$ rpki-client -vvf rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a323a3a2f34382d3438203d3e20313336303739.roa File: 323430353a326363303a323a3a2f34382d3438203d3e20313336303739.roa (raw, json) Hash identifier: 26y4hHF9zZmxX4K/PcdEAhquIrXoPxj2VsyMOJ25s0o= Subject key identifier: 1C:EC:46:9B:D9:76:52:84:5F:1A:02:6A:AF:93:43:7F:D8:4E:7E:F5 Certificate issuer: /CN=152D7DF6753FDF6809AF8EEC4158A0787450959B Certificate serial: 3D43D34577D552B7BF5440E0723CA9296098D16A Authority key identifier: 15:2D:7D:F6:75:3F:DF:68:09:AF:8E:EC:41:58:A0:78:74:50:95:9B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a323a3a2f34382d3438203d3e20313336303739.roa Signing time: Sun 03 May 2026 02:51:08 +0000 ROA not before: Sun 03 May 2026 02:46:08 +0000 ROA not after: Sun 02 May 2027 02:51:08 +0000 asID: 136079 IP address blocks: 2405:2cc0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.crl rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:43:d3:45:77:d5:52:b7:bf:54:40:e0:72:3c:a9:29:60:98:d1:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=152D7DF6753FDF6809AF8EEC4158A0787450959B Validity Not Before: May 3 02:46:08 2026 GMT Not After : May 2 02:51:08 2027 GMT Subject: CN=1CEC469BD97652845F1A026AAF93437FD84E7EF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c8:82:47:2a:ac:52:17:26:be:dd:54:70:65: ed:36:72:4d:1d:28:03:58:e6:90:4d:fc:11:41:cc: 5e:01:44:b3:fc:84:a9:97:19:20:2c:92:e9:e5:94: 54:c1:e6:4f:2a:b0:09:6e:38:bd:9d:a0:12:dd:0a: df:7e:2e:fe:5a:9b:85:e2:90:5f:fd:36:c2:df:bb: bd:b0:a7:dc:4e:c6:4d:36:42:9d:31:0a:2a:9c:f2: 35:9f:0f:a3:11:5a:81:10:ee:c1:6b:2e:bf:71:77: ba:71:c0:e9:ad:10:aa:b1:92:ba:95:36:3e:f2:8b: b9:17:dc:2a:81:32:fc:06:b6:ac:dd:5d:5e:31:eb: 75:ea:ab:88:02:b0:fc:79:fb:d9:1b:b0:84:84:2c: 2a:20:8a:d0:27:ad:c9:90:bd:54:2e:52:b0:19:f3: 48:ac:c4:82:e8:9a:c3:c1:d4:82:08:c9:95:5f:94: 87:b2:8b:28:0a:ce:56:27:f4:55:2a:11:f3:61:ad: 93:66:ea:a7:35:d6:e9:12:a3:8e:ce:bf:dd:c5:57: fe:68:5b:6c:0c:64:68:f3:fb:2f:7b:fd:4b:29:5c: 60:a1:5d:23:80:0e:7e:0f:89:b4:eb:f1:92:d3:0d: dd:f7:20:f5:a1:46:3b:c2:cb:3f:61:c2:3a:72:d2: a0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EC:46:9B:D9:76:52:84:5F:1A:02:6A:AF:93:43:7F:D8:4E:7E:F5 X509v3 Authority Key Identifier: keyid:15:2D:7D:F6:75:3F:DF:68:09:AF:8E:EC:41:58:A0:78:74:50:95:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a323a3a2f34382d3438203d3e20313336303739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:2cc0:2::/48 Signature Algorithm: sha256WithRSAEncryption 92:41:38:65:75:00:5f:37:8b:da:a8:56:2b:77:f0:a5:48:7a: b1:a0:7c:78:b9:77:0c:bf:f3:eb:8a:ba:65:a9:d1:db:a6:c3: 3c:6b:71:65:22:07:b5:db:b7:1c:c8:c6:b2:68:21:b9:40:25: f2:c9:46:62:3c:a6:48:fa:2c:59:b8:8c:6f:bb:40:cf:b2:57: 10:9c:a4:58:50:46:be:bf:a0:e2:7f:8c:22:07:bc:be:1b:cd: 74:cf:97:fc:53:6d:86:45:d4:cd:c5:af:bc:83:9b:20:b8:a0: 3f:48:1b:0a:88:8d:9f:f0:c8:d2:b0:46:52:e8:23:58:38:31: 8a:d4:ef:18:65:90:3b:d8:9a:b0:ea:a5:c5:17:50:22:ed:aa: 4b:b6:58:f9:fd:3a:a9:b7:e4:c5:4d:ac:e4:81:0c:63:22:e9: 70:9e:2e:c6:15:5b:36:ea:fa:09:b6:06:80:70:cb:ef:82:64: 24:76:28:4a:40:45:76:ac:d6:ff:a3:8e:34:d1:52:04:ea:47: a7:9a:59:95:be:ef:57:c7:5a:fb:df:29:e7:a1:1d:cd:65:0b: 1e:e6:52:a7:22:da:70:aa:80:b8:db:b7:2e:36:35:41:ef:e2: 78:d1:03:e5:70:a2:e3:34:05:d8:8d:a1:0f:08:69:51:f4:89: 28:c3:24:05 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUPUPTRXfVUre/VEDgcjypKWCY0WowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTUyRDdERjY3NTNGREY2ODA5QUY4RUVDNDE1OEEwNzg3 NDUwOTU5QjAeFw0yNjA1MDMwMjQ2MDhaFw0yNzA1MDIwMjUxMDhaMDMxMTAvBgNV BAMTKDFDRUM0NjlCRDk3NjUyODQ1RjFBMDI2QUFGOTM0MzdGRDg0RTdFRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVyIJHKqxSFya+3VRwZe02ck0d KANY5pBN/BFBzF4BRLP8hKmXGSAskunllFTB5k8qsAluOL2doBLdCt9+Lv5am4Xi kF/9NsLfu72wp9xOxk02Qp0xCiqc8jWfD6MRWoEQ7sFrLr9xd7pxwOmtEKqxkrqV Nj7yi7kX3CqBMvwGtqzdXV4x63Xqq4gCsPx5+9kbsISELCogitAnrcmQvVQuUrAZ 80isxILomsPB1IIIyZVflIeyiygKzlYn9FUqEfNhrZNm6qc11ukSo47Ov93FV/5o W2wMZGjz+y97/UspXGChXSOADn4PibTr8ZLTDd33IPWhRjvCyz9hwjpy0qATAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUHOxGm9l2UoRfGgJqr5NDf9hOfvUwHwYDVR0j BBgwFoAUFS199nU/32gJr47sQVigeHRQlZswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGU2OTNiODktNDU5Ny00MGI1LTkyYjAtYjI5OWZhNzY5YWZhLzAvMTUyRDdERjY3 NTNGREY2ODA5QUY4RUVDNDE1OEEwNzg3NDUwOTU5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTJEN0RGNjc1M0ZERjY4MDlBRjhFRUM0MTU4QTA3ODc0NTA5 NTlCLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhlNjkzYjg5LTQ1OTctNDBiNS05 MmIwLWIyOTlmYTc2OWFmYS8wLzMyMzQzMDM1M2EzMjYzNjMzMDNhMzIzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzYzMDM3Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBSzAAAIw DQYJKoZIhvcNAQELBQADggEBAJJBOGV1AF83i9qoVit38KVIerGgfHi5dwy/8+uK umWp0dumwzxrcWUiB7XbtxzIxrJoIblAJfLJRmI8pkj6LFm4jG+7QM+yVxCcpFhQ Rr6/oOJ/jCIHvL4bzXTPl/xTbYZF1M3Fr7yDmyC4oD9IGwqIjZ/wyNKwRlLoI1g4 MYrU7xhlkDvYmrDqpcUXUCLtqku2WPn9Oqm35MVNrOSBDGMi6XCeLsYVWzbq+gm2 BoBwy++CZCR2KEpARXas1v+jjjTRUgTqR6eaWZW+71fHWvvfKeehHc1lCx7mUqci 2nCqgLjbty42NUHv4njRA+VwouM0BdiNoQ8IaVH0iSjDJAU= -----END CERTIFICATE-----Generated at Wed May 13 14:13:27 2026 by rpki-client