$ rpki-client -vvf rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a343a3a2f34382d3438203d3e203338353234.roa File: 323430313a646538303a343a3a2f34382d3438203d3e203338353234.roa (raw, json) Hash identifier: lOr0KvRpq7sUd34ZHkqcMtIkUhbQbtVGKWRoycjiWv4= Subject key identifier: E9:3E:C8:98:C7:91:81:9B:BC:AE:33:77:E2:C7:37:21:20:6B:F5:A6 Certificate issuer: /CN=9436E607F375F72BBD96588FBB7CE6D5B628FF86 Certificate serial: 418D803C22C8B4B721CEA2AA2F649CF2576D2F12 Authority key identifier: 94:36:E6:07:F3:75:F7:2B:BD:96:58:8F:BB:7C:E6:D5:B6:28:FF:86 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a343a3a2f34382d3438203d3e203338353234.roa Signing time: Sun 03 May 2026 02:46:29 +0000 ROA not before: Sun 03 May 2026 02:41:29 +0000 ROA not after: Sun 02 May 2027 02:46:29 +0000 asID: 38524 IP address blocks: 2401:de80:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.crl rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:8d:80:3c:22:c8:b4:b7:21:ce:a2:aa:2f:64:9c:f2:57:6d:2f:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9436E607F375F72BBD96588FBB7CE6D5B628FF86 Validity Not Before: May 3 02:41:29 2026 GMT Not After : May 2 02:46:29 2027 GMT Subject: CN=E93EC898C791819BBCAE3377E2C73721206BF5A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ba:79:04:cb:24:ce:72:82:3f:e3:8b:c9:7a: 5d:5f:7f:05:55:a0:c3:c5:18:f7:40:96:af:85:0e: 5a:3d:ce:8b:69:4a:e4:e6:25:b3:0c:08:6f:91:6e: c0:bc:40:8f:19:16:2b:ec:64:b1:6c:a1:f6:ed:1b: 82:8b:73:55:1e:43:e0:ad:e8:a7:5c:89:74:e7:03: b4:92:66:3d:79:f4:82:ba:dd:48:31:2d:b8:83:a8: 1a:19:8b:4b:72:3a:52:bc:e7:52:26:32:31:37:fe: 84:26:f8:cf:37:26:9e:bb:28:6e:bf:11:c1:dc:e9: dc:d4:d9:b7:14:1d:ae:bb:1d:12:6c:d2:35:5b:4d: 0c:24:61:3a:34:3a:e7:41:f7:23:08:35:ac:60:0a: 0d:58:f8:29:51:a4:d6:12:76:cd:5f:d3:f2:f2:c0: 65:0a:93:11:95:f4:56:88:13:42:dd:a6:cf:7f:35: cd:4f:6b:81:0e:a7:a7:f2:52:a8:c8:43:29:f0:1d: 9d:da:53:96:60:ed:25:55:50:c0:c8:90:69:86:a3: ff:49:eb:7e:4c:2e:fe:2a:1c:a0:a2:7f:1f:82:ff: 37:95:6f:64:08:d0:b6:e2:7b:01:8d:0f:c7:8d:df: a5:91:ef:f7:04:94:c1:72:43:40:f8:8a:54:f5:5a: 33:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:3E:C8:98:C7:91:81:9B:BC:AE:33:77:E2:C7:37:21:20:6B:F5:A6 X509v3 Authority Key Identifier: keyid:94:36:E6:07:F3:75:F7:2B:BD:96:58:8F:BB:7C:E6:D5:B6:28:FF:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a343a3a2f34382d3438203d3e203338353234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:de80:4::/48 Signature Algorithm: sha256WithRSAEncryption 45:8a:e0:a6:73:89:23:3d:5e:9a:93:81:f9:d2:06:3a:a6:c4: 3f:1f:bc:bd:eb:9d:80:8f:74:34:7b:bc:ef:86:e9:3e:d0:12: a0:f5:29:fb:a3:6e:16:d5:bd:8e:7f:a8:cd:41:c7:7d:67:f0: 24:7c:2a:9a:b6:e3:96:42:24:99:0c:16:b1:3e:27:50:1a:ee: 02:22:e3:ff:1f:96:32:6d:1c:9d:6f:93:34:9d:7d:2d:df:6c: ae:23:2b:97:37:57:60:91:0c:60:5f:66:d2:72:e0:86:87:9a: ac:74:b3:6b:a2:d8:47:fa:86:0d:11:04:84:c2:cc:0e:8e:5e: b1:0a:63:51:ed:f5:ed:67:89:da:87:a5:15:63:32:a8:34:e7: 03:91:ad:58:dd:dd:ef:81:e7:98:5a:ed:55:a7:8a:46:93:78: a6:5e:a6:ff:56:59:99:9d:84:e5:9d:ab:93:86:75:d0:74:a5: ba:a4:d5:09:8a:a7:93:92:a0:3d:81:b9:5d:54:34:38:61:31: 1b:a8:82:50:4d:11:fd:65:d6:0f:cd:31:b0:8e:d4:84:d5:3d: 99:9d:fe:79:42:6b:02:17:d7:8e:b8:b2:48:79:b6:3f:fc:08: 19:73:9e:2d:0d:66:04:dc:83:1c:10:55:57:bb:d7:32:db:10: 73:62:80:a2 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUQY2APCLItLchzqKqL2Sc8ldtLxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQzNkU2MDdGMzc1RjcyQkJEOTY1ODhGQkI3Q0U2RDVC NjI4RkY4NjAeFw0yNjA1MDMwMjQxMjlaFw0yNzA1MDIwMjQ2MjlaMDMxMTAvBgNV BAMTKEU5M0VDODk4Qzc5MTgxOUJCQ0FFMzM3N0UyQzczNzIxMjA2QkY1QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3unkEyyTOcoI/44vJel1ffwVV oMPFGPdAlq+FDlo9zotpSuTmJbMMCG+RbsC8QI8ZFivsZLFsofbtG4KLc1UeQ+Ct 6KdciXTnA7SSZj159IK63UgxLbiDqBoZi0tyOlK851ImMjE3/oQm+M83Jp67KG6/ EcHc6dzU2bcUHa67HRJs0jVbTQwkYTo0OudB9yMINaxgCg1Y+ClRpNYSds1f0/Ly wGUKkxGV9FaIE0Ldps9/Nc1Pa4EOp6fyUqjIQynwHZ3aU5Zg7SVVUMDIkGmGo/9J 635MLv4qHKCifx+C/zeVb2QI0LbiewGND8eN36WR7/cElMFyQ0D4ilT1WjP5AgMB AAGjggI3MIICMzAdBgNVHQ4EFgQU6T7ImMeRgZu8rjN34sc3ISBr9aYwHwYDVR0j BBgwFoAUlDbmB/N19yu9lliPu3zm1bYo/4YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2ZmOTY5ZmMtMzljNy00NGNkLTg3MTYtOWNlNGM2ZDVhYzkxLzAvOTQzNkU2MDdG Mzc1RjcyQkJEOTY1ODhGQkI3Q0U2RDVCNjI4RkY4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NDM2RTYwN0YzNzVGNzJCQkQ5NjU4OEZCQjdDRTZENUI2MjhG Rjg2LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdmZjk2OWZjLTM5YzctNDRjZC04 NzE2LTljZTRjNmQ1YWM5MS8wLzMyMzQzMDMxM2E2NDY1MzgzMDNhMzQzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAHegAAEMA0G CSqGSIb3DQEBCwUAA4IBAQBFiuCmc4kjPV6ak4H50gY6psQ/H7y9652Aj3Q0e7zv huk+0BKg9Sn7o24W1b2Of6jNQcd9Z/AkfCqatuOWQiSZDBaxPidQGu4CIuP/H5Yy bRydb5M0nX0t32yuIyuXN1dgkQxgX2bScuCGh5qsdLNrothH+oYNEQSEwswOjl6x CmNR7fXtZ4nah6UVYzKoNOcDka1Y3d3vgeeYWu1Vp4pGk3imXqb/VlmZnYTlnauT hnXQdKW6pNUJiqeTkqA9gbldVDQ4YTEbqIJQTRH9ZdYPzTGwjtSE1T2Znf55QmsC F9eOuLJIebY//AgZc54tDWYE3IMcEFVXu9cy2xBzYoCi -----END CERTIFICATE-----Generated at Wed May 13 07:38:59 2026 by rpki-client