$ rpki-client -vvf rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/323430343a3838303a31303a3a2f34382d3438203d3e203338373530.roa File: 323430343a3838303a31303a3a2f34382d3438203d3e203338373530.roa (raw, json) Hash identifier: YRbfvStJ8Xz50EBiTCoGlectFVsjTE1eI7CsInhJEBw= Subject key identifier: 5D:A8:52:C8:F8:27:4F:B0:E4:4F:BC:DF:25:FE:8C:68:73:C2:BA:EB Certificate issuer: /CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8 Certificate serial: 1362B06D4808964D16201FD70962B2C67CB0C329 Authority key identifier: 99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/323430343a3838303a31303a3a2f34382d3438203d3e203338373530.roa Signing time: Sun 03 May 2026 02:42:35 +0000 ROA not before: Sun 03 May 2026 02:37:35 +0000 ROA not after: Sun 02 May 2027 02:42:35 +0000 asID: 38750 IP address blocks: 2404:880:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:62:b0:6d:48:08:96:4d:16:20:1f:d7:09:62:b2:c6:7c:b0:c3:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8 Validity Not Before: May 3 02:37:35 2026 GMT Not After : May 2 02:42:35 2027 GMT Subject: CN=5DA852C8F8274FB0E44FBCDF25FE8C6873C2BAEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:06:e9:a3:46:f5:75:6d:a3:a8:a5:47:c6:d1: a9:51:30:23:21:76:10:42:1f:f1:6a:37:3e:08:e2: 7c:e6:35:5c:fb:6c:aa:2a:2c:ae:64:e3:60:ac:10: 7c:c1:4b:90:4e:f1:5d:f4:73:e0:07:3a:cd:02:23: 05:9b:5e:be:a2:4d:ca:cf:74:b9:5f:3b:2a:b5:2f: f1:6e:fa:c7:d6:35:5d:6f:92:f6:f8:70:f1:58:1b: f0:28:32:d9:9c:5b:20:01:04:01:36:25:6b:bd:1c: 6f:03:f4:55:e8:2d:c8:48:cb:2d:04:58:c0:a4:de: 38:c5:b7:56:bd:74:66:b6:e8:cf:a6:64:a1:62:1a: 8e:09:5a:b0:f8:cf:dc:57:0b:16:d6:45:aa:d7:4c: bd:5a:fa:a3:54:ab:a7:b3:9b:f9:18:9c:b4:e1:6b: 61:e1:60:f5:82:56:59:37:f7:55:72:52:fd:c9:ee: f3:fd:f0:09:4e:1c:5a:b2:d2:38:5a:6c:a5:1b:60: f8:62:c9:9b:2c:d3:c2:25:0b:e5:c4:0d:cf:3e:06: ef:6e:82:e1:25:fc:87:10:26:b0:c1:10:00:80:c2: e5:f5:70:fc:1d:c7:0e:d8:a7:90:43:7c:10:20:7a: ae:ce:48:25:1e:83:15:f7:e0:66:bd:b3:c0:6f:bc: 22:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A8:52:C8:F8:27:4F:B0:E4:4F:BC:DF:25:FE:8C:68:73:C2:BA:EB X509v3 Authority Key Identifier: keyid:99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/323430343a3838303a31303a3a2f34382d3438203d3e203338373530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:880:10::/48 Signature Algorithm: sha256WithRSAEncryption b2:63:d4:91:08:d1:dc:b6:80:49:3c:d5:5f:4a:4c:3a:01:68: 17:85:e6:28:e7:c1:40:27:f9:9e:25:1b:70:ce:6b:b3:7d:68: 55:c1:6b:80:ec:a2:87:d6:64:83:d6:1d:7e:b6:bd:17:ce:a2: b2:8f:94:fe:4d:00:92:8a:9e:a7:65:ce:9d:83:05:07:fb:94: 3f:2e:b5:82:ff:87:97:6d:49:4b:72:4e:af:56:4d:18:d5:61: ec:7e:88:82:fa:95:43:39:a4:4d:bf:b7:06:62:ee:23:93:9f: cc:80:62:64:be:a7:59:9d:9a:27:97:32:e1:c7:4d:47:03:fe: 0f:ae:bc:f2:97:e2:60:74:60:74:bc:c8:b7:e7:63:04:bd:84: b0:e6:ea:3f:e6:c3:4f:81:de:ce:e2:41:fb:82:0a:0f:e2:d5: 41:a2:0b:c8:29:ba:84:f9:17:a6:f5:9c:d2:63:4c:3c:8b:ef: cb:56:d8:5e:05:23:e3:cd:b0:34:61:fc:b5:b1:c6:90:50:b8: ef:30:1c:9f:f7:7e:b1:1a:8b:45:bc:07:04:4e:cb:92:7a:e0: 2d:fb:8a:ab:7d:f0:61:63:69:01:02:12:78:01:39:e2:40:83: c5:13:77:39:ff:ea:8b:9a:58:93:5e:75:59:2a:79:67:bf:33: 7f:9b:00:9d -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUE2KwbUgIlk0WIB/XCWKyxnywwykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlGMEU2REUwMkM2MDJEMUU0ODU0NTU0NzRGNEIyMTIw N0QyRDdGODAeFw0yNjA1MDMwMjM3MzVaFw0yNzA1MDIwMjQyMzVaMDMxMTAvBgNV BAMTKDVEQTg1MkM4RjgyNzRGQjBFNDRGQkNERjI1RkU4QzY4NzNDMkJBRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyBumjRvV1baOopUfG0alRMCMh dhBCH/FqNz4I4nzmNVz7bKoqLK5k42CsEHzBS5BO8V30c+AHOs0CIwWbXr6iTcrP dLlfOyq1L/Fu+sfWNV1vkvb4cPFYG/AoMtmcWyABBAE2JWu9HG8D9FXoLchIyy0E WMCk3jjFt1a9dGa26M+mZKFiGo4JWrD4z9xXCxbWRarXTL1a+qNUq6ezm/kYnLTh a2HhYPWCVlk391VyUv3J7vP98AlOHFqy0jhabKUbYPhiyZss08IlC+XEDc8+Bu9u guEl/IcQJrDBEACAwuX1cPwdxw7Yp5BDfBAgeq7OSCUegxX34Ga9s8BvvCLFAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUXahSyPgnT7DkT7zfJf6MaHPCuuswHwYDVR0j BBgwFoAUmfDm3gLGAtHkhUVUdPSyEgfS1/gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzBmNWNmZGItNzk4Ny00MzUxLWJjMmUtNjZjMjRmNDlmNDQwLzAvOTlGMEU2REUw MkM2MDJEMUU0ODU0NTU0NzRGNEIyMTIwN0QyRDdGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OUYwRTZERTAyQzYwMkQxRTQ4NTQ1NTQ3NEY0QjIxMjA3RDJE N0Y4LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzcwZjVjZmRiLTc5ODctNDM1MS1i YzJlLTY2YzI0ZjQ5ZjQ0MC8wLzMyMzQzMDM0M2EzODM4MzAzYTMxMzAzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzczNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAQIgAAQMA0G CSqGSIb3DQEBCwUAA4IBAQCyY9SRCNHctoBJPNVfSkw6AWgXheYo58FAJ/meJRtw zmuzfWhVwWuA7KKH1mSD1h1+tr0XzqKyj5T+TQCSip6nZc6dgwUH+5Q/LrWC/4eX bUlLck6vVk0Y1WHsfoiC+pVDOaRNv7cGYu4jk5/MgGJkvqdZnZonlzLhx01HA/4P rrzyl+JgdGB0vMi352MEvYSw5uo/5sNPgd7O4kH7ggoP4tVBogvIKbqE+Rem9ZzS Y0w8i+/LVtheBSPjzbA0Yfy1scaQULjvMByf936xGotFvAcETsuSeuAt+4qrffBh Y2kBAhJ4ATniQIPFE3c5/+qLmliTXnVZKnlnvzN/mwCd -----END CERTIFICATE-----Generated at Wed May 13 04:46:59 2026 by rpki-client