$ rpki-client -vvf rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a383a3a2f34382d3438203d3e20313336303739.roa File: 323430353a326363303a383a3a2f34382d3438203d3e20313336303739.roa (raw, json) Hash identifier: It2GvpWPSLsFl7rz2mRZU7LXm27AzqHqdj3cFIXNFIk= Subject key identifier: 6F:B0:72:DD:05:57:B1:EB:84:54:D4:3C:4E:3A:E1:05:E5:33:11:0E Certificate issuer: /CN=152D7DF6753FDF6809AF8EEC4158A0787450959B Certificate serial: 43CAE2DCE2CB472BF55D57F96EA1C3161F16FB36 Authority key identifier: 15:2D:7D:F6:75:3F:DF:68:09:AF:8E:EC:41:58:A0:78:74:50:95:9B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a383a3a2f34382d3438203d3e20313336303739.roa Signing time: Sun 03 May 2026 02:51:13 +0000 ROA not before: Sun 03 May 2026 02:46:13 +0000 ROA not after: Sun 02 May 2027 02:51:13 +0000 asID: 136079 IP address blocks: 2405:2cc0:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.crl rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ca:e2:dc:e2:cb:47:2b:f5:5d:57:f9:6e:a1:c3:16:1f:16:fb:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=152D7DF6753FDF6809AF8EEC4158A0787450959B Validity Not Before: May 3 02:46:13 2026 GMT Not After : May 2 02:51:13 2027 GMT Subject: CN=6FB072DD0557B1EB8454D43C4E3AE105E533110E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5a:c8:44:70:d5:c6:10:19:81:b1:c5:77:a5: da:cc:3c:c3:a5:26:33:36:d8:14:c6:ea:d0:d9:84: c1:9e:ac:7b:16:e5:17:2e:ca:6c:fa:ad:80:7c:78: 22:fe:6e:d4:9f:2d:d3:09:ed:b0:5c:7f:1f:ff:cf: 1b:1e:3c:07:9e:1a:70:a7:c6:56:ce:0b:41:b0:ac: 4d:65:6b:af:31:90:88:1d:b5:b6:ac:a4:73:f8:db: aa:82:44:61:30:e4:75:e6:c1:6f:74:d8:80:4d:a0: 89:cf:85:d2:a6:21:3f:05:b8:59:cd:82:da:2c:25: 40:89:b6:83:59:b9:0f:8c:8c:25:93:e0:91:88:81: 0b:c0:e2:4c:77:db:1a:3e:9f:4e:3f:b0:5b:c1:54: fd:1a:b3:d9:70:88:e2:d7:50:34:0a:5b:d6:19:32: ce:b5:b7:10:3c:17:93:b3:32:3a:96:7a:9b:96:5f: d8:ed:5d:51:b3:d6:81:fe:2e:b3:77:c1:50:f3:27: a8:e6:2c:0b:d0:90:38:37:37:e1:84:68:b2:fd:a8: 43:92:3a:ba:5a:79:31:29:e3:6b:d7:89:de:45:6b: 38:0a:5d:a9:14:01:1b:38:a0:84:29:52:63:7e:17: d9:b2:50:cf:cf:c2:b9:a2:f5:8d:36:dc:1f:c2:eb: f5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B0:72:DD:05:57:B1:EB:84:54:D4:3C:4E:3A:E1:05:E5:33:11:0E X509v3 Authority Key Identifier: keyid:15:2D:7D:F6:75:3F:DF:68:09:AF:8E:EC:41:58:A0:78:74:50:95:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a383a3a2f34382d3438203d3e20313336303739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:2cc0:8::/48 Signature Algorithm: sha256WithRSAEncryption 3e:f4:58:75:ee:5e:36:2f:30:79:2d:4f:da:9a:07:05:e4:b7: c4:89:cd:e1:88:00:a3:94:b4:65:25:53:d9:11:85:83:13:b0: c3:71:49:65:11:3a:b4:5b:12:0b:a8:e9:74:b9:2f:25:35:35: 32:7b:99:d4:4d:f1:64:32:42:3d:43:ef:06:7c:40:14:62:33: fb:ad:19:5c:78:8a:13:1b:f6:6c:dd:f9:7a:74:bc:3e:42:05: a9:9a:87:31:69:d4:ab:bf:a8:d4:da:a8:99:f9:6b:99:0c:da: a3:f5:0d:0f:23:ce:52:ec:d4:66:89:f9:01:ff:c1:83:1a:b5: a4:27:5f:33:69:42:24:b6:62:12:34:77:86:ee:d9:19:7e:45: 4e:07:27:c5:e5:8c:0e:37:a4:b0:da:19:5d:40:75:b5:f8:b6: c1:df:86:89:cf:5c:dd:70:f8:d8:7f:44:ad:9b:08:c6:c2:f5: a5:6c:30:cf:cd:0e:58:95:eb:0e:73:78:b9:1c:1f:f3:95:7f: 0b:4c:b7:14:5a:c0:1d:74:d5:44:f4:75:7f:6d:0f:bb:71:75: b5:53:04:3f:dd:7c:02:8b:15:39:c3:b6:0f:00:13:04:86:96: 69:36:2f:71:62:4d:52:c4:77:0c:f7:27:e5:49:c0:27:3a:8e: a7:2e:20:e7 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUQ8ri3OLLRyv1XVf5bqHDFh8W+zYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTUyRDdERjY3NTNGREY2ODA5QUY4RUVDNDE1OEEwNzg3 NDUwOTU5QjAeFw0yNjA1MDMwMjQ2MTNaFw0yNzA1MDIwMjUxMTNaMDMxMTAvBgNV BAMTKDZGQjA3MkREMDU1N0IxRUI4NDU0RDQzQzRFM0FFMTA1RTUzMzExMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPWshEcNXGEBmBscV3pdrMPMOl JjM22BTG6tDZhMGerHsW5Rcuymz6rYB8eCL+btSfLdMJ7bBcfx//zxsePAeeGnCn xlbOC0GwrE1la68xkIgdtbaspHP426qCRGEw5HXmwW902IBNoInPhdKmIT8FuFnN gtosJUCJtoNZuQ+MjCWT4JGIgQvA4kx32xo+n04/sFvBVP0as9lwiOLXUDQKW9YZ Ms61txA8F5OzMjqWepuWX9jtXVGz1oH+LrN3wVDzJ6jmLAvQkDg3N+GEaLL9qEOS OrpaeTEp42vXid5FazgKXakUARs4oIQpUmN+F9myUM/Pwrmi9Y023B/C6/WfAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUb7By3QVXseuEVNQ8TjrhBeUzEQ4wHwYDVR0j BBgwFoAUFS199nU/32gJr47sQVigeHRQlZswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGU2OTNiODktNDU5Ny00MGI1LTkyYjAtYjI5OWZhNzY5YWZhLzAvMTUyRDdERjY3 NTNGREY2ODA5QUY4RUVDNDE1OEEwNzg3NDUwOTU5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTJEN0RGNjc1M0ZERjY4MDlBRjhFRUM0MTU4QTA3ODc0NTA5 NTlCLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhlNjkzYjg5LTQ1OTctNDBiNS05 MmIwLWIyOTlmYTc2OWFmYS8wLzMyMzQzMDM1M2EzMjYzNjMzMDNhMzgzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzYzMDM3Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBSzAAAgw DQYJKoZIhvcNAQELBQADggEBAD70WHXuXjYvMHktT9qaBwXkt8SJzeGIAKOUtGUl U9kRhYMTsMNxSWUROrRbEguo6XS5LyU1NTJ7mdRN8WQyQj1D7wZ8QBRiM/utGVx4 ihMb9mzd+Xp0vD5CBamahzFp1Ku/qNTaqJn5a5kM2qP1DQ8jzlLs1GaJ+QH/wYMa taQnXzNpQiS2YhI0d4bu2Rl+RU4HJ8XljA43pLDaGV1AdbX4tsHfhonPXN1w+Nh/ RK2bCMbC9aVsMM/NDliV6w5zeLkcH/OVfwtMtxRawB101UT0dX9tD7txdbVTBD/d fAKLFTnDtg8AEwSGlmk2L3FiTVLEdwz3J+VJwCc6jqcuIOc= -----END CERTIFICATE-----Generated at Wed May 13 16:14:46 2026 by rpki-client