$ rpki-client -vvf rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a3a2f34372d3438203d3e203535363835.roa File: 323430343a653130303a3a2f34372d3438203d3e203535363835.roa (raw, json) Hash identifier: XPqwG5uNlGq8HabTQDxKUO4ieFteUl8/je1ShR27KLE= Subject key identifier: CC:76:FD:70:2E:1B:E9:34:B6:FC:68:C5:D6:4A:08:25:37:64:A7:2D Certificate issuer: /CN=408DEB7465856EE053B64340FA814B862FA5ED30 Certificate serial: 61F6E2526222C8CE5FFC29E56BA2D539AEF0B197 Authority key identifier: 40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a3a2f34372d3438203d3e203535363835.roa Signing time: Sun 03 May 2026 02:47:50 +0000 ROA not before: Sun 03 May 2026 02:42:50 +0000 ROA not after: Sun 02 May 2027 02:47:50 +0000 asID: 55685 IP address blocks: 2404:e100::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:f6:e2:52:62:22:c8:ce:5f:fc:29:e5:6b:a2:d5:39:ae:f0:b1:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408DEB7465856EE053B64340FA814B862FA5ED30 Validity Not Before: May 3 02:42:50 2026 GMT Not After : May 2 02:47:50 2027 GMT Subject: CN=CC76FD702E1BE934B6FC68C5D64A08253764A72D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d9:99:f2:e2:20:a6:67:98:86:d3:5b:62:d3: 2a:c7:72:64:0d:ac:c3:f8:8b:85:94:c6:97:87:61: 58:fb:56:95:c0:6d:e1:e0:02:ae:84:d6:38:97:bf: ce:a9:4f:d6:dc:a6:a2:f9:7a:d1:b8:8b:06:38:b7: ee:f0:c4:36:d4:bb:10:44:1d:b8:01:e5:e1:0e:7c: 0d:36:eb:7f:11:1e:ff:5e:8e:ae:b3:53:a9:8a:b1: 5c:53:66:cf:a1:cb:b9:fc:b8:3d:18:10:ae:9f:d4: bb:ab:c5:1b:44:b8:ff:74:d8:f8:de:87:d7:6f:19: 07:ad:e9:6a:24:c5:68:a1:a0:52:00:09:ea:d9:d4: 09:16:69:2d:a0:30:4c:7d:a5:62:f2:d2:0b:d6:78: 39:82:e7:33:54:7e:04:07:13:4c:1f:f1:c3:ee:64: 88:74:e4:b9:55:b4:44:6c:7b:03:03:35:e4:6a:1f: 3e:e8:66:97:8f:79:e3:0a:4b:a0:ce:f3:44:e3:50: 1c:6b:20:9e:38:3a:3d:c7:25:72:1d:d0:6a:c9:37: 09:ed:04:e1:3b:36:5c:f1:4e:f8:8b:22:28:1c:d8: 7c:7b:09:cb:3a:26:59:5f:27:f9:f1:92:a0:2c:bb: 31:c6:61:ae:97:a8:c8:36:9c:6b:55:c2:f0:a4:79: 9a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:76:FD:70:2E:1B:E9:34:B6:FC:68:C5:D6:4A:08:25:37:64:A7:2D X509v3 Authority Key Identifier: keyid:40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a3a2f34372d3438203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:e100::/47 Signature Algorithm: sha256WithRSAEncryption 5a:9b:3d:71:74:86:bc:29:9c:5d:f1:55:61:df:19:18:8b:36: 3f:0d:ae:84:a4:58:68:87:84:b1:00:16:7a:1a:86:ca:3c:fb: 94:c9:98:a3:b8:8e:db:a8:3d:21:84:82:ec:fd:09:c9:fa:79: 7c:05:ce:88:d9:e4:b6:c9:b5:2e:03:4d:27:3a:04:d0:22:34: 2b:64:53:94:1f:af:5a:26:31:40:d9:ba:34:9b:26:29:61:f3: 23:5f:d7:25:7c:de:45:64:7e:de:6b:eb:cf:ae:71:80:ff:80: 06:a0:ed:a7:2d:88:9b:ad:fa:23:31:f1:f4:85:b1:3b:a8:e8: d0:7e:ee:d9:a2:f8:6a:75:6e:a2:ed:30:e8:7c:8b:4f:aa:b6: d5:33:9d:84:19:76:ba:ec:55:0b:c9:28:ad:78:c0:30:b7:3e: 05:a2:48:b5:9f:c6:6d:8b:1c:fd:f0:9c:d3:c2:db:6d:3b:80: f3:0c:df:40:24:ba:81:cf:88:fd:c7:2d:c2:fb:c5:11:42:2a: 5c:8c:d1:45:74:11:33:cf:cb:47:6a:0b:39:92:0a:5b:3f:f6: c2:2d:d7:6f:06:c0:39:7e:c5:52:db:17:8e:0d:b2:94:37:3a: 16:db:02:65:81:59:00:28:2b:12:49:3a:b4:09:13:4f:12:ba: f4:0c:b2:11 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUYfbiUmIiyM5f/Cnla6LVOa7wsZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4REVCNzQ2NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYy RkE1RUQzMDAeFw0yNjA1MDMwMjQyNTBaFw0yNzA1MDIwMjQ3NTBaMDMxMTAvBgNV BAMTKENDNzZGRDcwMkUxQkU5MzRCNkZDNjhDNUQ2NEEwODI1Mzc2NEE3MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC02Zny4iCmZ5iG01ti0yrHcmQN rMP4i4WUxpeHYVj7VpXAbeHgAq6E1jiXv86pT9bcpqL5etG4iwY4t+7wxDbUuxBE HbgB5eEOfA02638RHv9ejq6zU6mKsVxTZs+hy7n8uD0YEK6f1LurxRtEuP902Pje h9dvGQet6WokxWihoFIACerZ1AkWaS2gMEx9pWLy0gvWeDmC5zNUfgQHE0wf8cPu ZIh05LlVtERsewMDNeRqHz7oZpePeeMKS6DO80TjUBxrIJ44Oj3HJXId0GrJNwnt BOE7NlzxTviLIigc2Hx7Ccs6JllfJ/nxkqAsuzHGYa6XqMg2nGtVwvCkeZqjAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUzHb9cC4b6TS2/GjF1koIJTdkpy0wHwYDVR0j BBgwFoAUQI3rdGWFbuBTtkNA+oFLhi+l7TAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVkOGRhYjQtOGJiNi00ZWQwLThkYWItNWE0MDYxNjdiOTlkLzAvNDA4REVCNzQ2 NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYyRkE1RUQzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDhERUI3NDY1ODU2RUUwNTNCNjQzNDBGQTgxNEI4NjJGQTVF RDMwLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMyMzQzMDM0M2E2NTMxMzAzMDNhM2EyZjM0Mzcy ZDM0MzgyMDNkM2UyMDM1MzUzNjM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwEkBOEAAAAwDQYJKoZI hvcNAQELBQADggEBAFqbPXF0hrwpnF3xVWHfGRiLNj8NroSkWGiHhLEAFnoahso8 +5TJmKO4jtuoPSGEguz9Ccn6eXwFzojZ5LbJtS4DTSc6BNAiNCtkU5Qfr1omMUDZ ujSbJilh8yNf1yV83kVkft5r68+ucYD/gAag7actiJut+iMx8fSFsTuo6NB+7tmi +Gp1bqLtMOh8i0+qttUznYQZdrrsVQvJKK14wDC3PgWiSLWfxm2LHP3wnNPC2207 gPMM30AkuoHPiP3HLcL7xRFCKlyM0UV0ETPPy0dqCzmSCls/9sIt128GwDl+xVLb F44NspQ3OhbbAmWBWQAoKxJJOrQJE08SuvQMshE= -----END CERTIFICATE-----Generated at Wed May 13 02:40:26 2026 by rpki-client