$ rpki-client -vvf rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/323430323a343234303a3a2f33322d3332203d3e20313336383830.roa File: 323430323a343234303a3a2f33322d3332203d3e20313336383830.roa (raw, json) Hash identifier: P320z9KUFpWQ3fuDHhMBAn5wP+R8TtjEv0OQMaUZbt0= Subject key identifier: 07:00:47:EA:B6:9F:62:7C:7F:20:11:CF:D2:07:98:48:92:8B:18:03 Certificate issuer: /CN=E1CBE571A9B35E54880250F3C035E3A2C5EA3688 Certificate serial: 2D9EFA5D7F1BC19389BD4949C6F0FA3EEBE5E1D8 Authority key identifier: E1:CB:E5:71:A9:B3:5E:54:88:02:50:F3:C0:35:E3:A2:C5:EA:36:88 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/323430323a343234303a3a2f33322d3332203d3e20313336383830.roa Signing time: Sun 03 May 2026 03:02:18 +0000 ROA not before: Sun 03 May 2026 02:57:18 +0000 ROA not after: Sun 02 May 2027 03:02:18 +0000 asID: 136880 IP address blocks: 2402:4240::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.crl rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:9e:fa:5d:7f:1b:c1:93:89:bd:49:49:c6:f0:fa:3e:eb:e5:e1:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1CBE571A9B35E54880250F3C035E3A2C5EA3688 Validity Not Before: May 3 02:57:18 2026 GMT Not After : May 2 03:02:18 2027 GMT Subject: CN=070047EAB69F627C7F2011CFD2079848928B1803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c6:61:5a:1b:90:4e:30:84:9a:bd:64:76:f7: 52:f0:8d:12:86:85:5b:a6:72:2e:c0:f9:a3:c0:62: 46:82:17:61:5a:42:62:83:00:0f:00:d9:12:c2:bf: da:10:2c:51:26:8a:37:89:c0:79:7e:04:20:a9:07: d4:df:9b:1a:33:ef:15:79:3a:5c:37:3c:d2:ef:bf: f7:ce:76:eb:c2:28:b5:ec:0a:70:29:7e:e5:88:3e: 7e:19:1e:ac:39:71:28:e0:43:66:39:73:02:2d:93: 4f:73:b3:0c:52:73:e1:5f:f3:c8:76:bb:43:15:68: d1:98:58:08:46:f5:e9:0d:db:a7:52:f8:df:dc:36: 0c:a3:2c:55:bc:68:83:4f:36:dc:42:0b:d7:01:89: 07:ff:eb:5d:54:92:67:3a:1d:e7:5c:a0:07:43:ef: ca:68:8f:5c:0f:2c:1c:06:ea:57:02:61:5a:2f:56: 23:60:16:df:f3:d1:5a:84:f1:0a:df:b5:26:62:5b: ca:f3:04:d0:00:8f:d0:ca:ee:01:9f:26:e1:e4:39: ce:51:d0:b1:49:7f:6e:d0:c7:de:74:eb:08:0c:27: 7e:c5:31:6a:b6:92:b4:77:7f:aa:e0:1b:e9:ff:8a: 11:b3:7f:ee:5b:69:c1:dd:e1:fa:38:7e:c5:fb:b4: 2a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:00:47:EA:B6:9F:62:7C:7F:20:11:CF:D2:07:98:48:92:8B:18:03 X509v3 Authority Key Identifier: keyid:E1:CB:E5:71:A9:B3:5E:54:88:02:50:F3:C0:35:E3:A2:C5:EA:36:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/323430323a343234303a3a2f33322d3332203d3e20313336383830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:4240::/32 Signature Algorithm: sha256WithRSAEncryption 50:8c:74:5e:85:77:ea:67:59:fc:44:d5:ae:26:57:3b:38:b0: 60:30:bd:c7:e9:e6:1c:f0:4a:3b:28:6f:df:2e:52:2f:ae:f0: 44:a6:4d:0b:4a:82:f9:08:2a:9a:2b:61:ad:13:30:c8:3d:40: 9d:b2:70:f4:27:c5:25:d1:1e:10:cb:12:58:0c:e3:c8:d7:9a: 1e:09:b1:68:a8:e4:42:07:8c:c7:89:4d:12:61:18:3e:ea:7d: 66:b6:ba:bb:76:34:7f:f9:b7:b0:9a:c5:49:1e:6e:8d:d7:eb: 46:95:8a:87:af:49:24:5e:eb:88:ff:62:bb:90:6f:9b:45:4f: c4:18:1a:06:ba:0b:a0:19:da:c8:4a:0b:98:00:f0:f8:ce:78: 2f:0a:26:26:b6:a3:33:ca:34:c2:97:c2:67:87:62:da:62:d5: 7c:b5:96:3d:87:00:a6:5a:b1:5c:83:13:df:ba:61:89:c5:49: 5e:ee:15:66:4e:76:6f:73:9d:34:cc:0c:15:07:09:02:8b:1f: ca:b9:57:6d:e9:2f:e9:98:e8:4d:aa:ce:31:a4:78:b3:1d:59: b3:57:a0:60:c7:79:b9:86:64:b4:4a:ee:3b:7c:5b:ae:55:72: e9:72:2a:95:cc:52:15:7b:c9:12:43:e6:95:1a:b0:ca:6f:4a: af:0c:49:48 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIULZ76XX8bwZOJvUlJxvD6Puvl4dgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFDQkU1NzFBOUIzNUU1NDg4MDI1MEYzQzAzNUUzQTJD NUVBMzY4ODAeFw0yNjA1MDMwMjU3MThaFw0yNzA1MDIwMzAyMThaMDMxMTAvBgNV BAMTKDA3MDA0N0VBQjY5RjYyN0M3RjIwMTFDRkQyMDc5ODQ4OTI4QjE4MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfxmFaG5BOMISavWR291LwjRKG hVumci7A+aPAYkaCF2FaQmKDAA8A2RLCv9oQLFEmijeJwHl+BCCpB9Tfmxoz7xV5 Olw3PNLvv/fOduvCKLXsCnApfuWIPn4ZHqw5cSjgQ2Y5cwItk09zswxSc+Ff88h2 u0MVaNGYWAhG9ekN26dS+N/cNgyjLFW8aINPNtxCC9cBiQf/611Ukmc6HedcoAdD 78poj1wPLBwG6lcCYVovViNgFt/z0VqE8QrftSZiW8rzBNAAj9DK7gGfJuHkOc5R 0LFJf27Qx9506wgMJ37FMWq2krR3f6rgG+n/ihGzf+5bacHd4fo4fsX7tCrrAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUBwBH6rafYnx/IBHP0geYSJKLGAMwHwYDVR0j BBgwFoAU4cvlcamzXlSIAlDzwDXjosXqNogwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmIwN2IzN2MtMDUwNy00OTEzLTgzMjktM2YxNjFiNmFmZjU2LzAvRTFDQkU1NzFB OUIzNUU1NDg4MDI1MEYzQzAzNUUzQTJDNUVBMzY4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMUNCRTU3MUE5QjM1RTU0ODgwMjUwRjNDMDM1RTNBMkM1RUEz Njg4LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2JiMDdiMzdjLTA1MDctNDkxMy04 MzI5LTNmMTYxYjZhZmY1Ni8wLzMyMzQzMDMyM2EzNDMyMzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzNjM4MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQCQkAwDQYJKoZI hvcNAQELBQADggEBAFCMdF6Fd+pnWfxE1a4mVzs4sGAwvcfp5hzwSjsob98uUi+u 8ESmTQtKgvkIKporYa0TMMg9QJ2ycPQnxSXRHhDLElgM48jXmh4JsWio5EIHjMeJ TRJhGD7qfWa2urt2NH/5t7CaxUkebo3X60aVioevSSRe64j/YruQb5tFT8QYGga6 C6AZ2shKC5gA8PjOeC8KJia2ozPKNMKXwmeHYtpi1Xy1lj2HAKZasVyDE9+6YYnF SV7uFWZOdm9znTTMDBUHCQKLH8q5V23pL+mY6E2qzjGkeLMdWbNXoGDHebmGZLRK 7jt8W65VculyKpXMUhV7yRJD5pUasMpvSq8MSUg= -----END CERTIFICATE-----Generated at Wed May 13 15:14:41 2026 by rpki-client