$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383963303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a383963303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: C1FfZr2TgAV9YAjYb1/Te7O7fqcdYXyQ25ETBRdcZMU= Subject key identifier: 01:A9:1F:42:4E:86:66:6F:78:6B:39:69:6E:6A:81:B5:89:29:9F:72 Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0 Certificate serial: 2357BE0CFAEBF88A62E1A57FC6443D0B9FEA3411 Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383963303a3a2f34342d3434203d3e20313333373938.roa Signing time: Sun 03 May 2026 03:04:10 +0000 ROA not before: Sun 03 May 2026 02:59:10 +0000 ROA not after: Sun 02 May 2027 03:04:10 +0000 asID: 133798 IP address blocks: 2402:5680:89c0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:57:be:0c:fa:eb:f8:8a:62:e1:a5:7f:c6:44:3d:0b:9f:ea:34:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0 Validity Not Before: May 3 02:59:10 2026 GMT Not After : May 2 03:04:10 2027 GMT Subject: CN=01A91F424E86666F786B39696E6A81B589299F72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:83:e7:f3:5a:33:11:68:e0:5a:e5:7c:6e:3b: b9:7b:1b:7b:d1:78:e9:c2:f8:5f:76:6e:ea:60:04: c6:9f:20:c7:93:b4:38:48:a3:02:89:0b:e1:0c:2a: c5:2b:7d:8a:0a:0a:c7:9a:71:34:5c:5e:e1:36:b0: 59:8b:11:8f:e2:fa:a1:48:da:52:d2:d8:17:15:aa: ec:6c:21:c8:bc:c8:0e:54:70:6b:c8:8b:b2:d6:f7: bb:b0:b2:24:f4:cd:e5:dc:29:c3:59:8d:81:29:26: 7e:09:d8:03:1f:fb:9f:fb:bc:2d:fe:dd:68:d7:59: bc:c7:91:1d:42:8b:46:d6:86:81:1f:27:d6:04:9c: 12:65:72:3d:61:8a:5d:5f:a1:be:7e:76:a9:fe:ac: e0:a1:24:2f:e6:49:a9:8a:3a:ab:00:a8:9a:2d:2b: 4b:54:58:ba:55:b0:20:e0:4f:b2:03:61:e1:7d:20: 30:7d:14:ee:9a:b2:e7:91:da:69:50:3d:4e:bf:da: 27:41:88:c5:50:bc:ac:fb:f6:b3:8c:7e:d4:f7:75: f9:ba:58:2c:d3:7e:8d:3c:99:1f:56:f7:1e:01:e6: a6:d3:07:62:40:b0:a2:d1:4c:72:64:66:4c:c9:ca: 8b:b4:39:cc:b0:12:62:22:3a:91:99:e7:2d:e4:ba: 90:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A9:1F:42:4E:86:66:6F:78:6B:39:69:6E:6A:81:B5:89:29:9F:72 X509v3 Authority Key Identifier: keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383963303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:89c0::/44 Signature Algorithm: sha256WithRSAEncryption 3b:f1:e4:32:39:b2:9e:21:53:5e:4f:27:6d:82:33:d5:f6:bc: 57:5a:6b:5c:1c:2b:0c:d8:aa:fd:c0:9b:a7:3d:e0:88:81:a9: 64:49:c8:e8:cb:95:f5:9d:cf:16:c8:87:45:f5:d7:67:5e:d7: 3f:45:43:2a:99:9f:ea:4e:e5:9a:73:0f:73:f4:74:ce:70:d8: 31:9a:11:8f:c1:e0:ed:fb:6b:fc:e6:1e:b4:5c:4c:66:f5:03: 21:54:5b:9d:c6:31:ac:24:cb:c8:e6:0e:ca:27:e1:f1:a4:a6: a2:a8:68:18:04:32:1e:15:3e:b8:55:af:36:2b:d8:75:ef:92: b3:dd:a3:f8:32:7c:bd:63:8c:17:c9:a2:4c:e4:f1:60:96:59: a4:e5:a0:53:ee:fc:fc:3f:e3:0c:bc:1f:f1:d7:22:5f:e7:16: 08:a9:e9:31:a5:cf:46:e3:05:07:da:a1:f8:a1:3d:ed:bb:fe: 60:4c:ec:af:53:f3:1c:a8:1a:20:88:df:a0:55:a3:66:51:c9: 23:a4:9d:23:7e:a1:b9:05:f0:9d:99:89:87:41:54:94:1b:c1: 4b:dc:06:cb:a1:47:fd:20:5e:12:ef:f9:b9:84:6b:6c:68:5b: 06:da:f5:7d:36:d5:86:89:4b:02:14:cf:f4:de:c6:6d:19:8b: cf:70:51:da -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUI1e+DPrr+Ipi4aV/xkQ9C5/qNBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVGQkVBQ0ZBRUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2 MzIxQTVDMDAeFw0yNjA1MDMwMjU5MTBaFw0yNzA1MDIwMzA0MTBaMDMxMTAvBgNV BAMTKDAxQTkxRjQyNEU4NjY2NkY3ODZCMzk2OTZFNkE4MUI1ODkyOTlGNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbg+fzWjMRaOBa5XxuO7l7G3vR eOnC+F92bupgBMafIMeTtDhIowKJC+EMKsUrfYoKCseacTRcXuE2sFmLEY/i+qFI 2lLS2BcVquxsIci8yA5UcGvIi7LW97uwsiT0zeXcKcNZjYEpJn4J2AMf+5/7vC3+ 3WjXWbzHkR1Ci0bWhoEfJ9YEnBJlcj1hil1fob5+dqn+rOChJC/mSamKOqsAqJot K0tUWLpVsCDgT7IDYeF9IDB9FO6asueR2mlQPU6/2idBiMVQvKz79rOMftT3dfm6 WCzTfo08mR9W9x4B5qbTB2JAsKLRTHJkZkzJyou0OcywEmIiOpGZ5y3kupAbAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUAakfQk6GZm94azlpbmqBtYkpn3IwHwYDVR0j BBgwFoAUFfvqz67T+fMyWXM49ALIcmMhpcAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzMwM2U2YmItNzM0OS00N2FhLWE0Y2QtNTFkOGEwZTIyMmY2LzAvMTVGQkVBQ0ZB RUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2MzIxQTVDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNUZCRUFDRkFFRDNGOUYzMzI1OTczMzhGNDAyQzg3MjYzMjFB NUMwLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzgzOTYzMzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAicAwDQYJKoZIhvcNAQELBQADggEBADvx5DI5sp4hU15PJ22CM9X2vFdaa1wc KwzYqv3Am6c94IiBqWRJyOjLlfWdzxbIh0X112de1z9FQyqZn+pO5ZpzD3P0dM5w 2DGaEY/B4O37a/zmHrRcTGb1AyFUW53GMawky8jmDson4fGkpqKoaBgEMh4VPrhV rzYr2HXvkrPdo/gyfL1jjBfJokzk8WCWWaTloFPu/Pw/4wy8H/HXIl/nFgip6TGl z0bjBQfaofihPe27/mBM7K9T8xyoGiCI36BVo2ZRySOknSN+obkF8J2ZiYdBVJQb wUvcBsuhR/0gXhLv+bmEa2xoWwba9X021YaJSwIUz/Texm0Zi89wUdo= -----END CERTIFICATE-----Generated at Wed May 13 14:02:55 2026 by rpki-client