$ rpki-client -vvf rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3730303a3a2f34382d3438203d3e20313336303838.roa File: 323430303a643934303a3730303a3a2f34382d3438203d3e20313336303838.roa (raw, json) Hash identifier: cPlZWqFm5MVvHANk5QwuMsGCvqASptrnxXG+efFGx5c= Subject key identifier: 93:7F:82:30:83:A6:7B:DF:DB:86:CB:FB:0D:04:45:4A:40:6D:B4:F7 Certificate issuer: /CN=CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8 Certificate serial: 26D0C2247F1A2686A1B195F12B899353D0EBC4F4 Authority key identifier: CA:FD:3A:17:B2:AD:C6:F9:00:1E:57:A0:1B:B2:9E:9B:69:3B:7C:C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3730303a3a2f34382d3438203d3e20313336303838.roa Signing time: Sun 03 May 2026 02:43:03 +0000 ROA not before: Sun 03 May 2026 02:38:03 +0000 ROA not after: Sun 02 May 2027 02:43:03 +0000 asID: 136088 IP address blocks: 2400:d940:700::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:15:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:d0:c2:24:7f:1a:26:86:a1:b1:95:f1:2b:89:93:53:d0:eb:c4:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8 Validity Not Before: May 3 02:38:03 2026 GMT Not After : May 2 02:43:03 2027 GMT Subject: CN=937F823083A67BDFDB86CBFB0D04454A406DB4F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:38:b4:47:50:ca:3a:ac:3f:92:47:a3:1e:5d: 02:c8:60:87:42:34:86:9f:5f:b8:b3:2f:67:59:93: b4:ae:7a:20:5f:69:a5:45:b1:8d:09:4f:c4:54:73: 51:7e:06:fe:32:90:fc:fa:65:b2:8c:99:4d:89:f1: 02:1c:fa:4b:79:b0:2d:d8:76:4c:b8:ad:a7:42:ba: 1f:04:1e:b8:74:18:85:9a:b8:ac:46:44:a5:82:35: 6a:5d:95:3e:da:70:1c:18:20:70:c7:c8:06:b3:9e: 15:66:be:74:ff:8f:0c:95:1b:2e:72:b5:c6:79:bd: 77:ea:4f:23:ab:c3:5e:bc:b7:d8:70:16:19:7c:74: 92:b5:d5:3f:06:a7:a4:43:8c:db:37:a1:80:be:e8: bd:86:93:8b:39:0f:a0:6a:a6:55:49:c2:9a:3b:45: 73:67:a2:c9:e0:07:18:34:c4:6f:3a:28:1f:89:27: 43:f1:a5:c3:2e:6f:e9:35:12:6a:db:90:cc:da:6a: 59:1f:1d:25:6c:e7:cc:1e:fb:14:fa:18:65:c2:4a: 03:b9:e3:04:1c:a5:58:fc:ce:7c:73:88:3b:f2:33: a1:9e:97:8e:37:eb:76:ec:1c:63:61:2d:99:b9:e4: 79:7a:f3:02:9d:db:05:e7:39:4c:c2:4e:98:d2:76: e0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:7F:82:30:83:A6:7B:DF:DB:86:CB:FB:0D:04:45:4A:40:6D:B4:F7 X509v3 Authority Key Identifier: keyid:CA:FD:3A:17:B2:AD:C6:F9:00:1E:57:A0:1B:B2:9E:9B:69:3B:7C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3730303a3a2f34382d3438203d3e20313336303838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:d940:700::/48 Signature Algorithm: sha256WithRSAEncryption 2e:6b:0e:5f:3c:f7:97:97:7f:98:fd:9d:7a:e0:92:dc:5c:22: 07:2d:1b:be:32:94:a2:ce:2e:74:11:77:03:95:7d:c4:49:2a: 1e:5a:ea:c4:f5:36:84:1b:ed:cc:13:73:06:03:16:74:40:59: 42:be:c9:e0:c3:af:5a:2c:ce:6b:b6:8e:7f:7b:1a:55:52:d4: 71:f4:48:2b:b3:d0:7f:31:30:ab:ac:ae:eb:6a:2e:d6:fd:b7: 47:7d:51:37:4a:dc:85:0b:cf:25:db:9f:90:c6:3a:22:05:2d: 36:57:c4:f4:83:3a:3f:87:7b:bc:e6:30:8b:02:61:c9:14:f4: 41:47:a9:8d:07:3a:c3:fa:6e:04:b2:d4:0b:5d:4f:b1:33:8f: d2:e3:09:b9:fb:e8:81:cb:aa:0e:28:84:eb:68:b1:db:28:5c: 4b:c6:c2:f8:90:dc:2e:68:7c:03:5a:a5:eb:04:61:fc:52:e8: 48:d6:aa:10:92:d2:46:50:36:92:bc:63:c2:9a:6c:57:05:18: 22:44:f2:01:7a:2e:7c:f9:ce:94:05:8d:22:83:43:4b:87:1d: e1:45:cf:17:ef:09:a0:cc:a2:86:8c:f2:90:ce:e7:41:a6:77: 4c:6a:20:8e:f0:e2:85:e3:16:fc:95:60:f8:07:26:9d:4a:3f: c0:84:6c:ff -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUJtDCJH8aJoahsZXxK4mTU9DrxPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGRDNBMTdCMkFEQzZGOTAwMUU1N0EwMUJCMjlFOUI2 OTNCN0NDODAeFw0yNjA1MDMwMjM4MDNaFw0yNzA1MDIwMjQzMDNaMDMxMTAvBgNV BAMTKDkzN0Y4MjMwODNBNjdCREZEQjg2Q0JGQjBEMDQ0NTRBNDA2REI0RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcOLRHUMo6rD+SR6MeXQLIYIdC NIafX7izL2dZk7SueiBfaaVFsY0JT8RUc1F+Bv4ykPz6ZbKMmU2J8QIc+kt5sC3Y dky4radCuh8EHrh0GIWauKxGRKWCNWpdlT7acBwYIHDHyAaznhVmvnT/jwyVGy5y tcZ5vXfqTyOrw168t9hwFhl8dJK11T8Gp6RDjNs3oYC+6L2Gk4s5D6BqplVJwpo7 RXNnosngBxg0xG86KB+JJ0PxpcMub+k1EmrbkMzaalkfHSVs58we+xT6GGXCSgO5 4wQcpVj8znxziDvyM6Gel44363bsHGNhLZm55Hl68wKd2wXnOUzCTpjSduDfAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUk3+CMIOme9/bhsv7DQRFSkBttPcwHwYDVR0j BBgwFoAUyv06F7KtxvkAHlegG7Kem2k7fMgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNmNGVjMWMtOTUzNS00Y2JmLTljN2EtZmQzMmM4MzBlZGJhLzAvQ0FGRDNBMTdC MkFEQzZGOTAwMUU1N0EwMUJCMjlFOUI2OTNCN0NDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUZEM0ExN0IyQURDNkY5MDAxRTU3QTAxQkIyOUU5QjY5M0I3 Q0M4LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzczZjRlYzFjLTk1MzUtNGNiZi05 YzdhLWZkMzJjODMwZWRiYS8wLzMyMzQzMDMwM2E2NDM5MzQzMDNhMzczMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzAzODM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJADZ QAcAMA0GCSqGSIb3DQEBCwUAA4IBAQAuaw5fPPeXl3+Y/Z164JLcXCIHLRu+MpSi zi50EXcDlX3ESSoeWurE9TaEG+3ME3MGAxZ0QFlCvsngw69aLM5rto5/expVUtRx 9Egrs9B/MTCrrK7rai7W/bdHfVE3StyFC88l25+QxjoiBS02V8T0gzo/h3u85jCL AmHJFPRBR6mNBzrD+m4EstQLXU+xM4/S4wm5++iBy6oOKITraLHbKFxLxsL4kNwu aHwDWqXrBGH8UuhI1qoQktJGUDaSvGPCmmxXBRgiRPIBei58+c6UBY0ig0NLhx3h Rc8X7wmgzKKGjPKQzudBpndMaiCO8OKF4xb8lWD4ByadSj/AhGz/ -----END CERTIFICATE-----Generated at Wed May 13 12:42:49 2026 by rpki-client