$ rpki-client -vvf rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/323430323a353538303a3a2f33322d3438203d3e20313333383137.roa File: 323430323a353538303a3a2f33322d3438203d3e20313333383137.roa (raw, json) Hash identifier: 5QHnLxUj5ToZbDP+kG+27eOW/Apgnrnl+qyMt1ibRXw= Subject key identifier: B0:3F:04:88:71:29:33:6E:72:55:CE:74:EE:A6:2A:51:30:55:10:08 Certificate issuer: /CN=4885E75D6B0A938F5FEE35FABA26DEA08AF687D3 Certificate serial: 7F5AEEC7819076B1FAD2C2C60ECF17BB30B33067 Authority key identifier: 48:85:E7:5D:6B:0A:93:8F:5F:EE:35:FA:BA:26:DE:A0:8A:F6:87:D3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/323430323a353538303a3a2f33322d3438203d3e20313333383137.roa Signing time: Sun 03 May 2026 02:40:11 +0000 ROA not before: Sun 03 May 2026 02:35:11 +0000 ROA not after: Sun 02 May 2027 02:40:11 +0000 asID: 133817 IP address blocks: 2402:5580::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:16:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:5a:ee:c7:81:90:76:b1:fa:d2:c2:c6:0e:cf:17:bb:30:b3:30:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4885E75D6B0A938F5FEE35FABA26DEA08AF687D3 Validity Not Before: May 3 02:35:11 2026 GMT Not After : May 2 02:40:11 2027 GMT Subject: CN=B03F04887129336E7255CE74EEA62A5130551008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2f:c5:c5:56:0a:ac:01:13:85:d8:0e:47:74: fb:c1:b1:98:b3:e4:93:b3:93:b7:b4:19:8f:2b:f9: 51:06:95:29:0e:aa:d1:bd:e5:04:05:73:dd:bf:c2: 22:40:7e:63:4b:e3:d2:aa:d4:84:34:11:1d:28:4f: 1c:7e:d7:b3:00:fd:ff:5d:f1:16:fd:ac:1a:a0:44: 38:6e:75:34:1a:06:fd:11:83:06:92:79:cc:53:d5: 0f:9a:b6:4a:54:7a:67:24:4a:10:c7:b6:8c:14:92: 40:75:d8:bd:92:c4:2d:3b:53:de:6f:c6:95:98:a3: d0:b2:37:bc:9b:84:ef:eb:9f:4b:96:49:b6:80:2a: a7:ff:16:32:56:68:f5:a8:0e:39:5a:61:f1:37:c6: 42:c5:79:bc:41:30:b0:7c:3a:93:8c:3d:dc:4c:b9: f8:53:1c:e5:8f:62:b2:6d:1c:31:a4:de:4b:c4:f3: e9:bf:71:c1:f9:d2:40:cb:08:e4:4c:57:50:db:8c: ab:98:c6:4f:36:26:57:0e:92:ed:a0:93:aa:5d:9f: 23:bc:6f:44:62:87:da:07:a6:10:2b:1c:b5:01:57: 9f:f8:47:a4:86:b9:e0:3e:ed:29:c9:ab:36:d3:75: 5a:8e:11:c3:ba:2d:51:35:a0:43:45:4e:96:a6:87: a1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:3F:04:88:71:29:33:6E:72:55:CE:74:EE:A6:2A:51:30:55:10:08 X509v3 Authority Key Identifier: keyid:48:85:E7:5D:6B:0A:93:8F:5F:EE:35:FA:BA:26:DE:A0:8A:F6:87:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/323430323a353538303a3a2f33322d3438203d3e20313333383137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5580::/32 Signature Algorithm: sha256WithRSAEncryption 8f:63:be:fb:19:f9:37:ab:1a:7b:cb:e5:bc:77:c2:e4:69:98: 49:29:2c:71:9c:eb:2e:50:b6:90:f3:6b:56:04:59:2c:3e:12: 48:fa:e9:95:ba:65:be:d3:6a:41:0e:19:ea:79:02:f2:41:d1: 82:a7:33:3d:44:d5:56:aa:59:b7:db:d1:cf:e1:43:4f:41:58: 68:ab:88:fd:80:02:1b:b4:cb:d7:d5:d6:25:46:ef:e7:18:fb: 98:6a:b4:1a:3f:f9:82:28:58:a1:ca:c3:40:86:6f:8a:91:a9: f7:a2:69:3a:34:9e:41:42:39:89:41:f0:87:06:58:43:9e:40: ff:c3:05:08:5c:f8:23:fe:90:14:1c:e1:db:b7:c0:fc:e1:b6: 6b:69:77:d9:8b:d0:fb:92:9c:b7:24:d4:67:61:56:cc:81:38: 15:36:d4:5b:28:58:74:7f:7c:cb:9a:06:d5:8d:77:2b:9d:44: c8:1f:53:93:d8:61:fc:01:e3:98:80:88:e6:0b:d7:6d:a8:85: e5:88:fe:6d:c8:86:b0:a3:f1:2d:93:8d:1c:a9:54:1b:2b:40: 5d:b4:c7:06:f8:1c:af:e3:00:65:0e:b6:ae:c1:85:24:70:f7: 0b:71:d4:43:0d:07:d5:f2:e2:78:5e:12:0a:0c:f0:a0:79:2a: 08:d0:3c:19 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUf1rux4GQdrH60sLGDs8XuzCzMGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4NUU3NUQ2QjBBOTM4RjVGRUUzNUZBQkEyNkRFQTA4 QUY2ODdEMzAeFw0yNjA1MDMwMjM1MTFaFw0yNzA1MDIwMjQwMTFaMDMxMTAvBgNV BAMTKEIwM0YwNDg4NzEyOTMzNkU3MjU1Q0U3NEVFQTYyQTUxMzA1NTEwMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfL8XFVgqsAROF2A5HdPvBsZiz 5JOzk7e0GY8r+VEGlSkOqtG95QQFc92/wiJAfmNL49Kq1IQ0ER0oTxx+17MA/f9d 8Rb9rBqgRDhudTQaBv0RgwaSecxT1Q+atkpUemckShDHtowUkkB12L2SxC07U95v xpWYo9CyN7ybhO/rn0uWSbaAKqf/FjJWaPWoDjlaYfE3xkLFebxBMLB8OpOMPdxM ufhTHOWPYrJtHDGk3kvE8+m/ccH50kDLCORMV1DbjKuYxk82JlcOku2gk6pdnyO8 b0Rih9oHphArHLUBV5/4R6SGueA+7SnJqzbTdVqOEcO6LVE1oENFTpamh6FVAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUsD8EiHEpM25yVc507qYqUTBVEAgwHwYDVR0j BBgwFoAUSIXnXWsKk49f7jX6uibeoIr2h9MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZmN2VmMzQtNDk5MS00YmIxLTk2YjQtYmU0M2YxZWNhYmI0LzAvNDg4NUU3NUQ2 QjBBOTM4RjVGRUUzNUZBQkEyNkRFQTA4QUY2ODdEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODg1RTc1RDZCMEE5MzhGNUZFRTM1RkFCQTI2REVBMDhBRjY4 N0QzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY2ZjdlZjM0LTQ5OTEtNGJiMS05 NmI0LWJlNDNmMWVjYWJiNC8wLzMyMzQzMDMyM2EzNTM1MzgzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzMzMzM4MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQCVYAwDQYJKoZI hvcNAQELBQADggEBAI9jvvsZ+TerGnvL5bx3wuRpmEkpLHGc6y5QtpDza1YEWSw+ Ekj66ZW6Zb7TakEOGep5AvJB0YKnMz1E1VaqWbfb0c/hQ09BWGiriP2AAhu0y9fV 1iVG7+cY+5hqtBo/+YIoWKHKw0CGb4qRqfeiaTo0nkFCOYlB8IcGWEOeQP/DBQhc +CP+kBQc4du3wPzhtmtpd9mL0PuSnLck1GdhVsyBOBU21FsoWHR/fMuaBtWNdyud RMgfU5PYYfwB45iAiOYL122oheWI/m3IhrCj8S2TjRypVBsrQF20xwb4HK/jAGUO tq7BhSRw9wtx1EMNB9Xy4nheEgoM8KB5KgjQPBk= -----END CERTIFICATE-----Generated at Wed May 13 11:22:39 2026 by rpki-client