$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a33363a3a2f34382d3438203d3e203538333839.roa File: 323430343a666430303a33363a3a2f34382d3438203d3e203538333839.roa (raw, json) Hash identifier: Cxyql9PDAYimAplLUMI/Cyyagp7rkkz13Nn2YVwh1Sg= Subject key identifier: 34:64:87:53:B2:19:59:6F:D4:AA:D5:5B:AA:91:5C:77:53:7E:58:32 Certificate issuer: /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52 Certificate serial: 64AF389AAD0E00AE349DC2C746F81CACD26A5EDF Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a33363a3a2f34382d3438203d3e203538333839.roa Signing time: Sun 03 May 2026 02:36:26 +0000 ROA not before: Sun 03 May 2026 02:31:26 +0000 ROA not after: Sun 02 May 2027 02:36:26 +0000 asID: 58389 IP address blocks: 2404:fd00:36::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:af:38:9a:ad:0e:00:ae:34:9d:c2:c7:46:f8:1c:ac:d2:6a:5e:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52 Validity Not Before: May 3 02:31:26 2026 GMT Not After : May 2 02:36:26 2027 GMT Subject: CN=34648753B219596FD4AAD55BAA915C77537E5832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b0:66:28:89:56:8c:1b:60:b9:6c:e7:a5:97: 3e:6a:cc:01:1a:b9:c7:ee:c4:ed:4f:71:9e:04:ef: 36:35:65:dc:db:96:b3:7a:ac:97:25:77:41:e6:54: d9:91:66:e7:42:d8:cc:c6:b1:fa:f5:f4:5b:cd:41: 15:05:ad:d6:3d:84:cd:95:fe:d3:5e:81:a8:a0:3f: 78:8f:79:20:9b:f0:fa:33:e5:ec:f7:dd:f8:43:a3: f2:a4:44:22:17:5d:d1:7b:4a:8e:b0:7f:20:0f:c6: e1:d2:12:99:81:76:dd:f8:88:af:13:28:4a:00:da: e1:c7:79:37:4f:35:4b:d4:22:46:2e:14:a0:dc:f8: c6:35:62:64:28:e8:47:a5:f2:0d:00:91:91:bf:29: df:06:94:b5:ab:1b:8a:e8:74:a9:ed:74:08:78:9c: 20:40:3f:51:06:bc:43:02:f9:5c:9f:97:7e:70:e9: f5:d7:b4:df:c9:80:96:df:23:ac:04:2b:6a:20:15: 84:bc:23:33:1b:4f:b7:0e:9b:2b:7f:a9:bd:37:2e: 66:d6:09:42:22:76:1b:6c:f7:86:2e:3c:2a:d2:78: bb:a9:62:70:f2:8f:45:c5:65:5c:ae:9d:f2:80:b2: 8e:a8:a9:66:4f:1a:4d:55:41:71:f9:63:ed:ad:d0: da:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:64:87:53:B2:19:59:6F:D4:AA:D5:5B:AA:91:5C:77:53:7E:58:32 X509v3 Authority Key Identifier: keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a33363a3a2f34382d3438203d3e203538333839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fd00:36::/48 Signature Algorithm: sha256WithRSAEncryption 58:2f:95:0d:73:e8:33:ec:e2:4d:4a:40:eb:7b:3e:4b:cb:17: 2b:a7:59:a1:ab:fe:8f:68:75:5d:59:6e:e9:8a:ed:e9:e6:fb: 54:81:ac:b7:40:91:c5:f4:07:89:7a:d2:8a:8b:7d:b0:21:26: eb:de:dd:45:97:f9:c1:17:b0:90:1c:13:99:a7:3e:d7:5b:47: 79:dc:57:ed:4c:89:a3:78:09:b5:b2:78:37:13:d6:54:a1:bc: 2f:f2:26:3a:03:00:61:9e:74:b1:93:ca:fb:c9:c3:23:33:d9: 76:bf:95:1b:23:c9:53:01:ef:9c:4a:73:90:88:96:7a:b1:75: 3a:c3:52:2f:04:ea:e8:d9:25:0d:a2:4f:64:31:2e:3a:f4:7d: db:44:02:70:f8:e6:eb:3d:ae:d3:09:4a:42:d1:fa:01:0d:64: ec:94:42:68:e9:35:71:d5:4c:4a:2e:7c:db:bd:9c:94:97:8b: 44:57:9d:e8:b6:31:6d:61:9c:1f:bf:c4:11:59:0e:db:aa:e4: f9:5f:00:78:26:fd:cb:f0:80:b9:87:59:0b:05:4c:e4:30:e1: 94:90:ca:65:52:7c:7f:d1:6e:96:f6:8d:b1:c2:bb:52:e8:44: a8:d5:94:23:2f:9b:4e:5e:e2:f0:94:18:43:3c:80:22:5d:2b: af:42:64:d7 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUZK84mq0OAK40ncLHRvgcrNJqXt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBEQjJDNDRFMjZDQTJBMTQ2RUY3MzhEMzlGNTNDQkIw OTAxREI1MjAeFw0yNjA1MDMwMjMxMjZaFw0yNzA1MDIwMjM2MjZaMDMxMTAvBgNV BAMTKDM0NjQ4NzUzQjIxOTU5NkZENEFBRDU1QkFBOTE1Qzc3NTM3RTU4MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3sGYoiVaMG2C5bOellz5qzAEa ucfuxO1PcZ4E7zY1ZdzblrN6rJcld0HmVNmRZudC2MzGsfr19FvNQRUFrdY9hM2V /tNegaigP3iPeSCb8Poz5ez33fhDo/KkRCIXXdF7So6wfyAPxuHSEpmBdt34iK8T KEoA2uHHeTdPNUvUIkYuFKDc+MY1YmQo6Eel8g0AkZG/Kd8GlLWrG4rodKntdAh4 nCBAP1EGvEMC+Vyfl35w6fXXtN/JgJbfI6wEK2ogFYS8IzMbT7cOmyt/qb03LmbW CUIidhts94YuPCrSeLupYnDyj0XFZVyunfKAso6oqWZPGk1VQXH5Y+2t0No1AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUNGSHU7IZWW/UqtVbqpFcd1N+WDIwHwYDVR0j BBgwFoAUENssROJsoqFG73ONOfU8uwkB21IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQyMjdkYmUtNGExYy00MGIwLTk0YTYtNzkzYmRiZGEzNzc3LzAvMTBEQjJDNDRF MjZDQTJBMTQ2RUY3MzhEMzlGNTNDQkIwOTAxREI1Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMERCMkM0NEUyNkNBMkExNDZFRjczOEQzOUY1M0NCQjA5MDFE QjUyLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMyMzQzMDM0M2E2NjY0MzAzMDNhMzMzNjNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzgzMzM4Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBP0AADYw DQYJKoZIhvcNAQELBQADggEBAFgvlQ1z6DPs4k1KQOt7PkvLFyunWaGr/o9odV1Z bumK7enm+1SBrLdAkcX0B4l60oqLfbAhJuve3UWX+cEXsJAcE5mnPtdbR3ncV+1M iaN4CbWyeDcT1lShvC/yJjoDAGGedLGTyvvJwyMz2Xa/lRsjyVMB75xKc5CIlnqx dTrDUi8E6ujZJQ2iT2QxLjr0fdtEAnD45us9rtMJSkLR+gENZOyUQmjpNXHVTEou fNu9nJSXi0RXnei2MW1hnB+/xBFZDtuq5PlfAHgm/cvwgLmHWQsFTOQw4ZSQymVS fH/Rbpb2jbHCu1LoRKjVlCMvm05e4vCUGEM8gCJdK69CZNc= -----END CERTIFICATE-----Generated at Wed May 13 06:56:02 2026 by rpki-client