$ rpki-client -vvf rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a613a3a2f34382d3438203d3e203535363835.roa File: 323430343a653130303a613a3a2f34382d3438203d3e203535363835.roa (raw, json) Hash identifier: dxc6OEKiJ0H3o4CsLNrGmyX3sdS4YK5f3WmrW9K9FYU= Subject key identifier: 1B:8A:0D:6F:FC:C7:FB:4A:64:EE:76:AF:1E:CA:67:A1:DF:9B:38:92 Certificate issuer: /CN=408DEB7465856EE053B64340FA814B862FA5ED30 Certificate serial: 326B096E2A908888F43DD2C2C8E5E493C681F733 Authority key identifier: 40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a613a3a2f34382d3438203d3e203535363835.roa Signing time: Sun 03 May 2026 02:47:58 +0000 ROA not before: Sun 03 May 2026 02:42:58 +0000 ROA not after: Sun 02 May 2027 02:47:58 +0000 asID: 55685 IP address blocks: 2404:e100:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:6b:09:6e:2a:90:88:88:f4:3d:d2:c2:c8:e5:e4:93:c6:81:f7:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408DEB7465856EE053B64340FA814B862FA5ED30 Validity Not Before: May 3 02:42:58 2026 GMT Not After : May 2 02:47:58 2027 GMT Subject: CN=1B8A0D6FFCC7FB4A64EE76AF1ECA67A1DF9B3892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:31:43:37:61:40:a9:d1:a4:af:d7:97:b4:c3: bd:4e:8c:64:8c:af:7f:4c:70:d4:07:ae:66:a7:5f: 02:42:aa:4f:76:d8:2c:d4:19:6c:50:d7:5f:fe:20: 0f:f9:b8:a8:9d:de:19:2f:34:7a:82:11:99:da:5e: 5b:68:01:51:6e:4d:b1:1a:fa:bf:d6:3c:a9:69:bf: 63:96:54:9c:21:b0:5a:c0:7b:0d:2f:dc:63:97:6f: cf:94:68:ee:58:d7:55:24:3b:81:f9:31:8d:e2:01: bf:32:06:c8:13:a3:33:c8:a7:19:5c:f2:80:59:36: 49:3f:0d:0d:23:31:0c:5a:07:fd:07:fc:20:74:e4: 6e:8e:28:d0:4b:e3:c3:09:85:48:b6:fd:82:d8:e7: 7a:ca:10:d4:48:78:30:46:13:1e:94:90:b6:c8:ac: b5:91:b5:ad:38:f2:f0:5c:65:44:6b:16:e5:55:45: 4c:ad:fe:24:4c:61:84:e0:71:6d:92:7f:5a:35:cc: 2c:ff:1d:e6:2a:23:13:b9:6d:8b:64:b6:08:ab:b4: 06:26:f3:df:91:84:76:c9:82:5a:c0:24:ad:c4:25: 61:81:50:30:8e:2c:18:09:66:01:e3:c8:d1:ac:6f: 98:ac:41:47:90:a8:53:f1:33:17:eb:85:0e:01:d6: 51:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:8A:0D:6F:FC:C7:FB:4A:64:EE:76:AF:1E:CA:67:A1:DF:9B:38:92 X509v3 Authority Key Identifier: keyid:40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a613a3a2f34382d3438203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:e100:a::/48 Signature Algorithm: sha256WithRSAEncryption 61:4e:ce:3e:e2:6e:17:bb:ca:d6:f6:37:5a:ec:ce:8b:d3:51: c2:b2:43:27:9c:51:21:02:98:e6:5a:0a:f2:d8:e9:c5:66:54: 2a:81:6d:a1:4c:d7:7c:e1:9c:34:4e:bd:bb:2b:18:6c:0d:93: 8e:12:93:ae:a3:48:49:a4:df:ab:9f:12:e2:50:2b:16:d8:f8: da:e5:a4:58:41:1b:fa:fb:41:95:c4:a3:f5:12:6e:ea:9b:00: 46:50:02:f4:d6:73:8c:dc:5e:ff:f8:a5:f6:31:c4:7b:43:42: 79:9d:61:e8:82:e2:8d:55:fb:8c:1b:83:f4:31:e2:84:cd:45: 22:ca:04:5f:51:4f:21:88:25:0b:83:f0:18:dc:8a:35:78:72: c8:bf:03:a0:07:49:93:fc:2f:de:ac:8a:d8:85:a8:3d:15:5f: ae:6f:58:e3:1d:02:a4:6d:6a:23:b3:7f:af:1f:d0:db:80:d9: 48:1a:82:a1:66:c0:f4:72:84:91:a7:af:bd:86:da:b0:8d:63: 8c:50:27:cc:9b:88:31:fe:d3:97:4f:d3:04:de:75:d7:83:e0: fc:39:59:da:85:bc:9c:d6:6c:da:ca:c5:3b:1c:a9:4c:a6:63: 77:f2:90:2d:66:7c:c7:80:dd:c1:53:7d:d4:e4:53:81:b8:99: ce:7b:91:9d -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUMmsJbiqQiIj0PdLCyOXkk8aB9zMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4REVCNzQ2NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYy RkE1RUQzMDAeFw0yNjA1MDMwMjQyNThaFw0yNzA1MDIwMjQ3NThaMDMxMTAvBgNV BAMTKDFCOEEwRDZGRkNDN0ZCNEE2NEVFNzZBRjFFQ0E2N0ExREY5QjM4OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+MUM3YUCp0aSv15e0w71OjGSM r39McNQHrmanXwJCqk922CzUGWxQ11/+IA/5uKid3hkvNHqCEZnaXltoAVFuTbEa +r/WPKlpv2OWVJwhsFrAew0v3GOXb8+UaO5Y11UkO4H5MY3iAb8yBsgTozPIpxlc 8oBZNkk/DQ0jMQxaB/0H/CB05G6OKNBL48MJhUi2/YLY53rKENRIeDBGEx6UkLbI rLWRta048vBcZURrFuVVRUyt/iRMYYTgcW2Sf1o1zCz/HeYqIxO5bYtktgirtAYm 89+RhHbJglrAJK3EJWGBUDCOLBgJZgHjyNGsb5isQUeQqFPxMxfrhQ4B1lF9AgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUG4oNb/zH+0pk7navHspnod+bOJIwHwYDVR0j BBgwFoAUQI3rdGWFbuBTtkNA+oFLhi+l7TAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVkOGRhYjQtOGJiNi00ZWQwLThkYWItNWE0MDYxNjdiOTlkLzAvNDA4REVCNzQ2 NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYyRkE1RUQzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDhERUI3NDY1ODU2RUUwNTNCNjQzNDBGQTgxNEI4NjJGQTVF RDMwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMyMzQzMDM0M2E2NTMxMzAzMDNhNjEzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzNTM1MzYzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAThAAAKMA0G CSqGSIb3DQEBCwUAA4IBAQBhTs4+4m4Xu8rW9jda7M6L01HCskMnnFEhApjmWgry 2OnFZlQqgW2hTNd84Zw0Tr27KxhsDZOOEpOuo0hJpN+rnxLiUCsW2Pja5aRYQRv6 +0GVxKP1Em7qmwBGUAL01nOM3F7/+KX2McR7Q0J5nWHoguKNVfuMG4P0MeKEzUUi ygRfUU8hiCULg/AY3Io1eHLIvwOgB0mT/C/erIrYhag9FV+ub1jjHQKkbWojs3+v H9DbgNlIGoKhZsD0coSRp6+9htqwjWOMUCfMm4gx/tOXT9ME3nXXg+D8OVnahbyc 1mzaysU7HKlMpmN38pAtZnzHgN3BU33U5FOBuJnOe5Gd -----END CERTIFICATE-----Generated at Wed May 13 02:25:51 2026 by rpki-client