$ rpki-client -vvf rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a313a3a2f34382d3438203d3e203338353030.roa File: 323430333a323730303a313a3a2f34382d3438203d3e203338353030.roa (raw, json) Hash identifier: DbXpe2IpoHY8/aAuTmaN/a031/GyjzVsiNGjX+CuE78= Subject key identifier: 8C:0F:13:8D:C4:D3:9F:64:16:9D:D0:64:46:1C:6C:C2:6A:95:47:89 Certificate issuer: /CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293 Certificate serial: 59963A6FFAC27ADDB45B13D91117D75924B13E3C Authority key identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a313a3a2f34382d3438203d3e203338353030.roa Signing time: Sun 03 May 2026 02:59:53 +0000 ROA not before: Sun 03 May 2026 02:54:53 +0000 ROA not after: Sun 02 May 2027 02:59:53 +0000 asID: 38500 IP address blocks: 2403:2700:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:96:3a:6f:fa:c2:7a:dd:b4:5b:13:d9:11:17:d7:59:24:b1:3e:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293 Validity Not Before: May 3 02:54:53 2026 GMT Not After : May 2 02:59:53 2027 GMT Subject: CN=8C0F138DC4D39F64169DD064461C6CC26A954789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6e:10:c4:46:02:5c:5d:f8:6d:d0:3e:64:3a: 11:77:26:3f:f9:60:11:c2:59:ca:8a:62:f6:84:63: 90:8d:e9:9f:2c:29:ee:32:15:12:47:fb:a3:72:5c: 25:db:66:ed:16:b3:b6:45:70:aa:a2:fb:74:53:7c: 99:c8:91:f6:f0:d6:80:9c:38:99:d2:75:f8:0d:2d: af:64:54:ea:73:04:1c:e9:c8:16:44:8d:93:64:0b: 20:ce:97:6a:90:f1:7b:92:13:0c:c3:8c:6b:49:98: 78:fb:99:04:85:02:f1:dd:8a:37:1c:66:2a:8b:bd: 66:e4:55:d7:74:49:4b:23:9e:21:7e:94:de:54:d8: 0f:8d:5a:d6:a4:fb:de:f2:43:dc:3a:00:3d:de:ae: 07:db:8e:5d:cc:93:fa:d5:fe:83:67:93:99:e7:19: 9b:50:cd:b7:dd:30:f7:7f:bb:44:0b:a3:0b:01:f9: 28:77:6a:6b:94:e8:41:d0:20:0f:92:0c:1f:68:24: 79:dc:6d:01:c3:e8:f8:cc:db:10:06:b8:27:51:8b: 1d:59:ff:6e:39:0b:ff:5e:aa:2e:fb:a2:98:4b:f6: fc:05:62:c3:a5:cd:93:5b:64:21:04:55:d8:d0:cc: ba:8f:f8:e8:0e:a3:c3:63:d6:a5:2e:ba:16:c7:c2: df:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:0F:13:8D:C4:D3:9F:64:16:9D:D0:64:46:1C:6C:C2:6A:95:47:89 X509v3 Authority Key Identifier: keyid:FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a313a3a2f34382d3438203d3e203338353030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:2700:1::/48 Signature Algorithm: sha256WithRSAEncryption 7a:d9:f7:c5:75:47:64:d5:19:2f:39:45:1a:5c:21:03:5d:86: e9:06:ad:33:11:19:51:58:21:75:2c:83:fe:7c:20:11:d7:79: 24:15:09:87:eb:a4:7d:8a:eb:cb:bc:4e:a3:63:d4:3b:01:d6: 82:ab:7e:a6:dd:52:58:39:9c:ee:06:b0:f2:fa:b3:fd:0d:fa: b3:54:79:a4:69:40:e8:0c:63:5b:4d:78:a4:87:be:e3:ab:91: 63:27:14:03:dd:e0:4d:ba:94:93:a2:de:a4:a4:e0:32:c4:f4: b3:ff:d8:2f:7c:cf:d2:50:df:00:07:bb:66:82:30:77:fa:f7: 00:79:69:61:a0:a5:08:f9:a8:3b:64:38:1a:29:ae:19:33:f1: 89:3a:a7:7d:17:55:36:1f:00:6c:d8:a8:35:43:2d:5a:64:94: d5:d4:35:63:49:dd:03:e6:8a:98:e6:a8:23:65:e9:55:91:32: 04:8c:a9:f1:33:c0:71:45:66:16:ee:26:d0:94:86:6b:a8:f9: 52:a7:d5:e4:47:17:1d:7a:ec:34:7c:5b:27:c1:d1:0c:3b:bf: 9d:4f:a2:28:d9:c2:31:d7:e9:31:b1:39:32:f8:dd:fb:65:bb: 5d:df:5b:ec:ac:63:51:a9:a0:90:02:26:07:6b:45:3e:b6:ed: 37:10:b7:2d -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUWZY6b/rCet20WxPZERfXWSSxPjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIwODFDNEI5MDlDREY1NjE4NEQwNDU1QjJBQTFGNTJF QkZDOTI5MzAeFw0yNjA1MDMwMjU0NTNaFw0yNzA1MDIwMjU5NTNaMDMxMTAvBgNV BAMTKDhDMEYxMzhEQzREMzlGNjQxNjlERDA2NDQ2MUM2Q0MyNkE5NTQ3ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2bhDERgJcXfht0D5kOhF3Jj/5 YBHCWcqKYvaEY5CN6Z8sKe4yFRJH+6NyXCXbZu0Ws7ZFcKqi+3RTfJnIkfbw1oCc OJnSdfgNLa9kVOpzBBzpyBZEjZNkCyDOl2qQ8XuSEwzDjGtJmHj7mQSFAvHdijcc ZiqLvWbkVdd0SUsjniF+lN5U2A+NWtak+97yQ9w6AD3ergfbjl3Mk/rV/oNnk5nn GZtQzbfdMPd/u0QLowsB+Sh3amuU6EHQIA+SDB9oJHncbQHD6PjM2xAGuCdRix1Z /245C/9eqi77ophL9vwFYsOlzZNbZCEEVdjQzLqP+OgOo8Nj1qUuuhbHwt+NAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUjA8TjcTTn2QWndBkRhxswmqVR4kwHwYDVR0j BBgwFoAU+wgcS5Cc31YYTQRVsqofUuv8kpMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjA0MDY4ZjMtYTc1Yi00NzY0LTllODAtMWZhNTcyOTIwN2ZjLzAvRkIwODFDNEI5 MDlDREY1NjE4NEQwNDU1QjJBQTFGNTJFQkZDOTI5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjA4MUM0QjkwOUNERjU2MTg0RDA0NTVCMkFBMUY1MkVCRkM5 MjkzLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2IwNDA2OGYzLWE3NWItNDc2NC05 ZTgwLTFmYTU3MjkyMDdmYy8wLzMyMzQzMDMzM2EzMjM3MzAzMDNhMzEzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAMnAAABMA0G CSqGSIb3DQEBCwUAA4IBAQB62ffFdUdk1RkvOUUaXCEDXYbpBq0zERlRWCF1LIP+ fCAR13kkFQmH66R9iuvLvE6jY9Q7AdaCq36m3VJYOZzuBrDy+rP9DfqzVHmkaUDo DGNbTXikh77jq5FjJxQD3eBNupSTot6kpOAyxPSz/9gvfM/SUN8AB7tmgjB3+vcA eWlhoKUI+ag7ZDgaKa4ZM/GJOqd9F1U2HwBs2Kg1Qy1aZJTV1DVjSd0D5oqY5qgj ZelVkTIEjKnxM8BxRWYW7ibQlIZrqPlSp9XkRxcdeuw0fFsnwdEMO7+dT6Io2cIx 1+kxsTky+N37Zbtd31vsrGNRqaCQAiYHa0U+tu03ELct -----END CERTIFICATE-----Generated at Wed May 13 05:25:41 2026 by rpki-client