$ rpki-client -vvf rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/323430343a636534303a323a3a2f34382d3438203d3e20313338383834.roa File: 323430343a636534303a323a3a2f34382d3438203d3e20313338383834.roa (raw, json) Hash identifier: /gmLM+AlvVZmZ1aC4xTqncyP3CJDlsdR9nXHmByTkCU= Subject key identifier: 5A:39:36:5C:FC:3F:FF:4E:A5:6F:FC:76:66:A0:2E:8B:25:B5:0F:91 Certificate issuer: /CN=5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C Certificate serial: 0591D9441DAA9F3A33EA47EA85D886BF6FC5C0EA Authority key identifier: 5F:C4:5B:E9:ED:AC:7B:AD:3D:07:04:61:0E:37:4B:87:3F:C7:B6:1C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/323430343a636534303a323a3a2f34382d3438203d3e20313338383834.roa Signing time: Sun 03 May 2026 03:00:27 +0000 ROA not before: Sun 03 May 2026 02:55:27 +0000 ROA not after: Sun 02 May 2027 03:00:27 +0000 asID: 138884 IP address blocks: 2404:ce40:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.crl rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:91:d9:44:1d:aa:9f:3a:33:ea:47:ea:85:d8:86:bf:6f:c5:c0:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C Validity Not Before: May 3 02:55:27 2026 GMT Not After : May 2 03:00:27 2027 GMT Subject: CN=5A39365CFC3FFF4EA56FFC7666A02E8B25B50F91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e2:1a:36:85:4b:10:f0:be:29:9b:31:d9:e2: 8d:d9:ca:65:da:73:72:37:66:f6:0b:b8:e0:5c:81: 65:5c:a6:86:0f:49:19:73:9c:c9:64:b8:0d:15:32: 62:f8:f6:3d:16:c1:92:24:8c:ac:14:50:3e:17:43: 72:f8:45:5e:c0:bf:27:01:70:e2:4a:c0:eb:15:62: 4f:e5:32:3a:48:4e:42:31:ee:4f:32:fc:2f:46:0d: 41:44:94:87:a3:ed:27:e8:ac:64:6a:09:a0:70:8e: bb:e8:fa:a9:8d:ea:f3:f0:b6:fb:f9:b5:87:36:b7: 7e:d2:28:8c:fe:43:f7:f6:4c:cb:ae:2b:3b:c3:10: 76:06:6c:b8:c5:c6:fe:de:57:05:6d:ba:f7:13:a2: 12:d3:bf:7a:8a:b3:b4:4c:dc:ec:5a:76:13:7b:cc: ba:f4:8a:2d:d8:fb:0c:c1:28:2e:e7:f3:78:10:44: b3:3c:79:6c:d2:3d:23:ac:25:fc:ec:59:d8:09:d6: 0e:ab:15:a8:68:66:12:40:9e:39:72:77:9a:7f:7d: d0:93:83:53:9b:54:ab:ba:83:7e:d2:8a:c6:af:6c: 35:cc:2b:3f:b8:e3:b5:eb:f4:e7:89:c1:86:c5:2c: f6:13:93:e9:15:74:a9:81:1f:84:b9:50:72:79:3c: 3f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:39:36:5C:FC:3F:FF:4E:A5:6F:FC:76:66:A0:2E:8B:25:B5:0F:91 X509v3 Authority Key Identifier: keyid:5F:C4:5B:E9:ED:AC:7B:AD:3D:07:04:61:0E:37:4B:87:3F:C7:B6:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/323430343a636534303a323a3a2f34382d3438203d3e20313338383834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:ce40:2::/48 Signature Algorithm: sha256WithRSAEncryption 1e:67:dc:96:75:7f:90:64:21:fc:b7:87:3b:37:42:88:e8:df: 46:d9:3e:85:39:9c:91:95:f8:98:84:ae:08:5e:68:93:43:14: de:a1:f3:fb:37:cf:3c:bb:3a:86:c6:37:6f:6b:5b:de:9a:e9: a1:d4:4c:f6:3d:9f:b0:11:36:fc:6d:57:cc:3b:6e:db:c6:ed: 66:36:ac:ea:10:dd:eb:c5:53:ae:57:60:cc:c1:0a:a8:d1:1b: f7:71:0b:fc:24:14:79:ca:0a:b4:c3:15:9e:a1:5d:7d:d5:fc: 50:2b:5f:61:e6:cd:a4:ba:8c:46:a5:1e:07:b7:9b:bf:6c:59: 9b:c8:ea:a7:3d:09:5a:5f:e3:b3:ef:6c:a6:8b:0f:1a:28:5c: 9a:78:40:13:1a:ac:15:34:90:86:c8:d1:12:d3:7c:c4:46:58: e2:00:30:b9:88:40:0f:48:70:32:f5:1f:4f:a2:ad:02:23:47: 93:08:4d:ac:86:04:ec:42:4a:bc:ad:79:ac:52:7b:76:58:ae: 98:e8:4d:21:20:92:f2:d3:4d:02:fd:f8:97:26:80:31:f8:ea: 4e:a9:69:82:6e:ae:0e:7b:38:54:42:94:bb:43:6b:90:b0:79: 78:f8:a9:e2:df:d5:b2:99:37:74:05:d9:11:f0:d8:60:a4:04: 90:0e:86:42 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUBZHZRB2qnzoz6kfqhdiGv2/FwOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDNDVCRTlFREFDN0JBRDNEMDcwNDYxMEUzNzRCODcz RkM3QjYxQzAeFw0yNjA1MDMwMjU1MjdaFw0yNzA1MDIwMzAwMjdaMDMxMTAvBgNV BAMTKDVBMzkzNjVDRkMzRkZGNEVBNTZGRkM3NjY2QTAyRThCMjVCNTBGOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC44ho2hUsQ8L4pmzHZ4o3ZymXa c3I3ZvYLuOBcgWVcpoYPSRlznMlkuA0VMmL49j0WwZIkjKwUUD4XQ3L4RV7AvycB cOJKwOsVYk/lMjpITkIx7k8y/C9GDUFElIej7SforGRqCaBwjrvo+qmN6vPwtvv5 tYc2t37SKIz+Q/f2TMuuKzvDEHYGbLjFxv7eVwVtuvcTohLTv3qKs7RM3OxadhN7 zLr0ii3Y+wzBKC7n83gQRLM8eWzSPSOsJfzsWdgJ1g6rFahoZhJAnjlyd5p/fdCT g1ObVKu6g37SisavbDXMKz+447Xr9OeJwYbFLPYTk+kVdKmBH4S5UHJ5PD9NAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUWjk2XPw//06lb/x2ZqAuiyW1D5EwHwYDVR0j BBgwFoAUX8Rb6e2se609BwRhDjdLhz/HthwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjIwYzZkNjktNjI5MC00MDJmLWE4NGUtZDI4OWM2ZTkzYTczLzAvNUZDNDVCRTlF REFDN0JBRDNEMDcwNDYxMEUzNzRCODczRkM3QjYxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkM0NUJFOUVEQUM3QkFEM0QwNzA0NjEwRTM3NEI4NzNGQzdC NjFDLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2IyMGM2ZDY5LTYyOTAtNDAyZi1h ODRlLWQyODljNmU5M2E3My8wLzMyMzQzMDM0M2E2MzY1MzQzMDNhMzIzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzgzODM4MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBM5AAAIw DQYJKoZIhvcNAQELBQADggEBAB5n3JZ1f5BkIfy3hzs3Qojo30bZPoU5nJGV+JiE rgheaJNDFN6h8/s3zzy7OobGN29rW96a6aHUTPY9n7ARNvxtV8w7btvG7WY2rOoQ 3evFU65XYMzBCqjRG/dxC/wkFHnKCrTDFZ6hXX3V/FArX2HmzaS6jEalHge3m79s WZvI6qc9CVpf47PvbKaLDxooXJp4QBMarBU0kIbI0RLTfMRGWOIAMLmIQA9IcDL1 H0+irQIjR5MITayGBOxCSryteaxSe3ZYrpjoTSEgkvLTTQL9+JcmgDH46k6paYJu rg57OFRClLtDa5CweXj4qeLf1bKZN3QF2RHw2GCkBJAOhkI= -----END CERTIFICATE-----Generated at Wed May 13 13:26:58 2026 by rpki-client