$ rpki-client -vvf rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/323430363a626534303a623135613a3a2f34382d3438203d3e20313338383138.roa File: 323430363a626534303a623135613a3a2f34382d3438203d3e20313338383138.roa (raw, json) Hash identifier: BTtVqrQ3GrSqxbnSLNvAGyR9geHV66mQRLtc+yOJ48k= Subject key identifier: EB:7F:7B:35:B8:F7:D0:5C:76:83:EB:45:09:BA:A2:AA:2A:3C:60:AD Certificate issuer: /CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5 Certificate serial: 04CF26161EE63E853B6202AFF63CD493BAD77470 Authority key identifier: 38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/323430363a626534303a623135613a3a2f34382d3438203d3e20313338383138.roa Signing time: Sun 03 May 2026 02:51:44 +0000 ROA not before: Sun 03 May 2026 02:46:44 +0000 ROA not after: Sun 02 May 2027 02:51:44 +0000 asID: 138818 IP address blocks: 2406:be40:b15a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:cf:26:16:1e:e6:3e:85:3b:62:02:af:f6:3c:d4:93:ba:d7:74:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5 Validity Not Before: May 3 02:46:44 2026 GMT Not After : May 2 02:51:44 2027 GMT Subject: CN=EB7F7B35B8F7D05C7683EB4509BAA2AA2A3C60AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f7:d5:53:a2:e6:fd:e3:86:71:d0:18:cc:82: 62:22:71:50:81:87:ac:45:f7:e9:93:36:0e:07:3f: 71:88:c2:67:5f:55:3d:f3:39:8f:0b:93:50:92:3a: 1e:4c:fe:71:b4:0d:de:fc:c2:87:47:fe:f2:c8:61: bc:08:5a:a2:c4:5f:27:73:2d:79:df:0d:63:35:6d: 2d:65:d3:28:43:64:82:e0:63:75:10:dd:5c:d4:3b: d2:5c:c7:ba:e4:e4:5c:81:6c:7f:c2:53:c7:78:c4: 88:6a:d4:f7:c8:61:88:df:d7:26:69:eb:21:98:6d: 91:22:72:cd:12:c1:9c:60:c2:14:a2:59:ca:35:14: 79:11:13:93:10:6c:8f:ab:ec:a3:db:af:53:0a:84: b8:8c:73:88:27:49:92:45:5b:d9:34:cd:56:91:9c: b0:d9:df:14:ca:ea:d7:a8:0f:6b:ef:ef:8a:43:71: ec:5e:6f:b4:b7:87:62:1b:f7:c2:c5:00:d2:c5:56: 13:9d:3e:7d:72:50:f4:b3:a2:34:c3:24:e9:7c:9a: f9:09:0f:97:21:fc:dd:cd:0f:bb:c8:4e:fa:b4:f2: d1:02:86:d8:12:62:45:2c:7a:4b:e7:6d:09:6a:9d: c5:0e:37:79:72:04:84:66:e0:b3:e6:dd:f6:f1:46: 50:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:7F:7B:35:B8:F7:D0:5C:76:83:EB:45:09:BA:A2:AA:2A:3C:60:AD X509v3 Authority Key Identifier: keyid:38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/323430363a626534303a623135613a3a2f34382d3438203d3e20313338383138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:be40:b15a::/48 Signature Algorithm: sha256WithRSAEncryption 0b:f6:e6:9a:5b:11:77:a5:e0:5c:e2:0e:10:05:81:04:f3:10: b0:d9:ce:ac:55:bd:10:d8:38:9c:15:1a:88:36:52:e8:af:b5: 97:84:c8:d1:2f:06:78:9e:aa:dc:0a:35:2c:8e:d4:b6:0e:89: d3:f5:84:2f:22:a9:01:82:6e:60:2a:ec:db:74:10:6a:34:cc: a8:7e:10:22:07:5d:80:b8:68:1e:24:46:87:d9:22:be:14:93: 40:fe:22:97:07:7e:24:0e:be:da:47:b0:5f:7b:00:13:5a:16: 71:6f:0d:5f:7e:87:d3:36:79:e0:44:9b:29:7c:23:f4:21:06: 47:5d:e4:e4:3b:91:17:47:51:6a:8c:98:4b:77:c5:68:36:56: d1:ca:e6:4b:18:97:db:0e:fe:bc:63:c5:c2:74:32:d3:d7:be: 23:b3:03:e7:09:6d:dd:37:73:2f:e6:84:2a:43:de:b3:18:85: a9:75:67:39:c4:d2:c7:74:2a:0b:dc:63:4b:3e:b6:79:1d:bb: d6:5a:8e:7b:81:23:68:99:df:dc:b6:2e:7b:35:53:28:85:bf: b3:21:63:13:a5:6c:9b:52:23:a0:30:6d:cd:67:a4:23:db:dc: 9b:2a:21:85:31:19:4d:e5:be:1a:4f:26:a8:19:89:9f:8a:3e: e6:c4:c9:c0 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUBM8mFh7mPoU7YgKv9jzUk7rXdHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzgwM0FGREE3QkNDRDdEQkU1Q0U5RTkwMUEyQjE3OEVG MzUxNTFFNTAeFw0yNjA1MDMwMjQ2NDRaFw0yNzA1MDIwMjUxNDRaMDMxMTAvBgNV BAMTKEVCN0Y3QjM1QjhGN0QwNUM3NjgzRUI0NTA5QkFBMkFBMkEzQzYwQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCG99VToub944Zx0BjMgmIicVCB h6xF9+mTNg4HP3GIwmdfVT3zOY8Lk1CSOh5M/nG0Dd78wodH/vLIYbwIWqLEXydz LXnfDWM1bS1l0yhDZILgY3UQ3VzUO9Jcx7rk5FyBbH/CU8d4xIhq1PfIYYjf1yZp 6yGYbZEics0SwZxgwhSiWco1FHkRE5MQbI+r7KPbr1MKhLiMc4gnSZJFW9k0zVaR nLDZ3xTK6teoD2vv74pDcexeb7S3h2Ib98LFANLFVhOdPn1yUPSzojTDJOl8mvkJ D5ch/N3ND7vITvq08tEChtgSYkUsekvnbQlqncUON3lyBIRm4LPm3fbxRlDNAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU6397Nbj30Fx2g+tFCbqiqio8YK0wHwYDVR0j BBgwFoAUOAOv2nvM19vlzp6QGisXjvNRUeUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTExNDE3YzAtMzdiYi00NDZkLTg3ZjItZDgxODQxNzhjMTQ5LzAvMzgwM0FGREE3 QkNDRDdEQkU1Q0U5RTkwMUEyQjE3OEVGMzUxNTFFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zODAzQUZEQTdCQ0NEN0RCRTVDRTlFOTAxQTJCMTc4RUYzNTE1 MUU1LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkxMTQxN2MwLTM3YmItNDQ2ZC04 N2YyLWQ4MTg0MTc4YzE0OS8wLzMyMzQzMDM2M2E2MjY1MzQzMDNhNjIzMTM1NjEz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzgzODMxMzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk Br5AsVowDQYJKoZIhvcNAQELBQADggEBAAv25ppbEXel4FziDhAFgQTzELDZzqxV vRDYOJwVGog2UuivtZeEyNEvBnieqtwKNSyO1LYOidP1hC8iqQGCbmAq7Nt0EGo0 zKh+ECIHXYC4aB4kRofZIr4Uk0D+IpcHfiQOvtpHsF97ABNaFnFvDV9+h9M2eeBE myl8I/QhBkdd5OQ7kRdHUWqMmEt3xWg2VtHK5ksYl9sO/rxjxcJ0MtPXviOzA+cJ bd03cy/mhCpD3rMYhal1ZznE0sd0KgvcY0s+tnkdu9ZajnuBI2iZ39y2Lns1UyiF v7MhYxOlbJtSI6Awbc1npCPb3JsqIYUxGU3lvhpPJqgZiZ+KPubEycA= -----END CERTIFICATE-----Generated at Wed May 13 14:57:15 2026 by rpki-client