$ rpki-client -vvf rpki-rsync.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/323430373a396338303a3a2f33322d3438203d3e20313335343834.roa File: 323430373a396338303a3a2f33322d3438203d3e20313335343834.roa (raw, json) Hash identifier: 2tzcr5upqyH9fZykdfFPqjFFvR9omuDbfe3zk3q54uE= Subject key identifier: 56:70:02:BF:B1:8F:C1:79:CA:D9:17:8A:5C:D8:BE:E7:4D:2A:02:EF Certificate issuer: /CN=375BB2985478673C260242A779568A4435FE5916 Certificate serial: 2C2726429A56128A19420B32D2AA5DEE85198889 Authority key identifier: 37:5B:B2:98:54:78:67:3C:26:02:42:A7:79:56:8A:44:35:FE:59:16 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/375BB2985478673C260242A779568A4435FE5916.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/323430373a396338303a3a2f33322d3438203d3e20313335343834.roa Signing time: Sun 03 May 2026 02:58:36 +0000 ROA not before: Sun 03 May 2026 02:53:36 +0000 ROA not after: Sun 02 May 2027 02:58:36 +0000 asID: 135484 IP address blocks: 2407:9c80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/375BB2985478673C260242A779568A4435FE5916.crl rsync://rpki-rsync.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/375BB2985478673C260242A779568A4435FE5916.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/375BB2985478673C260242A779568A4435FE5916.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:27:26:42:9a:56:12:8a:19:42:0b:32:d2:aa:5d:ee:85:19:88:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=375BB2985478673C260242A779568A4435FE5916 Validity Not Before: May 3 02:53:36 2026 GMT Not After : May 2 02:58:36 2027 GMT Subject: CN=567002BFB18FC179CAD9178A5CD8BEE74D2A02EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6b:8b:8c:9c:49:3f:cb:d8:42:61:18:0f:2a: 0e:1c:b7:50:d2:38:30:9f:4c:fb:af:17:3a:91:a3: 4a:78:66:ed:60:0b:e1:c9:5b:03:07:4f:5c:16:8b: 1e:dd:4c:f9:f6:ac:47:fc:65:14:fd:a8:91:a9:54: 79:0c:ed:55:ee:bf:4a:a1:04:e6:94:1a:fc:c4:3f: fa:38:ed:e5:0e:5f:f4:1e:e7:b4:27:b3:bc:a7:e0: d1:be:cc:15:df:f7:98:48:a8:05:26:6b:b1:6c:9f: e5:96:1c:55:49:74:75:88:44:e9:1c:d0:1a:44:d6: 6b:a7:5f:73:56:40:80:4c:6b:8e:3a:3b:6a:d7:aa: 30:08:60:fb:12:ed:27:90:8d:b8:49:dd:e4:06:b6: a0:fe:e1:a6:f3:95:17:7e:32:2c:0c:20:43:7a:c8: 2f:b9:00:16:51:97:52:b6:fc:9a:a2:c5:7b:4d:7d: 57:d4:bd:d8:19:51:44:a7:50:f9:4f:74:78:14:0c: 49:89:12:87:72:ec:92:1c:1d:24:59:fe:bf:a0:33: ac:b8:a7:e0:f5:ce:1d:56:f9:75:37:52:3b:d5:e2: af:56:58:be:ce:35:8c:4f:b5:00:15:36:4b:f5:c1: 38:d3:35:cd:a7:29:30:53:88:a0:11:17:f0:4c:d4: 3b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:70:02:BF:B1:8F:C1:79:CA:D9:17:8A:5C:D8:BE:E7:4D:2A:02:EF X509v3 Authority Key Identifier: keyid:37:5B:B2:98:54:78:67:3C:26:02:42:A7:79:56:8A:44:35:FE:59:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/375BB2985478673C260242A779568A4435FE5916.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/375BB2985478673C260242A779568A4435FE5916.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/323430373a396338303a3a2f33322d3438203d3e20313335343834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:9c80::/32 Signature Algorithm: sha256WithRSAEncryption 07:91:45:24:6d:68:6b:40:75:f3:2d:10:2e:53:4d:b0:48:e9: 4b:bb:93:b0:9e:21:0f:f0:06:e6:c1:86:2e:9e:fb:8b:d2:f6: ab:67:22:72:5e:e4:11:2d:18:57:ca:ff:78:7f:07:f0:b6:27: 12:56:ff:73:20:58:05:34:72:29:e5:c7:40:6b:96:b7:0a:95: 38:f1:6f:40:af:20:18:3e:4c:8a:ed:d2:9d:8c:f3:60:14:35: 7a:cd:6b:b1:98:50:ad:ed:d7:e1:c5:3a:03:fc:a6:5e:1e:2f: c0:ae:69:c7:a2:b1:b2:1a:4d:f4:e2:e0:bb:6d:8a:c3:0f:73: 05:8f:db:40:5f:0c:c4:ef:04:4f:0d:4a:77:45:23:9a:f3:d8: 3f:40:26:80:10:e9:47:a5:5b:94:c8:4e:4d:f7:0a:c6:a1:bf: 4e:dc:7c:de:60:d6:2d:1d:3b:17:d1:70:65:d0:06:75:b6:2c: ed:1d:3b:64:b0:54:8e:d3:27:d4:0a:0f:72:1b:77:46:a0:e1: ad:d2:e5:ec:f3:06:70:34:b8:f8:04:1c:06:4f:a2:66:3f:37: e4:23:ce:40:1f:c5:60:94:e9:25:d3:cc:8e:60:35:8a:93:d5: e7:1f:e2:7a:94:66:a4:5a:b8:76:52:89:29:7d:3c:ab:3c:38: 7e:4b:b7:b5 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIULCcmQppWEooZQgsy0qpd7oUZiIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc1QkIyOTg1NDc4NjczQzI2MDI0MkE3Nzk1NjhBNDQz NUZFNTkxNjAeFw0yNjA1MDMwMjUzMzZaFw0yNzA1MDIwMjU4MzZaMDMxMTAvBgNV BAMTKDU2NzAwMkJGQjE4RkMxNzlDQUQ5MTc4QTVDRDhCRUU3NEQyQTAyRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDba4uMnEk/y9hCYRgPKg4ct1DS ODCfTPuvFzqRo0p4Zu1gC+HJWwMHT1wWix7dTPn2rEf8ZRT9qJGpVHkM7VXuv0qh BOaUGvzEP/o47eUOX/Qe57Qns7yn4NG+zBXf95hIqAUma7Fsn+WWHFVJdHWIROkc 0BpE1munX3NWQIBMa446O2rXqjAIYPsS7SeQjbhJ3eQGtqD+4abzlRd+MiwMIEN6 yC+5ABZRl1K2/JqixXtNfVfUvdgZUUSnUPlPdHgUDEmJEody7JIcHSRZ/r+gM6y4 p+D1zh1W+XU3UjvV4q9WWL7ONYxPtQAVNkv1wTjTNc2nKTBTiKARF/BM1DslAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUVnACv7GPwXnK2ReKXNi+500qAu8wHwYDVR0j BBgwFoAUN1uymFR4ZzwmAkKneVaKRDX+WRYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWMzZjIyODgtODhjZi00ZDJiLWJiYTYtYTAzZGQ1ZjgzNzYxLzAvMzc1QkIyOTg1 NDc4NjczQzI2MDI0MkE3Nzk1NjhBNDQzNUZFNTkxNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNzVCQjI5ODU0Nzg2NzNDMjYwMjQyQTc3OTU2OEE0NDM1RkU1 OTE2LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FjM2YyMjg4LTg4Y2YtNGQyYi1i YmE2LWEwM2RkNWY4Mzc2MS8wLzMyMzQzMDM3M2EzOTYzMzgzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzMzNTM0MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQHnIAwDQYJKoZI hvcNAQELBQADggEBAAeRRSRtaGtAdfMtEC5TTbBI6Uu7k7CeIQ/wBubBhi6e+4vS 9qtnInJe5BEtGFfK/3h/B/C2JxJW/3MgWAU0cinlx0BrlrcKlTjxb0CvIBg+TIrt 0p2M82AUNXrNa7GYUK3t1+HFOgP8pl4eL8CuaceisbIaTfTi4LttisMPcwWP20Bf DMTvBE8NSndFI5rz2D9AJoAQ6UelW5TITk33Csahv07cfN5g1i0dOxfRcGXQBnW2 LO0dO2SwVI7TJ9QKD3Ibd0ag4a3S5ezzBnA0uPgEHAZPomY/N+QjzkAfxWCU6SXT zI5gNYqT1ecf4nqUZqRauHZSiSl9PKs8OH5Lt7U= -----END CERTIFICATE-----Generated at Wed May 13 08:39:54 2026 by rpki-client