$ rpki-client -vvf rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/323430343a653930303a343030303a3a2f33342d3334203d3e203436303632.roa File: 323430343a653930303a343030303a3a2f33342d3334203d3e203436303632.roa (raw, json) Hash identifier: KbTN0zyFBhIzTtH0WTjt8SBU3pMK8PRdcnzLv/4GoTQ= Subject key identifier: 3E:4E:02:9F:E7:E9:DE:A1:0E:1B:9B:53:E5:C6:05:A3:8B:23:C4:C2 Certificate issuer: /CN=208E4D9FFD14FC113BE24E9456AF88A703580FD7 Certificate serial: 0AE7E1377883718F7CD348C18B506941FFE61A1F Authority key identifier: 20:8E:4D:9F:FD:14:FC:11:3B:E2:4E:94:56:AF:88:A7:03:58:0F:D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/208E4D9FFD14FC113BE24E9456AF88A703580FD7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/323430343a653930303a343030303a3a2f33342d3334203d3e203436303632.roa Signing time: Sun 03 May 2026 02:43:25 +0000 ROA not before: Sun 03 May 2026 02:38:25 +0000 ROA not after: Sun 02 May 2027 02:43:25 +0000 asID: 46062 IP address blocks: 2404:e900:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.crl rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/208E4D9FFD14FC113BE24E9456AF88A703580FD7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:e7:e1:37:78:83:71:8f:7c:d3:48:c1:8b:50:69:41:ff:e6:1a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208E4D9FFD14FC113BE24E9456AF88A703580FD7 Validity Not Before: May 3 02:38:25 2026 GMT Not After : May 2 02:43:25 2027 GMT Subject: CN=3E4E029FE7E9DEA10E1B9B53E5C605A38B23C4C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d5:07:e2:5d:3b:5c:f9:4a:01:dc:dc:12:33: 7d:cd:b5:95:de:2c:35:77:34:42:de:f6:df:c0:c8: 59:57:90:c2:40:42:a3:27:29:d7:08:19:e2:cd:4d: b5:36:b4:61:20:9d:c2:02:18:57:72:67:45:96:7a: c6:15:03:2a:12:0f:c8:d1:f0:39:1d:8a:0f:b3:28: e0:0a:8b:df:c3:5a:a2:6b:2c:da:9c:d3:6f:de:9f: eb:74:9b:0f:07:c1:b3:f4:2d:65:c7:fb:3f:5c:2b: 43:9e:91:d7:cf:2f:bd:06:14:4a:d0:59:0e:f5:7e: bf:46:46:d9:a8:bf:72:28:a9:27:9d:f6:bb:94:ee: 8a:78:a2:cc:67:c9:f1:c4:5e:2a:91:2b:f1:2f:9b: e9:83:a4:c1:46:87:02:d4:64:5b:fd:d7:c1:af:5a: 01:a7:5f:69:df:07:a2:8c:1d:09:77:18:62:75:62: 97:05:83:d7:36:13:26:55:f1:6d:70:fb:2d:af:e0: 2f:11:e2:55:58:b5:ec:bc:d5:46:a6:e5:0f:3a:a5: 10:11:46:d4:7a:e7:88:e0:57:ed:f1:f3:87:f5:b5: ab:9a:19:1e:0c:4c:95:32:b8:d2:75:e2:7c:d6:c5: 36:a0:f9:1d:fa:e3:a6:5e:a6:86:4e:fe:b9:25:6d: df:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:4E:02:9F:E7:E9:DE:A1:0E:1B:9B:53:E5:C6:05:A3:8B:23:C4:C2 X509v3 Authority Key Identifier: keyid:20:8E:4D:9F:FD:14:FC:11:3B:E2:4E:94:56:AF:88:A7:03:58:0F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/208E4D9FFD14FC113BE24E9456AF88A703580FD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/323430343a653930303a343030303a3a2f33342d3334203d3e203436303632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:e900:4000::/34 Signature Algorithm: sha256WithRSAEncryption 3f:71:c0:0a:3d:0c:77:c2:ce:6b:f3:ef:5f:42:79:03:4f:2a: 00:9f:bc:bd:2b:2a:89:6e:77:23:45:f6:06:5a:cb:28:cd:2e: 7f:25:ab:53:04:9c:24:b3:06:a2:b4:b8:9e:1b:ea:4f:9e:95: 8e:35:e5:b7:cb:37:e5:84:ff:b5:c5:4b:69:6d:9e:11:7d:9f: c2:27:41:08:9e:8e:6a:26:09:ce:95:b9:97:9c:84:75:f6:07: e8:cb:33:33:cd:2c:96:f4:35:9e:12:db:ee:be:0e:30:23:85: 0b:0c:5b:b5:43:37:e4:a3:8a:e1:92:6e:4b:34:79:35:bd:84: 36:48:d6:b0:64:fa:54:fc:93:ba:53:a4:c4:df:ec:55:76:75: 58:2d:3a:9d:2f:c5:13:7d:3c:4b:ad:ec:aa:82:9c:fa:78:13: a3:89:6a:31:b3:66:e9:69:44:06:fb:c0:2c:50:88:df:14:fe: 94:5a:e1:77:90:4a:47:f1:52:5d:b3:46:9c:ad:6b:1d:0e:6f: 8f:3a:1c:21:17:6e:4d:00:89:01:76:43:e1:25:76:14:85:06: ce:1a:67:9b:78:71:89:bc:f4:40:db:8c:d5:99:4f:3e:1b:69: b4:8f:13:8d:f3:94:3d:2b:a6:3f:ed:1b:fc:eb:c4:19:39:3b: 08:92:96:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCufhN3iDcY9800jBi1BpQf/mGh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA4RTREOUZGRDE0RkMxMTNCRTI0RTk0NTZBRjg4QTcw MzU4MEZENzAeFw0yNjA1MDMwMjM4MjVaFw0yNzA1MDIwMjQzMjVaMDMxMTAvBgNV BAMTKDNFNEUwMjlGRTdFOURFQTEwRTFCOUI1M0U1QzYwNUEzOEIyM0M0QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv1QfiXTtc+UoB3NwSM33NtZXe LDV3NELe9t/AyFlXkMJAQqMnKdcIGeLNTbU2tGEgncICGFdyZ0WWesYVAyoSD8jR 8Dkdig+zKOAKi9/DWqJrLNqc02/en+t0mw8HwbP0LWXH+z9cK0OekdfPL70GFErQ WQ71fr9GRtmov3IoqSed9ruU7op4osxnyfHEXiqRK/Evm+mDpMFGhwLUZFv918Gv WgGnX2nfB6KMHQl3GGJ1YpcFg9c2EyZV8W1w+y2v4C8R4lVYtey81Uam5Q86pRAR RtR654jgV+3x84f1tauaGR4MTJUyuNJ14nzWxTag+R3646ZepoZO/rklbd95AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPk4Cn+fp3qEOG5tT5cYFo4sjxMIwHwYDVR0j BBgwFoAUII5Nn/0U/BE74k6UVq+IpwNYD9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzQ4OGQ0YzAtZGM5Mi00YWE4LWIxNjktNTJjYWIyYTYxYmExLzAvMjA4RTREOUZG RDE0RkMxMTNCRTI0RTk0NTZBRjg4QTcwMzU4MEZENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDhFNEQ5RkZEMTRGQzExM0JFMjRFOTQ1NkFGODhBNzAzNTgw RkQ3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzc0ODhkNGMwLWRjOTItNGFhOC1i MTY5LTUyY2FiMmE2MWJhMS8wLzMyMzQzMDM0M2E2NTM5MzAzMDNhMzQzMDMwMzAz YTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzNDM2MzAzNjMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJATp AEAwDQYJKoZIhvcNAQELBQADggEBAD9xwAo9DHfCzmvz719CeQNPKgCfvL0rKolu dyNF9gZayyjNLn8lq1MEnCSzBqK0uJ4b6k+elY415bfLN+WE/7XFS2ltnhF9n8In QQiejmomCc6VuZechHX2B+jLMzPNLJb0NZ4S2+6+DjAjhQsMW7VDN+SjiuGSbks0 eTW9hDZI1rBk+lT8k7pTpMTf7FV2dVgtOp0vxRN9PEut7KqCnPp4E6OJajGzZulp RAb7wCxQiN8U/pRa4XeQSkfxUl2zRpytax0Ob486HCEXbk0AiQF2Q+EldhSFBs4a Z5t4cYm89EDbjNWZTz4babSPE43zlD0rpj/tG/zrxBk5OwiSlio= -----END CERTIFICATE-----Generated at Wed May 13 01:14:21 2026 by rpki-client