$ rpki-client -vvf rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a363a3a2f34382d3438203d3e203338353234.roa File: 323430313a646538303a363a3a2f34382d3438203d3e203338353234.roa (raw, json) Hash identifier: 8DPaH0y8CKvkufTwHCRzwNdpjyC0/Ps/ZdZAJaYk9Oo= Subject key identifier: F3:BA:83:5D:C0:95:72:78:30:45:A8:51:11:32:43:BE:89:FD:BD:E9 Certificate issuer: /CN=9436E607F375F72BBD96588FBB7CE6D5B628FF86 Certificate serial: 08051EAEB163C69B46CE153A19B5F133C6129555 Authority key identifier: 94:36:E6:07:F3:75:F7:2B:BD:96:58:8F:BB:7C:E6:D5:B6:28:FF:86 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a363a3a2f34382d3438203d3e203338353234.roa Signing time: Sun 03 May 2026 02:46:34 +0000 ROA not before: Sun 03 May 2026 02:41:34 +0000 ROA not after: Sun 02 May 2027 02:46:34 +0000 asID: 38524 IP address blocks: 2401:de80:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.crl rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:05:1e:ae:b1:63:c6:9b:46:ce:15:3a:19:b5:f1:33:c6:12:95:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9436E607F375F72BBD96588FBB7CE6D5B628FF86 Validity Not Before: May 3 02:41:34 2026 GMT Not After : May 2 02:46:34 2027 GMT Subject: CN=F3BA835DC09572783045A851113243BE89FDBDE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6c:5a:52:de:a7:d0:75:6c:21:42:92:02:11: 8c:f6:d8:84:a1:9e:d1:56:99:4b:a1:d3:f8:61:2f: 50:94:7e:d9:49:93:cc:e5:1e:eb:3c:cb:57:03:2d: d6:ab:6c:df:40:8a:26:b9:a6:59:c7:5d:33:a5:d3: 82:e6:72:09:43:da:69:0b:85:8e:a3:aa:6e:68:5f: 14:6d:8f:09:07:cc:92:1a:11:c0:64:88:0c:12:c3: d0:b1:a5:9b:5c:9c:f2:30:d4:82:ef:21:75:91:3e: b6:1b:83:59:53:bd:0c:3d:31:90:ed:00:75:34:76: 2a:d3:c6:23:18:f2:ea:54:e7:48:c3:e3:78:fd:fd: 4e:26:68:3f:09:ad:53:bd:ae:50:a3:3e:e8:ad:0f: 47:9d:55:50:2e:ea:41:02:f4:37:f2:d3:03:78:ab: 95:85:dc:9f:1c:5a:7d:3a:46:4e:7b:3a:68:b2:f1: 92:ed:8e:2c:f6:a9:c0:f2:32:2e:a7:ee:48:a2:4c: 1f:ee:fd:1b:e3:04:b0:41:bd:d5:46:d5:14:d8:a1: bf:5e:ba:91:81:e3:c3:c2:ae:f2:82:3f:61:41:a9: 62:d7:91:ac:1b:88:43:bb:75:f5:dc:69:b3:73:59: 10:28:0e:df:63:5b:3c:7c:11:a9:75:3c:9d:cf:41: d1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:BA:83:5D:C0:95:72:78:30:45:A8:51:11:32:43:BE:89:FD:BD:E9 X509v3 Authority Key Identifier: keyid:94:36:E6:07:F3:75:F7:2B:BD:96:58:8F:BB:7C:E6:D5:B6:28:FF:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a363a3a2f34382d3438203d3e203338353234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:de80:6::/48 Signature Algorithm: sha256WithRSAEncryption 0d:6e:e2:68:dd:0c:41:76:25:f9:52:24:80:4a:c1:e6:22:9b: 0d:15:53:7b:e7:20:4a:1a:bb:d6:a1:b9:a6:4c:a8:9e:2b:6c: 07:3a:e9:e0:1f:72:da:fd:5c:02:2e:5d:7a:7c:61:0f:a6:01: b1:08:a9:6e:3a:ff:cf:c7:e0:ff:bf:90:be:40:1b:94:b8:50: 00:34:f3:e9:b2:11:7a:62:89:81:9e:fa:41:34:26:19:b7:8f: 12:5b:23:7c:03:d2:e3:14:da:ff:59:d5:df:4e:16:ef:56:eb: 08:06:01:92:4c:09:f7:57:5c:d5:02:4a:ad:6b:7c:b3:48:76: ae:d0:5c:52:9a:99:21:6b:b3:3b:7f:a3:57:b4:72:ca:bf:dc: 0f:d3:62:16:2b:f3:82:de:a6:0a:ec:3a:d6:f3:ed:25:e7:f2: 14:65:d9:28:12:41:65:a6:67:ea:c1:e1:40:6f:3a:66:97:24: 93:42:a3:17:ed:16:fe:52:d5:c5:7e:30:30:17:a1:41:3c:d1: 73:33:c4:ad:a3:b3:29:d6:0d:ed:a8:7e:4e:42:ec:62:75:5b: 2d:a5:59:25:b7:3e:66:23:4a:67:b9:3f:21:de:76:29:e4:cb: 5e:db:80:a7:d4:39:52:3e:05:00:7d:d9:7e:b9:51:fd:9a:9d: 76:eb:54:bd -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUCAUerrFjxptGzhU6GbXxM8YSlVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQzNkU2MDdGMzc1RjcyQkJEOTY1ODhGQkI3Q0U2RDVC NjI4RkY4NjAeFw0yNjA1MDMwMjQxMzRaFw0yNzA1MDIwMjQ2MzRaMDMxMTAvBgNV BAMTKEYzQkE4MzVEQzA5NTcyNzgzMDQ1QTg1MTExMzI0M0JFODlGREJERTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIbFpS3qfQdWwhQpICEYz22ISh ntFWmUuh0/hhL1CUftlJk8zlHus8y1cDLdarbN9Aiia5plnHXTOl04LmcglD2mkL hY6jqm5oXxRtjwkHzJIaEcBkiAwSw9CxpZtcnPIw1ILvIXWRPrYbg1lTvQw9MZDt AHU0dirTxiMY8upU50jD43j9/U4maD8JrVO9rlCjPuitD0edVVAu6kEC9Dfy0wN4 q5WF3J8cWn06Rk57Omiy8ZLtjiz2qcDyMi6n7kiiTB/u/RvjBLBBvdVG1RTYob9e upGB48PCrvKCP2FBqWLXkawbiEO7dfXcabNzWRAoDt9jWzx8Eal1PJ3PQdHpAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQU87qDXcCVcngwRahRETJDvon9vekwHwYDVR0j BBgwFoAUlDbmB/N19yu9lliPu3zm1bYo/4YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2ZmOTY5ZmMtMzljNy00NGNkLTg3MTYtOWNlNGM2ZDVhYzkxLzAvOTQzNkU2MDdG Mzc1RjcyQkJEOTY1ODhGQkI3Q0U2RDVCNjI4RkY4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NDM2RTYwN0YzNzVGNzJCQkQ5NjU4OEZCQjdDRTZENUI2MjhG Rjg2LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdmZjk2OWZjLTM5YzctNDRjZC04 NzE2LTljZTRjNmQ1YWM5MS8wLzMyMzQzMDMxM2E2NDY1MzgzMDNhMzYzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAHegAAGMA0G CSqGSIb3DQEBCwUAA4IBAQANbuJo3QxBdiX5UiSASsHmIpsNFVN75yBKGrvWobmm TKieK2wHOungH3La/VwCLl16fGEPpgGxCKluOv/Px+D/v5C+QBuUuFAANPPpshF6 YomBnvpBNCYZt48SWyN8A9LjFNr/WdXfThbvVusIBgGSTAn3V1zVAkqta3yzSHau 0FxSmpkha7M7f6NXtHLKv9wP02IWK/OC3qYK7DrW8+0l5/IUZdkoEkFlpmfqweFA bzpmlySTQqMX7Rb+UtXFfjAwF6FBPNFzM8Sto7Mp1g3tqH5OQuxidVstpVkltz5m I0pnuT8h3nYp5Mte24Cn1DlSPgUAfdl+uVH9mp1261S9 -----END CERTIFICATE-----Generated at Wed May 13 07:45:14 2026 by rpki-client