$ rpki-client -vvf rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a343030363a3a2f34382d3438203d3e20313333383430.roa File: 323430343a653130303a343030363a3a2f34382d3438203d3e20313333383430.roa (raw, json) Hash identifier: N9uLhprhJ5wZr4o31KflWpO6N9TpuQoNZcpiZ8VwfNg= Subject key identifier: 37:FC:90:70:A0:52:73:66:69:ED:3C:36:35:35:BD:DE:33:02:15:AD Certificate issuer: /CN=408DEB7465856EE053B64340FA814B862FA5ED30 Certificate serial: 43519F3DDD3DF5A118A9DFC7D05DEDFA18590F8C Authority key identifier: 40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a343030363a3a2f34382d3438203d3e20313333383430.roa Signing time: Sun 03 May 2026 02:48:05 +0000 ROA not before: Sun 03 May 2026 02:43:05 +0000 ROA not after: Sun 02 May 2027 02:48:05 +0000 asID: 133840 IP address blocks: 2404:e100:4006::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:51:9f:3d:dd:3d:f5:a1:18:a9:df:c7:d0:5d:ed:fa:18:59:0f:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408DEB7465856EE053B64340FA814B862FA5ED30 Validity Not Before: May 3 02:43:05 2026 GMT Not After : May 2 02:48:05 2027 GMT Subject: CN=37FC9070A052736669ED3C363535BDDE330215AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:94:75:18:2e:ee:6d:86:ab:cb:ac:39:74:3f: c8:80:3e:cf:78:4b:a7:42:6f:d3:d2:f4:42:e7:b1: c9:8b:dc:5b:95:7c:a8:bd:84:16:5e:dd:c7:7f:30: 02:9d:68:ac:e6:23:b5:79:e1:93:46:a1:8a:e0:51: 63:21:67:44:d0:64:ad:16:c6:f4:ed:44:2b:1d:38: 01:17:4b:f3:af:55:9b:01:e8:22:34:ea:b9:06:d7: 99:04:8c:d4:df:93:99:f6:cd:dd:13:b2:ff:bf:0f: 71:e0:9b:3d:59:01:06:a7:a8:d9:dd:ee:2a:e7:98: 0e:83:4d:6d:b2:c1:81:76:a1:02:06:f7:89:bf:68: 60:c9:ec:25:08:3a:ae:7a:c0:b4:38:7a:06:6c:6d: 34:0f:4a:c7:e6:21:40:32:e3:7c:46:47:d0:b3:39: 03:3a:21:34:43:33:3d:fd:61:e3:08:2a:85:61:5b: b0:0c:9c:b0:f2:53:35:ab:d5:a4:8b:50:d3:c7:72: 23:7c:e3:e2:35:4e:e5:be:08:83:2d:f5:6b:85:60: 3b:93:98:d4:a2:6b:a6:a7:50:49:32:b2:b3:c4:88: ad:81:25:9e:a3:20:12:cf:7f:4d:e3:d2:4a:16:6d: 59:5e:51:d4:cd:1c:30:2e:4e:f0:11:76:1e:3a:a5: a6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FC:90:70:A0:52:73:66:69:ED:3C:36:35:35:BD:DE:33:02:15:AD X509v3 Authority Key Identifier: keyid:40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a343030363a3a2f34382d3438203d3e20313333383430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:e100:4006::/48 Signature Algorithm: sha256WithRSAEncryption 9e:76:94:0d:42:d4:1b:64:b6:04:58:01:55:d3:1d:e6:a3:df: 51:11:49:7b:ba:5c:02:4c:af:98:5d:ee:f5:3a:3b:c5:64:b5: 23:ae:e8:7f:3f:2f:4f:ff:6c:3b:70:ed:2b:71:cd:d6:30:1d: 57:04:7a:b4:7c:02:83:b9:6f:1b:53:76:bb:88:88:60:70:c5: 57:3e:59:48:49:3c:a7:37:f6:b6:33:26:82:58:83:c2:b6:09: 3a:56:26:52:23:49:44:7c:0d:3b:b3:20:6a:98:cf:43:0f:ae: ca:84:4b:9a:e4:57:cc:fe:57:fa:22:52:a2:37:15:14:28:e1: 44:13:77:83:b6:48:db:38:85:8b:cf:80:eb:87:d8:42:ce:44: ea:36:c0:35:66:42:fa:2c:27:76:57:92:32:b1:0d:2f:61:b9: 16:a2:ec:a8:47:a2:ca:f9:da:36:bc:93:50:95:b9:91:36:0b: c0:66:8f:7d:2b:8a:1f:ff:d9:49:59:32:21:3d:97:cf:2e:9d: f8:15:c8:27:db:56:8b:07:4a:41:fd:6d:4a:ad:24:d6:eb:f5: 4b:3d:3e:d1:fe:3c:8f:48:c3:3c:57:94:19:1c:93:c4:55:ca: 0b:52:90:00:13:31:b6:b8:b4:4a:63:ef:5e:28:06:0a:f9:a0: 44:d0:c7:3c -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUQ1GfPd099aEYqd/H0F3t+hhZD4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4REVCNzQ2NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYy RkE1RUQzMDAeFw0yNjA1MDMwMjQzMDVaFw0yNzA1MDIwMjQ4MDVaMDMxMTAvBgNV BAMTKDM3RkM5MDcwQTA1MjczNjY2OUVEM0MzNjM1MzVCRERFMzMwMjE1QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKlHUYLu5thqvLrDl0P8iAPs94 S6dCb9PS9ELnscmL3FuVfKi9hBZe3cd/MAKdaKzmI7V54ZNGoYrgUWMhZ0TQZK0W xvTtRCsdOAEXS/OvVZsB6CI06rkG15kEjNTfk5n2zd0Tsv+/D3Hgmz1ZAQanqNnd 7irnmA6DTW2ywYF2oQIG94m/aGDJ7CUIOq56wLQ4egZsbTQPSsfmIUAy43xGR9Cz OQM6ITRDMz39YeMIKoVhW7AMnLDyUzWr1aSLUNPHciN84+I1TuW+CIMt9WuFYDuT mNSia6anUEkysrPEiK2BJZ6jIBLPf03j0koWbVleUdTNHDAuTvARdh46paYlAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUN/yQcKBSc2Zp7Tw2NTW93jMCFa0wHwYDVR0j BBgwFoAUQI3rdGWFbuBTtkNA+oFLhi+l7TAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVkOGRhYjQtOGJiNi00ZWQwLThkYWItNWE0MDYxNjdiOTlkLzAvNDA4REVCNzQ2 NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYyRkE1RUQzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDhERUI3NDY1ODU2RUUwNTNCNjQzNDBGQTgxNEI4NjJGQTVF RDMwLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMyMzQzMDM0M2E2NTMxMzAzMDNhMzQzMDMwMzYz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzMzODM0MzAucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BOEAQAYwDQYJKoZIhvcNAQELBQADggEBAJ52lA1C1BtktgRYAVXTHeaj31ERSXu6 XAJMr5hd7vU6O8VktSOu6H8/L0//bDtw7StxzdYwHVcEerR8AoO5bxtTdruIiGBw xVc+WUhJPKc39rYzJoJYg8K2CTpWJlIjSUR8DTuzIGqYz0MPrsqES5rkV8z+V/oi UqI3FRQo4UQTd4O2SNs4hYvPgOuH2ELOROo2wDVmQvosJ3ZXkjKxDS9huRai7KhH osr52ja8k1CVuZE2C8Bmj30rih//2UlZMiE9l88unfgVyCfbVosHSkH9bUqtJNbr 9Us9PtH+PI9IwzxXlBkck8RVygtSkAATMba4tEpj714oBgr5oETQxzw= -----END CERTIFICATE-----Generated at Wed May 13 07:14:30 2026 by rpki-client