$ rpki-client -vvf rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a343a3a2f34382d3438203d3e203535363835.roa File: 323430343a653130303a343a3a2f34382d3438203d3e203535363835.roa (raw, json) Hash identifier: SwZ0+RN9zy7jGzeWOiHw5G8Tt8UGWdAo+QE8SFhTvTs= Subject key identifier: 3F:15:04:F7:89:58:F3:68:84:96:E2:33:36:81:02:E7:F3:60:8F:18 Certificate issuer: /CN=408DEB7465856EE053B64340FA814B862FA5ED30 Certificate serial: 75FD7F0922A54F17072AA4453FD3EA00AF1C9477 Authority key identifier: 40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a343a3a2f34382d3438203d3e203535363835.roa Signing time: Sun 03 May 2026 02:47:50 +0000 ROA not before: Sun 03 May 2026 02:42:50 +0000 ROA not after: Sun 02 May 2027 02:47:50 +0000 asID: 55685 IP address blocks: 2404:e100:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:fd:7f:09:22:a5:4f:17:07:2a:a4:45:3f:d3:ea:00:af:1c:94:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408DEB7465856EE053B64340FA814B862FA5ED30 Validity Not Before: May 3 02:42:50 2026 GMT Not After : May 2 02:47:50 2027 GMT Subject: CN=3F1504F78958F3688496E233368102E7F3608F18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3f:d0:38:7a:5c:e3:e4:3d:0b:c3:f7:9d:15: 71:ef:6a:6b:28:b8:03:7b:90:61:07:19:66:f6:61: ad:8f:7e:71:bc:b3:0c:0b:97:97:8f:1a:30:28:f6: 49:85:f1:01:b0:d2:f4:eb:54:0b:c9:54:4c:91:da: 1c:d6:38:8c:2c:1d:69:1e:68:97:6e:ec:f6:ad:e5: fa:38:50:b5:36:01:07:57:1c:21:ef:41:3c:86:0f: e1:34:01:85:9c:ae:06:80:4e:ec:a9:e1:0b:55:8f: 62:94:67:c7:17:d3:d8:56:2e:eb:8a:0d:7c:87:70: bc:eb:8b:e6:af:c9:c6:9a:0a:e0:b2:5c:db:1b:e7: 78:d8:53:46:46:8f:01:a6:35:a6:ee:9b:f5:61:52: 91:57:f8:3b:45:45:17:ff:af:94:31:3c:ec:ee:7d: 57:03:da:be:67:04:9a:c6:e9:e7:15:0e:14:3b:09: 7e:82:18:5d:71:1a:09:09:e1:a4:d5:dc:e2:50:39: 07:6b:b1:f7:44:09:e1:17:63:8e:a9:39:02:42:0c: fc:02:f0:5c:bd:6a:2c:e8:34:66:21:0c:95:f2:66: fd:60:d6:ab:93:19:65:89:19:89:4c:fa:21:74:94: 5e:69:07:8d:83:d0:7c:d9:43:ea:fe:e8:d5:48:14: 4e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:15:04:F7:89:58:F3:68:84:96:E2:33:36:81:02:E7:F3:60:8F:18 X509v3 Authority Key Identifier: keyid:40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a343a3a2f34382d3438203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:e100:4::/48 Signature Algorithm: sha256WithRSAEncryption 5b:a8:5e:cb:41:6c:91:7a:d0:73:b4:a0:c9:1a:d1:f4:56:38: 08:00:29:f3:7b:70:0b:bc:09:51:f6:fc:f5:ed:f7:4e:8c:d2: e0:48:e2:22:d0:17:c8:63:b4:79:aa:d5:d6:0e:ba:86:14:aa: f7:9b:61:63:5f:b9:c6:10:2e:a0:60:c1:0c:cd:a7:9d:dd:2c: d3:4a:36:a1:b3:c5:fa:00:fd:e5:97:96:f5:4a:fa:1e:39:b6: a3:d1:72:aa:39:67:64:2e:96:f4:11:18:0e:90:9d:7f:da:00: 65:67:15:dd:b7:c8:d7:d0:28:09:09:17:81:a7:29:8b:0a:ca: 5c:da:f3:78:2c:53:30:d8:34:67:1f:02:6f:6a:6a:6f:af:62: a9:3e:5d:49:ed:b8:43:12:d3:ab:18:d6:cf:87:51:14:0f:25: 25:78:77:82:c0:a9:52:18:93:a1:4d:96:9e:8c:e4:fe:97:fb: 43:1c:77:de:ef:a4:42:4a:7e:87:81:73:79:c3:21:bc:79:34: c6:3f:5e:72:5d:7c:6c:81:87:0a:e1:60:47:bc:7a:b8:e8:35: 0b:32:83:1e:3c:bb:2c:b3:7a:6c:a9:27:c2:5a:58:5c:dc:ac: 1c:6b:ee:5d:fb:d4:f1:0a:8e:3a:c1:90:55:68:66:1a:71:ec: c4:b1:1a:e7 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUdf1/CSKlTxcHKqRFP9PqAK8clHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4REVCNzQ2NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYy RkE1RUQzMDAeFw0yNjA1MDMwMjQyNTBaFw0yNzA1MDIwMjQ3NTBaMDMxMTAvBgNV BAMTKDNGMTUwNEY3ODk1OEYzNjg4NDk2RTIzMzM2ODEwMkU3RjM2MDhGMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaP9A4elzj5D0Lw/edFXHvamso uAN7kGEHGWb2Ya2PfnG8swwLl5ePGjAo9kmF8QGw0vTrVAvJVEyR2hzWOIwsHWke aJdu7Pat5fo4ULU2AQdXHCHvQTyGD+E0AYWcrgaATuyp4QtVj2KUZ8cX09hWLuuK DXyHcLzri+avycaaCuCyXNsb53jYU0ZGjwGmNabum/VhUpFX+DtFRRf/r5QxPOzu fVcD2r5nBJrG6ecVDhQ7CX6CGF1xGgkJ4aTV3OJQOQdrsfdECeEXY46pOQJCDPwC 8Fy9aizoNGYhDJXyZv1g1quTGWWJGYlM+iF0lF5pB42D0HzZQ+r+6NVIFE5bAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUPxUE94lY82iEluIzNoEC5/NgjxgwHwYDVR0j BBgwFoAUQI3rdGWFbuBTtkNA+oFLhi+l7TAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVkOGRhYjQtOGJiNi00ZWQwLThkYWItNWE0MDYxNjdiOTlkLzAvNDA4REVCNzQ2 NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYyRkE1RUQzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDhERUI3NDY1ODU2RUUwNTNCNjQzNDBGQTgxNEI4NjJGQTVF RDMwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMyMzQzMDM0M2E2NTMxMzAzMDNhMzQzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzNTM1MzYzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAThAAAEMA0G CSqGSIb3DQEBCwUAA4IBAQBbqF7LQWyRetBztKDJGtH0VjgIACnze3ALvAlR9vz1 7fdOjNLgSOIi0BfIY7R5qtXWDrqGFKr3m2FjX7nGEC6gYMEMzaed3SzTSjahs8X6 AP3ll5b1SvoeObaj0XKqOWdkLpb0ERgOkJ1/2gBlZxXdt8jX0CgJCReBpymLCspc 2vN4LFMw2DRnHwJvampvr2KpPl1J7bhDEtOrGNbPh1EUDyUleHeCwKlSGJOhTZae jOT+l/tDHHfe76RCSn6HgXN5wyG8eTTGP15yXXxsgYcK4WBHvHq46DULMoMePLss s3psqSfCWlhc3Kwca+5d+9TxCo46wZBVaGYacezEsRrn -----END CERTIFICATE-----Generated at Wed May 13 02:26:39 2026 by rpki-client