$ rpki-client -vvf rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a626162653a3a2f34382d3438203d3e20313336303838.roa File: 323430303a643934303a626162653a3a2f34382d3438203d3e20313336303838.roa (raw, json) Hash identifier: ROBi78wuuDs1YynQRORSD7fsHhMgIofWSrauPO5cQ7U= Subject key identifier: CF:33:29:17:EC:89:5C:52:B6:0E:D9:02:9F:2F:B1:24:BF:9B:CA:C6 Certificate issuer: /CN=CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8 Certificate serial: 76C9797E5D3DA14DC8AE4B73FB2354B1EC2042E4 Authority key identifier: CA:FD:3A:17:B2:AD:C6:F9:00:1E:57:A0:1B:B2:9E:9B:69:3B:7C:C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a626162653a3a2f34382d3438203d3e20313336303838.roa Signing time: Sun 03 May 2026 02:43:07 +0000 ROA not before: Sun 03 May 2026 02:38:07 +0000 ROA not after: Sun 02 May 2027 02:43:07 +0000 asID: 136088 IP address blocks: 2400:d940:babe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:15:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:c9:79:7e:5d:3d:a1:4d:c8:ae:4b:73:fb:23:54:b1:ec:20:42:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8 Validity Not Before: May 3 02:38:07 2026 GMT Not After : May 2 02:43:07 2027 GMT Subject: CN=CF332917EC895C52B60ED9029F2FB124BF9BCAC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4e:2d:31:e0:3f:93:3e:a1:f1:97:e5:b4:ec: 9f:b9:31:bf:21:a5:88:ea:59:30:f7:3d:f5:68:82: 83:9f:73:73:ab:31:28:ab:ee:ce:52:05:bc:69:10: d2:0f:c3:4f:b8:2b:3c:67:f9:77:61:75:30:09:f5: 46:24:3d:82:18:d8:14:29:5b:6e:ff:6f:60:dd:ce: 64:62:77:19:5b:bf:a2:59:dc:1f:53:c6:60:bb:40: f1:d8:e3:b6:04:67:10:49:38:b0:16:4b:8f:16:7a: 2c:2b:68:67:7e:89:a9:b3:11:f5:04:52:72:dd:eb: 9b:e6:f6:10:74:30:8e:b9:1c:19:b8:d7:f1:14:92: 1b:4e:0b:9a:b0:9b:0a:0c:37:c3:83:5c:36:c4:74: f1:fa:27:5f:ee:33:4c:c6:75:0f:c6:b7:9f:e0:aa: 43:5e:9e:d4:2a:ec:5e:41:0c:76:d8:e2:d4:6e:9f: fa:ce:12:1c:b2:56:0c:c6:a4:94:a1:42:4f:b9:8b: 4e:99:8d:5d:bb:91:34:d7:3a:5e:4b:5a:6e:d1:9d: 8f:39:a7:16:41:18:1f:12:c5:f4:37:93:0b:ab:af: b4:a9:78:1c:16:56:b5:f7:da:c8:3a:8a:69:a7:9a: 9a:55:9c:e7:19:8f:7f:1e:1b:c2:79:4d:a2:af:42: ac:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:33:29:17:EC:89:5C:52:B6:0E:D9:02:9F:2F:B1:24:BF:9B:CA:C6 X509v3 Authority Key Identifier: keyid:CA:FD:3A:17:B2:AD:C6:F9:00:1E:57:A0:1B:B2:9E:9B:69:3B:7C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a626162653a3a2f34382d3438203d3e20313336303838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:d940:babe::/48 Signature Algorithm: sha256WithRSAEncryption 9d:07:47:65:41:8d:8c:4e:4a:3f:a4:17:cd:3a:37:ad:06:c9: 26:cb:19:0e:52:29:7c:ff:fd:83:dd:1e:44:d6:98:12:99:da: c1:14:ab:fb:09:ae:69:9a:14:83:02:87:41:dd:ef:ef:8a:7a: 82:3f:31:74:9d:2a:5f:a5:35:69:11:33:22:21:99:c7:07:3d: cd:14:7a:fb:31:82:38:35:d3:03:4b:16:c4:b9:eb:8f:27:06: ff:58:e4:0f:98:67:46:f7:fb:e8:be:b3:b0:25:e6:92:1b:17: 47:a6:9e:43:d3:a6:ce:5e:f0:4b:f7:82:8f:4f:a7:72:3d:52: 37:ce:2e:0d:4b:b6:b7:ff:95:5c:00:af:af:88:f4:08:e8:b3: 15:2e:c1:ed:09:10:1d:d7:3a:19:ce:83:6a:91:66:bf:e2:80: 0d:7d:38:bb:a4:83:61:7e:e8:39:46:8e:33:12:62:df:39:69: 21:0c:fa:b6:7f:fd:23:fc:cd:0f:3f:ca:81:3c:09:19:8b:cb: 7b:87:3d:2b:de:e8:5a:f8:40:a8:e8:1d:32:b7:4d:51:c4:78: e5:5c:41:e7:64:25:bb:8f:6d:24:60:38:9a:70:61:2c:64:c0: 0d:e0:48:0d:b3:82:63:f5:51:c7:4c:7c:49:4d:52:46:df:00: 23:69:e0:40 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUdsl5fl09oU3Irktz+yNUsewgQuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGRDNBMTdCMkFEQzZGOTAwMUU1N0EwMUJCMjlFOUI2 OTNCN0NDODAeFw0yNjA1MDMwMjM4MDdaFw0yNzA1MDIwMjQzMDdaMDMxMTAvBgNV BAMTKENGMzMyOTE3RUM4OTVDNTJCNjBFRDkwMjlGMkZCMTI0QkY5QkNBQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGTi0x4D+TPqHxl+W07J+5Mb8h pYjqWTD3PfVogoOfc3OrMSir7s5SBbxpENIPw0+4Kzxn+XdhdTAJ9UYkPYIY2BQp W27/b2DdzmRidxlbv6JZ3B9TxmC7QPHY47YEZxBJOLAWS48WeiwraGd+iamzEfUE UnLd65vm9hB0MI65HBm41/EUkhtOC5qwmwoMN8ODXDbEdPH6J1/uM0zGdQ/Gt5/g qkNentQq7F5BDHbY4tRun/rOEhyyVgzGpJShQk+5i06ZjV27kTTXOl5LWm7RnY85 pxZBGB8SxfQ3kwurr7SpeBwWVrX32sg6immnmppVnOcZj38eG8J5TaKvQqzFAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUzzMpF+yJXFK2DtkCny+xJL+bysYwHwYDVR0j BBgwFoAUyv06F7KtxvkAHlegG7Kem2k7fMgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNmNGVjMWMtOTUzNS00Y2JmLTljN2EtZmQzMmM4MzBlZGJhLzAvQ0FGRDNBMTdC MkFEQzZGOTAwMUU1N0EwMUJCMjlFOUI2OTNCN0NDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUZEM0ExN0IyQURDNkY5MDAxRTU3QTAxQkIyOUU5QjY5M0I3 Q0M4LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzczZjRlYzFjLTk1MzUtNGNiZi05 YzdhLWZkMzJjODMwZWRiYS8wLzMyMzQzMDMwM2E2NDM5MzQzMDNhNjI2MTYyNjUz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzYzMDM4Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk ANlAur4wDQYJKoZIhvcNAQELBQADggEBAJ0HR2VBjYxOSj+kF806N60GySbLGQ5S KXz//YPdHkTWmBKZ2sEUq/sJrmmaFIMCh0Hd7++KeoI/MXSdKl+lNWkRMyIhmccH Pc0Uevsxgjg10wNLFsS5648nBv9Y5A+YZ0b3++i+s7Al5pIbF0emnkPTps5e8Ev3 go9Pp3I9UjfOLg1Ltrf/lVwAr6+I9AjosxUuwe0JEB3XOhnOg2qRZr/igA19OLuk g2F+6DlGjjMSYt85aSEM+rZ//SP8zQ8/yoE8CRmLy3uHPSve6Fr4QKjoHTK3TVHE eOVcQedkJbuPbSRgOJpwYSxkwA3gSA2zgmP1UcdMfElNUkbfACNp4EA= -----END CERTIFICATE-----Generated at Wed May 13 12:51:29 2026 by rpki-client