$ rpki-client -vvf rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a34303a3a2f34382d3438203d3e20313336303838.roa File: 323430303a643934303a34303a3a2f34382d3438203d3e20313336303838.roa (raw, json) Hash identifier: iBvTknbLTgdzBBg6hpQI6nAp2/Y+ZQ/SghaasUfpG04= Subject key identifier: C9:B8:23:18:0D:DC:47:0C:21:73:1B:A8:3B:DC:B4:71:31:FB:E0:4E Certificate issuer: /CN=CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8 Certificate serial: 03EFE197DEB66309B16DF5346798BB440918A3AE Authority key identifier: CA:FD:3A:17:B2:AD:C6:F9:00:1E:57:A0:1B:B2:9E:9B:69:3B:7C:C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a34303a3a2f34382d3438203d3e20313336303838.roa Signing time: Sun 03 May 2026 02:43:10 +0000 ROA not before: Sun 03 May 2026 02:38:10 +0000 ROA not after: Sun 02 May 2027 02:43:10 +0000 asID: 136088 IP address blocks: 2400:d940:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:15:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:ef:e1:97:de:b6:63:09:b1:6d:f5:34:67:98:bb:44:09:18:a3:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8 Validity Not Before: May 3 02:38:10 2026 GMT Not After : May 2 02:43:10 2027 GMT Subject: CN=C9B823180DDC470C21731BA83BDCB47131FBE04E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:97:cd:33:41:9d:1b:27:c3:f6:93:01:e9:a4: 16:9f:af:b2:ad:11:f0:a6:72:f9:49:2e:58:4e:2f: d0:46:db:64:47:1c:b3:60:f8:ef:18:a2:a2:b3:b4: dd:00:8b:fe:a0:1a:d0:dd:5b:c6:12:77:85:03:b4: b0:99:8c:3e:ee:de:b7:8f:00:44:eb:12:23:60:3a: 85:43:0e:ed:c0:5e:f4:d4:e0:74:4f:9e:71:4b:4c: e9:90:23:d1:73:82:f2:44:96:0e:2a:90:b3:f8:90: 69:83:4b:83:16:cf:7d:7d:72:d3:11:2a:cd:fe:cb: ce:c6:21:a6:73:97:d9:fe:e6:15:0f:b1:21:ab:e9: de:b3:f8:e0:16:73:37:5c:22:95:27:2f:fc:15:0e: 27:72:b1:51:9b:5e:b7:f3:1c:79:8a:21:ef:8b:b5: 57:dd:a8:ab:bc:78:5a:f6:fc:3c:73:d4:9e:39:3e: 18:97:7a:af:75:92:0b:85:c2:2c:a4:6e:db:63:d9: 90:0a:37:86:93:81:f5:77:71:3e:2c:38:9c:aa:10: f1:e5:d5:70:f9:cb:05:6b:56:3b:87:ae:af:f5:7c: 7f:74:44:48:0a:11:cb:71:9e:37:44:d0:36:88:0e: 9e:e9:d8:e5:14:11:bb:aa:18:40:f7:1a:38:76:41: 9a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B8:23:18:0D:DC:47:0C:21:73:1B:A8:3B:DC:B4:71:31:FB:E0:4E X509v3 Authority Key Identifier: keyid:CA:FD:3A:17:B2:AD:C6:F9:00:1E:57:A0:1B:B2:9E:9B:69:3B:7C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a34303a3a2f34382d3438203d3e20313336303838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:d940:40::/48 Signature Algorithm: sha256WithRSAEncryption be:25:ff:72:60:8f:bd:de:c2:aa:4c:87:88:e0:7b:d1:f5:7f: 73:0a:48:76:20:51:28:e9:32:9c:dc:5d:32:a5:50:15:44:62: cc:34:1f:25:33:f2:62:f4:a3:ef:31:3d:a0:3f:3e:53:88:8e: d3:21:95:b4:70:51:5b:dd:d7:b8:f2:fb:e6:54:71:10:e7:dc: dd:79:4f:54:65:61:c1:09:07:c5:41:90:68:6e:28:f5:78:a3: 02:70:2a:66:0f:36:30:00:22:a9:02:00:22:80:77:23:f3:05: 0d:a9:25:71:c9:56:05:56:46:ff:c3:ac:6b:0a:3d:a2:ed:09: 4b:83:66:e3:45:89:f4:00:68:b4:a7:6e:ff:9d:61:2e:1b:63: 7b:30:51:e9:97:f3:51:a4:c7:6b:95:ca:da:70:5c:21:db:16: b7:54:80:98:85:74:0b:17:a9:67:e9:1a:ef:f8:d4:51:25:9a: 3e:3f:34:f1:83:e6:34:61:19:0d:1f:60:93:31:12:e8:d9:4c: d1:34:31:e1:13:b8:b6:f1:49:cd:36:35:ae:fa:f7:f0:7c:c7: 79:67:97:1f:15:89:db:14:c9:c3:27:03:4f:72:6d:2f:0b:f8: 1c:eb:d3:ac:88:cb:10:ad:fc:ef:15:94:c6:b0:70:e5:9e:c7: 1e:23:c2:0f -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUA+/hl962YwmxbfU0Z5i7RAkYo64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGRDNBMTdCMkFEQzZGOTAwMUU1N0EwMUJCMjlFOUI2 OTNCN0NDODAeFw0yNjA1MDMwMjM4MTBaFw0yNzA1MDIwMjQzMTBaMDMxMTAvBgNV BAMTKEM5QjgyMzE4MEREQzQ3MEMyMTczMUJBODNCRENCNDcxMzFGQkUwNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCel80zQZ0bJ8P2kwHppBafr7Kt EfCmcvlJLlhOL9BG22RHHLNg+O8YoqKztN0Ai/6gGtDdW8YSd4UDtLCZjD7u3reP AETrEiNgOoVDDu3AXvTU4HRPnnFLTOmQI9FzgvJElg4qkLP4kGmDS4MWz319ctMR Ks3+y87GIaZzl9n+5hUPsSGr6d6z+OAWczdcIpUnL/wVDidysVGbXrfzHHmKIe+L tVfdqKu8eFr2/Dxz1J45PhiXeq91kguFwiykbttj2ZAKN4aTgfV3cT4sOJyqEPHl 1XD5ywVrVjuHrq/1fH90REgKEctxnjdE0DaIDp7p2OUUEbuqGED3Gjh2QZo1AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUybgjGA3cRwwhcxuoO9y0cTH74E4wHwYDVR0j BBgwFoAUyv06F7KtxvkAHlegG7Kem2k7fMgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNmNGVjMWMtOTUzNS00Y2JmLTljN2EtZmQzMmM4MzBlZGJhLzAvQ0FGRDNBMTdC MkFEQzZGOTAwMUU1N0EwMUJCMjlFOUI2OTNCN0NDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUZEM0ExN0IyQURDNkY5MDAxRTU3QTAxQkIyOUU5QjY5M0I3 Q0M4LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzczZjRlYzFjLTk1MzUtNGNiZi05 YzdhLWZkMzJjODMwZWRiYS8wLzMyMzQzMDMwM2E2NDM5MzQzMDNhMzQzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNjMwMzgzOC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA2UAA QDANBgkqhkiG9w0BAQsFAAOCAQEAviX/cmCPvd7CqkyHiOB70fV/cwpIdiBRKOky nNxdMqVQFURizDQfJTPyYvSj7zE9oD8+U4iO0yGVtHBRW93XuPL75lRxEOfc3XlP VGVhwQkHxUGQaG4o9XijAnAqZg82MAAiqQIAIoB3I/MFDaklcclWBVZG/8Osawo9 ou0JS4Nm40WJ9ABotKdu/51hLhtjezBR6ZfzUaTHa5XK2nBcIdsWt1SAmIV0Cxep Z+ka7/jUUSWaPj808YPmNGEZDR9gkzES6NlM0TQx4RO4tvFJzTY1rvr38HzHeWeX HxWJ2xTJwycDT3JtLwv4HOvTrIjLEK387xWUxrBw5Z7HHiPCDw== -----END CERTIFICATE-----Generated at Wed May 13 12:25:19 2026 by rpki-client