$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/323430343a356434303a383a3a2f34382d3438203d3e20313338353938.roa File: 323430343a356434303a383a3a2f34382d3438203d3e20313338353938.roa (raw, json) Hash identifier: uPYSHt9IvmbbJXRTSxGX775ZI1E4R11s2tal61YWhUA= Subject key identifier: 5C:A5:C2:5D:2C:5E:47:AF:43:C6:0F:F3:71:39:97:DA:87:39:05:55 Certificate issuer: /CN=3F62814044EDF8B5E77D2B82095BF6627E136F4B Certificate serial: 5D1CCD603E3F83F0D4EABFBD943A3E0EADC41045 Authority key identifier: 3F:62:81:40:44:ED:F8:B5:E7:7D:2B:82:09:5B:F6:62:7E:13:6F:4B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/323430343a356434303a383a3a2f34382d3438203d3e20313338353938.roa Signing time: Sun 03 May 2026 02:54:39 +0000 ROA not before: Sun 03 May 2026 02:49:39 +0000 ROA not after: Sun 02 May 2027 02:54:39 +0000 asID: 138598 IP address blocks: 2404:5d40:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.crl rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:1c:cd:60:3e:3f:83:f0:d4:ea:bf:bd:94:3a:3e:0e:ad:c4:10:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F62814044EDF8B5E77D2B82095BF6627E136F4B Validity Not Before: May 3 02:49:39 2026 GMT Not After : May 2 02:54:39 2027 GMT Subject: CN=5CA5C25D2C5E47AF43C60FF3713997DA87390555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d3:07:7f:b7:5d:39:e4:5c:7e:a5:37:d6:39: bd:3b:15:d8:f3:bf:70:91:93:43:4e:71:29:75:d6: bb:f9:0c:90:85:a5:ad:18:93:d9:90:a4:82:9b:7f: 11:a7:51:2a:bb:04:d8:09:99:6f:2b:de:f4:b2:ce: c3:f1:94:65:f3:e4:08:2c:fa:81:7e:f5:0d:b4:03: 87:5a:c6:d9:b4:03:88:39:b4:ff:ad:fa:0d:fc:7a: 65:3f:5d:82:7e:f7:76:85:a5:ef:31:94:96:d4:b9: c2:86:3a:26:c0:9b:fc:53:82:5e:24:03:67:44:9f: d6:9c:3d:b3:93:43:4c:ff:17:a3:1f:14:45:42:79: 39:df:bd:b6:72:8a:1c:88:03:45:7f:4e:dd:5c:cc: b1:f3:e6:97:7a:4f:e1:35:61:1c:fb:90:b4:8f:5e: b0:80:45:de:a6:59:c4:82:17:5f:c3:ed:3d:8a:76: ca:f9:e9:64:03:bc:8f:4f:7f:0c:c2:de:9f:af:66: 1e:0e:a7:54:df:47:0b:db:ac:ae:69:3d:71:3a:56: a5:c3:22:4a:da:a4:12:d1:e6:f0:ac:65:b2:ae:c9: 18:9a:7c:ee:be:eb:a8:85:46:b2:c4:c6:e9:8f:fb: a4:19:b8:62:66:2a:00:97:19:0b:15:2c:a3:7e:68: 7d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A5:C2:5D:2C:5E:47:AF:43:C6:0F:F3:71:39:97:DA:87:39:05:55 X509v3 Authority Key Identifier: keyid:3F:62:81:40:44:ED:F8:B5:E7:7D:2B:82:09:5B:F6:62:7E:13:6F:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/323430343a356434303a383a3a2f34382d3438203d3e20313338353938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:5d40:8::/48 Signature Algorithm: sha256WithRSAEncryption 05:c2:42:76:72:30:2a:39:0a:c2:99:05:78:1a:99:12:2f:39: 66:04:1d:7d:cd:22:83:b4:db:94:66:03:65:37:07:4e:2d:19: 2c:67:6a:bc:05:e1:6a:6b:81:c4:73:2c:66:8e:d7:49:96:4d: b7:3c:a7:44:e6:63:5a:04:0e:6e:a5:fa:bf:7b:94:13:ef:5f: 0e:4e:b9:62:36:ac:49:5e:2c:c9:58:ed:38:5b:9b:06:b0:b0: 82:02:a6:e0:1c:00:af:49:6a:a0:28:30:ec:29:fa:d6:48:03: 51:4e:e9:40:87:4e:1e:f2:a5:23:20:24:27:d1:ed:33:5a:01: 98:69:93:4d:3f:ae:d4:a3:72:00:26:87:6a:dd:fd:fb:0b:d5: 9b:08:46:13:d5:6a:b3:7b:01:11:3c:f4:22:be:99:16:d5:35: 63:89:f3:94:1c:04:7e:50:0f:f7:10:29:ef:9a:8d:d6:40:86: af:34:36:f1:c1:6e:f8:07:ff:62:db:41:5f:9a:57:26:a8:94: f7:d1:63:e5:73:56:69:8f:8d:39:9d:83:e2:f1:3f:25:73:38: a8:91:0e:6a:4e:7e:fd:4a:56:07:a0:0f:a2:90:73:25:01:98: 39:22:22:44:a6:10:90:ae:2d:08:40:39:86:61:3c:9d:a1:19: 46:25:0f:e6 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUXRzNYD4/g/DU6r+9lDo+Dq3EEEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y2MjgxNDA0NEVERjhCNUU3N0QyQjgyMDk1QkY2NjI3 RTEzNkY0QjAeFw0yNjA1MDMwMjQ5MzlaFw0yNzA1MDIwMjU0MzlaMDMxMTAvBgNV BAMTKDVDQTVDMjVEMkM1RTQ3QUY0M0M2MEZGMzcxMzk5N0RBODczOTA1NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF0wd/t1055Fx+pTfWOb07Fdjz v3CRk0NOcSl11rv5DJCFpa0Yk9mQpIKbfxGnUSq7BNgJmW8r3vSyzsPxlGXz5Ags +oF+9Q20A4daxtm0A4g5tP+t+g38emU/XYJ+93aFpe8xlJbUucKGOibAm/xTgl4k A2dEn9acPbOTQ0z/F6MfFEVCeTnfvbZyihyIA0V/Tt1czLHz5pd6T+E1YRz7kLSP XrCARd6mWcSCF1/D7T2Kdsr56WQDvI9PfwzC3p+vZh4Op1TfRwvbrK5pPXE6VqXD IkrapBLR5vCsZbKuyRiafO6+66iFRrLExumP+6QZuGJmKgCXGQsVLKN+aH3ZAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUXKXCXSxeR69Dxg/zcTmX2oc5BVUwHwYDVR0j BBgwFoAUP2KBQETt+LXnfSuCCVv2Yn4Tb0swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWM4NWM2YjktMzRmOS00YTg1LTljZWEtYzE2ZTk4YThiNWUwLzAvM0Y2MjgxNDA0 NEVERjhCNUU3N0QyQjgyMDk1QkY2NjI3RTEzNkY0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRjYyODE0MDQ0RURGOEI1RTc3RDJCODIwOTVCRjY2MjdFMTM2 RjRCLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzljODVjNmI5LTM0ZjktNGE4NS05 Y2VhLWMxNmU5OGE4YjVlMC8wLzMyMzQzMDM0M2EzNTY0MzQzMDNhMzgzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzgzNTM5Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBF1AAAgw DQYJKoZIhvcNAQELBQADggEBAAXCQnZyMCo5CsKZBXgamRIvOWYEHX3NIoO025Rm A2U3B04tGSxnarwF4WprgcRzLGaO10mWTbc8p0TmY1oEDm6l+r97lBPvXw5OuWI2 rEleLMlY7ThbmwawsIICpuAcAK9JaqAoMOwp+tZIA1FO6UCHTh7ypSMgJCfR7TNa AZhpk00/rtSjcgAmh2rd/fsL1ZsIRhPVarN7ARE89CK+mRbVNWOJ85QcBH5QD/cQ Ke+ajdZAhq80NvHBbvgH/2LbQV+aVyaolPfRY+VzVmmPjTmdg+LxPyVzOKiRDmpO fv1KVgegD6KQcyUBmDkiIkSmEJCuLQhAOYZhPJ2hGUYlD+Y= -----END CERTIFICATE-----Generated at Wed May 13 08:39:17 2026 by rpki-client