$ rpki-client -vvf rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/323430323a3738303a3a2f33322d3438203d3e203435373235.roa File: 323430323a3738303a3a2f33322d3438203d3e203435373235.roa (raw, json) Hash identifier: sl+iuCCUr3AhrbHRUBytym+J10SKYhbTMp/HhF4OANo= Subject key identifier: C8:CA:C2:1A:65:A6:AF:B7:5F:20:A7:CE:6E:70:0A:B1:67:EF:8C:95 Certificate issuer: /CN=62258C46C7EEF9427331E24A2D1EB9B699C68A9E Certificate serial: 79C10E6E81433C9780BB29DD486FC8EBA7B30A25 Authority key identifier: 62:25:8C:46:C7:EE:F9:42:73:31:E2:4A:2D:1E:B9:B6:99:C6:8A:9E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/323430323a3738303a3a2f33322d3438203d3e203435373235.roa Signing time: Sun 03 May 2026 02:39:05 +0000 ROA not before: Sun 03 May 2026 02:34:05 +0000 ROA not after: Sun 02 May 2027 02:39:05 +0000 asID: 45725 IP address blocks: 2402:780::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.crl rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:c1:0e:6e:81:43:3c:97:80:bb:29:dd:48:6f:c8:eb:a7:b3:0a:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62258C46C7EEF9427331E24A2D1EB9B699C68A9E Validity Not Before: May 3 02:34:05 2026 GMT Not After : May 2 02:39:05 2027 GMT Subject: CN=C8CAC21A65A6AFB75F20A7CE6E700AB167EF8C95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b9:d2:dd:e9:be:fb:30:ff:95:48:e4:71:f7: 98:15:d9:b0:c5:92:63:84:e7:03:5a:8b:08:0d:ab: 15:33:3b:55:51:87:b3:88:fe:29:e5:dd:5c:23:88: 34:97:52:b7:62:ca:8e:a5:78:81:80:47:73:70:be: 99:f9:34:ab:e7:47:62:c7:64:75:fe:9a:cc:29:bc: 91:05:32:41:69:2b:76:56:46:32:61:c7:6b:8b:fb: 9c:40:aa:30:8c:c6:37:56:25:87:98:ad:70:29:eb: eb:44:3f:2b:af:94:5d:a3:73:a3:1a:b5:8e:2c:3a: 0f:09:68:53:ae:1f:d4:8b:f4:75:9f:28:7a:ca:59: 52:75:77:95:81:56:0b:3b:2c:6d:bd:8b:23:62:4b: 23:d4:8d:31:e2:70:54:76:89:af:03:ae:35:13:fe: 66:d8:43:12:8b:18:a9:13:0c:09:a8:b8:d4:2a:ef: c0:68:d5:ed:3f:d3:21:72:5b:04:c0:30:b2:7c:81: 0e:54:96:9d:8b:de:6d:57:78:a9:04:d9:69:ed:e7: 53:a9:0d:ae:31:8e:db:55:bd:c8:fc:a4:ad:a8:68: fe:3c:98:f0:73:6c:74:f1:0e:72:04:c4:9b:56:1a: 46:14:3f:0e:72:75:c6:21:30:ca:57:40:a9:c2:f6: 6b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CA:C2:1A:65:A6:AF:B7:5F:20:A7:CE:6E:70:0A:B1:67:EF:8C:95 X509v3 Authority Key Identifier: keyid:62:25:8C:46:C7:EE:F9:42:73:31:E2:4A:2D:1E:B9:B6:99:C6:8A:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/323430323a3738303a3a2f33322d3438203d3e203435373235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:780::/32 Signature Algorithm: sha256WithRSAEncryption 36:af:94:e5:98:34:86:f2:ff:6c:1b:6f:b1:ce:80:7c:f9:32: 2c:84:f3:ee:14:a5:95:5b:51:48:73:65:b5:08:22:60:68:ea: 71:85:58:c9:2a:79:3f:88:0c:0c:80:14:37:0d:15:9e:db:48: 3a:bc:49:c7:30:46:4e:5b:76:01:f3:32:9e:9f:cf:09:fe:75: ce:bc:20:c2:6e:67:9f:b6:9b:81:8b:e3:f5:05:ba:ca:9c:d3: 2f:aa:01:cc:68:6f:2f:14:06:e1:32:7f:82:8b:b2:d1:79:a1: 26:a7:9c:c6:95:62:50:d4:18:e6:d9:02:c1:7e:95:f3:5c:f4: 2f:66:a7:ae:16:27:c7:f4:f1:14:24:bc:2d:4a:01:b3:d7:1b: db:d7:40:c6:6f:8d:7d:ae:69:4d:6a:d8:00:fa:b9:a0:9e:d2: 91:ad:4e:15:8a:39:96:95:22:b1:29:37:ae:36:d5:e8:f3:82: 67:11:1f:3b:cd:96:9a:04:f2:9f:96:e2:16:a2:00:d3:9c:d7: 86:a1:8b:5e:c3:71:f9:af:77:9f:95:15:f2:bc:a6:ab:82:3e: 4a:dd:f7:c2:1f:9b:6f:c8:60:6a:4b:b9:53:80:bb:e1:54:c6: 97:10:67:37:33:58:ab:09:d0:f3:37:be:d2:d6:ec:31:0f:52: ef:a0:27:09 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUecEOboFDPJeAuyndSG/I66ezCiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjIyNThDNDZDN0VFRjk0MjczMzFFMjRBMkQxRUI5QjY5 OUM2OEE5RTAeFw0yNjA1MDMwMjM0MDVaFw0yNzA1MDIwMjM5MDVaMDMxMTAvBgNV BAMTKEM4Q0FDMjFBNjVBNkFGQjc1RjIwQTdDRTZFNzAwQUIxNjdFRjhDOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9udLd6b77MP+VSORx95gV2bDF kmOE5wNaiwgNqxUzO1VRh7OI/inl3VwjiDSXUrdiyo6leIGAR3Nwvpn5NKvnR2LH ZHX+mswpvJEFMkFpK3ZWRjJhx2uL+5xAqjCMxjdWJYeYrXAp6+tEPyuvlF2jc6Ma tY4sOg8JaFOuH9SL9HWfKHrKWVJ1d5WBVgs7LG29iyNiSyPUjTHicFR2ia8DrjUT /mbYQxKLGKkTDAmouNQq78Bo1e0/0yFyWwTAMLJ8gQ5Ulp2L3m1XeKkE2Wnt51Op Da4xjttVvcj8pK2oaP48mPBzbHTxDnIExJtWGkYUPw5ydcYhMMpXQKnC9mtZAgMB AAGjggIuMIICKjAdBgNVHQ4EFgQUyMrCGmWmr7dfIKfObnAKsWfvjJUwHwYDVR0j BBgwFoAUYiWMRsfu+UJzMeJKLR65tpnGip4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjQ0MjE2ZDgtNzBjZS00OTA4LWE3MmItZWMyNzNmNDNiYmMyLzAvNjIyNThDNDZD N0VFRjk0MjczMzFFMjRBMkQxRUI5QjY5OUM2OEE5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjI1OEM0NkM3RUVGOTQyNzMzMUUyNEEyRDFFQjlCNjk5QzY4 QTlFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjQ0MjE2ZDgtNzBjZS00OTA4LWE3 MmItZWMyNzNmNDNiYmMyLzAvMzIzNDMwMzIzYTM3MzgzMDNhM2EyZjMzMzIyZDM0 MzgyMDNkM2UyMDM0MzUzNzMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAgeAMA0GCSqGSIb3DQEB CwUAA4IBAQA2r5TlmDSG8v9sG2+xzoB8+TIshPPuFKWVW1FIc2W1CCJgaOpxhVjJ Knk/iAwMgBQ3DRWe20g6vEnHMEZOW3YB8zKen88J/nXOvCDCbmeftpuBi+P1BbrK nNMvqgHMaG8vFAbhMn+Ci7LReaEmp5zGlWJQ1Bjm2QLBfpXzXPQvZqeuFifH9PEU JLwtSgGz1xvb10DGb419rmlNatgA+rmgntKRrU4VijmWlSKxKTeuNtXo84JnER87 zZaaBPKfluIWogDTnNeGoYtew3H5r3eflRXyvKargj5K3ffCH5tvyGBqS7lTgLvh VMaXEGc3M1irCdDzN77S1uwxD1LvoCcJ -----END CERTIFICATE-----Generated at Wed May 13 08:28:21 2026 by rpki-client