$ rpki-client -vvf rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a313a3a2f34382d3438203d3e20313336303739.roa File: 323430353a326363303a313a3a2f34382d3438203d3e20313336303739.roa (raw, json) Hash identifier: yWU5OjBVyfKjAUFIWMMkTc3ROsJefZZW78RQYHjdY3g= Subject key identifier: EE:5E:06:5B:70:C1:D1:EA:2A:D1:37:6A:C5:DF:D6:6E:FA:1E:FC:46 Certificate issuer: /CN=152D7DF6753FDF6809AF8EEC4158A0787450959B Certificate serial: 20B44A05C94590AFA53F431E4D3B1131A3A444B4 Authority key identifier: 15:2D:7D:F6:75:3F:DF:68:09:AF:8E:EC:41:58:A0:78:74:50:95:9B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a313a3a2f34382d3438203d3e20313336303739.roa Signing time: Sun 03 May 2026 02:51:07 +0000 ROA not before: Sun 03 May 2026 02:46:07 +0000 ROA not after: Sun 02 May 2027 02:51:07 +0000 asID: 136079 IP address blocks: 2405:2cc0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.crl rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:b4:4a:05:c9:45:90:af:a5:3f:43:1e:4d:3b:11:31:a3:a4:44:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=152D7DF6753FDF6809AF8EEC4158A0787450959B Validity Not Before: May 3 02:46:07 2026 GMT Not After : May 2 02:51:07 2027 GMT Subject: CN=EE5E065B70C1D1EA2AD1376AC5DFD66EFA1EFC46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e2:b0:08:b0:af:98:66:26:b3:38:e6:10:5e: d7:b9:7e:09:6f:ac:15:f3:c9:36:c6:19:ba:df:1f: a9:a3:2b:3a:46:cc:b0:4c:ed:e6:56:41:c0:de:b4: d6:1e:2b:cc:88:e7:2a:b6:29:2e:0a:15:34:c3:21: c1:60:8b:9e:41:c3:50:87:f2:9e:4e:7b:a0:f2:2a: af:e3:62:c7:2e:c9:02:54:65:46:ce:f0:1f:8d:59: 13:04:45:09:84:f3:01:29:31:64:9c:eb:c5:e8:09: 47:1e:ad:4f:56:17:af:a9:36:d8:bb:64:52:b3:1d: 47:3c:02:37:27:f1:76:c1:01:89:1d:10:7f:cd:67: f7:09:af:c5:1d:7b:ec:fb:ca:00:cc:c0:68:84:1f: fe:e6:bf:d6:c5:1f:a3:20:41:88:e6:35:86:cc:49: c6:d7:b4:92:b7:25:fc:01:1d:51:c1:ff:ae:e1:2a: 38:96:6c:48:8d:a0:cd:9c:ab:ed:54:91:ad:1a:09: ac:41:71:e6:2f:4c:a8:9f:97:d6:78:c1:87:26:45: d2:0d:1d:42:76:1c:2a:03:ef:10:35:42:9b:b0:2b: ec:f3:ff:9c:68:4f:32:3c:55:ae:09:54:e0:db:7c: 6a:f2:c8:3e:36:ad:ed:4d:4f:e2:38:cf:23:18:22: 93:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:5E:06:5B:70:C1:D1:EA:2A:D1:37:6A:C5:DF:D6:6E:FA:1E:FC:46 X509v3 Authority Key Identifier: keyid:15:2D:7D:F6:75:3F:DF:68:09:AF:8E:EC:41:58:A0:78:74:50:95:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a313a3a2f34382d3438203d3e20313336303739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:2cc0:1::/48 Signature Algorithm: sha256WithRSAEncryption 17:b1:b4:27:df:a4:8f:a8:84:55:45:86:cc:98:bf:ed:0d:b7: 50:6d:dc:09:a7:60:af:f7:4a:bc:e1:e8:b9:de:e3:fb:c2:68: 93:67:80:c9:f0:8e:0b:6e:f3:88:b9:3b:ad:9e:bd:40:bd:8d: 5b:d6:8d:ef:b4:34:c3:43:21:f7:17:24:41:c2:1d:32:b3:ea: 98:a4:f7:6e:33:6f:51:1c:32:25:c6:d3:a1:66:45:27:e1:89: e2:56:c9:d0:79:65:0f:03:63:c1:39:75:61:16:9d:9a:63:2b: 8d:07:bd:36:ec:03:23:3c:2d:c8:a8:ae:f0:6c:a4:12:a0:e5: 7d:d3:4b:6c:96:5e:ec:62:f5:e2:ea:2f:5d:61:77:c0:d2:d1: 6c:31:f1:9b:0a:aa:4a:ee:8e:5b:41:cf:fe:eb:d1:07:dc:9b: 76:a5:32:2e:b3:c2:b6:6b:15:b9:2b:f5:e7:39:e5:ee:a4:70: 76:90:e1:e4:b0:41:33:3f:5b:5b:67:5d:e9:a3:3a:7e:c2:a2: dc:af:c8:52:09:62:49:b3:dd:20:42:bb:92:a0:42:b0:19:b8: af:42:fa:e7:9d:38:22:b8:c9:c3:16:ab:c2:cb:52:e7:35:84: fa:48:cb:d4:9c:41:10:f8:d4:c1:7f:82:b8:57:e4:50:5d:7c: ba:0e:e5:c0 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUILRKBclFkK+lP0MeTTsRMaOkRLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTUyRDdERjY3NTNGREY2ODA5QUY4RUVDNDE1OEEwNzg3 NDUwOTU5QjAeFw0yNjA1MDMwMjQ2MDdaFw0yNzA1MDIwMjUxMDdaMDMxMTAvBgNV BAMTKEVFNUUwNjVCNzBDMUQxRUEyQUQxMzc2QUM1REZENjZFRkExRUZDNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh4rAIsK+YZiazOOYQXte5fglv rBXzyTbGGbrfH6mjKzpGzLBM7eZWQcDetNYeK8yI5yq2KS4KFTTDIcFgi55Bw1CH 8p5Oe6DyKq/jYscuyQJUZUbO8B+NWRMERQmE8wEpMWSc68XoCUcerU9WF6+pNti7 ZFKzHUc8Ajcn8XbBAYkdEH/NZ/cJr8Ude+z7ygDMwGiEH/7mv9bFH6MgQYjmNYbM ScbXtJK3JfwBHVHB/67hKjiWbEiNoM2cq+1Uka0aCaxBceYvTKifl9Z4wYcmRdIN HUJ2HCoD7xA1QpuwK+zz/5xoTzI8Va4JVODbfGryyD42re1NT+I4zyMYIpNVAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU7l4GW3DB0eoq0Tdqxd/Wbvoe/EYwHwYDVR0j BBgwFoAUFS199nU/32gJr47sQVigeHRQlZswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGU2OTNiODktNDU5Ny00MGI1LTkyYjAtYjI5OWZhNzY5YWZhLzAvMTUyRDdERjY3 NTNGREY2ODA5QUY4RUVDNDE1OEEwNzg3NDUwOTU5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTJEN0RGNjc1M0ZERjY4MDlBRjhFRUM0MTU4QTA3ODc0NTA5 NTlCLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhlNjkzYjg5LTQ1OTctNDBiNS05 MmIwLWIyOTlmYTc2OWFmYS8wLzMyMzQzMDM1M2EzMjYzNjMzMDNhMzEzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzYzMDM3Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBSzAAAEw DQYJKoZIhvcNAQELBQADggEBABextCffpI+ohFVFhsyYv+0Nt1Bt3AmnYK/3Srzh 6Lne4/vCaJNngMnwjgtu84i5O62evUC9jVvWje+0NMNDIfcXJEHCHTKz6pik924z b1EcMiXG06FmRSfhieJWydB5ZQ8DY8E5dWEWnZpjK40HvTbsAyM8LciorvBspBKg 5X3TS2yWXuxi9eLqL11hd8DS0Wwx8ZsKqkrujltBz/7r0Qfcm3alMi6zwrZrFbkr 9ec55e6kcHaQ4eSwQTM/W1tnXemjOn7CotyvyFIJYkmz3SBCu5KgQrAZuK9C+ued OCK4ycMWq8LLUuc1hPpIy9ScQRD41MF/grhX5FBdfLoO5cA= -----END CERTIFICATE-----Generated at Wed May 13 12:46:15 2026 by rpki-client