$ rpki-client -vvf rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/323430373a366434303a3a2f33322d3332203d3e203538383230.roa File: 323430373a366434303a3a2f33322d3332203d3e203538383230.roa (raw, json) Hash identifier: jgOKZm86Ne016AW6eohuKXLwhxMOpk/gXggXShM+U6E= Subject key identifier: 27:AF:A3:8F:17:6C:1C:66:70:D0:26:5D:E2:EB:B7:C3:88:4F:CD:58 Certificate issuer: /CN=CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0 Certificate serial: 2F0F5885E8828D00AAB5E11608D86ABE8813DBF3 Authority key identifier: CC:7A:2E:C6:A7:80:5B:D3:03:06:C3:D6:4A:D2:92:AC:05:24:CF:F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/323430373a366434303a3a2f33322d3332203d3e203538383230.roa Signing time: Sun 03 May 2026 02:54:53 +0000 ROA not before: Sun 03 May 2026 02:49:53 +0000 ROA not after: Sun 02 May 2027 02:54:53 +0000 asID: 58820 IP address blocks: 2407:6d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:0f:58:85:e8:82:8d:00:aa:b5:e1:16:08:d8:6a:be:88:13:db:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0 Validity Not Before: May 3 02:49:53 2026 GMT Not After : May 2 02:54:53 2027 GMT Subject: CN=27AFA38F176C1C6670D0265DE2EBB7C3884FCD58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fb:43:99:55:98:57:8c:c3:d5:a2:b4:10:cb: b1:8d:ad:1f:0d:39:73:1f:b0:a1:95:b7:75:d6:43: a9:27:18:12:3b:1e:f1:62:f3:2b:97:6e:ce:cc:c7: d0:42:c0:53:f2:13:33:9a:28:22:2a:c4:17:f3:3b: e5:62:d1:ed:73:67:c6:e3:3a:fb:3f:a0:fd:1c:8d: 61:75:6f:52:a9:d4:36:f7:c8:da:66:5d:25:14:dc: 04:bc:ca:f6:00:02:f6:6c:a8:41:3c:cd:4f:d2:9f: 19:fb:73:a6:09:78:7b:ee:d7:1c:69:49:2e:d0:8f: a8:c3:40:d1:0a:0e:c8:fa:35:cf:d3:d1:31:22:64: 85:60:36:c0:38:08:1c:fa:8e:fb:5d:ed:6a:7f:0d: 65:73:e3:51:65:80:49:98:9a:83:d5:7b:bb:45:44: 21:8c:e9:9a:1b:35:83:93:35:6d:a9:10:3f:94:1a: a7:6c:6a:b9:59:01:30:bf:76:62:f3:1e:24:d2:61: 01:4b:10:79:40:02:81:a4:9e:bb:54:d3:cb:cf:86: 63:a3:c0:7b:6a:28:cf:77:9a:6f:8d:fd:89:ee:10: 50:39:8f:0f:cf:26:0e:2e:64:2f:60:ed:d6:fc:d5: 4e:a3:c6:74:0f:74:61:81:8b:05:c6:fe:7c:cb:d7: da:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:AF:A3:8F:17:6C:1C:66:70:D0:26:5D:E2:EB:B7:C3:88:4F:CD:58 X509v3 Authority Key Identifier: keyid:CC:7A:2E:C6:A7:80:5B:D3:03:06:C3:D6:4A:D2:92:AC:05:24:CF:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/323430373a366434303a3a2f33322d3332203d3e203538383230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:6d40::/32 Signature Algorithm: sha256WithRSAEncryption 01:53:eb:6f:4a:ca:bf:b7:4b:0c:2f:de:8d:aa:8c:6e:0c:43: 63:8b:f4:b1:43:e6:25:7c:9d:5d:36:6c:5c:70:0b:1e:c0:ef: 1e:3c:20:93:34:d4:39:57:af:67:b4:e7:b9:1c:3f:10:15:59: 21:fa:28:ca:5d:06:15:06:a0:5b:be:07:e3:da:0a:69:d2:41: e7:61:23:e4:cf:51:e9:00:9d:9e:90:99:b7:6d:e9:a5:29:c3: b8:a4:d7:fb:ef:fd:46:d0:a6:e2:be:c5:ee:e5:e3:e5:c1:60: b0:84:28:30:36:c6:f1:91:70:fd:fd:ef:89:07:29:7e:16:77: 0b:c1:51:68:29:c2:e6:7d:a9:70:b8:08:8d:84:f7:51:1c:44: f2:70:4d:31:a2:8f:1c:04:ce:b1:31:77:de:31:3a:cc:f3:c8: 6f:f2:c8:f9:a1:fd:a5:a7:1c:e3:3b:f6:fb:c2:98:95:58:2b: 61:9b:11:0f:d7:d5:3a:6e:67:71:76:fe:e6:b3:df:ab:02:d7: a2:46:f8:13:88:20:76:48:74:db:5b:7a:64:b8:a2:eb:59:2a: cd:b4:10:9b:22:fe:39:ed:6d:50:e5:1d:dc:de:49:a1:97:50: f5:ed:c7:09:d8:03:f2:75:89:8c:1b:b3:e1:52:28:3c:12:f9: 59:ed:4a:b1 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIULw9YheiCjQCqteEWCNhqvogT2/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3QTJFQzZBNzgwNUJEMzAzMDZDM0Q2NEFEMjkyQUMw NTI0Q0ZGMDAeFw0yNjA1MDMwMjQ5NTNaFw0yNzA1MDIwMjU0NTNaMDMxMTAvBgNV BAMTKDI3QUZBMzhGMTc2QzFDNjY3MEQwMjY1REUyRUJCN0MzODg0RkNENTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH+0OZVZhXjMPVorQQy7GNrR8N OXMfsKGVt3XWQ6knGBI7HvFi8yuXbs7Mx9BCwFPyEzOaKCIqxBfzO+Vi0e1zZ8bj Ovs/oP0cjWF1b1Kp1Db3yNpmXSUU3AS8yvYAAvZsqEE8zU/Snxn7c6YJeHvu1xxp SS7Qj6jDQNEKDsj6Nc/T0TEiZIVgNsA4CBz6jvtd7Wp/DWVz41FlgEmYmoPVe7tF RCGM6ZobNYOTNW2pED+UGqdsarlZATC/dmLzHiTSYQFLEHlAAoGknrtU08vPhmOj wHtqKM93mm+N/YnuEFA5jw/PJg4uZC9g7db81U6jxnQPdGGBiwXG/nzL19pxAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUJ6+jjxdsHGZw0CZd4uu3w4hPzVgwHwYDVR0j BBgwFoAUzHouxqeAW9MDBsPWStKSrAUkz/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWRmYjM5OTItMWQyZi00NmNlLTg4NmEtOGUyMmEzMjYxMWY4LzAvQ0M3QTJFQzZB NzgwNUJEMzAzMDZDM0Q2NEFEMjkyQUMwNTI0Q0ZGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQzdBMkVDNkE3ODA1QkQzMDMwNkMzRDY0QUQyOTJBQzA1MjRD RkYwLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzlkZmIzOTkyLTFkMmYtNDZjZS04 ODZhLThlMjJhMzI2MTFmOC8wLzMyMzQzMDM3M2EzNjY0MzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDM1MzgzODMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB21AMA0GCSqGSIb3 DQEBCwUAA4IBAQABU+tvSsq/t0sML96NqoxuDENji/SxQ+YlfJ1dNmxccAsewO8e PCCTNNQ5V69ntOe5HD8QFVkh+ijKXQYVBqBbvgfj2gpp0kHnYSPkz1HpAJ2ekJm3 bemlKcO4pNf77/1G0KbivsXu5ePlwWCwhCgwNsbxkXD9/e+JByl+FncLwVFoKcLm falwuAiNhPdRHETycE0xoo8cBM6xMXfeMTrM88hv8sj5of2lpxzjO/b7wpiVWCth mxEP19U6bmdxdv7ms9+rAteiRvgTiCB2SHTbW3pkuKLrWSrNtBCbIv457W1Q5R3c 3kmhl1D17ccJ2APydYmMG7PhUig8EvlZ7Uqx -----END CERTIFICATE-----Generated at Wed May 13 13:20:41 2026 by rpki-client