$ rpki-client -vvf rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/323430373a623463303a64643a3a2f34382d3438203d3e20313432333636.roa File: 323430373a623463303a64643a3a2f34382d3438203d3e20313432333636.roa (raw, json) Hash identifier: /vRQ0F5lBxm5YccSzuUARECi1VFqg7FRoH3qOHTCFHs= Subject key identifier: 12:BB:80:9D:46:D7:CF:01:F5:35:0F:F6:3D:86:AC:14:95:31:35:B5 Certificate issuer: /CN=399FBE55CFD957C1E3849C75FE378403E394BB45 Certificate serial: 7BE54CAF1922793961413BA839AEF079E69E7FC5 Authority key identifier: 39:9F:BE:55:CF:D9:57:C1:E3:84:9C:75:FE:37:84:03:E3:94:BB:45 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/323430373a623463303a64643a3a2f34382d3438203d3e20313432333636.roa Signing time: Sun 03 May 2026 02:57:22 +0000 ROA not before: Sun 03 May 2026 02:52:22 +0000 ROA not after: Sun 02 May 2027 02:57:22 +0000 asID: 142366 IP address blocks: 2407:b4c0:dd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.crl rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:e5:4c:af:19:22:79:39:61:41:3b:a8:39:ae:f0:79:e6:9e:7f:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399FBE55CFD957C1E3849C75FE378403E394BB45 Validity Not Before: May 3 02:52:22 2026 GMT Not After : May 2 02:57:22 2027 GMT Subject: CN=12BB809D46D7CF01F5350FF63D86AC14953135B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:62:ec:9d:36:e2:97:ef:ad:d2:83:a1:d9:8f: e2:74:1c:c1:7d:92:73:d7:22:a0:91:4a:4d:b9:e2: e8:4e:7a:51:80:85:56:f6:0c:94:5e:31:51:4b:f8: 11:d8:1d:3c:6c:68:93:8c:5c:8d:cc:4b:5e:0a:bf: 66:a9:75:7e:99:a5:72:97:90:90:ce:96:47:cd:2a: ca:4c:4e:ce:31:69:05:04:ca:ec:4d:9d:6e:27:fb: e3:15:93:87:74:96:e0:4f:9c:7e:9a:4a:b6:d5:89: 94:51:30:9b:77:98:28:c6:6e:96:06:7a:ea:06:ab: dc:84:ca:b9:f2:e4:00:34:0c:fe:92:4c:ae:c7:46: f8:f5:6b:ad:8d:43:d5:46:7c:65:a3:9f:67:d8:e5: 81:b6:35:48:d7:0f:53:e8:db:00:a7:79:98:05:ec: ba:16:98:97:c5:2f:1b:3f:62:5e:39:11:88:b0:49: 49:85:ad:2e:c8:83:8c:2a:a6:a4:a6:dd:7b:3f:e5: a8:af:23:41:7d:dd:1c:c0:6d:32:9d:f9:2e:90:80: 34:e5:0f:8e:64:7c:0b:5f:09:37:23:7f:d1:c4:ba: fe:e9:a7:77:36:16:10:e2:ed:e4:a9:be:a2:a7:c7: 3a:ec:9e:46:40:ab:64:48:a4:c7:05:7f:d6:55:94: 52:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:BB:80:9D:46:D7:CF:01:F5:35:0F:F6:3D:86:AC:14:95:31:35:B5 X509v3 Authority Key Identifier: keyid:39:9F:BE:55:CF:D9:57:C1:E3:84:9C:75:FE:37:84:03:E3:94:BB:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/323430373a623463303a64643a3a2f34382d3438203d3e20313432333636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:b4c0:dd::/48 Signature Algorithm: sha256WithRSAEncryption 85:d7:ea:ce:14:34:92:7f:87:86:7f:f4:37:d7:20:ac:5d:a5: 6d:3a:b4:58:93:f5:ca:43:cd:6f:a4:1f:a1:4b:50:32:a9:83: f5:b5:42:d3:ab:0e:1f:9f:f0:1a:27:5e:3a:e2:2b:f3:18:9a: f9:cb:8f:c0:04:59:16:a2:66:8d:c7:aa:64:4a:93:a3:de:43: ff:93:24:66:96:97:b7:75:4c:c7:7a:5e:fd:b0:f7:58:e6:9b: 53:fd:d7:ba:29:88:cd:b1:c0:ff:a7:bb:e2:07:ae:6c:87:ca: b2:ee:94:2d:3e:1f:98:7f:5b:8e:31:a3:0b:eb:15:49:8d:c5: 40:fd:1e:23:84:29:34:be:d1:b6:64:6c:1e:34:73:a5:54:a4: e4:19:71:07:2b:e8:52:37:57:5b:f5:f6:b4:b4:5b:61:b0:b6: 7d:59:9e:84:54:39:b3:27:bf:3b:c8:7d:d9:33:3a:dc:d0:2a: 62:66:ad:1f:84:ae:f8:1a:26:ba:dd:6d:5d:fd:4b:37:96:1a: 5a:0e:79:05:c3:c9:d0:a9:65:30:5f:66:2c:89:79:9e:85:de: 82:aa:30:e2:1e:26:7a:6f:34:4a:69:56:a8:d3:84:b2:57:7c: 5a:01:27:8d:37:a0:5a:7b:b3:1a:9d:bd:aa:f0:83:e6:17:07: ec:e0:c9:cf -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUe+VMrxkieTlhQTuoOa7weeaef8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5RkJFNTVDRkQ5NTdDMUUzODQ5Qzc1RkUzNzg0MDNF Mzk0QkI0NTAeFw0yNjA1MDMwMjUyMjJaFw0yNzA1MDIwMjU3MjJaMDMxMTAvBgNV BAMTKDEyQkI4MDlENDZEN0NGMDFGNTM1MEZGNjNEODZBQzE0OTUzMTM1QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1YuydNuKX763Sg6HZj+J0HMF9 knPXIqCRSk254uhOelGAhVb2DJReMVFL+BHYHTxsaJOMXI3MS14Kv2apdX6ZpXKX kJDOlkfNKspMTs4xaQUEyuxNnW4n++MVk4d0luBPnH6aSrbViZRRMJt3mCjGbpYG euoGq9yEyrny5AA0DP6STK7HRvj1a62NQ9VGfGWjn2fY5YG2NUjXD1Po2wCneZgF 7LoWmJfFLxs/Yl45EYiwSUmFrS7Ig4wqpqSm3Xs/5aivI0F93RzAbTKd+S6QgDTl D45kfAtfCTcjf9HEuv7pp3c2FhDi7eSpvqKnxzrsnkZAq2RIpMcFf9ZVlFKXAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUEruAnUbXzwH1NQ/2PYasFJUxNbUwHwYDVR0j BBgwFoAUOZ++Vc/ZV8HjhJx1/jeEA+OUu0UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTcwZGZiNWEtODQ1ZS00ZGRmLWFjYTctYTliMzFjMzFkZmY0LzAvMzk5RkJFNTVD RkQ5NTdDMUUzODQ5Qzc1RkUzNzg0MDNFMzk0QkI0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOTlGQkU1NUNGRDk1N0MxRTM4NDlDNzVGRTM3ODQwM0UzOTRC QjQ1LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E3MGRmYjVhLTg0NWUtNGRkZi1h Y2E3LWE5YjMxYzMxZGZmNC8wLzMyMzQzMDM3M2E2MjM0NjMzMDNhNjQ2NDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzMjMzMzYzNi5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQHtMAA 3TANBgkqhkiG9w0BAQsFAAOCAQEAhdfqzhQ0kn+Hhn/0N9cgrF2lbTq0WJP1ykPN b6QfoUtQMqmD9bVC06sOH5/wGideOuIr8xia+cuPwARZFqJmjceqZEqTo95D/5Mk ZpaXt3VMx3pe/bD3WOabU/3XuimIzbHA/6e74geubIfKsu6ULT4fmH9bjjGjC+sV SY3FQP0eI4QpNL7RtmRsHjRzpVSk5BlxByvoUjdXW/X2tLRbYbC2fVmehFQ5sye/ O8h92TM63NAqYmatH4Su+Bomut1tXf1LN5YaWg55BcPJ0KllMF9mLIl5noXegqow 4h4mem80SmlWqNOEsld8WgEnjTegWnuzGp29qvCD5hcH7ODJzw== -----END CERTIFICATE-----Generated at Wed May 13 04:36:24 2026 by rpki-client