$ rpki-client -vvf rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/323430313a383434303a3a2f33322d3332203d3e20313336313331.roa File: 323430313a383434303a3a2f33322d3332203d3e20313336313331.roa (raw, json) Hash identifier: PHP1IFXfqbi+BOlMH5y7xyleYHrhQYI+Lt+NZxh64LQ= Subject key identifier: A9:68:30:97:24:D0:41:F4:80:A2:09:65:5B:D8:29:F0:D8:05:AB:AF Certificate issuer: /CN=F07DE2A6041C4CCDF424D4FE299B586DABA22CAF Certificate serial: 1F5A4DBDF91CE1B84BF06A34D7CF0B02ACA8101C Authority key identifier: F0:7D:E2:A6:04:1C:4C:CD:F4:24:D4:FE:29:9B:58:6D:AB:A2:2C:AF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/323430313a383434303a3a2f33322d3332203d3e20313336313331.roa Signing time: Sun 03 May 2026 02:52:58 +0000 ROA not before: Sun 03 May 2026 02:47:58 +0000 ROA not after: Sun 02 May 2027 02:52:58 +0000 asID: 136131 IP address blocks: 2401:8440::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.crl rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:5a:4d:bd:f9:1c:e1:b8:4b:f0:6a:34:d7:cf:0b:02:ac:a8:10:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F07DE2A6041C4CCDF424D4FE299B586DABA22CAF Validity Not Before: May 3 02:47:58 2026 GMT Not After : May 2 02:52:58 2027 GMT Subject: CN=A968309724D041F480A209655BD829F0D805ABAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5a:0a:7c:eb:4f:9a:83:5d:cc:bf:dc:ab:92: 1f:65:27:7c:31:e1:d6:f2:76:a3:63:fa:f4:f8:af: 65:96:37:02:8c:e4:b6:a9:ad:9c:69:c3:94:df:57: a5:5e:12:51:c6:66:42:da:9f:dc:2f:7a:1a:0e:2b: dc:b2:1c:69:80:0f:02:f9:a1:ee:28:74:43:3a:26: c1:1f:7a:68:3e:d3:f6:f1:8b:6c:29:7c:52:fa:38: 3e:29:71:b0:c2:42:6b:be:1e:52:64:c8:5c:01:96: 7e:2c:88:80:cc:f1:92:bc:95:d7:95:59:8c:3d:86: ae:2b:e1:51:46:42:6a:00:eb:b4:15:6b:b4:41:c6: ec:cc:83:c2:66:fa:da:c6:cc:8c:7c:44:2f:c1:35: 23:0b:3a:f7:b3:bb:e4:55:84:eb:fb:7e:ec:16:7b: 22:21:ce:25:d7:a2:29:78:86:c5:cf:c3:67:a7:b3: 1b:1e:67:08:5d:3c:95:af:bc:12:f3:37:73:52:35: 46:cd:dc:4e:a4:13:2a:30:4d:c6:e0:ec:3a:ac:85: c3:49:ac:01:0d:6c:c0:99:c9:fa:c6:ac:d1:18:f5: ac:90:f6:d9:37:63:c9:7d:fc:a2:8a:80:47:04:59: 4d:ea:76:a5:46:9a:60:3a:01:d4:db:5a:d1:7c:07: 9b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:68:30:97:24:D0:41:F4:80:A2:09:65:5B:D8:29:F0:D8:05:AB:AF X509v3 Authority Key Identifier: keyid:F0:7D:E2:A6:04:1C:4C:CD:F4:24:D4:FE:29:9B:58:6D:AB:A2:2C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/323430313a383434303a3a2f33322d3332203d3e20313336313331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:8440::/32 Signature Algorithm: sha256WithRSAEncryption 45:05:97:d1:8b:13:0a:3a:62:8d:34:aa:f2:f3:7f:d7:8a:44: 53:12:a2:bb:fa:ab:6f:39:ed:26:4e:48:62:7e:35:1d:6c:92: dc:5c:c6:f2:64:ae:07:89:29:eb:10:fa:4d:16:1f:66:fe:6a: 1d:de:a9:0f:64:79:cb:d6:61:9e:81:73:96:c3:5f:ae:1a:68: cd:ba:a4:64:bd:1d:6f:be:4f:b8:4d:08:be:c3:d1:60:4b:db: 16:26:28:51:bb:4a:ae:e5:f5:7f:92:d4:57:ba:03:d7:a3:ea: b7:87:37:b5:14:47:52:f6:69:0b:63:49:00:cd:43:80:e8:fb: e7:74:88:31:04:49:e3:4c:2e:ea:72:fc:69:ad:2d:cc:ce:8f: 1d:24:93:ba:4f:cc:ab:a8:2a:75:c5:74:91:60:fc:0f:2f:46: 0f:a8:b2:1d:c1:4e:b8:23:f2:67:75:f3:a9:78:57:49:97:70: ae:bc:5c:3f:1f:bd:11:38:87:ad:4a:b2:75:8e:0e:c8:44:fa: b0:b9:e9:69:e5:a0:dd:ca:09:a5:da:61:06:f2:38:b6:82:ab: fb:e1:f8:fb:b7:3e:40:57:0c:c1:c9:cf:9e:8f:a7:f2:4c:0c: a5:12:bf:26:2a:f4:97:06:bf:e6:d6:49:13:bd:ed:85:a9:5f: 1d:1c:b2:f7 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUH1pNvfkc4bhL8Go0188LAqyoEBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA3REUyQTYwNDFDNENDREY0MjRENEZFMjk5QjU4NkRB QkEyMkNBRjAeFw0yNjA1MDMwMjQ3NThaFw0yNzA1MDIwMjUyNThaMDMxMTAvBgNV BAMTKEE5NjgzMDk3MjREMDQxRjQ4MEEyMDk2NTVCRDgyOUYwRDgwNUFCQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQWgp860+ag13Mv9yrkh9lJ3wx 4dbydqNj+vT4r2WWNwKM5LaprZxpw5TfV6VeElHGZkLan9wvehoOK9yyHGmADwL5 oe4odEM6JsEfemg+0/bxi2wpfFL6OD4pcbDCQmu+HlJkyFwBln4siIDM8ZK8ldeV WYw9hq4r4VFGQmoA67QVa7RBxuzMg8Jm+trGzIx8RC/BNSMLOvezu+RVhOv7fuwW eyIhziXXoil4hsXPw2ensxseZwhdPJWvvBLzN3NSNUbN3E6kEyowTcbg7DqshcNJ rAENbMCZyfrGrNEY9ayQ9tk3Y8l9/KKKgEcEWU3qdqVGmmA6AdTbWtF8B5vbAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUqWgwlyTQQfSAogllW9gp8NgFq68wHwYDVR0j BBgwFoAU8H3ipgQcTM30JNT+KZtYbauiLK8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTU3YjBkN2UtZWFkZS00MzE4LWFiMjAtOGM3ZjJkNWJlNjlmLzAvRjA3REUyQTYw NDFDNENDREY0MjRENEZFMjk5QjU4NkRBQkEyMkNBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMDdERTJBNjA0MUM0Q0NERjQyNEQ0RkUyOTlCNTg2REFCQTIy Q0FGLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzk1N2IwZDdlLWVhZGUtNDMxOC1h YjIwLThjN2YyZDViZTY5Zi8wLzMyMzQzMDMxM2EzODM0MzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzNjMxMzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQBhEAwDQYJKoZI hvcNAQELBQADggEBAEUFl9GLEwo6Yo00qvLzf9eKRFMSorv6q2857SZOSGJ+NR1s ktxcxvJkrgeJKesQ+k0WH2b+ah3eqQ9kecvWYZ6Bc5bDX64aaM26pGS9HW++T7hN CL7D0WBL2xYmKFG7Sq7l9X+S1Fe6A9ej6reHN7UUR1L2aQtjSQDNQ4Do++d0iDEE SeNMLupy/GmtLczOjx0kk7pPzKuoKnXFdJFg/A8vRg+osh3BTrgj8md186l4V0mX cK68XD8fvRE4h61KsnWODshE+rC56WnloN3KCaXaYQbyOLaCq/vh+Pu3PkBXDMHJ z56Pp/JMDKUSvyYq9JcGv+bWSRO97YWpXx0csvc= -----END CERTIFICATE-----Generated at Wed May 13 04:54:17 2026 by rpki-client