$ rpki-client -vvf rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/323430313a343863303a3a2f33322d3438203d3e20313336313139.roa File: 323430313a343863303a3a2f33322d3438203d3e20313336313139.roa (raw, json) Hash identifier: hCFV5sRxdzUQ0Ef1DHuXq2DMT11lGAzTPsRSkYtMfqM= Subject key identifier: 74:99:31:88:6A:94:C0:39:08:8D:62:E6:A4:3E:D7:F0:E7:42:FE:14 Certificate issuer: /CN=3FCFF090C792013040BE1067688C2CB7E3E88FAC Certificate serial: 7FDB709F0DE8AB1A33F668BE30A5C6B27CE905EB Authority key identifier: 3F:CF:F0:90:C7:92:01:30:40:BE:10:67:68:8C:2C:B7:E3:E8:8F:AC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCFF090C792013040BE1067688C2CB7E3E88FAC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/323430313a343863303a3a2f33322d3438203d3e20313336313139.roa Signing time: Sun 03 May 2026 03:02:42 +0000 ROA not before: Sun 03 May 2026 02:57:42 +0000 ROA not after: Sun 02 May 2027 03:02:42 +0000 asID: 136119 IP address blocks: 2401:48c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.crl rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCFF090C792013040BE1067688C2CB7E3E88FAC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:db:70:9f:0d:e8:ab:1a:33:f6:68:be:30:a5:c6:b2:7c:e9:05:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FCFF090C792013040BE1067688C2CB7E3E88FAC Validity Not Before: May 3 02:57:42 2026 GMT Not After : May 2 03:02:42 2027 GMT Subject: CN=749931886A94C039088D62E6A43ED7F0E742FE14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8f:f6:b1:b3:57:da:6c:f4:66:37:2d:53:af: f3:ef:b3:8c:6d:2a:20:38:a4:ea:11:d9:4b:c6:2e: 9b:94:c7:79:c8:3d:d0:9d:7b:2e:03:57:4d:6d:c0: 4c:87:e4:19:87:a3:f7:ec:eb:23:7c:75:54:19:51: 4c:26:5c:f2:6e:91:1f:91:6c:15:21:4d:41:64:09: 9a:c1:89:36:c0:4f:00:20:9d:24:d6:67:70:57:67: a7:74:8a:49:53:6f:54:f3:a5:dc:42:40:32:b9:fa: 38:4c:94:53:5a:28:82:19:20:be:e9:ca:13:7e:fc: 3c:9e:4d:eb:cf:cc:bf:cf:a1:77:ee:eb:6f:a5:2d: b6:52:c8:84:9d:29:f9:b0:c6:d3:5a:33:45:fd:a1: 7a:0b:8a:0b:bd:94:ac:1b:84:45:21:d8:32:41:74: 0e:51:41:a4:3c:bc:03:22:9e:41:5e:a1:4a:3c:2f: 5d:b6:52:98:ea:38:d3:3f:f6:01:a9:aa:ef:40:10: ae:7d:52:51:c9:1b:86:4c:27:97:d4:31:9d:d7:15: 63:57:57:58:e9:2e:4f:75:58:4e:18:57:7e:ee:80: 42:5f:3b:92:58:1f:06:0f:6a:64:2c:8b:b9:57:67: 81:2b:1c:93:3c:44:2c:35:89:17:a6:87:02:93:62: 22:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:99:31:88:6A:94:C0:39:08:8D:62:E6:A4:3E:D7:F0:E7:42:FE:14 X509v3 Authority Key Identifier: keyid:3F:CF:F0:90:C7:92:01:30:40:BE:10:67:68:8C:2C:B7:E3:E8:8F:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCFF090C792013040BE1067688C2CB7E3E88FAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/323430313a343863303a3a2f33322d3438203d3e20313336313139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:48c0::/32 Signature Algorithm: sha256WithRSAEncryption 74:08:b2:0b:97:56:ed:20:83:bf:12:50:e4:46:45:bf:ec:ce: bc:e9:4f:b6:f7:37:e7:74:ad:5c:6b:5d:09:55:35:19:1c:49: 39:92:37:0b:19:35:2e:f7:e7:1a:55:2b:80:6d:f6:2c:ce:cf: ac:f9:1a:e6:d5:04:55:75:ae:35:94:27:2e:59:05:44:99:8d: 5f:58:a1:ae:71:c3:0a:ea:38:8c:f3:6d:84:63:b3:03:9e:89: 2c:cc:0c:f6:b3:84:17:03:b2:70:24:bb:48:75:5b:f1:cd:5e: 68:3e:2b:d6:ce:e4:21:c4:86:12:a3:c8:6c:a1:7a:31:f1:17: 1d:6a:09:ab:fb:ce:23:55:c5:24:0f:18:de:78:25:79:af:30: fb:9a:0b:90:42:d3:bf:95:b2:34:19:75:5f:5d:50:40:03:bb: 91:e5:b6:41:14:4d:1a:7d:f1:e5:61:98:81:c0:9d:10:53:cd: 8b:2e:1f:69:51:05:19:0e:d5:1a:8a:fe:74:04:75:0a:de:92: 5c:05:29:b5:77:eb:24:29:3f:37:9b:e7:13:b9:c3:2d:68:14: 55:4e:2a:ca:0d:26:88:dc:2d:7d:99:59:49:98:6d:af:a0:ed: ba:71:02:55:7f:dd:32:75:d7:97:cf:c6:db:d0:53:17:7a:d9: ea:65:c5:57 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUf9twnw3oqxoz9mi+MKXGsnzpBeswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZDRkYwOTBDNzkyMDEzMDQwQkUxMDY3Njg4QzJDQjdF M0U4OEZBQzAeFw0yNjA1MDMwMjU3NDJaFw0yNzA1MDIwMzAyNDJaMDMxMTAvBgNV BAMTKDc0OTkzMTg4NkE5NEMwMzkwODhENjJFNkE0M0VEN0YwRTc0MkZFMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEj/axs1fabPRmNy1Tr/Pvs4xt KiA4pOoR2UvGLpuUx3nIPdCdey4DV01twEyH5BmHo/fs6yN8dVQZUUwmXPJukR+R bBUhTUFkCZrBiTbATwAgnSTWZ3BXZ6d0iklTb1TzpdxCQDK5+jhMlFNaKIIZIL7p yhN+/DyeTevPzL/PoXfu62+lLbZSyISdKfmwxtNaM0X9oXoLigu9lKwbhEUh2DJB dA5RQaQ8vAMinkFeoUo8L122UpjqONM/9gGpqu9AEK59UlHJG4ZMJ5fUMZ3XFWNX V1jpLk91WE4YV37ugEJfO5JYHwYPamQsi7lXZ4ErHJM8RCw1iRemhwKTYiKDAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUdJkxiGqUwDkIjWLmpD7X8OdC/hQwHwYDVR0j BBgwFoAUP8/wkMeSATBAvhBnaIwst+Poj6wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmRhYmMwYmEtOTIyMi00YzQ1LTgzNDItZWI4NjQzYzQ5NjdkLzAvM0ZDRkYwOTBD NzkyMDEzMDQwQkUxMDY3Njg4QzJDQjdFM0U4OEZBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkNGRjA5MEM3OTIwMTMwNDBCRTEwNjc2ODhDMkNCN0UzRTg4 RkFDLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2JkYWJjMGJhLTkyMjItNGM0NS04 MzQyLWViODY0M2M0OTY3ZC8wLzMyMzQzMDMxM2EzNDM4NjMzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzMzNjMxMzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQBSMAwDQYJKoZI hvcNAQELBQADggEBAHQIsguXVu0gg78SUORGRb/szrzpT7b3N+d0rVxrXQlVNRkc STmSNwsZNS735xpVK4Bt9izOz6z5GubVBFV1rjWUJy5ZBUSZjV9Yoa5xwwrqOIzz bYRjswOeiSzMDPazhBcDsnAku0h1W/HNXmg+K9bO5CHEhhKjyGyhejHxFx1qCav7 ziNVxSQPGN54JXmvMPuaC5BC07+VsjQZdV9dUEADu5HltkEUTRp98eVhmIHAnRBT zYsuH2lRBRkO1RqK/nQEdQreklwFKbV36yQpPzeb5xO5wy1oFFVOKsoNJojcLX2Z WUmYba+g7bpxAlV/3TJ115fPxtvQUxd62eplxVc= -----END CERTIFICATE-----Generated at Wed May 13 12:46:08 2026 by rpki-client