$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383738303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a383738303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: TOvQ03FVH6OTeGQ1RlnTjWujVidpPbYXssO1Ez9idYk= Subject key identifier: 28:AB:18:AF:CF:85:89:85:04:AD:A5:50:44:E8:B3:17:DF:5E:E3:09 Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0 Certificate serial: 73BD164D37A8FFBA13565C338E4BC676355FAD87 Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383738303a3a2f34342d3434203d3e20313333373938.roa Signing time: Sun 03 May 2026 03:04:11 +0000 ROA not before: Sun 03 May 2026 02:59:11 +0000 ROA not after: Sun 02 May 2027 03:04:11 +0000 asID: 133798 IP address blocks: 2402:5680:8780::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:bd:16:4d:37:a8:ff:ba:13:56:5c:33:8e:4b:c6:76:35:5f:ad:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0 Validity Not Before: May 3 02:59:11 2026 GMT Not After : May 2 03:04:11 2027 GMT Subject: CN=28AB18AFCF85898504ADA55044E8B317DF5EE309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4d:cb:85:bd:41:9e:b2:30:da:88:a2:7d:00: 90:4c:b8:0b:a5:06:ef:ce:3c:a2:87:38:09:5f:c8: 89:0b:09:80:94:6e:3c:aa:29:a9:9a:22:a8:8b:d1: 37:8e:4f:ce:aa:06:71:f2:f1:0b:ec:01:a9:2c:55: 6b:05:43:4d:54:ca:ee:e3:bd:90:ca:d3:8a:e0:0b: 9f:46:3b:09:ee:54:bb:03:51:ea:13:7f:d7:9b:cd: b4:f2:b8:61:c4:30:b9:c1:31:14:2b:33:84:36:8f: 72:7d:e0:2a:82:98:e8:89:63:8f:67:3c:59:42:a9: 80:24:d7:c5:0a:97:ee:12:86:d9:dc:9e:94:b0:0d: 39:11:1b:5f:7d:63:6a:24:7c:fa:ee:c5:e5:a0:fe: 8c:ae:58:52:7f:94:00:43:c0:fc:10:62:85:0e:72: bd:d0:0b:e5:7e:f7:79:f7:5a:97:9a:31:19:d7:2f: 43:b1:df:92:ef:c7:9d:bf:91:1a:96:2a:a9:b4:6e: a3:16:80:56:f1:7c:de:45:48:13:a7:6b:41:a5:f3: d2:55:f3:2e:a0:cc:af:da:7c:2b:cd:99:fb:82:62: 5b:03:a3:71:d5:88:ed:3b:37:9a:86:21:7d:ce:e4: de:28:0f:34:11:2b:16:fd:76:df:42:b1:26:6d:41: f9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:AB:18:AF:CF:85:89:85:04:AD:A5:50:44:E8:B3:17:DF:5E:E3:09 X509v3 Authority Key Identifier: keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383738303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:8780::/44 Signature Algorithm: sha256WithRSAEncryption 66:36:eb:20:78:f4:6e:1b:ca:e6:4d:48:b4:9f:e4:d7:5f:62: e1:bf:ce:4e:3b:31:e3:83:b2:99:6d:1d:47:14:16:36:bd:4a: 3e:2d:db:f9:fe:08:43:aa:cc:71:2a:4c:54:7e:da:32:95:e6: 80:90:66:1e:48:b9:8e:bb:ea:0f:39:2d:45:79:8d:40:f4:ee: d3:92:2b:0e:33:46:8f:ed:c9:7a:e6:e0:4d:bc:ff:ed:b6:9f: dc:50:78:13:e8:bc:57:b8:6a:96:4d:f2:1f:a8:c8:af:df:c5: 0c:23:f1:79:34:1d:09:b8:1c:c7:3e:d7:78:60:e9:99:b8:e3: 66:27:c2:71:12:2b:b6:c2:7a:3d:6e:f3:d4:80:7d:e3:a9:f0: 7f:b9:e2:0e:00:ea:ec:11:12:fc:90:91:85:27:97:c2:fd:51: 10:5b:53:31:73:15:a1:e5:e8:1d:59:87:a2:b5:74:13:35:3b: 18:e9:c3:c2:92:d0:72:62:17:8c:12:c4:0a:0d:c0:d6:a2:4a: 29:f0:d0:90:0f:d2:e0:a4:9c:24:3b:b9:33:6f:2d:7f:97:4e: 9c:78:8a:fa:0f:92:c0:4d:7f:f0:62:64:81:3d:b7:57:39:5d: 5b:a1:47:65:80:d7:b6:43:9c:b0:62:c4:02:81:65:c4:ae:53: ce:92:c1:2c -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUc70WTTeo/7oTVlwzjkvGdjVfrYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVGQkVBQ0ZBRUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2 MzIxQTVDMDAeFw0yNjA1MDMwMjU5MTFaFw0yNzA1MDIwMzA0MTFaMDMxMTAvBgNV BAMTKDI4QUIxOEFGQ0Y4NTg5ODUwNEFEQTU1MDQ0RThCMzE3REY1RUUzMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDETcuFvUGesjDaiKJ9AJBMuAul Bu/OPKKHOAlfyIkLCYCUbjyqKamaIqiL0TeOT86qBnHy8QvsAaksVWsFQ01Uyu7j vZDK04rgC59GOwnuVLsDUeoTf9ebzbTyuGHEMLnBMRQrM4Q2j3J94CqCmOiJY49n PFlCqYAk18UKl+4ShtncnpSwDTkRG199Y2okfPruxeWg/oyuWFJ/lABDwPwQYoUO cr3QC+V+93n3WpeaMRnXL0Ox35Lvx52/kRqWKqm0bqMWgFbxfN5FSBOna0Gl89JV 8y6gzK/afCvNmfuCYlsDo3HViO07N5qGIX3O5N4oDzQRKxb9dt9CsSZtQfktAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUKKsYr8+FiYUEraVQROizF99e4wkwHwYDVR0j BBgwFoAUFfvqz67T+fMyWXM49ALIcmMhpcAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzMwM2U2YmItNzM0OS00N2FhLWE0Y2QtNTFkOGEwZTIyMmY2LzAvMTVGQkVBQ0ZB RUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2MzIxQTVDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNUZCRUFDRkFFRDNGOUYzMzI1OTczMzhGNDAyQzg3MjYzMjFB NUMwLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzgzNzM4MzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAh4AwDQYJKoZIhvcNAQELBQADggEBAGY26yB49G4byuZNSLSf5NdfYuG/zk47 MeODspltHUcUFja9Sj4t2/n+CEOqzHEqTFR+2jKV5oCQZh5IuY676g85LUV5jUD0 7tOSKw4zRo/tyXrm4E28/+22n9xQeBPovFe4apZN8h+oyK/fxQwj8Xk0HQm4HMc+ 13hg6Zm442YnwnESK7bCej1u89SAfeOp8H+54g4A6uwREvyQkYUnl8L9URBbUzFz FaHl6B1Zh6K1dBM1Oxjpw8KS0HJiF4wSxAoNwNaiSinw0JAP0uCknCQ7uTNvLX+X Tpx4ivoPksBNf/BiZIE9t1c5XVuhR2WA17ZDnLBixAKBZcSuU86SwSw= -----END CERTIFICATE-----Generated at Wed May 13 13:30:32 2026 by rpki-client