$ rpki-client -vvf rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a383a3a2f34382d3438203d3e20313431393638.roa File: 323430373a366163303a383a3a2f34382d3438203d3e20313431393638.roa (raw, json) Hash identifier: qdE4RD/HR1xmhOawh5oWfClbtd44Y844JZUMBrK1XCU= Subject key identifier: 39:D3:E1:95:F4:A7:81:47:1F:79:ED:A6:92:21:B0:F6:18:76:67:FA Certificate issuer: /CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22 Certificate serial: 02094AF748C82768CC63E47EAB24F8E4E6043060 Authority key identifier: 54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a383a3a2f34382d3438203d3e20313431393638.roa Signing time: Sun 03 May 2026 02:56:15 +0000 ROA not before: Sun 03 May 2026 02:51:15 +0000 ROA not after: Sun 02 May 2027 02:56:15 +0000 asID: 141968 IP address blocks: 2407:6ac0:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:19:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:09:4a:f7:48:c8:27:68:cc:63:e4:7e:ab:24:f8:e4:e6:04:30:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22 Validity Not Before: May 3 02:51:15 2026 GMT Not After : May 2 02:56:15 2027 GMT Subject: CN=39D3E195F4A781471F79EDA69221B0F6187667FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:82:84:cb:1a:51:1f:fd:0b:a7:a8:39:30:97: 44:df:ce:05:ee:56:c2:c4:5e:16:37:65:21:9c:36: 9f:6a:8a:c3:0b:fb:db:e9:0d:28:32:6a:18:7a:7d: bb:ea:2c:6c:00:18:43:39:5a:19:dc:8d:f7:94:99: 8d:ad:9e:06:0f:71:3a:3d:16:c9:1e:21:23:6b:76: d3:26:3b:4d:10:9b:54:0f:38:61:88:a9:29:7d:dd: 2a:91:27:a4:2b:de:ee:4f:3c:5e:41:b2:6d:af:38: 1d:bc:e5:37:e1:47:9b:00:2d:db:6c:04:15:9e:a4: 23:19:7c:b7:f1:66:c6:3e:eb:71:3b:31:d0:08:7a: 0b:2e:e6:7f:71:38:cd:13:6a:ef:ed:1b:22:02:85: 92:43:f6:1b:1e:51:af:78:ae:ef:48:4d:4c:5f:80: ef:3b:be:35:e5:79:d5:89:3e:28:13:b2:6d:c1:b5: 4d:76:64:09:8d:2d:27:ab:59:47:26:75:8f:28:c2: 0a:6f:0e:bf:85:61:fa:d6:fa:a4:a2:3a:d5:11:34: 6e:7e:c4:2c:97:fb:1f:1e:a8:1a:38:a1:34:e7:2a: a9:42:45:08:2b:0f:a5:db:63:10:b5:48:f5:93:53: 6f:0d:5d:bd:b5:04:4d:fc:7c:72:8e:d6:34:ab:e4: 91:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D3:E1:95:F4:A7:81:47:1F:79:ED:A6:92:21:B0:F6:18:76:67:FA X509v3 Authority Key Identifier: keyid:54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a383a3a2f34382d3438203d3e20313431393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:6ac0:8::/48 Signature Algorithm: sha256WithRSAEncryption 4c:f2:a3:d7:02:f2:88:61:de:93:ab:72:dc:df:ff:59:c9:a3: 87:37:85:33:3d:f1:b6:87:f3:40:f9:96:03:5d:47:a3:15:bc: 77:a1:92:d6:fc:31:18:c6:c6:be:f1:c2:59:bf:80:d8:3c:2b: 07:22:c1:e2:bd:ba:bf:bd:14:ab:91:27:9a:95:29:16:ed:57: ed:b2:a0:ce:ce:34:8e:c5:56:b4:6b:b0:a6:45:44:3a:c7:d9: 16:2b:fe:49:5d:81:e2:9f:af:47:3e:e2:0d:bd:65:a1:96:96: 6e:d3:ae:27:63:6d:35:f4:0c:08:48:cc:06:ee:49:5c:16:15: 62:7c:c7:61:5d:49:52:a4:be:52:79:00:0b:ea:ad:72:18:b4: 15:a3:bc:ea:5e:36:60:e7:60:3b:8a:89:cc:4d:a5:d7:a6:54: b3:02:f5:f9:41:c8:2c:78:ef:39:8b:e2:24:35:34:a2:a4:ad: 8b:20:88:71:5c:c4:4b:78:6d:d1:87:87:9c:02:ab:62:7d:0f: ed:a0:3d:77:d2:d7:22:ed:a6:76:d6:a0:21:15:cf:56:57:dd: b6:34:64:06:f2:8a:39:81:2b:39:4f:32:f7:55:d2:77:ad:da: 4c:dc:4c:ed:c7:11:fc:d4:c3:89:d1:b4:97:e6:39:ef:cb:af: 59:1b:6b:9a -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUAglK90jIJ2jMY+R+qyT45OYEMGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTRGN0EwMDhEOUJCRTlENUQ1MzkzMzY0MjVENEI4RkQz NjhEQkIyMjAeFw0yNjA1MDMwMjUxMTVaFw0yNzA1MDIwMjU2MTVaMDMxMTAvBgNV BAMTKDM5RDNFMTk1RjRBNzgxNDcxRjc5RURBNjkyMjFCMEY2MTg3NjY3RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZgoTLGlEf/QunqDkwl0TfzgXu VsLEXhY3ZSGcNp9qisML+9vpDSgyahh6fbvqLGwAGEM5WhncjfeUmY2tngYPcTo9 FskeISNrdtMmO00Qm1QPOGGIqSl93SqRJ6Qr3u5PPF5Bsm2vOB285TfhR5sALdts BBWepCMZfLfxZsY+63E7MdAIegsu5n9xOM0Tau/tGyIChZJD9hseUa94ru9ITUxf gO87vjXledWJPigTsm3BtU12ZAmNLSerWUcmdY8owgpvDr+FYfrW+qSiOtURNG5+ xCyX+x8eqBo4oTTnKqlCRQgrD6XbYxC1SPWTU28NXb21BE38fHKO1jSr5JHLAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUOdPhlfSngUcfee2mkiGw9hh2Z/owHwYDVR0j BBgwFoAUVPegCNm76dXVOTNkJdS4/TaNuyIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTM2YTIxNzEtMTJhMC00ZTAxLWJjYWItYmUzYjZiODM2ZjVkLzAvNTRGN0EwMDhE OUJCRTlENUQ1MzkzMzY0MjVENEI4RkQzNjhEQkIyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NEY3QTAwOEQ5QkJFOUQ1RDUzOTMzNjQyNUQ0QjhGRDM2OERC QjIyLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2EzNmEyMTcxLTEyYTAtNGUwMS1i Y2FiLWJlM2I2YjgzNmY1ZC8wLzMyMzQzMDM3M2EzNjYxNjMzMDNhMzgzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzEzOTM2Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkB2rAAAgw DQYJKoZIhvcNAQELBQADggEBAEzyo9cC8ohh3pOrctzf/1nJo4c3hTM98baH80D5 lgNdR6MVvHehktb8MRjGxr7xwlm/gNg8KwciweK9ur+9FKuRJ5qVKRbtV+2yoM7O NI7FVrRrsKZFRDrH2RYr/kldgeKfr0c+4g29ZaGWlm7TridjbTX0DAhIzAbuSVwW FWJ8x2FdSVKkvlJ5AAvqrXIYtBWjvOpeNmDnYDuKicxNpdemVLMC9flByCx47zmL 4iQ1NKKkrYsgiHFcxEt4bdGHh5wCq2J9D+2gPXfS1yLtpnbWoCEVz1ZX3bY0ZAby ijmBKzlPMvdV0net2kzcTO3HEfzUw4nRtJfmOe/Lr1kba5o= -----END CERTIFICATE-----Generated at Wed May 13 04:54:13 2026 by rpki-client