$ rpki-client -vvf rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/323430313a383434303a3133313a3a2f34382d3438203d3e20313336313331.roa File: 323430313a383434303a3133313a3a2f34382d3438203d3e20313336313331.roa (raw, json) Hash identifier: RCVkQO3x+P4RF48TeYaUmpS+R/Zp+Q7sEuYMIANrgmM= Subject key identifier: 34:D3:47:67:15:23:64:BE:2A:A5:30:C4:2D:53:28:47:60:07:94:E2 Certificate issuer: /CN=F07DE2A6041C4CCDF424D4FE299B586DABA22CAF Certificate serial: 240816F1A215D3F8D77BC33BD411F3BED9B2A9A7 Authority key identifier: F0:7D:E2:A6:04:1C:4C:CD:F4:24:D4:FE:29:9B:58:6D:AB:A2:2C:AF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/323430313a383434303a3133313a3a2f34382d3438203d3e20313336313331.roa Signing time: Sun 03 May 2026 02:52:55 +0000 ROA not before: Sun 03 May 2026 02:47:55 +0000 ROA not after: Sun 02 May 2027 02:52:55 +0000 asID: 136131 IP address blocks: 2401:8440:131::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.crl rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:08:16:f1:a2:15:d3:f8:d7:7b:c3:3b:d4:11:f3:be:d9:b2:a9:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F07DE2A6041C4CCDF424D4FE299B586DABA22CAF Validity Not Before: May 3 02:47:55 2026 GMT Not After : May 2 02:52:55 2027 GMT Subject: CN=34D34767152364BE2AA530C42D532847600794E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e1:c8:e3:0a:82:e3:f5:56:14:be:64:6a:5f: 12:08:0b:66:0e:8d:32:24:bd:1f:f1:17:20:57:45: b1:e8:c8:5a:9b:b0:4e:f4:1a:2a:57:f9:cb:ef:97: 28:a5:36:61:62:df:52:21:12:8a:c3:7a:bb:29:40: 37:36:9b:ce:9d:88:73:26:80:6e:9f:42:b7:d0:03: ca:2b:4c:4e:da:72:3d:97:2e:4e:fb:00:8e:63:6c: da:70:d6:7e:3a:42:7c:38:e9:11:70:a2:eb:16:12: 9c:0b:7e:ad:bb:17:3f:da:61:26:c6:c7:84:90:f0: 30:fe:36:42:5c:e4:13:9b:40:18:53:3e:4f:b8:4d: 2d:f8:93:bc:d2:48:89:1e:0b:8e:f5:98:00:7c:76: 48:8a:bf:c0:4a:41:41:75:37:58:ea:d7:6e:1c:ee: d0:d9:bd:fd:fd:92:29:70:06:db:8f:9e:88:02:2c: 49:13:38:ef:0f:29:1e:8f:f5:de:bb:b0:5a:1b:2d: 05:e2:15:5d:80:e0:6f:d4:7a:c1:e4:bb:93:60:3c: 1b:f3:47:a1:61:90:2b:19:df:3e:a8:30:60:9c:48: 6f:dd:db:7d:65:bf:8b:59:57:e6:cf:70:6f:41:7d: 94:92:cd:aa:84:87:83:af:be:ea:14:bb:bc:0d:ab: ed:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D3:47:67:15:23:64:BE:2A:A5:30:C4:2D:53:28:47:60:07:94:E2 X509v3 Authority Key Identifier: keyid:F0:7D:E2:A6:04:1C:4C:CD:F4:24:D4:FE:29:9B:58:6D:AB:A2:2C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/323430313a383434303a3133313a3a2f34382d3438203d3e20313336313331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:8440:131::/48 Signature Algorithm: sha256WithRSAEncryption 4c:fb:68:51:f7:88:85:ac:d5:47:1d:d0:2d:81:62:fb:03:6d: 88:7c:51:72:92:49:13:bf:4e:e3:a6:44:8b:61:10:11:db:07: 86:41:da:8e:60:f3:ee:4a:b0:60:f7:c2:76:a2:39:c3:66:06: 35:4b:f5:ef:6a:6e:12:5f:64:9d:81:f5:cd:52:5d:85:f8:50: a6:cd:a0:08:c5:4b:2e:7e:c2:d1:4c:66:78:2b:5a:55:fc:cb: a5:af:fc:65:ea:7f:29:2d:71:1f:c1:53:8c:54:54:cd:23:8e: 9b:40:7c:2a:99:bc:fa:aa:4d:99:dd:69:62:3b:19:36:38:3d: ba:84:b2:9c:b2:87:fc:aa:45:a9:95:4b:e0:76:69:c3:71:52: ff:cf:1c:54:45:15:79:48:cc:ac:95:87:96:8c:17:70:d0:74: 4c:21:ea:55:ea:0e:4f:30:26:0f:17:d8:25:3e:6e:10:e5:6b: 18:b7:53:39:8c:aa:80:31:36:f0:42:5f:0e:50:44:71:72:4d: 7f:6f:9c:7c:35:a0:be:8a:5d:7b:d2:52:b7:32:12:d7:64:69: e9:b1:6a:26:56:bb:7a:69:93:85:63:48:de:c1:70:d6:34:2e: bb:52:fd:3b:2b:e2:b5:79:41:d3:fe:6a:30:50:05:82:09:d3: cb:88:59:96 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUJAgW8aIV0/jXe8M71BHzvtmyqacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA3REUyQTYwNDFDNENDREY0MjRENEZFMjk5QjU4NkRB QkEyMkNBRjAeFw0yNjA1MDMwMjQ3NTVaFw0yNzA1MDIwMjUyNTVaMDMxMTAvBgNV BAMTKDM0RDM0NzY3MTUyMzY0QkUyQUE1MzBDNDJENTMyODQ3NjAwNzk0RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn4cjjCoLj9VYUvmRqXxIIC2YO jTIkvR/xFyBXRbHoyFqbsE70GipX+cvvlyilNmFi31IhEorDerspQDc2m86diHMm gG6fQrfQA8orTE7acj2XLk77AI5jbNpw1n46Qnw46RFwousWEpwLfq27Fz/aYSbG x4SQ8DD+NkJc5BObQBhTPk+4TS34k7zSSIkeC471mAB8dkiKv8BKQUF1N1jq124c 7tDZvf39kilwBtuPnogCLEkTOO8PKR6P9d67sFobLQXiFV2A4G/UesHku5NgPBvz R6FhkCsZ3z6oMGCcSG/d231lv4tZV+bPcG9BfZSSzaqEh4OvvuoUu7wNq+1LAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUNNNHZxUjZL4qpTDELVMoR2AHlOIwHwYDVR0j BBgwFoAU8H3ipgQcTM30JNT+KZtYbauiLK8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTU3YjBkN2UtZWFkZS00MzE4LWFiMjAtOGM3ZjJkNWJlNjlmLzAvRjA3REUyQTYw NDFDNENDREY0MjRENEZFMjk5QjU4NkRBQkEyMkNBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMDdERTJBNjA0MUM0Q0NERjQyNEQ0RkUyOTlCNTg2REFCQTIy Q0FGLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzk1N2IwZDdlLWVhZGUtNDMxOC1h YjIwLThjN2YyZDViZTY5Zi8wLzMyMzQzMDMxM2EzODM0MzQzMDNhMzEzMzMxM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzEzMzMxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAGE QAExMA0GCSqGSIb3DQEBCwUAA4IBAQBM+2hR94iFrNVHHdAtgWL7A22IfFFykkkT v07jpkSLYRAR2weGQdqOYPPuSrBg98J2ojnDZgY1S/Xvam4SX2SdgfXNUl2F+FCm zaAIxUsufsLRTGZ4K1pV/Mulr/xl6n8pLXEfwVOMVFTNI46bQHwqmbz6qk2Z3Wli Oxk2OD26hLKcsof8qkWplUvgdmnDcVL/zxxURRV5SMyslYeWjBdw0HRMIepV6g5P MCYPF9glPm4Q5WsYt1M5jKqAMTbwQl8OUERxck1/b5x8NaC+il170lK3MhLXZGnp sWomVrt6aZOFY0jewXDWNC67Uv07K+K1eUHT/mowUAWCCdPLiFmW -----END CERTIFICATE-----Generated at Wed May 13 04:48:12 2026 by rpki-client