$ rpki-client -vvf rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/323430323a646130303a3a2f33322d3438203d3e203234353236.roa File: 323430323a646130303a3a2f33322d3438203d3e203234353236.roa (raw, json) Hash identifier: d7g+2p+xoUWV+MwPYY5ADVkErhAIheoIAIDWV+3KQdA= Subject key identifier: 3B:7A:41:13:D9:0F:EA:71:5C:DB:37:46:81:18:BE:DE:19:B1:5C:E5 Certificate issuer: /CN=40FAE5A8EC712D9E6DB575D52972B69605542EEC Certificate serial: 6CA664123EE223F69959DCD2BA2EDE69F21EE020 Authority key identifier: 40:FA:E5:A8:EC:71:2D:9E:6D:B5:75:D5:29:72:B6:96:05:54:2E:EC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40FAE5A8EC712D9E6DB575D52972B69605542EEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/323430323a646130303a3a2f33322d3438203d3e203234353236.roa Signing time: Sun 03 May 2026 03:00:46 +0000 ROA not before: Sun 03 May 2026 02:55:46 +0000 ROA not after: Sun 02 May 2027 03:00:46 +0000 asID: 24526 IP address blocks: 2402:da00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.crl rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40FAE5A8EC712D9E6DB575D52972B69605542EEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:a6:64:12:3e:e2:23:f6:99:59:dc:d2:ba:2e:de:69:f2:1e:e0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40FAE5A8EC712D9E6DB575D52972B69605542EEC Validity Not Before: May 3 02:55:46 2026 GMT Not After : May 2 03:00:46 2027 GMT Subject: CN=3B7A4113D90FEA715CDB37468118BEDE19B15CE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:56:49:b8:56:16:85:7a:e8:39:ee:8a:e4:4d: ca:21:40:b9:0a:9a:fc:1d:38:cc:22:15:6e:97:91: ab:7f:dc:a4:7f:0f:d7:55:d3:86:25:b0:88:37:97: fc:26:6f:9f:43:79:fe:87:3f:e6:f0:65:d9:50:6e: a6:fb:b3:46:be:b8:90:9d:b1:18:ea:39:d2:03:3a: 7a:75:1d:b8:24:f8:e6:34:93:83:21:45:92:f7:47: b1:b5:8d:ce:6d:b2:fd:2c:b6:75:4d:02:42:bc:68: fd:24:84:56:54:b6:d5:c7:73:fc:14:9b:fb:7c:40: 72:5b:df:12:28:75:f2:22:cf:89:28:14:69:f3:16: f1:ff:65:08:5c:4c:a5:a7:5e:17:2a:18:e6:6c:34: 0f:85:f8:29:52:fe:cb:80:d6:a0:e1:d3:5b:5a:64: 8f:a1:ed:9a:58:75:5f:e6:f0:c7:b4:c0:65:95:71: 41:ca:da:0d:1a:26:66:47:82:d0:4b:d2:d9:19:0f: 72:9b:33:ec:53:ba:a3:bf:ec:ce:ae:0c:96:76:0e: bc:57:87:21:d7:63:12:2b:db:13:52:01:87:cf:ec: 6a:af:9a:bc:9f:86:b2:39:d7:be:36:0c:8d:2e:c6: 8b:27:dc:0e:d8:9f:3e:8b:ea:08:03:c6:fb:08:e5: 95:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:7A:41:13:D9:0F:EA:71:5C:DB:37:46:81:18:BE:DE:19:B1:5C:E5 X509v3 Authority Key Identifier: keyid:40:FA:E5:A8:EC:71:2D:9E:6D:B5:75:D5:29:72:B6:96:05:54:2E:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40FAE5A8EC712D9E6DB575D52972B69605542EEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/323430323a646130303a3a2f33322d3438203d3e203234353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:da00::/32 Signature Algorithm: sha256WithRSAEncryption 1a:6d:13:df:04:eb:cc:ff:9b:eb:0c:4a:a4:a7:ad:f5:58:39: cc:6a:f4:98:4c:d7:d1:ed:a5:8c:53:3d:eb:39:a8:50:ba:b9: 18:20:1f:bd:8a:c5:0f:ee:4b:e4:49:31:f6:57:3a:70:07:64: 9d:6c:46:81:91:d4:32:ca:14:55:b9:4e:a8:6a:0b:c1:e9:fd: 00:97:55:19:20:ea:47:47:48:db:31:1c:e6:0d:6e:79:16:6d: 1a:7a:a0:c2:33:cc:1c:d5:5c:21:d2:e9:5e:2a:42:52:da:77: cd:4c:40:eb:ae:99:f2:59:01:f6:36:29:ad:1f:03:f9:84:91: 9e:09:5e:a7:05:ab:a8:a3:15:57:d0:d6:69:63:9a:a6:75:cb: f4:cd:08:61:57:d3:fd:18:66:72:f0:a9:56:67:d3:29:d9:3c: 92:7b:6b:8f:bd:40:b8:4a:fa:d8:ba:07:44:62:1b:c4:67:8d: 33:46:60:b4:e4:f4:15:73:da:db:c1:37:64:68:6c:31:36:6e: 98:12:5d:5f:82:e5:37:95:7c:67:9a:7e:85:c2:cc:5b:a1:be: 4c:0d:06:3f:80:db:52:59:2e:44:e1:96:f9:4d:55:8a:c3:3a: ec:79:fd:a9:a6:26:1a:d4:42:08:f8:b2:5f:7d:dc:ff:a3:ad: 3e:53:75:d5 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUbKZkEj7iI/aZWdzSui7eafIe4CAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBGQUU1QThFQzcxMkQ5RTZEQjU3NUQ1Mjk3MkI2OTYw NTU0MkVFQzAeFw0yNjA1MDMwMjU1NDZaFw0yNzA1MDIwMzAwNDZaMDMxMTAvBgNV BAMTKDNCN0E0MTEzRDkwRkVBNzE1Q0RCMzc0NjgxMThCRURFMTlCMTVDRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Vkm4VhaFeug57orkTcohQLkK mvwdOMwiFW6Xkat/3KR/D9dV04YlsIg3l/wmb59Def6HP+bwZdlQbqb7s0a+uJCd sRjqOdIDOnp1Hbgk+OY0k4MhRZL3R7G1jc5tsv0stnVNAkK8aP0khFZUttXHc/wU m/t8QHJb3xIodfIiz4koFGnzFvH/ZQhcTKWnXhcqGOZsNA+F+ClS/suA1qDh01ta ZI+h7ZpYdV/m8Me0wGWVcUHK2g0aJmZHgtBL0tkZD3KbM+xTuqO/7M6uDJZ2DrxX hyHXYxIr2xNSAYfP7GqvmryfhrI51742DI0uxosn3A7Ynz6L6ggDxvsI5ZUHAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUO3pBE9kP6nFc2zdGgRi+3hmxXOUwHwYDVR0j BBgwFoAUQPrlqOxxLZ5ttXXVKXK2lgVULuwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjM1MTI5ZTQtMjMyOC00M2QyLWE0NTgtOWQzODI5NjE0ODE1LzAvNDBGQUU1QThF QzcxMkQ5RTZEQjU3NUQ1Mjk3MkI2OTYwNTU0MkVFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MEZBRTVBOEVDNzEyRDlFNkRCNTc1RDUyOTcyQjY5NjA1NTQy RUVDLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2IzNTEyOWU0LTIzMjgtNDNkMi1h NDU4LTlkMzgyOTYxNDgxNS8wLzMyMzQzMDMyM2E2NDYxMzAzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMyMzQzNTMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAtoAMA0GCSqGSIb3 DQEBCwUAA4IBAQAabRPfBOvM/5vrDEqkp631WDnMavSYTNfR7aWMUz3rOahQurkY IB+9isUP7kvkSTH2VzpwB2SdbEaBkdQyyhRVuU6oagvB6f0Al1UZIOpHR0jbMRzm DW55Fm0aeqDCM8wc1Vwh0uleKkJS2nfNTEDrrpnyWQH2NimtHwP5hJGeCV6nBauo oxVX0NZpY5qmdcv0zQhhV9P9GGZy8KlWZ9Mp2TySe2uPvUC4SvrYugdEYhvEZ40z RmC05PQVc9rbwTdkaGwxNm6YEl1fguU3lXxnmn6Fwsxbob5MDQY/gNtSWS5E4Zb5 TVWKwzrsef2ppiYa1EII+LJffdz/o60+U3XV -----END CERTIFICATE-----Generated at Wed May 13 14:49:52 2026 by rpki-client