$ rpki-client -vvf rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/323430343a636534303a3a2f33362d3336203d3e20313338383834.roa File: 323430343a636534303a3a2f33362d3336203d3e20313338383834.roa (raw, json) Hash identifier: k71wAWLK9lWSB9of2XNi/2f+HUpw7qh91wC52CYzZ9I= Subject key identifier: F3:69:83:7D:F0:D9:40:F4:84:E2:27:7E:C9:E1:B2:9E:A9:22:03:93 Certificate issuer: /CN=5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C Certificate serial: 1392230391E12F02DFF120D2995B8A5BA28CBABF Authority key identifier: 5F:C4:5B:E9:ED:AC:7B:AD:3D:07:04:61:0E:37:4B:87:3F:C7:B6:1C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/323430343a636534303a3a2f33362d3336203d3e20313338383834.roa Signing time: Sun 03 May 2026 03:00:27 +0000 ROA not before: Sun 03 May 2026 02:55:27 +0000 ROA not after: Sun 02 May 2027 03:00:27 +0000 asID: 138884 IP address blocks: 2404:ce40::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.crl rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:92:23:03:91:e1:2f:02:df:f1:20:d2:99:5b:8a:5b:a2:8c:ba:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C Validity Not Before: May 3 02:55:27 2026 GMT Not After : May 2 03:00:27 2027 GMT Subject: CN=F369837DF0D940F484E2277EC9E1B29EA9220393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8e:11:04:cd:2b:7a:ea:ac:bb:22:01:38:a9: df:2f:f4:50:4d:b1:f8:cb:e7:f8:cd:1b:a8:4f:38: 71:09:e7:34:56:2b:4b:d4:f4:a8:02:86:50:60:16: d4:ed:38:d0:39:96:44:1c:0d:95:17:57:c7:ed:e3: 08:9e:a7:f8:47:df:5b:26:ff:48:e7:68:ce:a7:5a: b0:8f:ed:3f:50:8c:f5:92:16:cb:c1:d1:fb:ac:36: 45:21:10:24:09:7a:86:15:90:50:bc:12:e3:87:4e: 87:da:06:a0:de:8b:44:13:f8:4c:dc:7e:5c:58:7a: f1:28:f7:99:df:c6:7e:66:97:d8:f4:f5:07:3b:aa: 68:58:e0:bb:bb:ff:f7:70:b7:be:e0:c0:19:56:73: f3:77:af:37:61:d7:e1:3b:68:e2:fc:f4:06:56:40: d6:0f:a8:5a:94:e9:aa:c4:ae:ae:98:66:8b:7f:90: 75:15:90:66:0e:70:25:0f:ab:4d:8c:a8:9e:39:a3: b6:f3:f8:f8:ed:94:1d:23:1c:2b:16:1d:9b:fe:eb: e7:6a:40:81:d0:2d:2e:19:f1:67:63:29:94:80:e3: 3f:32:08:d2:92:95:b8:e9:ea:ef:58:14:d5:b5:09: 33:56:d3:45:d6:a9:52:df:45:64:ef:ac:b0:4c:1f: 6d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:69:83:7D:F0:D9:40:F4:84:E2:27:7E:C9:E1:B2:9E:A9:22:03:93 X509v3 Authority Key Identifier: keyid:5F:C4:5B:E9:ED:AC:7B:AD:3D:07:04:61:0E:37:4B:87:3F:C7:B6:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/323430343a636534303a3a2f33362d3336203d3e20313338383834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:ce40::/36 Signature Algorithm: sha256WithRSAEncryption 3b:82:b8:bf:41:d8:3b:b3:1d:26:47:5c:89:f0:8f:ac:1c:97: d7:d8:44:74:e0:64:73:29:3a:7c:e8:32:4c:0e:1f:8e:cb:53: b8:80:dc:20:b3:99:38:64:a4:bb:0e:69:9c:20:9a:c9:65:25: 84:b5:e5:9f:e0:31:ca:22:82:31:54:9e:e0:21:5b:e7:ae:8b: 7a:a8:0e:66:b8:ba:20:21:c1:ca:2e:cc:df:9d:9c:e7:cf:04: c8:86:72:24:6e:76:ee:49:e9:dd:a2:87:26:dc:cd:ea:43:56: 79:1b:2b:cd:2e:4a:10:8c:33:4a:fd:58:dd:50:b5:55:dd:2c: db:88:65:6a:03:8a:cf:1e:63:81:79:0a:c6:26:4e:0a:2a:5c: 69:28:77:ae:1c:2b:e7:16:85:a6:1b:69:18:38:42:58:51:97: b7:13:4c:d7:0d:79:8f:9a:12:01:b0:96:81:3e:00:be:d0:eb: aa:e3:de:e3:49:36:91:c1:61:b9:10:f5:c8:79:c0:56:dc:65: aa:1d:a2:3b:08:bb:9f:48:ef:8c:c4:30:ef:ee:a5:07:50:43: 97:a6:03:92:63:61:e2:05:df:1e:15:32:21:8c:86:88:c0:23: 78:8d:86:85:ea:db:8e:ce:83:15:b9:52:37:43:e9:da:c7:b1: 23:09:ee:d7 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUE5IjA5HhLwLf8SDSmVuKW6KMur8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDNDVCRTlFREFDN0JBRDNEMDcwNDYxMEUzNzRCODcz RkM3QjYxQzAeFw0yNjA1MDMwMjU1MjdaFw0yNzA1MDIwMzAwMjdaMDMxMTAvBgNV BAMTKEYzNjk4MzdERjBEOTQwRjQ4NEUyMjc3RUM5RTFCMjlFQTkyMjAzOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDjhEEzSt66qy7IgE4qd8v9FBN sfjL5/jNG6hPOHEJ5zRWK0vU9KgChlBgFtTtONA5lkQcDZUXV8ft4wiep/hH31sm /0jnaM6nWrCP7T9QjPWSFsvB0fusNkUhECQJeoYVkFC8EuOHTofaBqDei0QT+Ezc flxYevEo95nfxn5ml9j09Qc7qmhY4Lu7//dwt77gwBlWc/N3rzdh1+E7aOL89AZW QNYPqFqU6arErq6YZot/kHUVkGYOcCUPq02MqJ45o7bz+PjtlB0jHCsWHZv+6+dq QIHQLS4Z8WdjKZSA4z8yCNKSlbjp6u9YFNW1CTNW00XWqVLfRWTvrLBMH22HAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU82mDffDZQPSE4id+yeGynqkiA5MwHwYDVR0j BBgwFoAUX8Rb6e2se609BwRhDjdLhz/HthwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjIwYzZkNjktNjI5MC00MDJmLWE4NGUtZDI4OWM2ZTkzYTczLzAvNUZDNDVCRTlF REFDN0JBRDNEMDcwNDYxMEUzNzRCODczRkM3QjYxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkM0NUJFOUVEQUM3QkFEM0QwNzA0NjEwRTM3NEI4NzNGQzdC NjFDLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2IyMGM2ZDY5LTYyOTAtNDAyZi1h ODRlLWQyODljNmU5M2E3My8wLzMyMzQzMDM0M2E2MzY1MzQzMDNhM2EyZjMzMzYy ZDMzMzYyMDNkM2UyMDMxMzMzODM4MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCQEzkAAMA0GCSqG SIb3DQEBCwUAA4IBAQA7gri/Qdg7sx0mR1yJ8I+sHJfX2ER04GRzKTp86DJMDh+O y1O4gNwgs5k4ZKS7DmmcIJrJZSWEteWf4DHKIoIxVJ7gIVvnrot6qA5muLogIcHK LszfnZznzwTIhnIkbnbuSendoocm3M3qQ1Z5GyvNLkoQjDNK/VjdULVV3SzbiGVq A4rPHmOBeQrGJk4KKlxpKHeuHCvnFoWmG2kYOEJYUZe3E0zXDXmPmhIBsJaBPgC+ 0Ouq497jSTaRwWG5EPXIecBW3GWqHaI7CLufSO+MxDDv7qUHUEOXpgOSY2HiBd8e FTIhjIaIwCN4jYaF6tuOzoMVuVI3Q+nax7EjCe7X -----END CERTIFICATE-----Generated at Wed May 13 12:41:42 2026 by rpki-client