$ rpki-client -vvf rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/323430313a616530303a3130303a3a2f34382d3438203d3e203338373533.roa File: 323430313a616530303a3130303a3a2f34382d3438203d3e203338373533.roa (raw, json) Hash identifier: oh5UARl100A3pOurULLJsgNfOZqW71w6y5q3NLG8JtU= Subject key identifier: DF:00:B0:BB:39:C7:83:99:84:28:1D:AD:40:2D:DC:07:EB:7F:21:11 Certificate issuer: /CN=955AF2D41C7C84BFE354F8648EE3271584452C79 Certificate serial: 711FD1E40FE2B10F71F949C1E5A333632A92861D Authority key identifier: 95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/323430313a616530303a3130303a3a2f34382d3438203d3e203338373533.roa Signing time: Sun 03 May 2026 02:55:26 +0000 ROA not before: Sun 03 May 2026 02:50:26 +0000 ROA not after: Sun 02 May 2027 02:55:26 +0000 asID: 38753 IP address blocks: 2401:ae00:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:1f:d1:e4:0f:e2:b1:0f:71:f9:49:c1:e5:a3:33:63:2a:92:86:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=955AF2D41C7C84BFE354F8648EE3271584452C79 Validity Not Before: May 3 02:50:26 2026 GMT Not After : May 2 02:55:26 2027 GMT Subject: CN=DF00B0BB39C7839984281DAD402DDC07EB7F2111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b9:7a:c8:0f:4a:07:78:e1:e0:ef:80:8b:f5: c5:4d:94:f5:c7:5b:2a:fd:98:ee:0a:8d:d2:eb:f4: 39:9c:eb:57:cf:67:f3:16:81:9a:e1:40:c8:96:6e: b1:24:9e:1c:b3:14:04:95:13:e6:4e:46:36:34:39: 6f:54:66:83:52:2f:ec:20:da:19:bd:ea:ce:28:98: 10:c4:ba:31:17:50:ad:3d:73:a4:e1:a7:2f:81:68: 13:73:3a:37:73:d4:8c:36:79:91:db:2b:7f:52:2d: 29:67:05:1d:6d:40:72:44:68:d1:ef:c8:16:8a:3f: ad:42:65:fd:0b:f5:36:e9:e8:ab:38:4d:01:8b:9a: c7:6c:6b:08:81:80:46:a4:f2:74:2d:b8:08:8a:40: 4b:b5:77:11:ba:0c:fc:97:0c:3e:af:a0:5e:5a:3b: 53:71:db:ae:b1:d6:84:d9:35:6e:23:6d:0e:84:58: 58:9e:a7:bf:56:b6:71:9e:12:22:d8:c4:30:22:dd: 72:99:66:e0:8c:f2:c9:26:10:50:e4:a1:f7:c9:b4: 06:61:1f:4f:39:1e:47:ab:4f:c3:d1:ad:4f:b7:56: 18:ce:0f:c6:1a:a8:61:56:64:36:c7:51:db:1b:9c: 4b:6f:57:3c:87:8b:4c:2d:0f:1d:90:b2:c5:3e:b8: 42:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:00:B0:BB:39:C7:83:99:84:28:1D:AD:40:2D:DC:07:EB:7F:21:11 X509v3 Authority Key Identifier: keyid:95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/323430313a616530303a3130303a3a2f34382d3438203d3e203338373533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:ae00:100::/48 Signature Algorithm: sha256WithRSAEncryption ae:26:5b:f3:d5:35:03:50:31:53:ab:00:8d:0c:a8:87:63:7b: 69:3a:db:81:56:2b:89:de:fc:aa:8d:e9:bc:e4:fc:2a:1e:db: 81:f6:28:09:2b:84:53:28:bd:bc:b3:84:db:01:db:e1:40:78: fb:7f:2b:2a:3b:eb:f5:5e:ae:38:70:aa:e2:14:d0:b3:77:4a: d4:22:a4:b3:04:98:68:a5:92:c6:f2:0d:d2:c4:76:2e:7a:24: 23:a4:a8:24:b3:81:89:4a:f8:53:96:d7:23:05:cb:74:af:06: d9:36:77:82:92:2e:ad:55:5e:1b:5b:2e:9f:ca:6a:f8:ee:1b: b3:4a:d7:5a:af:b8:b9:cc:3c:0e:94:d4:cb:af:00:34:5e:7c: c2:dc:37:3e:8a:40:b8:4a:81:05:93:46:33:56:5e:21:22:35: bf:3d:15:d7:72:9c:82:82:54:88:37:ed:b5:43:b4:ee:e9:7a: a7:05:c3:3a:c4:9b:c4:c1:f6:53:8b:d5:a4:33:64:3b:0d:34: 26:2c:12:a6:ea:53:84:54:30:f8:83:c9:17:dd:75:15:a3:13: 49:de:a0:a6:bd:ab:25:c1:ad:96:3c:62:99:5e:f3:f9:a6:12: 20:d3:08:a2:25:c3:55:f4:be:66:22:9f:48:f2:77:2b:83:10: 34:0c:92:73 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUcR/R5A/isQ9x+UnB5aMzYyqShh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU1QUYyRDQxQzdDODRCRkUzNTRGODY0OEVFMzI3MTU4 NDQ1MkM3OTAeFw0yNjA1MDMwMjUwMjZaFw0yNzA1MDIwMjU1MjZaMDMxMTAvBgNV BAMTKERGMDBCMEJCMzlDNzgzOTk4NDI4MURBRDQwMkREQzA3RUI3RjIxMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPuXrID0oHeOHg74CL9cVNlPXH Wyr9mO4KjdLr9Dmc61fPZ/MWgZrhQMiWbrEknhyzFASVE+ZORjY0OW9UZoNSL+wg 2hm96s4omBDEujEXUK09c6Thpy+BaBNzOjdz1Iw2eZHbK39SLSlnBR1tQHJEaNHv yBaKP61CZf0L9Tbp6Ks4TQGLmsdsawiBgEak8nQtuAiKQEu1dxG6DPyXDD6voF5a O1Nx266x1oTZNW4jbQ6EWFiep79WtnGeEiLYxDAi3XKZZuCM8skmEFDkoffJtAZh H085HkerT8PRrU+3VhjOD8YaqGFWZDbHUdsbnEtvVzyHi0wtDx2QssU+uELrAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU3wCwuznHg5mEKB2tQC3cB+t/IREwHwYDVR0j BBgwFoAUlVry1Bx8hL/jVPhkjuMnFYRFLHkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTA2YjY2NzMtNDdhMS00NWU1LWI2YzItNDJhYjhiNDc2MjQ5LzAvOTU1QUYyRDQx QzdDODRCRkUzNTRGODY0OEVFMzI3MTU4NDQ1MkM3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NTVBRjJENDFDN0M4NEJGRTM1NEY4NjQ4RUUzMjcxNTg0NDUy Qzc5LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2EwNmI2NjczLTQ3YTEtNDVlNS1i NmMyLTQyYWI4YjQ3NjI0OS8wLzMyMzQzMDMxM2E2MTY1MzAzMDNhMzEzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzMzODM3MzUzMy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQBrgAB ADANBgkqhkiG9w0BAQsFAAOCAQEAriZb89U1A1AxU6sAjQyoh2N7aTrbgVYrid78 qo3pvOT8Kh7bgfYoCSuEUyi9vLOE2wHb4UB4+38rKjvr9V6uOHCq4hTQs3dK1CKk swSYaKWSxvIN0sR2LnokI6SoJLOBiUr4U5bXIwXLdK8G2TZ3gpIurVVeG1sun8pq +O4bs0rXWq+4ucw8DpTUy68ANF58wtw3PopAuEqBBZNGM1ZeISI1vz0V13KcgoJU iDfttUO07ul6pwXDOsSbxMH2U4vVpDNkOw00JiwSpupThFQw+IPJF911FaMTSd6g pr2rJcGtljximV7z+aYSINMIoiXDVfS+ZiKfSPJ3K4MQNAyScw== -----END CERTIFICATE-----Generated at Wed May 13 13:02:40 2026 by rpki-client