$ rpki-client -vvf rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/323430333a373230303a3a2f33322d3438203d3e2039373835.roa File: 323430333a373230303a3a2f33322d3438203d3e2039373835.roa (raw, json) Hash identifier: H+4huOKuCZJDgCcIRHG5F336v2zTL76hXwSaEF33ZKg= Subject key identifier: 80:0D:D6:15:BC:D3:06:8A:90:73:70:BD:52:7E:67:76:C8:9C:3F:8D Certificate issuer: /CN=9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D Certificate serial: 08022323C3B4E2BB00CA2168A984FA5F602A32BC Authority key identifier: 9D:D7:FD:1C:0A:74:FE:31:7E:DA:41:E4:D1:CD:C8:57:AF:C1:77:9D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/323430333a373230303a3a2f33322d3438203d3e2039373835.roa Signing time: Sun 03 May 2026 02:40:21 +0000 ROA not before: Sun 03 May 2026 02:35:21 +0000 ROA not after: Sun 02 May 2027 02:40:21 +0000 asID: 9785 IP address blocks: 2403:7200::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:02:23:23:c3:b4:e2:bb:00:ca:21:68:a9:84:fa:5f:60:2a:32:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D Validity Not Before: May 3 02:35:21 2026 GMT Not After : May 2 02:40:21 2027 GMT Subject: CN=800DD615BCD3068A907370BD527E6776C89C3F8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c2:2e:ca:cb:90:af:b3:eb:42:c4:fe:2b:f5: 47:8f:fe:e5:2c:a5:26:8f:ef:49:69:4d:92:83:41: 8f:9b:68:14:a9:72:ab:80:2b:26:91:a8:eb:8f:3b: c1:41:8e:b4:2e:03:e1:20:43:56:88:e5:89:22:a6: fd:a7:77:b6:d3:b6:f7:36:e3:14:3f:c4:08:42:12: 10:39:8a:bf:1f:2c:74:b7:1b:ef:a8:8f:9b:d9:cf: b9:ff:a3:5d:06:e0:12:13:7e:99:13:f8:32:46:96: 99:90:0d:ae:32:60:f9:d3:bd:df:ab:47:07:0a:e1: 37:e8:85:d4:f6:f1:33:ae:7c:89:c8:b3:ba:ac:c4: 68:b3:27:2b:ed:eb:e1:ac:2f:a9:15:39:ed:8c:cc: 8d:2c:eb:9e:34:35:cc:34:8a:5d:d9:df:e5:d5:db: ff:e7:61:37:1e:53:8f:87:c9:ba:85:05:73:e2:f1: 9b:7f:0e:13:19:35:bc:a1:f6:fb:42:5d:f6:a3:42: 15:2a:c8:5e:78:b1:dc:70:1a:8c:2b:5a:02:9e:a6: 9c:90:70:5c:88:05:91:65:8d:3c:30:95:23:a7:b4: e8:4e:c4:b5:92:7d:07:f1:6e:23:85:07:a3:83:5c: 28:4f:b1:27:86:3c:1e:fb:45:24:ff:23:e2:9b:ad: 53:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:0D:D6:15:BC:D3:06:8A:90:73:70:BD:52:7E:67:76:C8:9C:3F:8D X509v3 Authority Key Identifier: keyid:9D:D7:FD:1C:0A:74:FE:31:7E:DA:41:E4:D1:CD:C8:57:AF:C1:77:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/323430333a373230303a3a2f33322d3438203d3e2039373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:7200::/32 Signature Algorithm: sha256WithRSAEncryption 79:cb:0f:d4:64:80:19:60:16:1e:54:b6:fb:80:39:aa:68:7b: 24:98:eb:4c:28:6d:ae:57:f2:39:7b:5d:9d:b4:e3:28:96:62: d6:cd:fc:e8:90:41:6e:99:8f:ff:88:45:1e:6e:72:fd:88:b0: d6:02:44:36:01:d2:af:f1:8c:8d:58:cd:9c:bd:b9:30:9d:2d: fb:36:39:da:0e:77:23:fc:a6:e4:ce:f2:75:d3:39:85:3d:be: cf:07:a6:4b:cd:57:10:1f:a3:4a:34:6e:9d:b7:2a:4f:16:82: 51:75:15:63:34:7b:9c:56:19:db:6e:2b:e7:d8:ab:a2:a9:2c: 4d:bb:42:1c:79:1c:c3:1f:1d:4a:b9:4d:12:3e:fe:48:fb:8c: 9c:5d:b9:99:f0:07:83:d2:4a:af:2f:5e:22:6d:89:c2:f3:1d: ce:d5:c9:1a:46:fc:b4:9b:99:45:19:08:a5:e1:02:f3:0f:06: c0:cb:6d:61:28:3b:19:e8:98:df:70:1a:f7:0d:8a:cc:d7:a0: 41:63:84:e0:d3:53:db:f3:ac:ea:58:7e:94:e6:57:f7:f1:cf: 0c:3f:ca:42:5d:b4:8f:c6:cd:77:2b:fe:93:f9:e0:e6:5b:28: e4:73:4b:13:8c:8e:62:1e:3b:de:e0:38:60:c8:34:eb:71:89: 46:a4:d6:83 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUCAIjI8O04rsAyiFoqYT6X2AqMrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUREN0ZEMUMwQTc0RkUzMTdFREE0MUU0RDFDREM4NTdB RkMxNzc5RDAeFw0yNjA1MDMwMjM1MjFaFw0yNzA1MDIwMjQwMjFaMDMxMTAvBgNV BAMTKDgwMERENjE1QkNEMzA2OEE5MDczNzBCRDUyN0U2Nzc2Qzg5QzNGOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIwi7Ky5Cvs+tCxP4r9UeP/uUs pSaP70lpTZKDQY+baBSpcquAKyaRqOuPO8FBjrQuA+EgQ1aI5Ykipv2nd7bTtvc2 4xQ/xAhCEhA5ir8fLHS3G++oj5vZz7n/o10G4BITfpkT+DJGlpmQDa4yYPnTvd+r RwcK4TfohdT28TOufInIs7qsxGizJyvt6+GsL6kVOe2MzI0s6540Ncw0il3Z3+XV 2//nYTceU4+HybqFBXPi8Zt/DhMZNbyh9vtCXfajQhUqyF54sdxwGowrWgKeppyQ cFyIBZFljTwwlSOntOhOxLWSfQfxbiOFB6ODXChPsSeGPB77RST/I+KbrVNZAgMB AAGjggIuMIICKjAdBgNVHQ4EFgQUgA3WFbzTBoqQc3C9Un5ndsicP40wHwYDVR0j BBgwFoAUndf9HAp0/jF+2kHk0c3IV6/Bd50wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjkwYzkwMDktYWQ1My00ZmE2LWExODMtMzRiMzQ1N2JlYTAzLzAvOUREN0ZEMUMw QTc0RkUzMTdFREE0MUU0RDFDREM4NTdBRkMxNzc5RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REQ3RkQxQzBBNzRGRTMxN0VEQTQxRTREMUNEQzg1N0FGQzE3 NzlELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjkwYzkwMDktYWQ1My00ZmE2LWEx ODMtMzRiMzQ1N2JlYTAzLzAvMzIzNDMwMzMzYTM3MzIzMDMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzkzNzM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkA3IAMA0GCSqGSIb3DQEB CwUAA4IBAQB5yw/UZIAZYBYeVLb7gDmqaHskmOtMKG2uV/I5e12dtOMolmLWzfzo kEFumY//iEUebnL9iLDWAkQ2AdKv8YyNWM2cvbkwnS37NjnaDncj/KbkzvJ10zmF Pb7PB6ZLzVcQH6NKNG6dtypPFoJRdRVjNHucVhnbbivn2KuiqSxNu0IceRzDHx1K uU0SPv5I+4ycXbmZ8AeD0kqvL14ibYnC8x3O1ckaRvy0m5lFGQil4QLzDwbAy21h KDsZ6JjfcBr3DYrM16BBY4Tg01Pb86zqWH6U5lf38c8MP8pCXbSPxs13K/6T+eDm Wyjkc0sTjI5iHjve4DhgyDTrcYlGpNaD -----END CERTIFICATE-----Generated at Wed May 13 09:23:52 2026 by rpki-client