$ rpki-client -vvf rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/323430323a363938303a323030303a3a2f34382d3438203d3e203539323738.roa File: 323430323a363938303a323030303a3a2f34382d3438203d3e203539323738.roa (raw, json) Hash identifier: SGR/VUMdxBsuFmwp4lsUWkYdYAOdn6A4y8vkO6Hv4pk= Subject key identifier: 4A:35:B1:FE:41:9F:C7:9B:DF:7C:34:59:B2:64:1A:5B:47:6B:CD:BE Certificate issuer: /CN=7637E963EF709E2BBD39881202E68EA7BA09EB64 Certificate serial: 26FB711BA3E15D68821F7C0FD5DC51BEA8382EE0 Authority key identifier: 76:37:E9:63:EF:70:9E:2B:BD:39:88:12:02:E6:8E:A7:BA:09:EB:64 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/323430323a363938303a323030303a3a2f34382d3438203d3e203539323738.roa Signing time: Sun 03 May 2026 02:59:44 +0000 ROA not before: Sun 03 May 2026 02:54:44 +0000 ROA not after: Sun 02 May 2027 02:59:44 +0000 asID: 59278 IP address blocks: 2402:6980:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.crl rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:20:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:fb:71:1b:a3:e1:5d:68:82:1f:7c:0f:d5:dc:51:be:a8:38:2e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7637E963EF709E2BBD39881202E68EA7BA09EB64 Validity Not Before: May 3 02:54:44 2026 GMT Not After : May 2 02:59:44 2027 GMT Subject: CN=4A35B1FE419FC79BDF7C3459B2641A5B476BCDBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:07:90:5a:59:3a:62:e9:6b:46:8c:17:bf:07: 94:41:b3:50:04:65:38:09:7e:da:e1:26:25:63:bb: ca:f6:4e:65:e2:e4:33:74:19:98:50:93:2e:0e:65: ee:1c:14:90:0c:6b:ec:1b:ed:a3:7c:8a:30:71:0a: 84:64:25:2c:ed:0b:5b:38:2c:4e:56:5e:0c:c2:ac: c3:9c:d7:d4:43:d7:ab:b8:f1:b8:88:a1:6b:ae:e5: 48:db:ca:80:34:f5:09:bf:d2:f8:28:6a:41:5c:78: 0f:01:04:99:e9:05:c9:f6:87:16:4c:06:fa:46:59: b9:63:3e:af:78:47:63:17:8d:e2:df:cb:46:4d:08: c8:ab:63:52:b6:f8:db:db:fc:13:92:35:60:bd:38: 33:d4:4f:a8:c0:a0:db:ae:c6:6c:a6:96:b1:4c:64: 7d:5f:78:88:9a:83:12:ef:fc:de:67:f4:37:f6:51: 87:97:6f:92:cd:cf:41:80:8a:de:6a:ac:56:1b:ea: 9c:fd:d7:d7:39:61:f1:68:8e:0d:a8:14:b4:74:09: 51:99:c4:34:42:f7:ef:ec:7b:49:c5:be:03:ab:3f: 93:24:01:bd:fb:ec:7b:75:10:2a:2a:3f:55:6d:85: ad:20:d4:ce:b9:53:27:24:8f:92:9b:82:bb:be:d0: 81:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:35:B1:FE:41:9F:C7:9B:DF:7C:34:59:B2:64:1A:5B:47:6B:CD:BE X509v3 Authority Key Identifier: keyid:76:37:E9:63:EF:70:9E:2B:BD:39:88:12:02:E6:8E:A7:BA:09:EB:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/323430323a363938303a323030303a3a2f34382d3438203d3e203539323738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:6980:2000::/48 Signature Algorithm: sha256WithRSAEncryption 11:fa:e7:79:ff:08:eb:bf:97:71:7f:ec:fe:2a:36:17:06:4d: 64:78:2c:fd:78:f0:26:f5:60:2a:03:4b:56:8f:7c:36:e5:2e: 30:f1:4f:dc:5e:af:92:f1:67:76:47:43:f8:fc:31:3c:3e:01: dd:b9:b1:a7:9f:66:c8:38:79:95:02:16:c4:6b:fb:a0:94:ec: 24:c7:f9:db:ef:a0:9e:1e:09:7a:d4:8a:22:70:ba:5d:72:ea: 55:5f:d5:a9:37:e2:b3:fc:80:78:39:df:fc:c0:d2:64:08:86: ec:07:05:aa:c2:11:6a:98:66:f8:04:59:99:16:ff:fa:7f:a2: 7d:27:e8:4a:28:40:98:81:1b:e3:65:68:f9:48:84:2b:ed:85: 1e:67:68:79:5f:15:49:a8:46:98:5a:8d:51:21:3e:7c:e0:ef: f0:d4:31:44:02:55:cc:bf:e6:9a:38:60:e1:d1:28:4a:d2:60: 13:94:26:09:04:09:be:77:4b:10:d8:e2:54:ba:66:59:df:f3: 8e:69:f6:29:50:08:dc:60:7d:16:13:59:97:be:11:9b:00:cd: 77:4a:20:cc:52:6b:60:53:2b:dc:c4:3e:3c:1b:4e:6d:59:37: 2e:1f:53:a8:d3:ce:fc:37:e1:9e:6c:d5:b9:2d:eb:c8:08:df: 72:77:f9:b9 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUJvtxG6PhXWiCH3wP1dxRvqg4LuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzYzN0U5NjNFRjcwOUUyQkJEMzk4ODEyMDJFNjhFQTdC QTA5RUI2NDAeFw0yNjA1MDMwMjU0NDRaFw0yNzA1MDIwMjU5NDRaMDMxMTAvBgNV BAMTKDRBMzVCMUZFNDE5RkM3OUJERjdDMzQ1OUIyNjQxQTVCNDc2QkNEQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVB5BaWTpi6WtGjBe/B5RBs1AE ZTgJftrhJiVju8r2TmXi5DN0GZhQky4OZe4cFJAMa+wb7aN8ijBxCoRkJSztC1s4 LE5WXgzCrMOc19RD16u48biIoWuu5UjbyoA09Qm/0vgoakFceA8BBJnpBcn2hxZM BvpGWbljPq94R2MXjeLfy0ZNCMirY1K2+Nvb/BOSNWC9ODPUT6jAoNuuxmymlrFM ZH1feIiagxLv/N5n9Df2UYeXb5LNz0GAit5qrFYb6pz919c5YfFojg2oFLR0CVGZ xDRC9+/se0nFvgOrP5MkAb377Ht1ECoqP1Vtha0g1M65Uyckj5Kbgru+0IFtAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUSjWx/kGfx5vffDRZsmQaW0drzb4wHwYDVR0j BBgwFoAUdjfpY+9wniu9OYgSAuaOp7oJ62QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWYxYzc5ZjEtMjY0ZS00MjNmLTllMDgtMGIyOTAwZGE2OTQ5LzAvNzYzN0U5NjNF RjcwOUUyQkJEMzk4ODEyMDJFNjhFQTdCQTA5RUI2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NjM3RTk2M0VGNzA5RTJCQkQzOTg4MTIwMkU2OEVBN0JBMDlF QjY0LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FmMWM3OWYxLTI2NGUtNDIzZi05 ZTA4LTBiMjkwMGRhNjk0OS8wLzMyMzQzMDMyM2EzNjM5MzgzMDNhMzIzMDMwMzAz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTM5MzIzNzM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAJp gCAAMA0GCSqGSIb3DQEBCwUAA4IBAQAR+ud5/wjrv5dxf+z+KjYXBk1keCz9ePAm 9WAqA0tWj3w25S4w8U/cXq+S8Wd2R0P4/DE8PgHdubGnn2bIOHmVAhbEa/uglOwk x/nb76CeHgl61IoicLpdcupVX9WpN+Kz/IB4Od/8wNJkCIbsBwWqwhFqmGb4BFmZ Fv/6f6J9J+hKKECYgRvjZWj5SIQr7YUeZ2h5XxVJqEaYWo1RIT584O/w1DFEAlXM v+aaOGDh0ShK0mATlCYJBAm+d0sQ2OJUumZZ3/OOafYpUAjcYH0WE1mXvhGbAM13 SiDMUmtgUyvcxD48G05tWTcuH1Oo0878N+GebNW5LevICN9yd/m5 -----END CERTIFICATE-----Generated at Wed May 13 12:24:14 2026 by rpki-client