$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383839303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a383839303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: VOmakmnkg+6a3wrrdRXyqaTZ3Z93f3kHuzqomdRGVhY= Subject key identifier: 00:1C:9E:76:88:B2:6C:09:1E:A4:2A:BF:0A:1C:21:5F:C2:C0:AD:08 Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0 Certificate serial: 47B7F1B3E9D369D1ABA62E0F1FDBC2D82036A0F1 Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383839303a3a2f34342d3434203d3e20313333373938.roa Signing time: Sun 03 May 2026 03:04:22 +0000 ROA not before: Sun 03 May 2026 02:59:22 +0000 ROA not after: Sun 02 May 2027 03:04:22 +0000 asID: 133798 IP address blocks: 2402:5680:8890::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:b7:f1:b3:e9:d3:69:d1:ab:a6:2e:0f:1f:db:c2:d8:20:36:a0:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0 Validity Not Before: May 3 02:59:22 2026 GMT Not After : May 2 03:04:22 2027 GMT Subject: CN=001C9E7688B26C091EA42ABF0A1C215FC2C0AD08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e1:27:98:28:35:fe:26:80:38:ad:55:ae:6b: 06:82:bf:9e:28:71:20:d1:3f:cb:40:e2:43:b8:80: 4e:7a:32:ce:cf:3e:1f:48:39:2e:a8:ee:e4:5c:8c: 5f:9c:b4:bf:1f:1c:b1:7d:8b:7e:3e:89:97:56:c4: d3:69:0f:15:ad:33:cf:66:e3:99:52:22:ad:a7:68: ec:45:08:c0:54:84:ef:32:78:95:b1:8b:88:d9:6e: 60:b6:e4:df:16:4c:b0:2f:ab:71:d2:5a:6b:a4:a2: bb:a7:e0:11:3e:a4:0d:e8:36:31:89:93:08:70:2b: 4f:5c:7a:b6:7a:b6:65:68:63:1d:f2:29:cc:2d:ff: 6a:d1:3f:2c:73:68:4a:21:9d:86:d6:27:66:4f:fd: 3c:6d:d3:3f:91:19:b7:58:80:6d:38:42:5c:45:6a: a8:b6:23:49:d9:ac:46:95:77:f0:ad:f6:4b:89:fa: ca:03:5f:4d:f0:78:27:34:c3:70:1b:45:bd:fc:e9: bb:24:ee:4a:64:dc:59:40:a2:53:c9:4b:a2:37:bd: b6:b0:1e:55:1a:80:a8:3f:36:47:ee:e4:b3:23:aa: bd:ab:49:a7:f2:08:8b:e2:f2:fb:3a:93:e4:4a:f7: 3b:3c:b2:3d:29:ee:68:c6:bb:f0:52:1b:62:d3:48: 3d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1C:9E:76:88:B2:6C:09:1E:A4:2A:BF:0A:1C:21:5F:C2:C0:AD:08 X509v3 Authority Key Identifier: keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383839303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:8890::/44 Signature Algorithm: sha256WithRSAEncryption 5c:28:a3:ef:e6:1b:9e:7b:ee:22:16:d8:94:0d:4b:19:4b:ae: 01:9a:bc:c9:82:7e:87:b1:c2:62:eb:4c:7b:fd:06:dd:42:8d: c7:91:ba:90:ed:4d:2c:ad:9e:2f:e4:4e:f5:d4:4e:5d:2f:1e: c5:80:23:a6:35:62:3e:0e:7f:62:30:0c:9a:1e:c4:cf:76:3b: 60:12:a8:ed:2a:f8:f8:5e:1d:34:d1:f8:79:61:ce:a6:19:9a: 24:8b:26:43:3e:31:e6:dc:ea:89:8f:15:37:0e:3d:fa:aa:bc: bc:0a:21:d3:57:e4:8c:da:fe:e9:70:c9:e4:95:86:b4:c6:c5: d3:b3:ad:ce:16:f7:f0:65:01:45:81:91:29:21:17:67:52:78: f5:26:fe:15:32:75:0f:8a:16:11:2b:94:ab:e6:ac:ac:d5:55: d4:1f:5e:4b:a9:31:a8:00:fb:ea:d6:76:45:8d:fc:f7:2f:a3: 59:72:5e:f2:76:1c:39:22:4d:98:27:34:07:23:06:3b:6e:5c: 47:ae:23:29:50:83:5b:a0:63:19:67:82:6e:ca:f9:18:34:34: 3f:cc:eb:da:20:49:e1:ac:68:87:b2:10:94:1d:40:c3:ce:12: 0f:09:64:45:6e:6b:cf:00:a4:be:f6:6d:70:4b:9b:65:d8:7d: 8d:dd:4c:3a -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUR7fxs+nTadGrpi4PH9vC2CA2oPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVGQkVBQ0ZBRUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2 MzIxQTVDMDAeFw0yNjA1MDMwMjU5MjJaFw0yNzA1MDIwMzA0MjJaMDMxMTAvBgNV BAMTKDAwMUM5RTc2ODhCMjZDMDkxRUE0MkFCRjBBMUMyMTVGQzJDMEFEMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC24SeYKDX+JoA4rVWuawaCv54o cSDRP8tA4kO4gE56Ms7PPh9IOS6o7uRcjF+ctL8fHLF9i34+iZdWxNNpDxWtM89m 45lSIq2naOxFCMBUhO8yeJWxi4jZbmC25N8WTLAvq3HSWmukorun4BE+pA3oNjGJ kwhwK09cerZ6tmVoYx3yKcwt/2rRPyxzaEohnYbWJ2ZP/Txt0z+RGbdYgG04QlxF aqi2I0nZrEaVd/Ct9kuJ+soDX03weCc0w3AbRb386bsk7kpk3FlAolPJS6I3vbaw HlUagKg/Nkfu5LMjqr2rSafyCIvi8vs6k+RK9zs8sj0p7mjGu/BSG2LTSD3NAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUAByedoiybAkepCq/ChwhX8LArQgwHwYDVR0j BBgwFoAUFfvqz67T+fMyWXM49ALIcmMhpcAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzMwM2U2YmItNzM0OS00N2FhLWE0Y2QtNTFkOGEwZTIyMmY2LzAvMTVGQkVBQ0ZB RUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2MzIxQTVDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNUZCRUFDRkFFRDNGOUYzMzI1OTczMzhGNDAyQzg3MjYzMjFB NUMwLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzgzODM5MzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAiJAwDQYJKoZIhvcNAQELBQADggEBAFwoo+/mG5577iIW2JQNSxlLrgGavMmC foexwmLrTHv9Bt1CjceRupDtTSytni/kTvXUTl0vHsWAI6Y1Yj4Of2IwDJoexM92 O2ASqO0q+PheHTTR+HlhzqYZmiSLJkM+Mebc6omPFTcOPfqqvLwKIdNX5Iza/ulw yeSVhrTGxdOzrc4W9/BlAUWBkSkhF2dSePUm/hUydQ+KFhErlKvmrKzVVdQfXkup MagA++rWdkWN/Pcvo1lyXvJ2HDkiTZgnNAcjBjtuXEeuIylQg1ugYxlngm7K+Rg0 ND/M69ogSeGsaIeyEJQdQMPOEg8JZEVua88ApL72bXBLm2XYfY3dTDo= -----END CERTIFICATE-----Generated at Wed May 13 12:28:46 2026 by rpki-client