$ rpki-client -vvf rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/323430373a623463303a643a3a2f34382d3438203d3e20313432333636.roa File: 323430373a623463303a643a3a2f34382d3438203d3e20313432333636.roa (raw, json) Hash identifier: Nda6FqqHwv307lkTxH+b0mWevIjFxVsW+c3rWmYY64U= Subject key identifier: 34:97:66:8E:E9:7A:78:57:93:7F:FF:65:1E:A2:FE:A6:F3:76:33:CB Certificate issuer: /CN=399FBE55CFD957C1E3849C75FE378403E394BB45 Certificate serial: 78BFC9901EE0DC110CD6C19A86E960AD14A8127B Authority key identifier: 39:9F:BE:55:CF:D9:57:C1:E3:84:9C:75:FE:37:84:03:E3:94:BB:45 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/323430373a623463303a643a3a2f34382d3438203d3e20313432333636.roa Signing time: Sun 03 May 2026 02:57:24 +0000 ROA not before: Sun 03 May 2026 02:52:24 +0000 ROA not after: Sun 02 May 2027 02:57:24 +0000 asID: 142366 IP address blocks: 2407:b4c0:d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.crl rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:bf:c9:90:1e:e0:dc:11:0c:d6:c1:9a:86:e9:60:ad:14:a8:12:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399FBE55CFD957C1E3849C75FE378403E394BB45 Validity Not Before: May 3 02:52:24 2026 GMT Not After : May 2 02:57:24 2027 GMT Subject: CN=3497668EE97A7857937FFF651EA2FEA6F37633CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c6:d2:d3:a2:29:82:38:64:89:20:bc:b6:8a: c2:ff:a4:4a:76:be:c0:23:be:e9:d4:ad:e5:3f:68: de:71:ee:50:58:76:f8:b7:d2:1a:04:14:2d:7c:ec: d5:ad:2d:e1:cc:30:7b:c7:c5:a2:36:25:4c:1a:03: 57:92:af:b2:b7:2d:23:61:05:5f:e0:a5:88:a0:e5: 88:f4:45:c9:83:32:c2:ad:77:76:38:cd:ae:09:66: ad:81:47:e0:68:d6:7c:ab:26:04:5f:bf:6a:30:6f: 2c:07:27:af:79:5d:11:f1:1b:42:09:f1:4c:3f:3d: e8:fd:21:b1:b4:68:eb:ca:1a:d5:03:59:74:76:d1: 4d:d0:70:25:9a:a5:3b:79:46:c1:73:e2:8c:ff:d8: 42:a0:b9:fc:f1:88:48:5f:3e:fd:29:c8:34:e9:80: c3:c2:37:f4:fa:e0:14:28:dd:62:7e:7e:8d:14:a7: 45:b5:c4:2f:a1:2e:bd:39:88:a8:4c:93:35:5d:43: ec:10:b6:32:65:9c:1a:b5:ca:f9:a1:2d:b9:b8:19: 40:e2:89:19:54:22:54:2b:8b:8e:66:59:cd:dc:cb: 44:34:73:99:c7:8f:4e:d3:5d:c9:d0:cf:b2:b8:45: b3:e2:73:05:9c:05:b1:80:7a:1c:98:4f:9c:ec:21: eb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:97:66:8E:E9:7A:78:57:93:7F:FF:65:1E:A2:FE:A6:F3:76:33:CB X509v3 Authority Key Identifier: keyid:39:9F:BE:55:CF:D9:57:C1:E3:84:9C:75:FE:37:84:03:E3:94:BB:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/323430373a623463303a643a3a2f34382d3438203d3e20313432333636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:b4c0:d::/48 Signature Algorithm: sha256WithRSAEncryption 2c:32:0c:53:4a:ae:8f:d4:be:e7:59:7f:57:24:b6:c6:7c:e1: 5a:47:c9:b0:7e:90:92:8d:bb:41:50:e0:05:4e:b4:3c:3f:74: aa:fd:9c:71:64:52:00:4d:1d:d3:9c:5b:58:f4:b5:e7:79:e0: 2c:66:13:1b:eb:60:54:a0:ee:3d:b7:44:9f:f7:b3:d4:52:de: 22:d0:59:7d:06:b2:da:c6:14:56:61:20:92:78:5e:cb:a1:a3: 31:a3:5e:28:d9:0c:5e:7d:a7:55:01:59:79:15:fc:7d:10:28: 0d:ef:dd:79:4c:92:2c:75:53:b2:87:68:cc:27:c1:1c:59:60: 1c:00:11:5b:0e:9d:c3:9f:4b:95:ff:3d:90:ae:02:54:02:86: 9d:7b:a2:c7:93:a1:03:17:c8:78:08:de:86:1f:35:bc:9a:4b: af:5d:4d:e4:1a:8a:16:39:51:b8:f2:67:7c:64:a2:f0:a7:58: ba:9f:b7:0f:85:11:e4:cf:25:97:c4:f6:a7:c8:a4:2a:00:2c: 4f:fd:c7:fd:dd:13:e5:d7:51:6a:0b:16:cf:d9:d4:2e:25:45: b7:28:04:75:3a:7c:ae:3f:5f:86:fa:18:f2:1c:8e:a1:21:64: 1a:9f:ed:35:5e:f5:92:0f:5c:9f:ad:05:43:23:fe:67:2b:e5: f9:fd:97:70 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUeL/JkB7g3BEM1sGahulgrRSoEnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5RkJFNTVDRkQ5NTdDMUUzODQ5Qzc1RkUzNzg0MDNF Mzk0QkI0NTAeFw0yNjA1MDMwMjUyMjRaFw0yNzA1MDIwMjU3MjRaMDMxMTAvBgNV BAMTKDM0OTc2NjhFRTk3QTc4NTc5MzdGRkY2NTFFQTJGRUE2RjM3NjMzQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCxtLToimCOGSJILy2isL/pEp2 vsAjvunUreU/aN5x7lBYdvi30hoEFC187NWtLeHMMHvHxaI2JUwaA1eSr7K3LSNh BV/gpYig5Yj0RcmDMsKtd3Y4za4JZq2BR+Bo1nyrJgRfv2owbywHJ695XRHxG0IJ 8Uw/Pej9IbG0aOvKGtUDWXR20U3QcCWapTt5RsFz4oz/2EKgufzxiEhfPv0pyDTp gMPCN/T64BQo3WJ+fo0Up0W1xC+hLr05iKhMkzVdQ+wQtjJlnBq1yvmhLbm4GUDi iRlUIlQri45mWc3cy0Q0c5nHj07TXcnQz7K4RbPicwWcBbGAehyYT5zsIetbAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUNJdmjul6eFeTf/9lHqL+pvN2M8swHwYDVR0j BBgwFoAUOZ++Vc/ZV8HjhJx1/jeEA+OUu0UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTcwZGZiNWEtODQ1ZS00ZGRmLWFjYTctYTliMzFjMzFkZmY0LzAvMzk5RkJFNTVD RkQ5NTdDMUUzODQ5Qzc1RkUzNzg0MDNFMzk0QkI0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOTlGQkU1NUNGRDk1N0MxRTM4NDlDNzVGRTM3ODQwM0UzOTRC QjQ1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E3MGRmYjVhLTg0NWUtNGRkZi1h Y2E3LWE5YjMxYzMxZGZmNC8wLzMyMzQzMDM3M2E2MjM0NjMzMDNhNjQzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzIzMzM2MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkB7TAAA0w DQYJKoZIhvcNAQELBQADggEBACwyDFNKro/UvudZf1cktsZ84VpHybB+kJKNu0FQ 4AVOtDw/dKr9nHFkUgBNHdOcW1j0ted54CxmExvrYFSg7j23RJ/3s9RS3iLQWX0G strGFFZhIJJ4XsuhozGjXijZDF59p1UBWXkV/H0QKA3v3XlMkix1U7KHaMwnwRxZ YBwAEVsOncOfS5X/PZCuAlQChp17oseToQMXyHgI3oYfNbyaS69dTeQaihY5Ubjy Z3xkovCnWLqftw+FEeTPJZfE9qfIpCoALE/9x/3dE+XXUWoLFs/Z1C4lRbcoBHU6 fK4/X4b6GPIcjqEhZBqf7TVe9ZIPXJ+tBUMj/mcr5fn9l3A= -----END CERTIFICATE-----Generated at Wed May 13 04:09:52 2026 by rpki-client