$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/323430343a363134303a3a2f33322d3438203d3e20313338313433.roa File: 323430343a363134303a3a2f33322d3438203d3e20313338313433.roa (raw, json) Hash identifier: 6IAAYhSuJnzcb+wPAnz95hDBr9XmKVxiIbVUzRwnFY4= Subject key identifier: B9:24:BE:9D:91:DD:3E:AD:2A:8A:B2:84:76:75:77:0E:21:B2:BB:81 Certificate issuer: /CN=3C38CDC785C4C8B22E60377271E55409582CCE11 Certificate serial: 087D39D028EF1B47AA79EFF1E7E7488EE5AF14C5 Authority key identifier: 3C:38:CD:C7:85:C4:C8:B2:2E:60:37:72:71:E5:54:09:58:2C:CE:11 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/323430343a363134303a3a2f33322d3438203d3e20313338313433.roa Signing time: Sun 03 May 2026 02:36:50 +0000 ROA not before: Sun 03 May 2026 02:31:50 +0000 ROA not after: Sun 02 May 2027 02:36:50 +0000 asID: 138143 IP address blocks: 2404:6140::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.crl rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:7d:39:d0:28:ef:1b:47:aa:79:ef:f1:e7:e7:48:8e:e5:af:14:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C38CDC785C4C8B22E60377271E55409582CCE11 Validity Not Before: May 3 02:31:50 2026 GMT Not After : May 2 02:36:50 2027 GMT Subject: CN=B924BE9D91DD3EAD2A8AB2847675770E21B2BB81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d1:ad:3e:16:6d:81:3f:9d:ca:b2:d6:12:ca: 51:db:ad:b2:08:43:06:54:7a:0f:8c:b4:0e:79:c7: c4:50:23:b1:88:67:62:3b:40:49:9e:c9:f3:93:e4: 2d:45:d6:23:f4:b6:51:eb:41:93:e1:e1:4d:3e:e1: 7a:06:f1:b2:25:96:14:65:35:08:f0:7a:b6:a7:96: 02:0e:f1:e3:ee:e0:d8:db:ff:7e:c0:e9:3b:30:19: 8c:62:3b:76:d2:04:1a:7a:75:82:f8:ab:60:da:1f: c1:06:a2:b4:d8:ad:d4:04:5a:3f:6c:16:b0:f7:00: f6:26:3f:7f:9d:b6:e2:ff:89:99:80:60:12:e9:b5: 7e:79:72:4f:fd:69:ae:ee:f3:b8:31:5f:10:d8:89: ee:8d:cf:05:5c:7f:bc:a8:f7:62:20:93:a6:50:ce: e7:70:8d:06:cc:71:ca:04:e0:2b:f9:2c:4b:3b:0c: a3:c7:21:17:e4:ea:ff:3d:c8:09:17:66:5c:98:0a: 86:41:d0:04:43:61:3c:f5:46:a7:e0:51:2b:cb:a4: f4:6f:fb:91:e4:49:c9:50:56:08:7b:39:4b:da:a2: 9c:42:e2:70:29:3d:87:82:b3:c4:42:2e:b8:57:a8: 88:e2:dd:8c:a9:80:de:cc:79:b7:7f:45:e2:af:21: 12:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:24:BE:9D:91:DD:3E:AD:2A:8A:B2:84:76:75:77:0E:21:B2:BB:81 X509v3 Authority Key Identifier: keyid:3C:38:CD:C7:85:C4:C8:B2:2E:60:37:72:71:E5:54:09:58:2C:CE:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/323430343a363134303a3a2f33322d3438203d3e20313338313433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:6140::/32 Signature Algorithm: sha256WithRSAEncryption 59:d9:c8:bf:7c:0e:85:38:27:20:e2:ff:62:ba:27:51:60:fe: 04:75:88:14:aa:e5:6f:4f:62:c1:8a:51:36:e0:12:98:19:d9: b7:d8:21:85:eb:5c:8a:9a:3b:eb:ff:ff:bf:d0:66:7a:7f:17: d7:1d:7b:04:48:41:e9:24:ca:09:fd:0c:a4:ee:d6:ca:06:50: de:69:07:e3:a6:99:68:52:9a:1b:f7:83:a3:36:b7:37:53:c6: 05:96:69:52:31:83:23:ed:06:c5:81:dc:4f:bb:5d:62:7c:7f: d9:5d:68:1d:03:2f:92:a7:1a:96:06:2b:83:e9:15:86:e7:db: 95:29:97:00:41:b9:34:37:77:db:38:f4:11:1c:20:51:55:69: 0d:0c:bd:44:7e:5a:0f:5a:5f:bd:38:1a:00:27:25:fb:0a:1d: 30:97:d6:8f:b8:69:f4:51:7c:b5:87:4e:0f:dc:cf:1f:fa:22: 6b:e0:45:7a:57:0d:0e:dd:f5:26:7d:1a:07:68:3c:f5:2e:b0: e7:4a:f3:a5:2b:74:7a:e3:18:41:36:92:04:79:d6:fa:22:fb: 44:94:70:15:b1:79:fd:57:27:d4:af:60:a9:13:1b:b0:af:f3: 46:d0:38:88:81:30:a2:eb:1d:06:c4:42:7d:3a:c5:19:c6:b9: 80:a1:51:6e -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUCH050CjvG0eqee/x5+dIjuWvFMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MzOENEQzc4NUM0QzhCMjJFNjAzNzcyNzFFNTU0MDk1 ODJDQ0UxMTAeFw0yNjA1MDMwMjMxNTBaFw0yNzA1MDIwMjM2NTBaMDMxMTAvBgNV BAMTKEI5MjRCRTlEOTFERDNFQUQyQThBQjI4NDc2NzU3NzBFMjFCMkJCODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCA0a0+Fm2BP53KstYSylHbrbII QwZUeg+MtA55x8RQI7GIZ2I7QEmeyfOT5C1F1iP0tlHrQZPh4U0+4XoG8bIllhRl NQjweranlgIO8ePu4Njb/37A6TswGYxiO3bSBBp6dYL4q2DaH8EGorTYrdQEWj9s FrD3APYmP3+dtuL/iZmAYBLptX55ck/9aa7u87gxXxDYie6NzwVcf7yo92Igk6ZQ zudwjQbMccoE4Cv5LEs7DKPHIRfk6v89yAkXZlyYCoZB0ARDYTz1RqfgUSvLpPRv +5HkSclQVgh7OUvaopxC4nApPYeCs8RCLrhXqIji3YypgN7Mebd/ReKvIRLzAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUuSS+nZHdPq0qirKEdnV3DiGyu4EwHwYDVR0j BBgwFoAUPDjNx4XEyLIuYDdyceVUCVgszhEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ3OTRkMzYtNjlmOC00NDA2LWJmOWYtMTIyZGRkMTdmNDUwLzAvM0MzOENEQzc4 NUM0QzhCMjJFNjAzNzcyNzFFNTU0MDk1ODJDQ0UxMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzM4Q0RDNzg1QzRDOEIyMkU2MDM3NzI3MUU1NTQwOTU4MkND RTExLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVkNzk0ZDM2LTY5ZjgtNDQwNi1i ZjlmLTEyMmRkZDE3ZjQ1MC8wLzMyMzQzMDM0M2EzNjMxMzQzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzMzODMxMzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQEYUAwDQYJKoZI hvcNAQELBQADggEBAFnZyL98DoU4JyDi/2K6J1Fg/gR1iBSq5W9PYsGKUTbgEpgZ 2bfYIYXrXIqaO+v//7/QZnp/F9cdewRIQekkygn9DKTu1soGUN5pB+OmmWhSmhv3 g6M2tzdTxgWWaVIxgyPtBsWB3E+7XWJ8f9ldaB0DL5KnGpYGK4PpFYbn25UplwBB uTQ3d9s49BEcIFFVaQ0MvUR+Wg9aX704GgAnJfsKHTCX1o+4afRRfLWHTg/czx/6 ImvgRXpXDQ7d9SZ9GgdoPPUusOdK86UrdHrjGEE2kgR51voi+0SUcBWxef1XJ9Sv YKkTG7Cv80bQOIiBMKLrHQbEQn06xRnGuYChUW4= -----END CERTIFICATE-----Generated at Wed May 13 10:43:28 2026 by rpki-client