$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a3a2f33322d3332203d3e203538353532.roa File: 323430343a666430303a3a2f33322d3332203d3e203538353532.roa (raw, json) Hash identifier: +x6hSJib+v7rwQajyMyXsmvkVO17wdV+zNAGK41FXZc= Subject key identifier: C9:FA:A2:51:FA:EC:C6:38:B0:2F:37:85:92:6A:6E:0D:CF:A3:7C:D7 Certificate issuer: /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52 Certificate serial: 3F8B47563F77F3712952DB17D64F47DD42F0E756 Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a3a2f33322d3332203d3e203538353532.roa Signing time: Sun 03 May 2026 02:36:31 +0000 ROA not before: Sun 03 May 2026 02:31:31 +0000 ROA not after: Sun 02 May 2027 02:36:31 +0000 asID: 58552 IP address blocks: 2404:fd00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:8b:47:56:3f:77:f3:71:29:52:db:17:d6:4f:47:dd:42:f0:e7:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52 Validity Not Before: May 3 02:31:31 2026 GMT Not After : May 2 02:36:31 2027 GMT Subject: CN=C9FAA251FAECC638B02F3785926A6E0DCFA37CD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:59:c1:b7:3e:ba:c5:59:6d:fd:51:31:70:33: 3f:1b:0e:69:6f:e2:04:71:7d:13:13:7a:86:70:c3: b0:66:68:8e:4c:6a:3b:c6:32:b9:6b:b6:ab:13:c9: 9e:ef:31:61:89:fc:4b:4b:fd:58:c8:ac:7c:49:ea: 5e:cb:a3:1f:45:03:fb:3d:7f:7e:99:3d:02:97:a2: b4:f4:d0:95:09:3f:83:88:06:7e:04:ef:9a:5a:1e: 2f:7d:87:11:1b:a3:72:f6:ad:dd:d7:0b:18:01:ee: 20:19:25:60:97:17:ae:56:95:dd:96:17:d5:35:7e: 6b:74:0c:29:67:a7:e0:de:16:0c:b8:bd:4d:80:ad: a1:84:35:98:50:40:72:49:05:26:a1:10:f3:83:64: 91:28:b8:06:84:51:45:13:f0:93:28:be:03:e5:61: e6:82:39:96:a1:42:8d:96:e7:4d:2e:49:82:84:21: 86:68:43:fe:ab:12:35:b9:dd:73:d2:a9:7c:24:24: cc:04:7d:1a:8d:96:f9:b3:d1:0f:e3:30:4a:12:8b: b3:8d:f0:09:ea:af:be:19:28:0d:43:71:3a:d8:9e: 61:1c:15:3c:5a:41:e4:f4:36:54:8e:dd:33:4a:b6: e6:e1:de:e9:db:78:68:c0:ab:2b:d6:82:d7:f7:6e: ed:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:FA:A2:51:FA:EC:C6:38:B0:2F:37:85:92:6A:6E:0D:CF:A3:7C:D7 X509v3 Authority Key Identifier: keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a3a2f33322d3332203d3e203538353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fd00::/32 Signature Algorithm: sha256WithRSAEncryption 38:7c:f9:7c:52:da:c6:a9:1b:89:a6:af:d5:d0:f0:a8:9c:de: 77:f7:78:27:66:a8:b7:2b:cb:13:d8:11:68:1e:74:7d:48:a5: 06:bb:4a:1c:90:18:e6:09:83:6b:18:47:88:44:2a:0e:db:40: e8:53:ec:f4:4b:0e:a8:ab:c3:81:b7:5b:ff:cc:bf:00:2d:13: 7f:2c:dd:11:44:71:19:c2:91:c9:c6:b5:c4:b2:d0:c7:d3:41: 76:21:f4:10:ff:e6:f0:d1:26:53:0f:f5:c8:a9:71:68:83:41: ab:2d:7a:19:23:9d:96:ce:df:0c:a5:d1:e2:32:a5:21:3e:99: 4b:4c:0a:2f:d5:41:a7:f3:b0:6c:6b:02:5f:da:3d:22:00:01: d8:5b:b9:0d:bd:8f:01:f9:2c:dc:14:77:ef:ae:db:69:d4:5b: 3c:05:5a:ce:35:55:8c:48:79:83:a2:66:2a:f2:32:0e:47:c6: e2:2b:44:2b:82:db:97:58:4b:b1:cd:8d:bf:f6:04:d4:55:d4: e3:72:7f:0f:35:4b:20:5c:45:c1:97:7c:e5:da:42:6d:e0:33: 23:38:b7:b9:4c:75:7d:0e:25:a8:b3:76:f5:26:3a:c7:0e:f4: a1:45:f4:2f:58:6e:4a:a0:19:04:03:13:1b:44:68:d2:28:4d: 4a:91:91:33 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUP4tHVj9383EpUtsX1k9H3ULw51YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBEQjJDNDRFMjZDQTJBMTQ2RUY3MzhEMzlGNTNDQkIw OTAxREI1MjAeFw0yNjA1MDMwMjMxMzFaFw0yNzA1MDIwMjM2MzFaMDMxMTAvBgNV BAMTKEM5RkFBMjUxRkFFQ0M2MzhCMDJGMzc4NTkyNkE2RTBEQ0ZBMzdDRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLWcG3PrrFWW39UTFwMz8bDmlv 4gRxfRMTeoZww7BmaI5MajvGMrlrtqsTyZ7vMWGJ/EtL/VjIrHxJ6l7Lox9FA/s9 f36ZPQKXorT00JUJP4OIBn4E75paHi99hxEbo3L2rd3XCxgB7iAZJWCXF65Wld2W F9U1fmt0DClnp+DeFgy4vU2AraGENZhQQHJJBSahEPODZJEouAaEUUUT8JMovgPl YeaCOZahQo2W500uSYKEIYZoQ/6rEjW53XPSqXwkJMwEfRqNlvmz0Q/jMEoSi7ON 8Anqr74ZKA1DcTrYnmEcFTxaQeT0NlSO3TNKtubh3unbeGjAqyvWgtf3bu15AgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUyfqiUfrsxjiwLzeFkmpuDc+jfNcwHwYDVR0j BBgwFoAUENssROJsoqFG73ONOfU8uwkB21IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQyMjdkYmUtNGExYy00MGIwLTk0YTYtNzkzYmRiZGEzNzc3LzAvMTBEQjJDNDRF MjZDQTJBMTQ2RUY3MzhEMzlGNTNDQkIwOTAxREI1Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMERCMkM0NEUyNkNBMkExNDZFRjczOEQzOUY1M0NCQjA5MDFE QjUyLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMyMzQzMDM0M2E2NjY0MzAzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDM1MzgzNTM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBP0AMA0GCSqGSIb3 DQEBCwUAA4IBAQA4fPl8UtrGqRuJpq/V0PConN5393gnZqi3K8sT2BFoHnR9SKUG u0ockBjmCYNrGEeIRCoO20DoU+z0Sw6oq8OBt1v/zL8ALRN/LN0RRHEZwpHJxrXE stDH00F2IfQQ/+bw0SZTD/XIqXFog0GrLXoZI52Wzt8MpdHiMqUhPplLTAov1UGn 87BsawJf2j0iAAHYW7kNvY8B+SzcFHfvrttp1Fs8BVrONVWMSHmDomYq8jIOR8bi K0QrgtuXWEuxzY2/9gTUVdTjcn8PNUsgXEXBl3zl2kJt4DMjOLe5THV9DiWos3b1 JjrHDvShRfQvWG5KoBkEAxMbRGjSKE1KkZEz -----END CERTIFICATE-----Generated at Wed May 13 07:45:24 2026 by rpki-client