$ rpki-client -vvf rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a663a3a2f34382d3438203d3e203338353234.roa File: 323430313a646538303a663a3a2f34382d3438203d3e203338353234.roa (raw, json) Hash identifier: w1AQoTbeDmCZPGQ3DUH/6LDmBvexeMA79Uk2pDtKKaQ= Subject key identifier: 27:38:0F:C2:D7:66:BC:F7:2C:2F:75:29:5B:DB:17:8D:56:41:DF:4B Certificate issuer: /CN=9436E607F375F72BBD96588FBB7CE6D5B628FF86 Certificate serial: 44EFA26BB041791775B5847863BC5F51AFE730A2 Authority key identifier: 94:36:E6:07:F3:75:F7:2B:BD:96:58:8F:BB:7C:E6:D5:B6:28:FF:86 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a663a3a2f34382d3438203d3e203338353234.roa Signing time: Sun 03 May 2026 02:46:32 +0000 ROA not before: Sun 03 May 2026 02:41:32 +0000 ROA not after: Sun 02 May 2027 02:46:32 +0000 asID: 38524 IP address blocks: 2401:de80:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.crl rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:ef:a2:6b:b0:41:79:17:75:b5:84:78:63:bc:5f:51:af:e7:30:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9436E607F375F72BBD96588FBB7CE6D5B628FF86 Validity Not Before: May 3 02:41:32 2026 GMT Not After : May 2 02:46:32 2027 GMT Subject: CN=27380FC2D766BCF72C2F75295BDB178D5641DF4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:81:63:a2:68:72:c0:f7:37:6b:db:f3:75:0b: 47:d4:59:8a:6d:22:59:c1:1d:48:c3:3f:15:3b:07: 3f:a5:8a:8d:28:15:f6:7d:19:d4:38:69:5e:cd:6d: 92:0e:85:c9:f2:bd:39:10:a8:3c:3c:b1:07:75:eb: 0c:fd:89:4e:94:18:b1:62:b0:11:94:7e:98:31:70: c2:76:d3:d1:a1:a6:86:de:86:25:00:79:35:e7:95: 71:da:19:ab:51:32:df:03:b3:f5:e0:5a:af:29:5b: e3:d8:6b:30:78:2e:69:c1:bb:32:14:05:2c:4f:fa: 0e:70:2d:48:31:9b:6d:3a:82:08:31:7c:82:98:72: a5:69:d7:e1:16:2e:39:db:5f:dc:d6:c9:a0:58:dd: 0b:f4:04:90:76:15:8d:25:af:3d:55:b0:73:a3:44: 42:43:b0:99:58:48:2c:a5:ea:38:5e:2a:87:58:39: 2f:34:b7:22:8b:c7:72:5f:67:19:eb:71:34:06:b7: 4c:b8:b7:18:c1:a5:21:2f:f4:b2:6d:a0:bc:52:0f: 7c:83:56:32:c9:24:d9:c9:e3:aa:30:de:ce:72:94: 4a:96:86:0a:cc:58:2c:f5:2d:37:e4:8c:e0:b0:fb: 40:90:18:9b:95:cf:8f:b2:5b:0f:ca:17:e1:1e:94: 70:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:38:0F:C2:D7:66:BC:F7:2C:2F:75:29:5B:DB:17:8D:56:41:DF:4B X509v3 Authority Key Identifier: keyid:94:36:E6:07:F3:75:F7:2B:BD:96:58:8F:BB:7C:E6:D5:B6:28:FF:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a663a3a2f34382d3438203d3e203338353234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:de80:f::/48 Signature Algorithm: sha256WithRSAEncryption 46:68:9f:06:a6:08:29:26:c0:1e:b1:8e:32:99:df:c2:4a:91: 5e:25:4f:2f:a8:6f:a4:46:cc:4b:59:7a:e3:31:6a:e6:ae:ed: a6:da:ed:f2:7d:96:bb:07:17:71:4b:cc:27:19:90:72:93:6c: 20:d5:c6:e3:b0:b9:cf:5d:43:6b:33:89:d6:0b:74:0e:91:a8: 72:55:71:3c:3b:24:70:50:66:83:b7:b6:c0:b3:f0:1c:08:3e: c2:b7:c6:e2:0c:a0:91:6d:ed:55:f6:a7:1b:a5:36:8c:ee:a2: 91:d6:0e:d4:74:4f:f1:39:04:aa:c0:e7:b1:31:da:62:2c:90: e8:56:05:3c:d5:98:02:12:34:52:74:ea:f6:f6:20:30:7e:22: b7:33:ac:a1:fd:27:1d:e5:26:1d:c9:79:9d:ce:a4:a8:d5:5a: 5c:02:0a:7a:f8:85:13:0b:7c:2c:bf:14:b8:bc:6b:82:42:f3: 24:67:3b:93:18:9b:6e:8e:71:4e:94:c8:af:f0:98:9f:70:68: 3d:25:1e:cf:32:cd:f0:01:f2:38:3c:0e:7f:ac:7f:69:dd:ca: 37:5d:d3:21:e3:09:de:5e:3c:10:e5:c6:b2:d2:22:0d:cd:ae: 65:44:5e:14:4e:de:d3:09:bd:c7:3f:eb:32:e3:e9:fa:d8:52: b9:f1:54:02 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIURO+ia7BBeRd1tYR4Y7xfUa/nMKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQzNkU2MDdGMzc1RjcyQkJEOTY1ODhGQkI3Q0U2RDVC NjI4RkY4NjAeFw0yNjA1MDMwMjQxMzJaFw0yNzA1MDIwMjQ2MzJaMDMxMTAvBgNV BAMTKDI3MzgwRkMyRDc2NkJDRjcyQzJGNzUyOTVCREIxNzhENTY0MURGNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7gWOiaHLA9zdr2/N1C0fUWYpt IlnBHUjDPxU7Bz+lio0oFfZ9GdQ4aV7NbZIOhcnyvTkQqDw8sQd16wz9iU6UGLFi sBGUfpgxcMJ209GhpobehiUAeTXnlXHaGatRMt8Ds/XgWq8pW+PYazB4LmnBuzIU BSxP+g5wLUgxm206gggxfIKYcqVp1+EWLjnbX9zWyaBY3Qv0BJB2FY0lrz1VsHOj REJDsJlYSCyl6jheKodYOS80tyKLx3JfZxnrcTQGt0y4txjBpSEv9LJtoLxSD3yD VjLJJNnJ46ow3s5ylEqWhgrMWCz1LTfkjOCw+0CQGJuVz4+yWw/KF+EelHDJAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUJzgPwtdmvPcsL3UpW9sXjVZB30swHwYDVR0j BBgwFoAUlDbmB/N19yu9lliPu3zm1bYo/4YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2ZmOTY5ZmMtMzljNy00NGNkLTg3MTYtOWNlNGM2ZDVhYzkxLzAvOTQzNkU2MDdG Mzc1RjcyQkJEOTY1ODhGQkI3Q0U2RDVCNjI4RkY4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NDM2RTYwN0YzNzVGNzJCQkQ5NjU4OEZCQjdDRTZENUI2MjhG Rjg2LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdmZjk2OWZjLTM5YzctNDRjZC04 NzE2LTljZTRjNmQ1YWM5MS8wLzMyMzQzMDMxM2E2NDY1MzgzMDNhNjYzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAHegAAPMA0G CSqGSIb3DQEBCwUAA4IBAQBGaJ8GpggpJsAesY4ymd/CSpFeJU8vqG+kRsxLWXrj MWrmru2m2u3yfZa7BxdxS8wnGZByk2wg1cbjsLnPXUNrM4nWC3QOkahyVXE8OyRw UGaDt7bAs/AcCD7Ct8biDKCRbe1V9qcbpTaM7qKR1g7UdE/xOQSqwOexMdpiLJDo VgU81ZgCEjRSdOr29iAwfiK3M6yh/Scd5SYdyXmdzqSo1VpcAgp6+IUTC3wsvxS4 vGuCQvMkZzuTGJtujnFOlMiv8JifcGg9JR7PMs3wAfI4PA5/rH9p3co3XdMh4wne XjwQ5cay0iINza5lRF4UTt7TCb3HP+sy4+n62FK58VQC -----END CERTIFICATE-----Generated at Wed May 13 06:56:13 2026 by rpki-client