$ rpki-client -vvf rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030363a3a2f34382d3438203d3e203338353030.roa File: 323430333a323730303a343030363a3a2f34382d3438203d3e203338353030.roa (raw, json) Hash identifier: Dn0C0Cjv5iD6OdOUcJeM9QJKi8drPcihQmuSNlwtVfU= Subject key identifier: D4:40:09:A7:61:7B:80:71:AB:E6:F4:B8:CA:4C:40:DD:F8:B1:C6:A0 Certificate issuer: /CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293 Certificate serial: 1CA9CE3336AA84FB13B944F875C84851BF461CE7 Authority key identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030363a3a2f34382d3438203d3e203338353030.roa Signing time: Sun 03 May 2026 03:00:08 +0000 ROA not before: Sun 03 May 2026 02:55:08 +0000 ROA not after: Sun 02 May 2027 03:00:08 +0000 asID: 38500 IP address blocks: 2403:2700:4006::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:a9:ce:33:36:aa:84:fb:13:b9:44:f8:75:c8:48:51:bf:46:1c:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293 Validity Not Before: May 3 02:55:08 2026 GMT Not After : May 2 03:00:08 2027 GMT Subject: CN=D44009A7617B8071ABE6F4B8CA4C40DDF8B1C6A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4f:a0:56:e3:23:86:1e:ad:6e:0a:65:6a:10: 09:3e:ca:48:73:06:44:93:a2:65:a8:c3:b8:38:90: 27:64:df:3b:c4:2a:24:ec:73:6a:b2:64:09:dc:e8: 07:0f:c0:2c:e8:54:ca:c0:ad:bf:7e:a8:f2:dd:80: c7:51:df:f0:d5:88:9c:37:1e:b4:5c:20:ff:5a:36: 54:f4:76:60:df:e9:b9:aa:b1:f6:eb:db:7f:5f:e1: f2:af:4b:5a:18:8a:5e:7f:ca:46:3b:f7:1e:34:8e: 97:67:b6:53:0b:82:d7:fe:f3:3e:5e:82:f1:54:ee: 56:e4:bc:58:42:aa:93:6d:2d:94:50:95:ce:5a:67: b6:79:54:db:42:b0:73:7e:1b:ff:23:c7:3e:4c:7b: d6:69:d1:d9:3c:88:21:ad:7a:55:83:78:38:8d:0a: d8:90:a2:ef:95:33:50:81:98:5f:03:aa:f8:60:9b: 8f:86:39:8a:60:81:c4:7a:2a:20:a6:fe:2e:c6:10: d0:e6:96:d8:2a:6d:38:f8:8d:15:f7:a1:ad:23:69: 35:db:3c:4d:c5:15:90:ac:c0:31:e8:7f:1a:ad:75: c8:99:88:bd:7e:cb:13:de:b0:21:55:d7:d5:99:c0: 4d:b5:a6:c8:ae:7d:dd:aa:a5:ee:79:65:d4:c7:de: 30:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:40:09:A7:61:7B:80:71:AB:E6:F4:B8:CA:4C:40:DD:F8:B1:C6:A0 X509v3 Authority Key Identifier: keyid:FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030363a3a2f34382d3438203d3e203338353030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:2700:4006::/48 Signature Algorithm: sha256WithRSAEncryption 8b:20:78:54:3e:1a:1a:9a:d7:22:ad:c3:93:c8:f1:94:a7:7c: f4:52:48:74:9b:f5:07:2f:66:4d:ad:dc:78:61:0b:f6:6c:1d: f2:30:1e:29:25:87:ab:b9:c5:65:d7:25:56:30:12:c5:09:72: ab:7a:8f:60:fb:3d:c3:58:c4:51:c6:bb:e7:1d:09:fd:8a:30: e3:7e:df:69:69:07:49:08:c4:99:65:50:74:c1:ef:85:e8:96: 65:c3:14:a5:c1:69:d0:34:f1:b0:1e:c6:fa:f6:21:5a:28:c4: bb:e7:68:06:fe:68:80:e1:e3:e0:0e:57:f5:bc:18:5d:d9:03: de:28:1b:ad:fb:5b:be:e0:84:7d:19:c7:f3:87:07:47:b1:ec: be:16:6b:db:cf:4a:26:87:ea:fd:45:28:ee:20:7a:e2:17:78: 46:0e:3d:b6:cc:b2:33:ae:9a:65:85:dc:2b:df:1c:58:f5:74: 15:41:ee:1a:eb:83:98:64:ab:7d:dc:b1:64:87:e3:31:2f:25: 21:d1:05:33:7b:95:98:0c:bc:b8:96:88:89:fe:7e:94:38:0f: b6:48:1a:3d:e2:51:0c:31:1c:ea:11:bb:3b:d6:6b:fe:c0:75: 7a:e1:d1:64:21:1d:b7:1c:a1:b1:a0:24:68:1b:23:ab:75:e6: 93:d4:31:63 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUHKnOMzaqhPsTuUT4dchIUb9GHOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIwODFDNEI5MDlDREY1NjE4NEQwNDU1QjJBQTFGNTJF QkZDOTI5MzAeFw0yNjA1MDMwMjU1MDhaFw0yNzA1MDIwMzAwMDhaMDMxMTAvBgNV BAMTKEQ0NDAwOUE3NjE3QjgwNzFBQkU2RjRCOENBNEM0MERERjhCMUM2QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6T6BW4yOGHq1uCmVqEAk+ykhz BkSTomWow7g4kCdk3zvEKiTsc2qyZAnc6AcPwCzoVMrArb9+qPLdgMdR3/DViJw3 HrRcIP9aNlT0dmDf6bmqsfbr239f4fKvS1oYil5/ykY79x40jpdntlMLgtf+8z5e gvFU7lbkvFhCqpNtLZRQlc5aZ7Z5VNtCsHN+G/8jxz5Me9Zp0dk8iCGtelWDeDiN CtiQou+VM1CBmF8Dqvhgm4+GOYpggcR6KiCm/i7GENDmltgqbTj4jRX3oa0jaTXb PE3FFZCswDHofxqtdciZiL1+yxPesCFV19WZwE21psiufd2qpe55ZdTH3jC/AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU1EAJp2F7gHGr5vS4ykxA3fixxqAwHwYDVR0j BBgwFoAU+wgcS5Cc31YYTQRVsqofUuv8kpMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjA0MDY4ZjMtYTc1Yi00NzY0LTllODAtMWZhNTcyOTIwN2ZjLzAvRkIwODFDNEI5 MDlDREY1NjE4NEQwNDU1QjJBQTFGNTJFQkZDOTI5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjA4MUM0QjkwOUNERjU2MTg0RDA0NTVCMkFBMUY1MkVCRkM5 MjkzLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2IwNDA2OGYzLWE3NWItNDc2NC05 ZTgwLTFmYTU3MjkyMDdmYy8wLzMyMzQzMDMzM2EzMjM3MzAzMDNhMzQzMDMwMzYz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMDMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAMn AEAGMA0GCSqGSIb3DQEBCwUAA4IBAQCLIHhUPhoamtcircOTyPGUp3z0Ukh0m/UH L2ZNrdx4YQv2bB3yMB4pJYerucVl1yVWMBLFCXKreo9g+z3DWMRRxrvnHQn9ijDj ft9paQdJCMSZZVB0we+F6JZlwxSlwWnQNPGwHsb69iFaKMS752gG/miA4ePgDlf1 vBhd2QPeKBut+1u+4IR9GcfzhwdHsey+Fmvbz0omh+r9RSjuIHriF3hGDj22zLIz rpplhdwr3xxY9XQVQe4a64OYZKt93LFkh+MxLyUh0QUze5WYDLy4loiJ/n6UOA+2 SBo94lEMMRzqEbs71mv+wHV64dFkIR23HKGxoCRoGyOrdeaT1DFj -----END CERTIFICATE-----Generated at Wed May 13 07:14:33 2026 by rpki-client