$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383831303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a383831303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: e4ScnRv7FiMA9d5oWEwWO+fcAa4fM+xN9snyFHqK/8E= Subject key identifier: 80:1A:A2:B7:15:88:B1:2E:D6:70:38:A0:2F:4E:30:C6:4B:E3:58:38 Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0 Certificate serial: 7A3F479AF304908A431A402AAC1EFE925CEFEF18 Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383831303a3a2f34342d3434203d3e20313333373938.roa Signing time: Sun 03 May 2026 03:04:11 +0000 ROA not before: Sun 03 May 2026 02:59:11 +0000 ROA not after: Sun 02 May 2027 03:04:11 +0000 asID: 133798 IP address blocks: 2402:5680:8810::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:3f:47:9a:f3:04:90:8a:43:1a:40:2a:ac:1e:fe:92:5c:ef:ef:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0 Validity Not Before: May 3 02:59:11 2026 GMT Not After : May 2 03:04:11 2027 GMT Subject: CN=801AA2B71588B12ED67038A02F4E30C64BE35838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6a:9c:eb:0e:55:ad:40:20:c1:2d:59:0a:7c: ba:a4:64:d1:71:24:a7:c6:88:a4:0d:0b:1b:19:73: d7:8d:06:20:e7:69:23:d9:c4:a0:1b:cc:46:5b:f7: d1:f0:30:6a:27:83:c0:cf:2f:b1:21:8f:d3:ff:55: 47:b9:62:a3:ba:b7:91:75:9e:71:6e:a3:3f:db:5a: 1d:0f:5f:3c:5d:94:c7:b6:1f:34:71:73:57:29:4e: 61:0f:f9:d3:81:fb:f5:4d:d3:2c:24:1e:8f:f4:8e: bc:a9:da:62:75:33:54:c8:8f:d3:95:01:9a:7c:4b: c5:2f:d4:50:23:f3:84:0d:12:ce:08:81:e8:61:58: 56:ca:4d:7d:73:fa:50:5f:bc:de:06:85:19:9d:3b: 27:d9:e4:d5:76:66:d7:dc:de:bb:0a:33:f6:4d:06: be:4d:eb:40:ab:f8:d5:f5:9d:08:10:73:76:53:cb: 31:c5:0a:97:e6:e9:79:4b:08:82:3e:93:d0:e6:68: 7c:63:c5:6c:ce:73:13:53:34:e8:c5:17:47:ed:72: 7c:65:7f:27:01:32:30:6f:d1:89:fd:00:d4:97:d4: 0e:ec:25:8c:a8:f1:e8:32:bc:ea:aa:a6:7c:07:82: 1f:c9:e1:49:9f:ad:cb:8d:c8:d9:d9:91:de:f8:58: 9a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:1A:A2:B7:15:88:B1:2E:D6:70:38:A0:2F:4E:30:C6:4B:E3:58:38 X509v3 Authority Key Identifier: keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383831303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:8810::/44 Signature Algorithm: sha256WithRSAEncryption 9c:64:4a:06:9a:c7:30:88:56:a7:98:ce:4f:41:3b:12:2a:76: 38:c2:9c:15:a9:24:71:34:9c:83:cf:19:cd:1f:04:5d:3b:56: 0a:0d:51:ee:41:da:71:df:39:84:7b:aa:e1:a0:09:02:f8:43: 2a:48:73:7f:58:81:0b:50:c4:32:1f:76:9c:86:e7:69:9e:ff: a0:7e:b7:75:cd:aa:f7:c6:9b:d9:20:b2:af:52:15:3b:77:c8: 83:a9:bb:27:2f:c8:31:30:ae:76:f4:21:57:b9:aa:28:76:7c: 55:ea:cc:63:bb:38:65:16:60:e4:9c:da:5c:bf:2d:dc:94:d0: 82:f8:15:75:48:2f:e9:05:82:76:f7:32:11:90:21:0a:e4:b5: f0:9f:ad:bf:a8:49:2b:4c:b5:4b:1e:dc:77:95:29:7f:74:77: df:47:e9:58:10:63:eb:bc:13:0b:45:e0:58:f5:21:f5:21:d2: 5f:c0:4c:d6:bd:79:9c:8f:86:67:3c:00:d0:36:30:98:b2:f2: 35:27:f6:98:fc:9f:5c:dd:79:0d:f3:88:e0:b2:6b:5d:04:18: 5a:da:c9:76:ab:9c:37:d8:df:77:c9:98:04:1f:c9:3d:54:70: 71:ac:01:10:b4:59:55:7a:8e:90:d1:fa:f5:b6:7a:c5:60:b5: 0c:da:8d:d4 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUej9HmvMEkIpDGkAqrB7+klzv7xgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVGQkVBQ0ZBRUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2 MzIxQTVDMDAeFw0yNjA1MDMwMjU5MTFaFw0yNzA1MDIwMzA0MTFaMDMxMTAvBgNV BAMTKDgwMUFBMkI3MTU4OEIxMkVENjcwMzhBMDJGNEUzMEM2NEJFMzU4MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdapzrDlWtQCDBLVkKfLqkZNFx JKfGiKQNCxsZc9eNBiDnaSPZxKAbzEZb99HwMGong8DPL7Ehj9P/VUe5YqO6t5F1 nnFuoz/bWh0PXzxdlMe2HzRxc1cpTmEP+dOB+/VN0ywkHo/0jryp2mJ1M1TIj9OV AZp8S8Uv1FAj84QNEs4IgehhWFbKTX1z+lBfvN4GhRmdOyfZ5NV2Ztfc3rsKM/ZN Br5N60Cr+NX1nQgQc3ZTyzHFCpfm6XlLCII+k9DmaHxjxWzOcxNTNOjFF0ftcnxl fycBMjBv0Yn9ANSX1A7sJYyo8egyvOqqpnwHgh/J4UmfrcuNyNnZkd74WJrDAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUgBqitxWIsS7WcDigL04wxkvjWDgwHwYDVR0j BBgwFoAUFfvqz67T+fMyWXM49ALIcmMhpcAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzMwM2U2YmItNzM0OS00N2FhLWE0Y2QtNTFkOGEwZTIyMmY2LzAvMTVGQkVBQ0ZB RUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2MzIxQTVDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNUZCRUFDRkFFRDNGOUYzMzI1OTczMzhGNDAyQzg3MjYzMjFB NUMwLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzgzODMxMzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAiBAwDQYJKoZIhvcNAQELBQADggEBAJxkSgaaxzCIVqeYzk9BOxIqdjjCnBWp JHE0nIPPGc0fBF07VgoNUe5B2nHfOYR7quGgCQL4QypIc39YgQtQxDIfdpyG52me /6B+t3XNqvfGm9kgsq9SFTt3yIOpuycvyDEwrnb0IVe5qih2fFXqzGO7OGUWYOSc 2ly/LdyU0IL4FXVIL+kFgnb3MhGQIQrktfCfrb+oSStMtUse3HeVKX90d99H6VgQ Y+u8EwtF4Fj1IfUh0l/ATNa9eZyPhmc8ANA2MJiy8jUn9pj8n1zdeQ3ziOCya10E GFrayXarnDfY33fJmAQfyT1UcHGsARC0WVV6jpDR+vW2esVgtQzajdQ= -----END CERTIFICATE-----Generated at Wed May 13 12:29:13 2026 by rpki-client