$ rpki-client -vvf rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a353a3a2f34382d3438203d3e203338353030.roa File: 323430333a323730303a353a3a2f34382d3438203d3e203338353030.roa (raw, json) Hash identifier: b+yMzGkWl9rmCAfWfJMbLJBokDh1J+j9OaHFem5oT4E= Subject key identifier: B5:72:CB:DA:8F:9D:47:DC:59:FD:A6:51:3E:14:66:D7:9C:B4:31:F0 Certificate issuer: /CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293 Certificate serial: 0BE94B1BEE1C8D2671D7A943B9AAE3987E73AA6E Authority key identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a353a3a2f34382d3438203d3e203338353030.roa Signing time: Sun 03 May 2026 03:00:04 +0000 ROA not before: Sun 03 May 2026 02:55:04 +0000 ROA not after: Sun 02 May 2027 03:00:04 +0000 asID: 38500 IP address blocks: 2403:2700:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:e9:4b:1b:ee:1c:8d:26:71:d7:a9:43:b9:aa:e3:98:7e:73:aa:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293 Validity Not Before: May 3 02:55:04 2026 GMT Not After : May 2 03:00:04 2027 GMT Subject: CN=B572CBDA8F9D47DC59FDA6513E1466D79CB431F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:65:4e:49:34:1b:fb:f9:ff:a8:dc:75:3a:d7: 2b:31:b5:11:35:b4:5b:53:bb:b2:ad:dc:00:da:24: d4:43:31:ca:6f:91:ff:33:d0:e6:14:06:c3:be:19: 5c:aa:1b:6e:ce:4f:06:42:af:df:84:13:17:ff:3f: 72:f6:2e:69:95:3d:8a:e9:1f:f7:b3:7f:dd:d1:6d: e4:2f:c4:51:f4:e9:46:40:01:63:e4:31:2c:09:bc: 3a:78:2b:3c:30:6c:42:e0:33:e3:88:0c:ce:eb:ba: 2d:41:94:4c:6d:ee:ae:54:1d:a6:82:2f:6d:ce:a4: de:f3:7e:c5:de:c7:f2:33:dc:6b:85:ef:76:db:6c: 49:ab:3c:96:58:23:9d:13:f5:46:12:1c:8b:8f:2f: 14:24:34:be:bf:d4:16:e3:56:e5:e0:1f:05:e2:e3: ed:e3:70:c2:b3:24:7e:ad:5b:b8:8b:80:e4:14:e1: f3:b3:61:18:bc:dd:af:05:b8:aa:a8:72:4b:8d:cb: bf:f5:ee:ac:0e:43:08:a6:ea:08:01:0e:58:da:fb: a2:c3:83:74:7e:f9:c7:72:27:13:71:a3:b4:a1:38: f1:a0:c5:8a:9f:90:e4:02:39:c1:65:75:65:dd:e6: a8:5f:4f:c5:a6:21:f9:bc:fb:b8:23:9a:9b:83:67: bb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:72:CB:DA:8F:9D:47:DC:59:FD:A6:51:3E:14:66:D7:9C:B4:31:F0 X509v3 Authority Key Identifier: keyid:FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a353a3a2f34382d3438203d3e203338353030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:2700:5::/48 Signature Algorithm: sha256WithRSAEncryption 62:1d:6d:71:2a:17:e6:05:81:03:8c:09:cd:42:3c:91:71:c8: 4b:7f:cc:36:03:d5:5b:81:96:45:23:2e:52:7c:c9:5a:fd:af: e8:77:3d:1f:b5:db:04:16:ad:1d:f6:e4:82:cb:c3:e3:ed:06: 1a:28:f2:9a:a6:66:9c:d9:05:05:36:84:e4:b6:f7:99:5a:e3: 40:98:79:af:13:43:3f:f4:b2:e8:e3:0d:58:06:45:68:a0:5d: 40:98:38:1a:38:b2:03:db:42:44:94:54:eb:56:5d:ac:1f:d4: ba:a7:76:47:aa:80:a6:18:a6:fb:e3:fe:2c:9c:9d:08:72:51: b1:c1:9f:73:46:aa:0a:89:3a:75:b6:8e:4d:25:a3:42:95:ec: 0f:9c:2a:0e:29:e5:b6:17:72:d4:c8:6d:75:4c:74:0c:d2:09: 45:c5:c4:01:32:d4:23:62:e9:68:a9:c6:00:b9:c9:64:a4:5a: fd:fc:27:e6:6c:b1:bc:5c:58:65:a2:fb:41:27:80:2d:a9:86: 88:e3:0b:65:70:fd:b2:fa:e5:db:c7:67:a8:2f:0a:8d:28:4d: 17:63:ab:98:de:3f:ad:96:f4:e3:4a:db:17:87:65:b6:5d:fd: 55:a1:b2:ba:06:84:f4:87:41:3d:60:85:76:29:a7:3c:51:64: 6f:02:dd:49 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUC+lLG+4cjSZx16lDuarjmH5zqm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIwODFDNEI5MDlDREY1NjE4NEQwNDU1QjJBQTFGNTJF QkZDOTI5MzAeFw0yNjA1MDMwMjU1MDRaFw0yNzA1MDIwMzAwMDRaMDMxMTAvBgNV BAMTKEI1NzJDQkRBOEY5RDQ3REM1OUZEQTY1MTNFMTQ2NkQ3OUNCNDMxRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpZU5JNBv7+f+o3HU61ysxtRE1 tFtTu7Kt3ADaJNRDMcpvkf8z0OYUBsO+GVyqG27OTwZCr9+EExf/P3L2LmmVPYrp H/ezf93RbeQvxFH06UZAAWPkMSwJvDp4KzwwbELgM+OIDM7rui1BlExt7q5UHaaC L23OpN7zfsXex/Iz3GuF73bbbEmrPJZYI50T9UYSHIuPLxQkNL6/1BbjVuXgHwXi 4+3jcMKzJH6tW7iLgOQU4fOzYRi83a8FuKqockuNy7/17qwOQwim6ggBDlja+6LD g3R++cdyJxNxo7ShOPGgxYqfkOQCOcFldWXd5qhfT8WmIfm8+7gjmpuDZ7t1AgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUtXLL2o+dR9xZ/aZRPhRm15y0MfAwHwYDVR0j BBgwFoAU+wgcS5Cc31YYTQRVsqofUuv8kpMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjA0MDY4ZjMtYTc1Yi00NzY0LTllODAtMWZhNTcyOTIwN2ZjLzAvRkIwODFDNEI5 MDlDREY1NjE4NEQwNDU1QjJBQTFGNTJFQkZDOTI5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjA4MUM0QjkwOUNERjU2MTg0RDA0NTVCMkFBMUY1MkVCRkM5 MjkzLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2IwNDA2OGYzLWE3NWItNDc2NC05 ZTgwLTFmYTU3MjkyMDdmYy8wLzMyMzQzMDMzM2EzMjM3MzAzMDNhMzUzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAMnAAAFMA0G CSqGSIb3DQEBCwUAA4IBAQBiHW1xKhfmBYEDjAnNQjyRcchLf8w2A9VbgZZFIy5S fMla/a/odz0ftdsEFq0d9uSCy8Pj7QYaKPKapmac2QUFNoTktveZWuNAmHmvE0M/ 9LLo4w1YBkVooF1AmDgaOLID20JElFTrVl2sH9S6p3ZHqoCmGKb74/4snJ0IclGx wZ9zRqoKiTp1to5NJaNClewPnCoOKeW2F3LUyG11THQM0glFxcQBMtQjYuloqcYA uclkpFr9/CfmbLG8XFhlovtBJ4AtqYaI4wtlcP2y+uXbx2eoLwqNKE0XY6uY3j+t lvTjStsXh2W2Xf1VobK6BoT0h0E9YIV2Kac8UWRvAt1J -----END CERTIFICATE-----Generated at Wed May 13 04:54:06 2026 by rpki-client