$ rpki-client -vvf rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3630303a3a2f34382d3438203d3e20313336303838.roa File: 323430303a643934303a3630303a3a2f34382d3438203d3e20313336303838.roa (raw, json) Hash identifier: g/IwKgkLM3lX7TTfydNsuy1vblZAv0bCcFnenKOiWnI= Subject key identifier: 6A:E7:8B:43:93:F7:E8:73:EA:AD:4D:28:CB:FD:32:71:2C:2E:BC:02 Certificate issuer: /CN=CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8 Certificate serial: 3506E864C466F3D49C1B6774BD2AF0D32BB57DB9 Authority key identifier: CA:FD:3A:17:B2:AD:C6:F9:00:1E:57:A0:1B:B2:9E:9B:69:3B:7C:C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3630303a3a2f34382d3438203d3e20313336303838.roa Signing time: Sun 03 May 2026 02:43:11 +0000 ROA not before: Sun 03 May 2026 02:38:11 +0000 ROA not after: Sun 02 May 2027 02:43:11 +0000 asID: 136088 IP address blocks: 2400:d940:600::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:15:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:06:e8:64:c4:66:f3:d4:9c:1b:67:74:bd:2a:f0:d3:2b:b5:7d:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8 Validity Not Before: May 3 02:38:11 2026 GMT Not After : May 2 02:43:11 2027 GMT Subject: CN=6AE78B4393F7E873EAAD4D28CBFD32712C2EBC02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:30:fb:bd:06:7d:64:29:ff:d9:76:cd:8f:3c: f2:87:f9:be:29:1b:ba:23:64:c6:2f:bf:21:dd:3f: d2:c6:c8:15:53:1b:e4:97:7d:28:1e:f6:f7:9f:54: 95:a2:8c:39:c5:9c:45:e9:9e:17:96:23:1e:89:15: 1d:23:e3:e4:16:65:e3:ec:23:2d:84:27:a8:ee:b7: 9e:32:2a:43:a9:f8:60:e5:0a:c0:13:29:18:91:28: e0:1e:ea:c1:22:e3:2b:a5:6e:60:7a:bf:d2:b4:6a: db:f8:f5:56:9d:b4:be:38:e6:c3:86:32:0c:f9:10: 02:e8:cf:dc:b4:d1:11:97:2e:cd:d3:fe:cb:d2:07: ea:92:28:3b:d0:fc:7a:71:52:52:34:2c:3b:2a:03: 43:8d:72:7f:ba:5c:9f:0b:17:bb:b0:77:22:29:03: 2c:28:5a:66:f5:d1:e5:8b:83:df:01:46:07:25:48: ec:0b:5d:67:3a:f7:10:30:3f:47:2f:86:c5:59:ee: 30:f8:8c:1f:b2:08:7e:84:e2:68:63:ca:6d:90:d3: 86:86:bf:3a:8d:01:c9:d1:f0:0d:48:2d:58:21:8b: 96:93:71:70:d0:c0:c8:9b:b6:07:46:12:dd:bd:79: fe:b0:e5:50:55:4d:39:3f:9d:40:6e:5b:b9:ab:52: c7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E7:8B:43:93:F7:E8:73:EA:AD:4D:28:CB:FD:32:71:2C:2E:BC:02 X509v3 Authority Key Identifier: keyid:CA:FD:3A:17:B2:AD:C6:F9:00:1E:57:A0:1B:B2:9E:9B:69:3B:7C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3630303a3a2f34382d3438203d3e20313336303838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:d940:600::/48 Signature Algorithm: sha256WithRSAEncryption a8:51:5a:ba:0a:be:be:b7:7c:b4:55:af:67:f6:d4:c9:3e:d9: f9:c5:53:b6:f0:c7:4b:c4:1f:fb:c1:be:f0:1f:cc:a5:47:e5: e3:cc:15:52:41:e3:55:f9:6a:74:82:8a:3c:6b:d4:56:93:7c: 0e:f0:33:c9:bc:6f:32:42:aa:f9:1d:1d:b9:22:ff:f0:59:26: a8:2f:27:74:48:cf:a8:fa:84:0e:2e:db:95:5a:26:7d:22:72: 99:5b:75:24:5f:0d:64:ad:94:36:7a:1d:9f:ac:29:53:90:e4: 67:86:57:1e:6c:a0:c2:f2:bd:56:e9:6c:e3:e4:ef:a7:18:73: 63:78:bf:ee:bd:25:f6:ea:f9:9f:6a:9b:e1:b5:d6:9a:e3:28: 82:29:b2:03:86:29:42:39:fd:88:c6:3a:d9:d8:95:82:83:21: 2b:84:c3:39:cc:7c:c2:f7:4b:31:04:a7:42:79:9d:47:b6:11: 04:f0:92:b8:17:1d:b4:aa:fb:d6:c4:a9:8c:dd:d1:ea:26:90: 4e:3e:ef:47:c1:67:37:92:4d:50:d7:c2:cf:01:f7:b4:62:9b: f9:e1:5a:3a:b5:00:93:8e:51:3b:d4:97:0d:89:2b:44:dc:96: 9c:3f:d1:21:d1:48:b7:6a:ed:8c:40:62:0f:93:12:ce:20:11: 7c:78:29:76 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUNQboZMRm89ScG2d0vSrw0yu1fbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGRDNBMTdCMkFEQzZGOTAwMUU1N0EwMUJCMjlFOUI2 OTNCN0NDODAeFw0yNjA1MDMwMjM4MTFaFw0yNzA1MDIwMjQzMTFaMDMxMTAvBgNV BAMTKDZBRTc4QjQzOTNGN0U4NzNFQUFENEQyOENCRkQzMjcxMkMyRUJDMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDMPu9Bn1kKf/Zds2PPPKH+b4p G7ojZMYvvyHdP9LGyBVTG+SXfSge9vefVJWijDnFnEXpnheWIx6JFR0j4+QWZePs Iy2EJ6jut54yKkOp+GDlCsATKRiRKOAe6sEi4yulbmB6v9K0atv49VadtL445sOG Mgz5EALoz9y00RGXLs3T/svSB+qSKDvQ/HpxUlI0LDsqA0ONcn+6XJ8LF7uwdyIp AywoWmb10eWLg98BRgclSOwLXWc69xAwP0cvhsVZ7jD4jB+yCH6E4mhjym2Q04aG vzqNAcnR8A1ILVghi5aTcXDQwMibtgdGEt29ef6w5VBVTTk/nUBuW7mrUsdBAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUaueLQ5P36HPqrU0oy/0ycSwuvAIwHwYDVR0j BBgwFoAUyv06F7KtxvkAHlegG7Kem2k7fMgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNmNGVjMWMtOTUzNS00Y2JmLTljN2EtZmQzMmM4MzBlZGJhLzAvQ0FGRDNBMTdC MkFEQzZGOTAwMUU1N0EwMUJCMjlFOUI2OTNCN0NDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUZEM0ExN0IyQURDNkY5MDAxRTU3QTAxQkIyOUU5QjY5M0I3 Q0M4LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzczZjRlYzFjLTk1MzUtNGNiZi05 YzdhLWZkMzJjODMwZWRiYS8wLzMyMzQzMDMwM2E2NDM5MzQzMDNhMzYzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzAzODM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJADZ QAYAMA0GCSqGSIb3DQEBCwUAA4IBAQCoUVq6Cr6+t3y0Va9n9tTJPtn5xVO28MdL xB/7wb7wH8ylR+XjzBVSQeNV+Wp0goo8a9RWk3wO8DPJvG8yQqr5HR25Iv/wWSao Lyd0SM+o+oQOLtuVWiZ9InKZW3UkXw1krZQ2eh2frClTkORnhlcebKDC8r1W6Wzj 5O+nGHNjeL/uvSX26vmfapvhtdaa4yiCKbIDhilCOf2IxjrZ2JWCgyErhMM5zHzC 90sxBKdCeZ1HthEE8JK4Fx20qvvWxKmM3dHqJpBOPu9HwWc3kk1Q18LPAfe0Ypv5 4Vo6tQCTjlE71JcNiStE3JacP9Eh0Ui3au2MQGIPkxLOIBF8eCl2 -----END CERTIFICATE-----Generated at Wed May 13 12:24:29 2026 by rpki-client