$ rpki-client -vvf rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a623030303a3a2f33362d3336203d3e203633383632.roa File: 323430313a663938303a623030303a3a2f33362d3336203d3e203633383632.roa (raw, json) Hash identifier: bPcyFOp3Vx7C20HhMoZKMLWt5nkpzrt8bNAH4/4hnmA= Subject key identifier: 90:D0:26:C3:2C:11:C4:98:25:3E:D8:F8:E1:C6:EE:4D:47:9B:0F:81 Certificate issuer: /CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E Certificate serial: 41698A10FD37552C0070C8C26BA61A6CEC0848B4 Authority key identifier: F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a623030303a3a2f33362d3336203d3e203633383632.roa Signing time: Sun 03 May 2026 02:48:40 +0000 ROA not before: Sun 03 May 2026 02:43:40 +0000 ROA not after: Sun 02 May 2027 02:48:40 +0000 asID: 63862 IP address blocks: 2401:f980:b000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:04:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:69:8a:10:fd:37:55:2c:00:70:c8:c2:6b:a6:1a:6c:ec:08:48:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E Validity Not Before: May 3 02:43:40 2026 GMT Not After : May 2 02:48:40 2027 GMT Subject: CN=90D026C32C11C498253ED8F8E1C6EE4D479B0F81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7d:58:1b:19:9a:16:5d:85:5d:e9:e4:01:bc: 76:e9:cb:29:ea:ea:d1:76:3a:d0:cd:34:fb:19:9f: 69:2c:8a:b1:ff:bb:06:58:7b:9b:75:dd:a5:a1:7a: 3b:76:c1:f8:6b:cf:b7:25:b9:72:2f:3d:d8:d9:2e: d3:8d:c9:4f:c1:49:94:4d:3c:27:7d:38:d6:c2:e9: 5b:20:4c:43:9c:78:63:90:52:44:f5:ee:46:eb:e6: be:60:cb:9b:48:3a:d2:19:8d:a4:06:df:52:c2:83: 03:81:4e:ef:1d:cc:19:28:74:27:2c:c3:b3:b5:b7: 03:69:cf:2c:96:71:f5:93:ed:e6:05:ca:d7:05:be: 94:2c:9a:13:aa:76:dd:28:e5:bb:f0:09:cf:48:eb: eb:c7:d0:31:f7:ff:9b:2e:11:8f:bc:54:82:57:bc: c8:69:4c:23:3b:3d:9e:85:83:3d:34:06:65:17:29: db:aa:19:3e:cb:65:c4:84:90:05:4c:6f:50:f3:69: 95:bb:9e:ba:e9:9d:b2:8c:c3:f6:78:ca:89:11:57: 55:31:e8:07:56:d0:3d:a9:6b:9e:ec:e6:7d:fc:2f: a3:85:aa:c0:b5:8e:a1:64:56:a8:d3:7b:f8:26:85: 07:69:d0:c7:4f:b0:c5:36:6e:03:5e:0c:ea:74:52: d5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D0:26:C3:2C:11:C4:98:25:3E:D8:F8:E1:C6:EE:4D:47:9B:0F:81 X509v3 Authority Key Identifier: keyid:F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a623030303a3a2f33362d3336203d3e203633383632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:f980:b000::/36 Signature Algorithm: sha256WithRSAEncryption 5d:42:7a:2a:85:c6:5f:f0:d5:8c:64:2c:b4:07:2b:e9:75:7a: f5:b4:8d:84:df:91:d7:6d:eb:a3:22:c5:82:f6:0e:cc:f6:e7: a3:d8:d7:f0:09:1f:16:8a:53:a4:9e:36:28:e0:18:fb:c9:43: b0:d7:47:fb:5a:5e:fd:cb:a0:08:c6:29:07:49:0a:43:93:41: a7:e6:ca:45:26:5b:18:77:7e:16:d7:9f:61:08:4f:50:a7:f1: e9:f7:25:04:ea:03:91:08:a5:0c:cb:f6:c7:bf:c5:18:58:73: e6:c3:d6:a1:02:3f:37:b6:44:c3:10:ef:94:c6:62:1a:3b:07: 4d:57:c1:e6:41:77:4b:13:c5:36:ef:2b:04:7b:b0:f8:69:d9: 54:de:38:93:02:94:45:bb:00:e6:97:79:35:80:03:61:ef:b8: 1c:6d:89:8c:09:ff:56:88:29:af:f1:0e:a6:16:fd:b1:8b:b6: de:1e:58:55:50:01:e7:b2:3a:54:3e:cf:8d:04:2c:43:d5:78: 6c:ee:dd:aa:eb:8a:22:17:6f:40:6e:b1:99:b9:fe:20:04:0b: 47:f3:c4:81:53:25:a9:b0:97:0a:cc:f9:6b:a8:8a:b6:26:cc: e3:32:73:45:6b:e3:44:5f:cd:e9:c1:26:ec:56:d7:cd:53:a6: 17:7c:54:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQWmKEP03VSwAcMjCa6YabOwISLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJGNkIwNUE1RDlENTZDNDdEMTUwMzkxMUIyQ0MwRjA0 QUJGQTU1RTAeFw0yNjA1MDMwMjQzNDBaFw0yNzA1MDIwMjQ4NDBaMDMxMTAvBgNV BAMTKDkwRDAyNkMzMkMxMUM0OTgyNTNFRDhGOEUxQzZFRTRENDc5QjBGODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjfVgbGZoWXYVd6eQBvHbpyynq 6tF2OtDNNPsZn2ksirH/uwZYe5t13aWhejt2wfhrz7cluXIvPdjZLtONyU/BSZRN PCd9ONbC6VsgTEOceGOQUkT17kbr5r5gy5tIOtIZjaQG31LCgwOBTu8dzBkodCcs w7O1twNpzyyWcfWT7eYFytcFvpQsmhOqdt0o5bvwCc9I6+vH0DH3/5suEY+8VIJX vMhpTCM7PZ6Fgz00BmUXKduqGT7LZcSEkAVMb1DzaZW7nrrpnbKMw/Z4yokRV1Ux 6AdW0D2pa57s5n38L6OFqsC1jqFkVqjTe/gmhQdp0MdPsMU2bgNeDOp0UtXtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkNAmwywRxJglPtj44cbuTUebD4EwHwYDVR0j BBgwFoAU8vawWl2dVsR9FQORGyzA8Eq/pV4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODdlODMwYzgtZDU1OS00NTZhLTg4MzUtNGY2ZWI1NTI3YWEyLzAvRjJGNkIwNUE1 RDlENTZDNDdEMTUwMzkxMUIyQ0MwRjA0QUJGQTU1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMkY2QjA1QTVEOUQ1NkM0N0QxNTAzOTExQjJDQzBGMDRBQkZB NTVFLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg3ZTgzMGM4LWQ1NTktNDU2YS04 ODM1LTRmNmViNTUyN2FhMi8wLzMyMzQzMDMxM2E2NjM5MzgzMDNhNjIzMDMwMzAz YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzNjMzMzgzNjMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJAH5 gLAwDQYJKoZIhvcNAQELBQADggEBAF1CeiqFxl/w1YxkLLQHK+l1evW0jYTfkddt 66MixYL2Dsz256PY1/AJHxaKU6SeNijgGPvJQ7DXR/taXv3LoAjGKQdJCkOTQafm ykUmWxh3fhbXn2EIT1Cn8en3JQTqA5EIpQzL9se/xRhYc+bD1qECPze2RMMQ75TG Yho7B01XweZBd0sTxTbvKwR7sPhp2VTeOJMClEW7AOaXeTWAA2HvuBxtiYwJ/1aI Ka/xDqYW/bGLtt4eWFVQAeeyOlQ+z40ELEPVeGzu3arriiIXb0BusZm5/iAEC0fz xIFTJamwlwrM+WuoirYmzOMyc0Vr40RfzenBJuxW181Tphd8VNg= -----END CERTIFICATE-----Generated at Wed May 13 10:16:40 2026 by rpki-client