$ rpki-client -vvf rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/323430373a623463303a633a3a2f34382d3438203d3e20313432333636.roa File: 323430373a623463303a633a3a2f34382d3438203d3e20313432333636.roa (raw, json) Hash identifier: qood+9S8zNU9X/jpjUZIu26OXyUnDxyv/AsytcFufXA= Subject key identifier: 8F:B8:0E:80:65:77:46:DD:5D:5E:BE:CE:C9:C4:D5:2D:73:52:5D:08 Certificate issuer: /CN=399FBE55CFD957C1E3849C75FE378403E394BB45 Certificate serial: 698CBB50BAEAE3387B5379330F497C4E2CB58FC9 Authority key identifier: 39:9F:BE:55:CF:D9:57:C1:E3:84:9C:75:FE:37:84:03:E3:94:BB:45 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/323430373a623463303a633a3a2f34382d3438203d3e20313432333636.roa Signing time: Sun 03 May 2026 02:57:23 +0000 ROA not before: Sun 03 May 2026 02:52:23 +0000 ROA not after: Sun 02 May 2027 02:57:23 +0000 asID: 142366 IP address blocks: 2407:b4c0:c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.crl rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:8c:bb:50:ba:ea:e3:38:7b:53:79:33:0f:49:7c:4e:2c:b5:8f:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399FBE55CFD957C1E3849C75FE378403E394BB45 Validity Not Before: May 3 02:52:23 2026 GMT Not After : May 2 02:57:23 2027 GMT Subject: CN=8FB80E80657746DD5D5EBECEC9C4D52D73525D08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:da:94:f7:d0:d4:44:56:62:3c:65:c9:ca:d1: ff:8a:70:fe:20:ff:91:f5:7f:ae:b0:aa:c6:d0:b8: 8b:b3:72:5f:68:a8:0c:7e:1a:bb:38:d6:51:3c:f2: b2:d2:3b:d1:5c:5c:73:dd:55:63:a2:65:bc:a8:39: 55:17:af:0d:58:ac:4c:14:37:cc:9f:1a:29:b4:6d: af:af:eb:74:17:d5:1f:04:1d:79:c9:9b:74:d4:de: 51:f1:b4:04:ea:b2:7d:ec:6f:0b:5b:c6:5e:fa:91: ad:bf:8f:61:39:a0:83:d5:72:e4:57:f9:4a:b1:42: ff:52:e2:46:aa:7e:c8:58:6c:bf:50:41:d3:e0:a0: c3:c6:54:9b:03:b1:28:c9:32:de:75:b4:97:7d:2b: 78:8e:77:ab:07:d1:0a:0a:22:53:78:e4:07:42:b9: 55:d2:06:09:0a:93:e7:e4:2e:72:55:11:34:36:8b: d2:e1:20:5c:a9:c1:9c:d0:df:f3:ae:78:be:5b:14: a2:e8:e1:cb:b9:de:f6:a0:a7:77:2f:5a:9a:6c:44: 7c:f5:af:22:49:1c:90:0d:bf:ac:5d:2c:81:3d:51: 75:6b:5d:21:dc:2d:c9:4a:6e:24:ea:0f:7c:14:0f: 28:9b:d4:1e:31:8a:bf:26:04:38:c9:4d:7f:46:88: 66:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B8:0E:80:65:77:46:DD:5D:5E:BE:CE:C9:C4:D5:2D:73:52:5D:08 X509v3 Authority Key Identifier: keyid:39:9F:BE:55:CF:D9:57:C1:E3:84:9C:75:FE:37:84:03:E3:94:BB:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/323430373a623463303a633a3a2f34382d3438203d3e20313432333636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:b4c0:c::/48 Signature Algorithm: sha256WithRSAEncryption 18:96:20:e2:6e:2e:63:79:fe:bf:99:07:c4:ba:a7:09:39:90: f5:e6:ba:87:1c:77:6c:f4:61:90:54:9d:90:c6:70:60:7e:0d: b5:6c:7a:e7:d3:6e:9f:d0:d5:fb:93:b4:c8:ba:5e:c3:c4:c4: 9a:c3:88:bd:58:d9:20:9c:b9:75:7c:b2:25:13:b5:77:d7:ba: cc:69:c9:a9:14:21:42:59:1a:bc:cd:bc:0f:f7:a9:c1:82:88: 05:ff:2a:ea:f2:41:b6:59:4a:3b:cc:4d:01:a4:88:11:56:9a: 37:3a:91:9a:1f:ce:73:f7:51:34:51:f3:73:33:08:81:11:fb: df:aa:99:25:b6:5f:13:30:c6:42:86:58:d4:4c:d1:19:35:df: f1:e6:d6:39:36:de:e2:b4:0c:a6:b0:0e:b8:9a:d8:63:65:84: 3e:c3:27:21:f3:ae:c9:5e:e2:b1:da:8d:05:73:f8:60:34:a1: c0:03:51:db:87:a7:6b:2a:31:4c:24:91:c1:20:e9:18:a6:bd: 1f:69:e9:8a:d2:09:1d:68:10:e7:3a:3d:94:3d:b5:5e:93:e1: 6c:57:2a:96:07:88:2b:8f:c6:ba:fd:c4:2f:97:89:4e:1e:a0: 36:77:23:7e:3c:55:26:fa:bb:7d:c5:f4:81:79:ac:39:d3:a3: 50:45:a3:1a -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUaYy7ULrq4zh7U3kzD0l8Tiy1j8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5RkJFNTVDRkQ5NTdDMUUzODQ5Qzc1RkUzNzg0MDNF Mzk0QkI0NTAeFw0yNjA1MDMwMjUyMjNaFw0yNzA1MDIwMjU3MjNaMDMxMTAvBgNV BAMTKDhGQjgwRTgwNjU3NzQ2REQ1RDVFQkVDRUM5QzRENTJENzM1MjVEMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe2pT30NREVmI8ZcnK0f+KcP4g /5H1f66wqsbQuIuzcl9oqAx+Grs41lE88rLSO9FcXHPdVWOiZbyoOVUXrw1YrEwU N8yfGim0ba+v63QX1R8EHXnJm3TU3lHxtATqsn3sbwtbxl76ka2/j2E5oIPVcuRX +UqxQv9S4kaqfshYbL9QQdPgoMPGVJsDsSjJMt51tJd9K3iOd6sH0QoKIlN45AdC uVXSBgkKk+fkLnJVETQ2i9LhIFypwZzQ3/OueL5bFKLo4cu53vagp3cvWppsRHz1 ryJJHJANv6xdLIE9UXVrXSHcLclKbiTqD3wUDyib1B4xir8mBDjJTX9GiGYPAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUj7gOgGV3Rt1dXr7OycTVLXNSXQgwHwYDVR0j BBgwFoAUOZ++Vc/ZV8HjhJx1/jeEA+OUu0UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTcwZGZiNWEtODQ1ZS00ZGRmLWFjYTctYTliMzFjMzFkZmY0LzAvMzk5RkJFNTVD RkQ5NTdDMUUzODQ5Qzc1RkUzNzg0MDNFMzk0QkI0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOTlGQkU1NUNGRDk1N0MxRTM4NDlDNzVGRTM3ODQwM0UzOTRC QjQ1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E3MGRmYjVhLTg0NWUtNGRkZi1h Y2E3LWE5YjMxYzMxZGZmNC8wLzMyMzQzMDM3M2E2MjM0NjMzMDNhNjMzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzIzMzM2MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkB7TAAAww DQYJKoZIhvcNAQELBQADggEBABiWIOJuLmN5/r+ZB8S6pwk5kPXmuoccd2z0YZBU nZDGcGB+DbVseufTbp/Q1fuTtMi6XsPExJrDiL1Y2SCcuXV8siUTtXfXusxpyakU IUJZGrzNvA/3qcGCiAX/KuryQbZZSjvMTQGkiBFWmjc6kZofznP3UTRR83MzCIER +9+qmSW2XxMwxkKGWNRM0Rk13/Hm1jk23uK0DKawDria2GNlhD7DJyHzrsle4rHa jQVz+GA0ocADUduHp2sqMUwkkcEg6RimvR9p6YrSCR1oEOc6PZQ9tV6T4WxXKpYH iCuPxrr9xC+XiU4eoDZ3I348VSb6u33F9IF5rDnTo1BFoxo= -----END CERTIFICATE-----Generated at Wed May 13 04:53:27 2026 by rpki-client