$ rpki-client -vvf rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/323430313a613565303a3a2f33322d3438203d3e20313532383130.roa File: 323430313a613565303a3a2f33322d3438203d3e20313532383130.roa (raw, json) Hash identifier: EjCZCWM26KDivUXMEfL07ocLZOd7dbm1FkmvXFA+kQY= Subject key identifier: 72:03:FE:36:46:92:EE:EF:D7:D3:4A:CC:9A:70:6F:D9:74:6D:7B:D4 Certificate issuer: /CN=D85622299CA02E9652CA0DB7304F71B950BF346D Certificate serial: 7C02C109C81936B566300F962181E721C7CB5CB7 Authority key identifier: D8:56:22:29:9C:A0:2E:96:52:CA:0D:B7:30:4F:71:B9:50:BF:34:6D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85622299CA02E9652CA0DB7304F71B950BF346D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/323430313a613565303a3a2f33322d3438203d3e20313532383130.roa Signing time: Sun 03 May 2026 02:47:42 +0000 ROA not before: Sun 03 May 2026 02:42:42 +0000 ROA not after: Sun 02 May 2027 02:47:42 +0000 asID: 152810 IP address blocks: 2401:a5e0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.crl rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85622299CA02E9652CA0DB7304F71B950BF346D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:02:c1:09:c8:19:36:b5:66:30:0f:96:21:81:e7:21:c7:cb:5c:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85622299CA02E9652CA0DB7304F71B950BF346D Validity Not Before: May 3 02:42:42 2026 GMT Not After : May 2 02:47:42 2027 GMT Subject: CN=7203FE364692EEEFD7D34ACC9A706FD9746D7BD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7c:0d:46:07:bb:64:f5:06:69:38:9a:f5:93: 8b:8a:a4:0f:da:3a:dd:aa:f3:11:91:f9:8d:36:a3: c7:61:3f:65:6f:12:77:64:89:ac:94:3e:29:4b:8a: 90:44:03:00:ef:17:4b:22:9e:63:11:17:a9:0a:cd: 61:67:f2:70:10:8a:96:65:f8:5c:e6:c3:44:56:2c: 2d:cb:d7:73:48:8c:95:43:fa:51:57:3a:5e:b5:40: d7:3b:c8:b0:a6:3c:52:bc:34:03:8b:fc:71:76:12: c7:e0:88:b0:fc:92:be:c9:59:54:f1:b6:a8:ba:c0: 59:d4:4e:5b:37:53:d2:1e:3b:1b:b2:b5:db:84:3a: ba:25:6c:08:bc:32:64:24:b7:c3:51:ff:08:58:04: 36:9e:9a:4a:a4:3b:d8:8a:53:9d:c4:8c:67:d4:a6: 52:fa:09:df:7f:0b:98:4e:bc:96:bb:a1:34:9e:d9: 0b:2b:61:1d:ae:b4:95:55:3e:f7:44:8c:46:de:a8: 6a:1d:78:8c:11:55:55:20:0e:1b:5a:9a:11:d1:d8: d3:4d:c2:c3:d0:6c:2f:43:a2:ac:94:b5:ae:b9:68: 43:55:de:85:97:ca:51:98:3c:b3:a7:17:f3:ab:1d: a4:fe:2f:9f:19:39:b3:5e:ee:7b:69:6b:18:35:06: 47:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:03:FE:36:46:92:EE:EF:D7:D3:4A:CC:9A:70:6F:D9:74:6D:7B:D4 X509v3 Authority Key Identifier: keyid:D8:56:22:29:9C:A0:2E:96:52:CA:0D:B7:30:4F:71:B9:50:BF:34:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85622299CA02E9652CA0DB7304F71B950BF346D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/323430313a613565303a3a2f33322d3438203d3e20313532383130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:a5e0::/32 Signature Algorithm: sha256WithRSAEncryption 8a:f1:dc:bf:5f:88:b3:11:c1:98:2e:d2:6d:7d:63:27:c3:3b: 7d:18:3b:b7:cd:b3:02:f8:63:68:b2:ba:8b:01:51:88:70:72: 44:22:6f:7f:a8:3d:eb:05:f6:19:1a:34:16:bf:0f:63:4c:55: d1:50:a2:fe:75:3c:f4:22:bd:5b:06:67:f8:d7:6c:94:2a:cd: 8d:4f:a1:af:de:1c:20:0d:ae:fa:c3:97:6e:cb:d1:39:85:9d: 7b:d8:97:57:88:10:cb:35:e5:a2:5b:d5:6e:4f:85:af:6f:4e: 3e:cc:68:52:ec:e7:08:e9:a1:fe:7c:97:30:61:0f:ca:fc:98: 6e:dd:fd:1e:92:b3:20:b4:ca:ed:a4:67:02:4a:b2:fe:75:f3: 99:1c:59:d3:9b:ab:90:6d:f5:68:b1:b9:bd:68:8b:63:ce:21: 6a:b2:fb:7e:9d:eb:1e:67:39:92:5e:f1:9e:00:7e:0f:ff:89: 7e:ce:fc:48:a0:07:69:1d:c4:60:5d:36:38:ee:cd:61:cd:29: 75:c5:68:db:c2:65:6b:1e:75:84:81:b3:19:76:c5:50:e5:62: dc:80:08:d9:3d:6d:2e:8b:c1:24:4b:47:81:80:98:12:69:d7: 75:02:c2:2f:ce:cf:f5:3f:2f:b6:7c:ab:3f:47:f0:f1:5d:e3: 51:35:10:63 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUfALBCcgZNrVmMA+WIYHnIcfLXLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1NjIyMjk5Q0EwMkU5NjUyQ0EwREI3MzA0RjcxQjk1 MEJGMzQ2RDAeFw0yNjA1MDMwMjQyNDJaFw0yNzA1MDIwMjQ3NDJaMDMxMTAvBgNV BAMTKDcyMDNGRTM2NDY5MkVFRUZEN0QzNEFDQzlBNzA2RkQ5NzQ2RDdCRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6fA1GB7tk9QZpOJr1k4uKpA/a Ot2q8xGR+Y02o8dhP2VvEndkiayUPilLipBEAwDvF0sinmMRF6kKzWFn8nAQipZl +Fzmw0RWLC3L13NIjJVD+lFXOl61QNc7yLCmPFK8NAOL/HF2EsfgiLD8kr7JWVTx tqi6wFnUTls3U9IeOxuytduEOrolbAi8MmQkt8NR/whYBDaemkqkO9iKU53EjGfU plL6Cd9/C5hOvJa7oTSe2QsrYR2utJVVPvdEjEbeqGodeIwRVVUgDhtamhHR2NNN wsPQbC9DoqyUta65aENV3oWXylGYPLOnF/OrHaT+L58ZObNe7ntpaxg1BkdnAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUcgP+NkaS7u/X00rMmnBv2XRte9QwHwYDVR0j BBgwFoAU2FYiKZygLpZSyg23ME9xuVC/NG0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODQ3NTMzOGQtN2FjYi00YWE3LWJlZGMtZDY0NTlmZDEzNTA0LzEvRDg1NjIyMjk5 Q0EwMkU5NjUyQ0EwREI3MzA0RjcxQjk1MEJGMzQ2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODU2MjIyOTlDQTAyRTk2NTJDQTBEQjczMDRGNzFCOTUwQkYz NDZELmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg0NzUzMzhkLTdhY2ItNGFhNy1i ZWRjLWQ2NDU5ZmQxMzUwNC8xLzMyMzQzMDMxM2E2MTM1NjUzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzUzMjM4MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQBpeAwDQYJKoZI hvcNAQELBQADggEBAIrx3L9fiLMRwZgu0m19YyfDO30YO7fNswL4Y2iyuosBUYhw ckQib3+oPesF9hkaNBa/D2NMVdFQov51PPQivVsGZ/jXbJQqzY1Poa/eHCANrvrD l27L0TmFnXvYl1eIEMs15aJb1W5Pha9vTj7MaFLs5wjpof58lzBhD8r8mG7d/R6S syC0yu2kZwJKsv5185kcWdObq5Bt9Wixub1oi2POIWqy+36d6x5nOZJe8Z4Afg// iX7O/EigB2kdxGBdNjjuzWHNKXXFaNvCZWsedYSBsxl2xVDlYtyACNk9bS6LwSRL R4GAmBJp13UCwi/Oz/U/L7Z8qz9H8PFd41E1EGM= -----END CERTIFICATE-----Generated at Wed May 13 13:30:51 2026 by rpki-client