$ rpki-client -vvf rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/323430363a626534303a666163653a3a2f34382d3438203d3e203233363739.roa File: 323430363a626534303a666163653a3a2f34382d3438203d3e203233363739.roa (raw, json) Hash identifier: PbuDJSAQXqe+YbQYZ8YEK8+HHcBku/MMl/4ow2T+fZM= Subject key identifier: 79:0C:03:DA:11:15:7F:48:C9:3E:8B:B1:CE:3C:D9:8E:E1:D6:3B:DD Certificate issuer: /CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5 Certificate serial: 100B2A93C4BAC530DB4BB8FB01879120BFB7CA17 Authority key identifier: 38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/323430363a626534303a666163653a3a2f34382d3438203d3e203233363739.roa Signing time: Sun 03 May 2026 02:51:45 +0000 ROA not before: Sun 03 May 2026 02:46:45 +0000 ROA not after: Sun 02 May 2027 02:51:45 +0000 asID: 23679 IP address blocks: 2406:be40:face::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:0b:2a:93:c4:ba:c5:30:db:4b:b8:fb:01:87:91:20:bf:b7:ca:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5 Validity Not Before: May 3 02:46:45 2026 GMT Not After : May 2 02:51:45 2027 GMT Subject: CN=790C03DA11157F48C93E8BB1CE3CD98EE1D63BDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b1:48:6d:f3:c8:09:31:ae:62:92:c4:29:8c: 52:7a:69:4c:3f:57:bc:92:42:4f:ff:d2:86:b9:23: 79:ca:bb:08:e7:4f:0a:8e:11:f1:78:1e:c9:38:61: b2:21:c0:c0:6b:16:62:6e:78:2a:96:f4:1a:3e:33: 24:48:bd:ea:e9:b2:0d:96:0e:68:95:10:21:7c:dc: a1:ef:e9:72:34:ad:9c:3d:72:b0:fc:29:f7:f6:4e: bb:e9:0d:b2:a8:b7:c9:4c:37:0f:72:b1:ba:7f:88: 7e:51:e7:3e:ab:e9:c7:0c:c6:8f:64:63:97:d6:32: 35:2e:8a:cf:9f:c0:b1:2f:dd:e8:94:9f:17:5c:63: cf:5a:94:84:46:6a:b6:b9:d9:63:96:92:9b:a6:4a: 3a:15:0d:28:81:b5:51:b1:1e:74:26:dd:04:3b:85: da:19:70:94:8c:52:7d:63:e4:37:c2:9f:1f:f6:f5: ce:27:a3:41:a0:6e:c9:d9:3d:4e:8a:97:b9:a2:98: e8:98:5e:d7:25:c2:fa:56:58:f4:40:7e:ea:a1:15: b0:60:a5:1b:1f:72:2f:cc:3c:b6:37:2a:a2:9e:03: c9:c8:10:68:48:49:97:76:19:d5:92:37:db:0b:d0: 31:b4:82:12:72:29:c7:04:d1:5a:22:fd:41:cb:f0: 05:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:0C:03:DA:11:15:7F:48:C9:3E:8B:B1:CE:3C:D9:8E:E1:D6:3B:DD X509v3 Authority Key Identifier: keyid:38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/323430363a626534303a666163653a3a2f34382d3438203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:be40:face::/48 Signature Algorithm: sha256WithRSAEncryption b7:f0:c4:a9:3e:08:54:56:6f:6d:a4:4c:60:8d:3f:c4:d0:62: 0c:7b:27:03:e4:8a:c8:11:e1:01:10:14:2f:f4:f3:b7:f4:ef: 85:dc:16:a6:f2:23:89:30:0e:96:8c:77:7c:bf:65:10:ed:b6: 20:e1:a6:69:bd:ee:db:ac:55:bd:c6:49:55:9a:a0:1a:4a:4d: ee:b5:f1:b1:3e:64:4b:3f:8a:e2:1c:01:13:cb:46:a2:1a:43: 2b:81:da:5e:1e:93:cd:5c:bd:dd:ae:9f:ab:88:dd:30:cb:70: ab:84:60:08:22:a0:93:41:4c:ee:0d:07:89:ac:77:39:1c:56: e3:7e:cc:9b:78:26:4b:c0:41:60:21:e4:36:e2:d9:ad:18:cc: a2:01:cc:61:98:85:cb:73:fa:c2:e0:22:3c:18:d9:35:76:58: cc:af:a1:eb:90:d6:f5:bc:a8:56:fd:7b:64:3e:93:23:3b:0c: 37:c0:83:82:55:a4:03:dd:21:5e:8a:8e:14:60:79:14:9c:f7: e8:29:91:7f:f4:65:5b:55:1a:ef:27:b9:62:e3:81:81:88:25: df:04:30:73:8f:75:98:37:c7:be:96:c3:ed:95:b8:71:bc:ef: 20:f1:6f:a9:ad:e9:8b:71:3b:69:c4:45:87:53:b5:f7:17:79: f3:62:6b:58 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUEAsqk8S6xTDbS7j7AYeRIL+3yhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzgwM0FGREE3QkNDRDdEQkU1Q0U5RTkwMUEyQjE3OEVG MzUxNTFFNTAeFw0yNjA1MDMwMjQ2NDVaFw0yNzA1MDIwMjUxNDVaMDMxMTAvBgNV BAMTKDc5MEMwM0RBMTExNTdGNDhDOTNFOEJCMUNFM0NEOThFRTFENjNCREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1sUht88gJMa5iksQpjFJ6aUw/ V7ySQk//0oa5I3nKuwjnTwqOEfF4Hsk4YbIhwMBrFmJueCqW9Bo+MyRIverpsg2W DmiVECF83KHv6XI0rZw9crD8Kff2TrvpDbKot8lMNw9ysbp/iH5R5z6r6ccMxo9k Y5fWMjUuis+fwLEv3eiUnxdcY89alIRGara52WOWkpumSjoVDSiBtVGxHnQm3QQ7 hdoZcJSMUn1j5DfCnx/29c4no0GgbsnZPU6Kl7mimOiYXtclwvpWWPRAfuqhFbBg pRsfci/MPLY3KqKeA8nIEGhISZd2GdWSN9sL0DG0ghJyKccE0Voi/UHL8AVRAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUeQwD2hEVf0jJPouxzjzZjuHWO90wHwYDVR0j BBgwFoAUOAOv2nvM19vlzp6QGisXjvNRUeUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTExNDE3YzAtMzdiYi00NDZkLTg3ZjItZDgxODQxNzhjMTQ5LzAvMzgwM0FGREE3 QkNDRDdEQkU1Q0U5RTkwMUEyQjE3OEVGMzUxNTFFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zODAzQUZEQTdCQ0NEN0RCRTVDRTlFOTAxQTJCMTc4RUYzNTE1 MUU1LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkxMTQxN2MwLTM3YmItNDQ2ZC04 N2YyLWQ4MTg0MTc4YzE0OS8wLzMyMzQzMDM2M2E2MjY1MzQzMDNhNjY2MTYzNjUz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMzMzYzNzM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAa+ QPrOMA0GCSqGSIb3DQEBCwUAA4IBAQC38MSpPghUVm9tpExgjT/E0GIMeycD5IrI EeEBEBQv9PO39O+F3Bam8iOJMA6WjHd8v2UQ7bYg4aZpve7brFW9xklVmqAaSk3u tfGxPmRLP4riHAETy0aiGkMrgdpeHpPNXL3drp+riN0wy3CrhGAIIqCTQUzuDQeJ rHc5HFbjfsybeCZLwEFgIeQ24tmtGMyiAcxhmIXLc/rC4CI8GNk1dljMr6HrkNb1 vKhW/XtkPpMjOww3wIOCVaQD3SFeio4UYHkUnPfoKZF/9GVbVRrvJ7li44GBiCXf BDBzj3WYN8e+lsPtlbhxvO8g8W+premLcTtpxEWHU7X3F3nzYmtY -----END CERTIFICATE-----Generated at Wed May 13 13:44:29 2026 by rpki-client