6A:6C:EE:E0:3A:A6:90:60:E5:A7:34:F4:90:F3:AF:84:A9:17 Certificate issuer: /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52 Certificate serial: 044221FC3B8F42D7CCE9B51BBB49E7AB8070FC67 Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a32313a3a2f34382d3438203d3e203538353532.roa Signing time: Sun 03 May 2026 02:36:35 +0000 ROA not before: Sun 03 May 2026 02:31:35 +0000 ROA not after: Sun 02 May 2027 02:36:35 +0000 asID: 58552 IP address blocks: 2404:fd00:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:42:21:fc:3b:8f:42:d7:cc:e9:b5:1b:bb:49:e7:ab:80:70:fc:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52 Validity Not Before: May 3 02:31:35 2026 GMT Not After : May 2 02:36:35 2027 GMT Subject: CN=91036A6CEEE03AA69060E5A734F490F3AF84A917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:08:85:fa:07:89:25:01:e9:cd:e4:b1:a4:07: 4a:4b:71:dd:93:55:42:14:47:1c:ac:07:df:1e:d6: 7c:4f:82:88:e0:dc:d0:aa:55:46:1a:f5:31:04:43: d7:35:66:b7:37:50:4d:8b:c9:0c:6d:b2:b1:22:db: da:af:9f:1f:2d:4c:f8:51:b8:84:18:8a:0c:b2:a4: 9d:53:79:f4:ce:a6:d8:a8:64:c9:d3:42:c6:14:ee: 63:cc:0c:75:d0:4e:d7:f1:5c:df:72:3d:b2:a3:5d: 6a:34:20:37:19:58:7e:b9:7a:c7:16:6d:e1:04:fb: 18:ae:f3:29:8f:43:75:fb:d5:41:6b:76:6b:1d:bb: 36:f4:22:cd:c2:a8:12:e5:57:1b:13:4c:ad:b9:98: b0:db:59:af:a6:03:de:94:e1:85:94:b5:b4:9b:e0: 00:98:46:be:9b:1d:e7:56:20:17:51:99:f6:14:0d: c0:a3:9f:ce:c1:db:72:7e:f8:b1:e7:f2:85:69:e2: 1a:8b:31:cc:40:97:93:9f:2e:1c:9b:43:a1:a2:d2: d3:c9:f3:10:63:1b:9f:d4:c6:8c:c6:fe:97:e1:66: 4d:c3:8b:82:3c:8b:3d:3f:15:40:d2:7c:7b:e0:a6: 0f:dc:74:50:6c:75:f4:96:e9:7b:f0:20:db:08:03: 08:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:03:6A:6C:EE:E0:3A:A6:90:60:E5:A7:34:F4:90:F3:AF:84:A9:17 X509v3 Authority Key Identifier: keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a32313a3a2f34382d3438203d3e203538353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fd00:21::/48 Signature Algorithm: sha256WithRSAEncryption 52:2a:cf:32:bc:9b:1e:1e:32:ee:9c:60:51:36:cf:d9:bf:76: 2f:68:2f:25:db:f9:98:25:67:68:1c:91:0f:ef:5d:eb:ca:2f: e1:5d:0e:3f:fc:18:0e:67:c3:09:7a:49:e7:80:c1:b5:04:02: 06:66:3b:75:1b:e7:d6:8e:5a:1a:75:b7:e6:43:3b:9e:e3:ad: 00:c4:20:c9:df:3e:79:25:8a:07:c4:11:2d:f9:a4:5f:e2:1c: 7b:bd:ea:4f:9f:00:ab:13:ff:6c:2f:72:3d:95:a7:cb:af:85: af:d4:2d:a8:c1:95:e6:2a:ed:e4:80:f8:dd:5b:ae:cb:d3:14: 6a:57:c8:d8:ea:72:10:fd:50:c5:83:4a:b3:07:0f:78:b2:84: 16:02:2f:40:8f:da:67:ea:01:23:16:83:8c:44:18:d3:15:0d: d5:a6:41:5a:82:49:17:17:6b:83:fb:a7:c9:ba:b1:16:ce:26: 9c:ce:10:cd:e1:81:cf:e6:b4:a0:70:e8:c7:8f:ed:dc:ca:24: b7:6e:e9:f2:f8:13:c1:fb:16:15:ea:89:9a:85:86:5f:89:85: 0b:49:73:5d:ca:c0:fd:18:03:26:87:7f:c0:27:a6:90:a6:c4: 62:4c:b1:de:38:5b:d1:0f:64:44:3a:b8:4f:d0:23:66:03:8e: 2b:7b:2d:a8 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUBEIh/DuPQtfM6bUbu0nnq4Bw/GcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBEQjJDNDRFMjZDQTJBMTQ2RUY3MzhEMzlGNTNDQkIw OTAxREI1MjAeFw0yNjA1MDMwMjMxMzVaFw0yNzA1MDIwMjM2MzVaMDMxMTAvBgNV BAMTKDkxMDM2QTZDRUVFMDNBQTY5MDYwRTVBNzM0RjQ5MEYzQUY4NEE5MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWCIX6B4klAenN5LGkB0pLcd2T VUIURxysB98e1nxPgojg3NCqVUYa9TEEQ9c1Zrc3UE2LyQxtsrEi29qvnx8tTPhR uIQYigyypJ1TefTOptioZMnTQsYU7mPMDHXQTtfxXN9yPbKjXWo0IDcZWH65escW beEE+xiu8ymPQ3X71UFrdmsduzb0Is3CqBLlVxsTTK25mLDbWa+mA96U4YWUtbSb 4ACYRr6bHedWIBdRmfYUDcCjn87B23J++LHn8oVp4hqLMcxAl5OfLhybQ6Gi0tPJ 8xBjG5/UxozG/pfhZk3Di4I8iz0/FUDSfHvgpg/cdFBsdfSW6XvwINsIAwizAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUkQNqbO7gOqaQYOWnNPSQ86+EqRcwHwYDVR0j BBgwFoAUENssROJsoqFG73ONOfU8uwkB21IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQyMjdkYmUtNGExYy00MGIwLTk0YTYtNzkzYmRiZGEzNzc3LzAvMTBEQjJDNDRF MjZDQTJBMTQ2RUY3MzhEMzlGNTNDQkIwOTAxREI1Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMERCMkM0NEUyNkNBMkExNDZFRjczOEQzOUY1M0NCQjA5MDFE QjUyLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMyMzQzMDM0M2E2NjY0MzAzMDNhMzIzMTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzgzNTM1MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBP0AACEw DQYJKoZIhvcNAQELBQADggEBAFIqzzK8mx4eMu6cYFE2z9m/di9oLyXb+ZglZ2gc kQ/vXevKL+FdDj/8GA5nwwl6SeeAwbUEAgZmO3Ub59aOWhp1t+ZDO57jrQDEIMnf PnkligfEES35pF/iHHu96k+fAKsT/2wvcj2Vp8uvha/ULajBleYq7eSA+N1brsvT FGpXyNjqchD9UMWDSrMHD3iyhBYCL0CP2mfqASMWg4xEGNMVDdWmQVqCSRcXa4P7 p8m6sRbOJpzOEM3hgc/mtKBw6MeP7dzKJLdu6fL4E8H7FhXqiZqFhl+JhQtJc13K wP0YAyaHf8AnppCmxGJMsd44W9EPZEQ6uE/QI2YDjit7Lag= -----END CERTIFICATE-----Generated at Wed May 13 06:55:54 2026 by rpki-client