$ rpki-client -vvf rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/323430373a366434303a3a2f33322d3438203d3e203538383230.roa File: 323430373a366434303a3a2f33322d3438203d3e203538383230.roa (raw, json) Hash identifier: Qdc9euHL+3k8NfrXNBnHkozHtMezUxyyeuXRXCqCBdM= Subject key identifier: 28:2C:1E:CC:7C:84:50:C9:CE:C1:90:1F:0F:EA:44:F1:35:06:90:34 Certificate issuer: /CN=CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0 Certificate serial: 65F15E6ECC5BD45C8246258DC36DB7C902467F57 Authority key identifier: CC:7A:2E:C6:A7:80:5B:D3:03:06:C3:D6:4A:D2:92:AC:05:24:CF:F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/323430373a366434303a3a2f33322d3438203d3e203538383230.roa Signing time: Sun 03 May 2026 02:54:53 +0000 ROA not before: Sun 03 May 2026 02:49:53 +0000 ROA not after: Sun 02 May 2027 02:54:53 +0000 asID: 58820 IP address blocks: 2407:6d40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:f1:5e:6e:cc:5b:d4:5c:82:46:25:8d:c3:6d:b7:c9:02:46:7f:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0 Validity Not Before: May 3 02:49:53 2026 GMT Not After : May 2 02:54:53 2027 GMT Subject: CN=282C1ECC7C8450C9CEC1901F0FEA44F135069034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d5:35:c8:dd:9d:29:22:f6:2d:33:15:c5:11: d7:a4:57:d5:cf:37:83:46:4f:43:30:58:74:60:45: 20:9b:ae:18:76:d3:90:73:0e:bc:4b:1c:01:b2:b5: 92:3c:eb:b8:db:fa:1a:65:db:73:ae:4a:11:4f:ed: 67:8e:39:ac:8c:b1:cc:eb:6e:d7:a9:dc:ce:2a:23: be:1c:bb:fb:c3:1f:ab:cf:60:e1:04:89:d9:cd:71: f7:28:96:fa:09:b5:ca:e4:0d:2e:f7:94:a8:63:d5: 35:ae:6d:67:cb:bd:7c:c9:8b:1d:fb:8a:bd:9a:1f: a8:bd:e0:4e:1c:b1:67:a2:1f:99:e6:6f:f6:bd:13: f3:55:04:0d:5b:50:47:b4:e5:f2:48:30:47:20:7b: 30:4e:fb:70:b7:52:ab:87:e8:3e:d6:41:01:70:06: 4c:46:3d:c3:ba:84:9d:ef:b1:d4:79:90:b4:be:f5: 63:15:ee:9e:37:bd:82:73:54:04:3f:f8:ab:7f:68: df:1f:9f:02:0f:be:e4:d0:af:8f:66:1e:cd:e0:6c: df:fc:e8:c5:fe:2e:3f:69:cb:b8:bf:a4:62:28:22: 2b:ce:f2:e2:ae:c6:45:66:e2:d5:03:b8:d6:0e:8e: 07:0b:87:07:99:df:29:74:8e:36:7d:47:9d:cf:90: c7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2C:1E:CC:7C:84:50:C9:CE:C1:90:1F:0F:EA:44:F1:35:06:90:34 X509v3 Authority Key Identifier: keyid:CC:7A:2E:C6:A7:80:5B:D3:03:06:C3:D6:4A:D2:92:AC:05:24:CF:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/323430373a366434303a3a2f33322d3438203d3e203538383230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:6d40::/32 Signature Algorithm: sha256WithRSAEncryption 4e:be:03:d8:9b:9c:01:c8:b6:2a:9f:8f:8a:13:a1:23:43:db: 98:29:32:cb:97:2b:d0:ce:a4:00:a2:2b:f6:58:07:e5:9c:88: 2b:d2:87:57:a1:52:f4:eb:94:c9:2a:47:82:d9:47:00:dc:78: 37:1a:be:f1:4c:ef:a2:d9:4c:a8:cb:7f:30:24:96:6c:f9:20: 83:a5:b6:b1:0f:25:16:09:90:ab:d8:62:49:fb:f5:42:ef:7a: 6f:f5:aa:f9:50:6c:48:89:20:fc:90:22:bc:ad:c8:6c:a6:09: e6:2b:76:2d:6f:9b:c9:c4:d8:c3:1f:30:6c:6c:21:28:02:91: 24:3c:d0:32:ad:36:cd:e7:de:72:12:0d:65:d2:69:0f:d1:64: ce:28:be:6e:16:ef:48:d1:50:b2:04:ad:7b:10:bf:1f:82:64: c7:b7:18:9f:60:63:06:94:6d:44:7d:d3:46:fe:bc:c0:94:a4: 92:6d:7f:14:68:83:e6:db:7a:2c:4f:0d:48:2b:b2:57:0f:70: 7c:a5:33:4f:7a:61:92:5c:03:8c:89:c3:66:13:e5:96:12:e7: 70:5b:47:26:5f:ea:8a:e1:90:5d:96:7c:f7:9e:91:f6:0b:43: 6d:b9:38:49:d4:1f:5f:fc:d5:9d:9f:fc:07:bc:13:1f:6e:91: 0f:7f:d0:ee -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUZfFebsxb1FyCRiWNw223yQJGf1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3QTJFQzZBNzgwNUJEMzAzMDZDM0Q2NEFEMjkyQUMw NTI0Q0ZGMDAeFw0yNjA1MDMwMjQ5NTNaFw0yNzA1MDIwMjU0NTNaMDMxMTAvBgNV BAMTKDI4MkMxRUNDN0M4NDUwQzlDRUMxOTAxRjBGRUE0NEYxMzUwNjkwMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC51TXI3Z0pIvYtMxXFEdekV9XP N4NGT0MwWHRgRSCbrhh205BzDrxLHAGytZI867jb+hpl23OuShFP7WeOOayMsczr btep3M4qI74cu/vDH6vPYOEEidnNcfcolvoJtcrkDS73lKhj1TWubWfLvXzJix37 ir2aH6i94E4csWeiH5nmb/a9E/NVBA1bUEe05fJIMEcgezBO+3C3UquH6D7WQQFw BkxGPcO6hJ3vsdR5kLS+9WMV7p43vYJzVAQ/+Kt/aN8fnwIPvuTQr49mHs3gbN/8 6MX+Lj9py7i/pGIoIivO8uKuxkVm4tUDuNYOjgcLhweZ3yl0jjZ9R53PkMetAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUKCwezHyEUMnOwZAfD+pE8TUGkDQwHwYDVR0j BBgwFoAUzHouxqeAW9MDBsPWStKSrAUkz/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWRmYjM5OTItMWQyZi00NmNlLTg4NmEtOGUyMmEzMjYxMWY4LzAvQ0M3QTJFQzZB NzgwNUJEMzAzMDZDM0Q2NEFEMjkyQUMwNTI0Q0ZGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQzdBMkVDNkE3ODA1QkQzMDMwNkMzRDY0QUQyOTJBQzA1MjRD RkYwLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzlkZmIzOTkyLTFkMmYtNDZjZS04 ODZhLThlMjJhMzI2MTFmOC8wLzMyMzQzMDM3M2EzNjY0MzQzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDM1MzgzODMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB21AMA0GCSqGSIb3 DQEBCwUAA4IBAQBOvgPYm5wByLYqn4+KE6EjQ9uYKTLLlyvQzqQAoiv2WAflnIgr 0odXoVL065TJKkeC2UcA3Hg3Gr7xTO+i2Uyoy38wJJZs+SCDpbaxDyUWCZCr2GJJ +/VC73pv9ar5UGxIiSD8kCK8rchspgnmK3Ytb5vJxNjDHzBsbCEoApEkPNAyrTbN 595yEg1l0mkP0WTOKL5uFu9I0VCyBK17EL8fgmTHtxifYGMGlG1EfdNG/rzAlKSS bX8UaIPm23osTw1IK7JXD3B8pTNPemGSXAOMicNmE+WWEudwW0cmX+qK4ZBdlnz3 npH2C0NtuThJ1B9f/NWdn/wHvBMfbpEPf9Du -----END CERTIFICATE-----Generated at Wed May 13 11:49:25 2026 by rpki-client