$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a32343a3a2f34382d3438203d3e203536323436.roa File: 323430343a666430303a32343a3a2f34382d3438203d3e203536323436.roa (raw, json) Hash identifier: yrwX3wh2zGVcpuTafolSzWhHB9dBz+0OwjkfTQHONjo= Subject key identifier: 76:B9:65:43:DD:13:ED:9E:BF:5F:BF:0F:4A:6D:C1:94:80:59:60:07 Certificate issuer: /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52 Certificate serial: 280B7862AF7B6BBCC20A5AE01CBFAC24BAF70EFD Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a32343a3a2f34382d3438203d3e203536323436.roa Signing time: Sun 03 May 2026 02:36:32 +0000 ROA not before: Sun 03 May 2026 02:31:32 +0000 ROA not after: Sun 02 May 2027 02:36:32 +0000 asID: 56246 IP address blocks: 2404:fd00:24::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:0b:78:62:af:7b:6b:bc:c2:0a:5a:e0:1c:bf:ac:24:ba:f7:0e:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52 Validity Not Before: May 3 02:31:32 2026 GMT Not After : May 2 02:36:32 2027 GMT Subject: CN=76B96543DD13ED9EBF5FBF0F4A6DC19480596007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a1:5e:32:90:16:3d:de:5b:29:8c:06:d7:74: 92:ff:57:ba:ed:ba:1b:8f:b5:39:ca:6f:6b:58:22: d7:59:41:d0:bd:85:f9:bd:5a:d0:13:a6:97:c2:a2: 8c:dd:ef:f3:c9:48:9e:d9:30:a1:97:48:14:15:4b: 71:5d:7d:22:fe:ad:46:36:69:d9:bb:47:c3:a8:a4: c3:6c:d5:ad:96:29:46:ec:3f:51:5d:93:94:ee:02: 04:02:5f:ed:68:9b:d8:21:7a:76:17:a8:55:60:c8: ec:51:6b:bb:1c:cf:86:2f:78:8b:85:fa:67:a1:31: 6f:c1:e8:ce:fb:51:82:46:30:6b:29:30:b8:ca:13: 77:8b:5c:d8:fa:ca:c3:ef:c0:ee:bf:fe:f9:4d:1a: 74:e4:8f:46:62:30:cd:e6:5d:6a:8d:8b:f8:aa:bd: fa:d4:73:8c:3b:23:ce:73:3e:09:9a:43:84:9c:0d: af:a9:cf:da:79:7f:c4:31:90:48:60:0d:08:8a:14: 89:61:fe:a3:dc:24:1f:58:ca:b8:97:09:5c:40:1e: 36:8e:7a:fe:a5:3b:3a:be:f2:cd:a6:64:73:2a:86: 9a:0d:2b:a7:d6:3e:a0:95:a0:29:7a:8a:28:8e:fe: a4:49:58:e2:bf:4f:d8:94:4d:58:77:63:2e:bf:56: d5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B9:65:43:DD:13:ED:9E:BF:5F:BF:0F:4A:6D:C1:94:80:59:60:07 X509v3 Authority Key Identifier: keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a32343a3a2f34382d3438203d3e203536323436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fd00:24::/48 Signature Algorithm: sha256WithRSAEncryption cf:3a:b5:f2:81:8c:0b:15:e1:c7:59:b6:bc:0e:2c:4a:54:2f: 25:1f:d5:97:81:af:49:85:f0:b1:c5:fb:a2:bb:fd:4d:7a:cc: 1e:e2:0a:e0:da:a8:df:ad:ee:a3:ed:fa:18:43:0b:21:b1:3d: ff:2d:45:b9:45:08:5a:74:25:bf:fc:fe:52:6b:14:06:8b:0a: 1d:32:3d:08:c6:84:8f:08:56:ee:b2:18:fe:22:72:e5:be:67: 53:22:e0:e3:71:37:8e:73:c4:7f:40:e9:c2:a7:9d:df:15:05: f7:97:74:0b:6e:65:f4:f4:de:0d:2b:ff:84:08:be:f2:3e:25: 17:9e:b2:53:ac:ad:3d:b3:a4:b3:16:68:cd:d8:26:c0:63:63: 54:9e:43:50:cd:db:64:32:e6:28:f9:3f:06:e6:29:cf:d9:d8: 2b:62:0c:ee:47:48:00:d9:8b:3b:ba:68:19:bd:fd:0b:97:92: bc:d9:67:3b:98:51:9b:ba:94:19:8f:d3:a0:e6:6a:e6:a6:79: 70:37:68:0d:8d:dc:40:2c:e1:1a:7c:ad:ea:4c:77:75:ee:88: 4a:dc:51:90:94:f6:84:9b:90:d1:59:d2:7d:4e:09:18:de:4e: 9a:51:0f:f1:72:85:42:bc:e6:0f:49:37:15:dc:e9:03:ac:9f: b7:c0:c2:c1 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUKAt4Yq97a7zCClrgHL+sJLr3Dv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBEQjJDNDRFMjZDQTJBMTQ2RUY3MzhEMzlGNTNDQkIw OTAxREI1MjAeFw0yNjA1MDMwMjMxMzJaFw0yNzA1MDIwMjM2MzJaMDMxMTAvBgNV BAMTKDc2Qjk2NTQzREQxM0VEOUVCRjVGQkYwRjRBNkRDMTk0ODA1OTYwMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCooV4ykBY93lspjAbXdJL/V7rt uhuPtTnKb2tYItdZQdC9hfm9WtATppfCoozd7/PJSJ7ZMKGXSBQVS3FdfSL+rUY2 adm7R8OopMNs1a2WKUbsP1Fdk5TuAgQCX+1om9ghenYXqFVgyOxRa7scz4YveIuF +mehMW/B6M77UYJGMGspMLjKE3eLXNj6ysPvwO6//vlNGnTkj0ZiMM3mXWqNi/iq vfrUc4w7I85zPgmaQ4ScDa+pz9p5f8QxkEhgDQiKFIlh/qPcJB9YyriXCVxAHjaO ev6lOzq+8s2mZHMqhpoNK6fWPqCVoCl6iiiO/qRJWOK/T9iUTVh3Yy6/VtWtAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUdrllQ90T7Z6/X78PSm3BlIBZYAcwHwYDVR0j BBgwFoAUENssROJsoqFG73ONOfU8uwkB21IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQyMjdkYmUtNGExYy00MGIwLTk0YTYtNzkzYmRiZGEzNzc3LzAvMTBEQjJDNDRF MjZDQTJBMTQ2RUY3MzhEMzlGNTNDQkIwOTAxREI1Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMERCMkM0NEUyNkNBMkExNDZFRjczOEQzOUY1M0NCQjA5MDFE QjUyLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMyMzQzMDM0M2E2NjY0MzAzMDNhMzIzNDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzYzMjM0MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBP0AACQw DQYJKoZIhvcNAQELBQADggEBAM86tfKBjAsV4cdZtrwOLEpULyUf1ZeBr0mF8LHF +6K7/U16zB7iCuDaqN+t7qPt+hhDCyGxPf8tRblFCFp0Jb/8/lJrFAaLCh0yPQjG hI8IVu6yGP4icuW+Z1Mi4ONxN45zxH9A6cKnnd8VBfeXdAtuZfT03g0r/4QIvvI+ JReeslOsrT2zpLMWaM3YJsBjY1SeQ1DN22Qy5ij5PwbmKc/Z2CtiDO5HSADZizu6 aBm9/QuXkrzZZzuYUZu6lBmP06DmauameXA3aA2N3EAs4Rp8repMd3XuiErcUZCU 9oSbkNFZ0n1OCRjeTppRD/FyhUK85g9JNxXc6QOsn7fAwsE= -----END CERTIFICATE-----Generated at Wed May 13 07:15:24 2026 by rpki-client