$ rpki-client -vvf rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/323430343a3838303a3a2f34382d3438203d3e203338373530.roa File: 323430343a3838303a3a2f34382d3438203d3e203338373530.roa (raw, json) Hash identifier: VgQXPBS32nNSzlwVl57OwsniexA2zZE5SydGF9v31zc= Subject key identifier: A2:ED:A0:77:21:8B:92:DD:0A:DD:A0:B0:A7:F6:DE:70:7A:9F:8E:F4 Certificate issuer: /CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8 Certificate serial: 0B0077D42FA2DD1BA14DEFF1AF24481CF284D3D2 Authority key identifier: 99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/323430343a3838303a3a2f34382d3438203d3e203338373530.roa Signing time: Sun 03 May 2026 02:42:33 +0000 ROA not before: Sun 03 May 2026 02:37:33 +0000 ROA not after: Sun 02 May 2027 02:42:33 +0000 asID: 38750 IP address blocks: 2404:880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:00:77:d4:2f:a2:dd:1b:a1:4d:ef:f1:af:24:48:1c:f2:84:d3:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8 Validity Not Before: May 3 02:37:33 2026 GMT Not After : May 2 02:42:33 2027 GMT Subject: CN=A2EDA077218B92DD0ADDA0B0A7F6DE707A9F8EF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:56:61:f2:ac:5f:ef:b6:a4:c3:19:18:4c:1d: c5:c4:e7:08:8f:f5:e6:42:a3:c5:74:a7:47:9a:13: 6b:fc:9c:69:48:44:da:c7:f8:a2:21:91:0a:96:9a: 2a:28:7b:0b:14:87:09:e9:db:63:c8:8a:4e:61:f7: 21:81:29:b9:77:6b:b9:e6:3e:bd:a1:9b:7f:ef:9c: d5:57:48:0c:85:2e:d1:73:50:aa:11:3c:ac:05:4a: 93:72:be:ac:ff:ea:ad:55:ec:b3:ba:d8:f4:95:5e: 6d:2d:6d:ea:3d:21:10:f5:eb:6c:1c:f6:55:21:92: 72:e5:c3:3a:65:76:19:93:90:d7:67:40:cf:5a:92: cc:41:23:6f:70:67:87:08:ce:72:8d:15:7c:2c:9e: 82:6e:69:bb:9f:44:4d:cf:5c:ba:7b:b5:8b:77:9f: 63:3e:2e:6f:9f:bd:87:d3:cb:fe:d3:8c:5e:ee:f8: ee:ac:3d:f4:4a:ea:b1:d3:a1:5e:56:86:70:16:27: 5e:3d:53:78:20:bb:f1:7f:59:3f:e0:9a:97:c4:df: 60:9a:e3:bb:5b:6e:f6:d4:79:a3:bd:bf:14:e4:bb: 61:8a:71:20:45:17:8f:b4:71:5f:be:29:84:89:67: 97:b7:53:30:00:22:30:b4:0d:19:ba:4b:da:3b:03: 61:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:ED:A0:77:21:8B:92:DD:0A:DD:A0:B0:A7:F6:DE:70:7A:9F:8E:F4 X509v3 Authority Key Identifier: keyid:99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/323430343a3838303a3a2f34382d3438203d3e203338373530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:880::/48 Signature Algorithm: sha256WithRSAEncryption 01:ef:42:c4:26:f3:91:e4:38:77:8d:1f:8a:e8:72:34:8a:04: 95:e2:0c:a0:de:8f:2e:1c:21:58:f6:bc:cf:47:85:71:01:84: ae:af:d9:48:d3:73:c8:40:52:81:ce:49:b2:b0:10:d5:4e:c3: 36:70:65:70:63:d2:b9:1c:cf:83:d8:af:4e:9e:1e:c4:01:5b: 72:11:7e:f1:4d:ba:4e:09:24:9b:dd:f1:dd:86:a7:98:cf:ba: bf:21:ca:60:d3:e8:45:70:2e:2b:49:6a:7a:e6:34:b4:0e:21: d5:e8:0d:5b:ef:e1:d3:6b:4a:fa:e4:50:ef:3d:a9:9c:7a:3b: fe:b3:2c:f5:70:27:57:6c:99:0e:ca:03:fa:73:1e:e3:a3:96: 9e:8f:31:05:2d:8f:04:4b:0b:e2:af:a6:ac:e1:71:31:b6:b7: 83:03:29:40:4a:6d:1e:f7:71:2a:56:4e:1c:fe:83:ff:86:bd: 95:d2:4d:00:cc:e8:2c:12:14:38:5f:dd:31:e0:51:e1:f8:1d: 02:5f:47:0a:7d:a9:d7:33:9f:a4:17:92:bd:83:bf:72:83:38: 33:d7:11:73:61:b9:db:cc:dd:ea:1c:19:34:21:2c:29:b8:00: f3:2b:25:ee:37:9c:5c:25:15:44:4e:00:9f:3b:97:ae:02:03: f0:33:9b:b1 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUCwB31C+i3RuhTe/xryRIHPKE09IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlGMEU2REUwMkM2MDJEMUU0ODU0NTU0NzRGNEIyMTIw N0QyRDdGODAeFw0yNjA1MDMwMjM3MzNaFw0yNzA1MDIwMjQyMzNaMDMxMTAvBgNV BAMTKEEyRURBMDc3MjE4QjkyREQwQUREQTBCMEE3RjZERTcwN0E5RjhFRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGVmHyrF/vtqTDGRhMHcXE5wiP 9eZCo8V0p0eaE2v8nGlIRNrH+KIhkQqWmiooewsUhwnp22PIik5h9yGBKbl3a7nm Pr2hm3/vnNVXSAyFLtFzUKoRPKwFSpNyvqz/6q1V7LO62PSVXm0tbeo9IRD162wc 9lUhknLlwzpldhmTkNdnQM9aksxBI29wZ4cIznKNFXwsnoJuabufRE3PXLp7tYt3 n2M+Lm+fvYfTy/7TjF7u+O6sPfRK6rHToV5WhnAWJ149U3ggu/F/WT/gmpfE32Ca 47tbbvbUeaO9vxTku2GKcSBFF4+0cV++KYSJZ5e3UzAAIjC0DRm6S9o7A2FdAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUou2gdyGLkt0K3aCwp/becHqfjvQwHwYDVR0j BBgwFoAUmfDm3gLGAtHkhUVUdPSyEgfS1/gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzBmNWNmZGItNzk4Ny00MzUxLWJjMmUtNjZjMjRmNDlmNDQwLzAvOTlGMEU2REUw MkM2MDJEMUU0ODU0NTU0NzRGNEIyMTIwN0QyRDdGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OUYwRTZERTAyQzYwMkQxRTQ4NTQ1NTQ3NEY0QjIxMjA3RDJE N0Y4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzBmNWNmZGItNzk4Ny00MzUxLWJj MmUtNjZjMjRmNDlmNDQwLzAvMzIzNDMwMzQzYTM4MzgzMDNhM2EyZjM0MzgyZDM0 MzgyMDNkM2UyMDMzMzgzNzM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBAiAAAAwDQYJKoZIhvcN AQELBQADggEBAAHvQsQm85HkOHeNH4rocjSKBJXiDKDejy4cIVj2vM9HhXEBhK6v 2UjTc8hAUoHOSbKwENVOwzZwZXBj0rkcz4PYr06eHsQBW3IRfvFNuk4JJJvd8d2G p5jPur8hymDT6EVwLitJanrmNLQOIdXoDVvv4dNrSvrkUO89qZx6O/6zLPVwJ1ds mQ7KA/pzHuOjlp6PMQUtjwRLC+KvpqzhcTG2t4MDKUBKbR73cSpWThz+g/+GvZXS TQDM6CwSFDhf3THgUeH4HQJfRwp9qdczn6QXkr2Dv3KDODPXEXNhudvM3eocGTQh LCm4APMrJe43nFwlFUROAJ87l64CA/Azm7E= -----END CERTIFICATE-----Generated at Wed May 13 02:15:53 2026 by rpki-client