$ rpki-client -vvf rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a3a2f33322d3332203d3e20313339393732.roa File: 323430353a633434303a3a2f33322d3332203d3e20313339393732.roa (raw, json) Hash identifier: cPKV+RkV9s2A7YW1XiIN+pJgqnPcjdsqF0sGTYEVCuI= Subject key identifier: 38:6A:91:97:0C:48:EB:16:E8:D5:FF:F8:70:1E:D7:11:88:76:42:95 Certificate issuer: /CN=C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C Certificate serial: 78F0FE160DB61EA631880E9C26322E5A4A2BE05A Authority key identifier: C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a3a2f33322d3332203d3e20313339393732.roa Signing time: Sun 03 May 2026 02:54:01 +0000 ROA not before: Sun 03 May 2026 02:49:01 +0000 ROA not after: Sun 02 May 2027 02:54:01 +0000 asID: 139972 IP address blocks: 2405:c440::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:f0:fe:16:0d:b6:1e:a6:31:88:0e:9c:26:32:2e:5a:4a:2b:e0:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C Validity Not Before: May 3 02:49:01 2026 GMT Not After : May 2 02:54:01 2027 GMT Subject: CN=386A91970C48EB16E8D5FFF8701ED71188764295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b6:50:36:a8:aa:6f:c3:88:d6:3d:b8:1a:45: 24:5e:55:f1:6f:9b:57:e6:a9:a3:7b:e7:c5:5c:ad: d0:7d:d5:4f:0b:61:b2:2f:7e:4f:ca:de:4d:62:29: f0:07:8a:ab:5a:62:a9:4e:fd:2d:90:d3:95:61:dd: ee:37:d1:45:14:49:3c:47:1b:80:89:e3:9f:a2:29: a4:54:3e:49:72:07:2d:b7:48:93:14:ea:d6:04:d5: 46:1a:fe:15:11:b2:c8:54:61:3c:45:9f:88:fc:7d: 04:22:2b:c2:d6:46:b6:d2:ae:a0:36:78:2a:f0:8b: fe:9d:74:97:db:b6:87:a0:16:95:e2:95:51:76:61: 46:cb:02:ed:de:f3:9a:4a:6a:98:25:0b:e1:ba:96: 2c:ce:3f:ef:6f:a7:e8:94:00:e7:bf:ba:80:e4:22: 9d:1e:64:15:af:74:8e:b1:20:c3:54:26:dd:b2:36: 78:82:e6:31:13:d4:41:47:73:7e:63:38:21:d7:e7: bc:ac:e6:1f:50:8f:c8:4b:51:5f:74:5a:0e:84:05: 97:6e:5a:06:6a:67:0d:4d:0c:5d:b8:a5:0d:95:fc: 6c:d4:c4:fd:80:5d:5c:82:14:8f:bf:be:94:73:ed: f2:1d:f7:7a:ae:2d:96:38:23:56:95:4d:47:d2:8a: 57:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6A:91:97:0C:48:EB:16:E8:D5:FF:F8:70:1E:D7:11:88:76:42:95 X509v3 Authority Key Identifier: keyid:C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a3a2f33322d3332203d3e20313339393732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:c440::/32 Signature Algorithm: sha256WithRSAEncryption 4d:5b:41:71:5f:52:f9:2a:dd:45:54:8a:63:bd:e9:6c:a6:1b: c4:48:b0:51:d9:0c:66:be:c8:07:53:94:c7:3b:5b:21:13:6b: 3c:40:a9:98:32:d4:65:cc:d7:3a:69:76:fb:d2:c4:a0:56:8d: a0:08:49:aa:9e:92:df:a8:50:32:bb:de:30:35:89:74:45:b1: 63:3e:06:78:74:89:ac:06:e9:34:e2:26:a9:99:29:d1:3e:00: 3b:72:57:88:f6:76:e7:6c:14:ba:7f:32:ca:80:2e:9e:4b:05: 02:ad:5d:cc:fa:f8:66:48:9f:b6:06:22:cf:81:3b:da:2b:0a: 56:89:7e:6c:7b:4f:a8:e4:d2:59:f8:af:79:de:cd:bd:a9:bb: c3:47:5c:c2:ea:e7:50:ec:37:e4:97:f1:f3:a0:8f:9e:a6:ea: 9c:8f:00:c3:fe:16:1a:73:df:fd:88:d6:14:12:9f:72:30:b9: 60:d9:28:ae:a2:3c:3b:7b:3d:8b:31:fc:38:f2:7c:e3:94:1a: a1:0e:35:87:01:1a:16:03:ae:e5:9f:5c:07:6d:00:5b:7b:4d: f6:59:0a:58:aa:fe:e7:42:1e:b7:b4:1d:39:65:d3:81:da:5c: ad:99:f0:8a:22:05:b4:7a:7b:a9:27:9f:2d:a9:ed:d8:c5:bf: 60:84:c6:4c -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUePD+Fg22HqYxiA6cJjIuWkor4FowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFBNEFCNDA3MjZENENFREQ2NjNEMUMzNEVCQkU4MTdG QTQ0QzQyQzAeFw0yNjA1MDMwMjQ5MDFaFw0yNzA1MDIwMjU0MDFaMDMxMTAvBgNV BAMTKDM4NkE5MTk3MEM0OEVCMTZFOEQ1RkZGODcwMUVENzExODg3NjQyOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5tlA2qKpvw4jWPbgaRSReVfFv m1fmqaN758VcrdB91U8LYbIvfk/K3k1iKfAHiqtaYqlO/S2Q05Vh3e430UUUSTxH G4CJ45+iKaRUPklyBy23SJMU6tYE1UYa/hURsshUYTxFn4j8fQQiK8LWRrbSrqA2 eCrwi/6ddJfbtoegFpXilVF2YUbLAu3e85pKapglC+G6lizOP+9vp+iUAOe/uoDk Ip0eZBWvdI6xIMNUJt2yNniC5jET1EFHc35jOCHX57ys5h9Qj8hLUV90Wg6EBZdu WgZqZw1NDF24pQ2V/GzUxP2AXVyCFI+/vpRz7fId93quLZY4I1aVTUfSildBAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUOGqRlwxI6xbo1f/4cB7XEYh2QpUwHwYDVR0j BBgwFoAUwaSrQHJtTO3WY9HDTrvoF/pExCwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTllZWJmN2MtZmUzOC00NmE5LTgzMTEtZTA1M2ZjYTUwZGZkLzAvQzFBNEFCNDA3 MjZENENFREQ2NjNEMUMzNEVCQkU4MTdGQTQ0QzQyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMUE0QUI0MDcyNkQ0Q0VERDY2M0QxQzM0RUJCRTgxN0ZBNDRD NDJDLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzk5ZWViZjdjLWZlMzgtNDZhOS04 MzExLWUwNTNmY2E1MGRmZC8wLzMyMzQzMDM1M2E2MzM0MzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzOTM5MzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQFxEAwDQYJKoZI hvcNAQELBQADggEBAE1bQXFfUvkq3UVUimO96WymG8RIsFHZDGa+yAdTlMc7WyET azxAqZgy1GXM1zppdvvSxKBWjaAISaqekt+oUDK73jA1iXRFsWM+Bnh0iawG6TTi JqmZKdE+ADtyV4j2dudsFLp/MsqALp5LBQKtXcz6+GZIn7YGIs+BO9orClaJfmx7 T6jk0ln4r3nezb2pu8NHXMLq51DsN+SX8fOgj56m6pyPAMP+Fhpz3/2I1hQSn3Iw uWDZKK6iPDt7PYsx/DjyfOOUGqEONYcBGhYDruWfXAdtAFt7TfZZCliq/udCHre0 HTll04HaXK2Z8IoiBbR6e6knny2p7djFv2CExkw= -----END CERTIFICATE-----Generated at Wed May 13 01:45:34 2026 by rpki-client