$ rpki-client -vvf rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a633a3a2f34382d3438203d3e203338353234.roa File: 323430313a646538303a633a3a2f34382d3438203d3e203338353234.roa (raw, json) Hash identifier: sYjWWpBo8FUIMvmXrTogyK3NkMmGkAEm9E3UOLrb8Ws= Subject key identifier: E9:EF:F5:DF:A9:70:C9:48:C0:53:04:D1:82:AF:C3:DF:72:0A:5E:13 Certificate issuer: /CN=9436E607F375F72BBD96588FBB7CE6D5B628FF86 Certificate serial: 34B43CDD94D213A121C72317BA2AF94668045E05 Authority key identifier: 94:36:E6:07:F3:75:F7:2B:BD:96:58:8F:BB:7C:E6:D5:B6:28:FF:86 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a633a3a2f34382d3438203d3e203338353234.roa Signing time: Sun 03 May 2026 02:46:26 +0000 ROA not before: Sun 03 May 2026 02:41:26 +0000 ROA not after: Sun 02 May 2027 02:46:26 +0000 asID: 38524 IP address blocks: 2401:de80:c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.crl rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:b4:3c:dd:94:d2:13:a1:21:c7:23:17:ba:2a:f9:46:68:04:5e:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9436E607F375F72BBD96588FBB7CE6D5B628FF86 Validity Not Before: May 3 02:41:26 2026 GMT Not After : May 2 02:46:26 2027 GMT Subject: CN=E9EFF5DFA970C948C05304D182AFC3DF720A5E13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0a:f8:ea:ac:6f:63:b3:57:b0:bb:f2:4d:a6: 42:c3:54:52:33:9e:ff:d4:16:c2:fe:7f:dd:73:4d: a1:b4:34:ab:72:e3:9d:41:5a:d3:49:06:87:74:4f: 7c:d0:ce:59:1d:5d:d2:74:83:5c:32:d0:d4:09:4a: 87:d8:60:bd:a3:b9:a4:b8:a9:7d:47:53:a3:13:74: 39:c4:75:63:e5:28:0e:54:1d:6b:f1:e5:e2:79:3e: 7f:d3:c0:60:f9:05:36:ec:ee:1f:41:cd:67:b8:9f: 31:0d:5f:4e:56:0d:51:9e:29:9f:cd:db:b0:d5:0c: 8d:89:d0:75:fb:d3:64:54:1d:0c:0c:04:fe:ac:4e: b6:4c:e7:e9:d3:25:76:f2:ef:76:ad:fa:6b:ad:c9: 56:64:ae:c9:c1:41:cb:a1:38:71:8a:f8:6c:c5:86: 75:4f:40:2a:a7:d2:44:5b:cc:7a:16:e8:cf:9f:dc: c0:9c:18:c3:4c:41:fc:84:17:1c:ca:0c:ab:4b:7b: 07:d7:6e:dc:c6:64:99:22:82:c7:9e:31:12:1a:e1: 2e:2c:d2:03:1d:54:78:a1:3b:6a:5e:bb:d8:58:b2: 76:b0:c0:a2:3c:c4:df:77:d3:0d:8a:f3:96:f7:b7: 0a:1d:5e:3b:eb:5a:dc:62:f3:56:c6:00:5a:d7:8f: 3b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:EF:F5:DF:A9:70:C9:48:C0:53:04:D1:82:AF:C3:DF:72:0A:5E:13 X509v3 Authority Key Identifier: keyid:94:36:E6:07:F3:75:F7:2B:BD:96:58:8F:BB:7C:E6:D5:B6:28:FF:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a633a3a2f34382d3438203d3e203338353234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:de80:c::/48 Signature Algorithm: sha256WithRSAEncryption 5c:00:51:d7:32:ba:8d:8b:ad:69:2d:05:8b:ca:02:16:50:1e: 53:3c:79:99:3d:96:18:6b:89:fa:17:5c:2d:a2:19:2d:a0:d2: 6f:ed:0d:8e:78:e6:4a:c6:fd:e1:dc:ff:41:7b:d2:a4:8e:e9: 05:99:a9:c2:d0:87:8a:cb:86:4d:e8:57:f2:1d:a2:a0:19:4c: 61:89:e0:ca:37:70:d1:f7:24:7d:91:58:c0:34:51:8a:ee:4a: ba:95:00:79:6b:01:5c:05:5b:e2:b4:aa:a5:5d:66:0e:a0:3d: 17:be:f1:a8:d3:2a:c6:b2:8f:88:bf:5c:2b:cd:d5:c5:d7:c1: 09:bd:f6:fb:5e:2c:99:28:da:13:fe:d8:2f:84:4f:4d:24:f9: f0:39:72:5b:37:c2:79:cb:32:af:86:a5:f7:c3:27:07:4a:c1: 3c:f0:4e:b0:fa:67:5e:bb:91:93:12:7a:bb:33:9d:09:6a:2b: a9:b0:44:97:2c:55:a0:03:f6:47:20:62:24:88:28:5b:31:75: 38:e3:05:fd:79:5b:a7:ca:e3:3b:ce:a5:36:31:e7:3c:50:22: ff:f9:5e:d2:da:c7:2c:47:89:37:4e:a2:78:52:42:00:07:1b: 52:1b:27:2e:bd:af:33:e9:53:b4:f8:ce:ae:db:b4:4c:2d:a3: db:87:62:f7 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUNLQ83ZTSE6EhxyMXuir5RmgEXgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQzNkU2MDdGMzc1RjcyQkJEOTY1ODhGQkI3Q0U2RDVC NjI4RkY4NjAeFw0yNjA1MDMwMjQxMjZaFw0yNzA1MDIwMjQ2MjZaMDMxMTAvBgNV BAMTKEU5RUZGNURGQTk3MEM5NDhDMDUzMDREMTgyQUZDM0RGNzIwQTVFMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSCvjqrG9js1ewu/JNpkLDVFIz nv/UFsL+f91zTaG0NKty451BWtNJBod0T3zQzlkdXdJ0g1wy0NQJSofYYL2juaS4 qX1HU6MTdDnEdWPlKA5UHWvx5eJ5Pn/TwGD5BTbs7h9BzWe4nzENX05WDVGeKZ/N 27DVDI2J0HX702RUHQwMBP6sTrZM5+nTJXby73at+mutyVZkrsnBQcuhOHGK+GzF hnVPQCqn0kRbzHoW6M+f3MCcGMNMQfyEFxzKDKtLewfXbtzGZJkigseeMRIa4S4s 0gMdVHihO2peu9hYsnawwKI8xN930w2K85b3twodXjvrWtxi81bGAFrXjzsrAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQU6e/136lwyUjAUwTRgq/D33IKXhMwHwYDVR0j BBgwFoAUlDbmB/N19yu9lliPu3zm1bYo/4YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2ZmOTY5ZmMtMzljNy00NGNkLTg3MTYtOWNlNGM2ZDVhYzkxLzAvOTQzNkU2MDdG Mzc1RjcyQkJEOTY1ODhGQkI3Q0U2RDVCNjI4RkY4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NDM2RTYwN0YzNzVGNzJCQkQ5NjU4OEZCQjdDRTZENUI2MjhG Rjg2LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdmZjk2OWZjLTM5YzctNDRjZC04 NzE2LTljZTRjNmQ1YWM5MS8wLzMyMzQzMDMxM2E2NDY1MzgzMDNhNjMzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAHegAAMMA0G CSqGSIb3DQEBCwUAA4IBAQBcAFHXMrqNi61pLQWLygIWUB5TPHmZPZYYa4n6F1wt ohktoNJv7Q2OeOZKxv3h3P9Be9KkjukFmanC0IeKy4ZN6FfyHaKgGUxhieDKN3DR 9yR9kVjANFGK7kq6lQB5awFcBVvitKqlXWYOoD0XvvGo0yrGso+Iv1wrzdXF18EJ vfb7XiyZKNoT/tgvhE9NJPnwOXJbN8J5yzKvhqX3wycHSsE88E6w+mdeu5GTEnq7 M50JaiupsESXLFWgA/ZHIGIkiChbMXU44wX9eVunyuM7zqU2Mec8UCL/+V7S2scs R4k3TqJ4UkIABxtSGycuva8z6VO0+M6u27RMLaPbh2L3 -----END CERTIFICATE-----Generated at Wed May 13 07:14:24 2026 by rpki-client