$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386130303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a386130303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: N+yArpJD+tpfWLJrgchwlOJdJfslCS+wU322PBovddw= Subject key identifier: 86:23:D2:07:30:F1:7D:AA:41:89:2D:65:0A:84:A2:CA:53:5E:7B:21 Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0 Certificate serial: 64557AA1B789DBF5BDFE8066591014E6EA2BBF88 Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386130303a3a2f34342d3434203d3e20313333373938.roa Signing time: Sun 03 May 2026 03:04:12 +0000 ROA not before: Sun 03 May 2026 02:59:12 +0000 ROA not after: Sun 02 May 2027 03:04:12 +0000 asID: 133798 IP address blocks: 2402:5680:8a00::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:55:7a:a1:b7:89:db:f5:bd:fe:80:66:59:10:14:e6:ea:2b:bf:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0 Validity Not Before: May 3 02:59:12 2026 GMT Not After : May 2 03:04:12 2027 GMT Subject: CN=8623D20730F17DAA41892D650A84A2CA535E7B21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:86:40:bb:a9:67:f7:7b:2a:76:05:87:fd:46: cd:6d:5d:58:17:ed:a0:45:5a:2b:df:f9:78:7d:b5: 90:44:ea:9c:e5:e9:4f:66:a9:50:1a:da:2f:07:a7: 2d:09:42:b0:b1:e2:69:50:7c:56:82:d2:d3:cc:c7: 00:1d:b1:98:06:f3:cf:09:b1:5c:51:46:06:11:98: 04:1d:ef:60:d8:ee:e4:9e:ba:40:11:71:e8:ae:c5: 79:89:0a:2a:e9:0c:c1:28:16:c4:de:a1:f5:ee:dc: c7:6a:45:71:64:b8:3a:32:32:0c:6b:e2:65:7b:9e: 8b:21:02:02:69:9f:46:b3:f8:46:a2:0a:b4:a0:4d: d9:f9:0e:1a:aa:12:7e:08:59:3f:41:db:76:e4:ea: 5a:5a:ae:52:98:1a:a6:99:cf:c0:23:13:27:37:db: 32:e2:d7:9f:dc:d2:a9:54:04:07:e3:35:8b:35:81: 8c:27:0c:44:e6:17:5a:92:30:89:16:60:fa:28:d1: 39:70:f7:98:dd:c8:80:39:81:da:9d:82:16:bd:00: 73:6e:3a:16:80:84:c3:25:d3:91:34:30:9e:a7:60: fc:ad:93:cf:5a:21:6a:a2:0a:67:df:c0:f6:b6:94: a5:69:09:d1:99:69:cf:08:eb:ed:6e:fe:dc:0f:f3: 96:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:23:D2:07:30:F1:7D:AA:41:89:2D:65:0A:84:A2:CA:53:5E:7B:21 X509v3 Authority Key Identifier: keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386130303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:8a00::/44 Signature Algorithm: sha256WithRSAEncryption 44:b1:21:b2:96:8f:97:64:60:7b:ad:1c:91:f3:54:47:30:7f: 41:de:b5:27:4e:13:5d:31:30:fa:7a:41:02:8d:de:f6:81:02: 5d:7b:e2:3f:0a:56:d5:76:de:46:f6:56:1c:e3:6d:91:66:01: c9:49:6e:b0:d7:d7:0e:1f:df:b6:e8:d9:79:d3:c6:e5:c2:27: 98:90:39:08:aa:d1:69:9c:cf:fe:fa:54:39:c6:ca:25:07:45: d0:72:26:11:4f:92:df:e0:4c:91:33:48:7e:43:a7:68:ee:eb: 4c:c2:7c:43:34:b5:b0:b0:77:28:b1:93:8b:c1:86:0b:10:dc: f4:68:48:1e:ee:97:b3:c0:ab:ca:ee:4c:a1:60:4f:52:ef:5e: 41:4f:b0:77:e5:bf:ba:c2:37:88:68:65:4b:17:a5:78:93:7c: 51:b3:87:9f:d2:a2:6e:3d:1a:ae:1b:ae:14:1e:5c:6e:d8:7c: f2:55:61:75:75:ce:6c:b3:5d:aa:92:34:c2:76:f2:bc:87:1a: 46:9a:02:71:a6:c3:2a:df:57:6d:66:43:53:47:51:15:25:ed: c1:59:c4:db:f7:c7:68:28:bc:40:91:68:da:ce:6e:f2:e7:8d: 30:29:87:28:3d:ce:fe:0c:b8:af:f6:7e:54:9f:a3:8c:fc:8a: d7:c8:70:f7 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUZFV6obeJ2/W9/oBmWRAU5uorv4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVGQkVBQ0ZBRUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2 MzIxQTVDMDAeFw0yNjA1MDMwMjU5MTJaFw0yNzA1MDIwMzA0MTJaMDMxMTAvBgNV BAMTKDg2MjNEMjA3MzBGMTdEQUE0MTg5MkQ2NTBBODRBMkNBNTM1RTdCMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/hkC7qWf3eyp2BYf9Rs1tXVgX 7aBFWivf+Xh9tZBE6pzl6U9mqVAa2i8Hpy0JQrCx4mlQfFaC0tPMxwAdsZgG888J sVxRRgYRmAQd72DY7uSeukARceiuxXmJCirpDMEoFsTeofXu3MdqRXFkuDoyMgxr 4mV7noshAgJpn0az+EaiCrSgTdn5DhqqEn4IWT9B23bk6lparlKYGqaZz8AjEyc3 2zLi15/c0qlUBAfjNYs1gYwnDETmF1qSMIkWYPoo0Tlw95jdyIA5gdqdgha9AHNu OhaAhMMl05E0MJ6nYPytk89aIWqiCmffwPa2lKVpCdGZac8I6+1u/twP85ZRAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUhiPSBzDxfapBiS1lCoSiylNeeyEwHwYDVR0j BBgwFoAUFfvqz67T+fMyWXM49ALIcmMhpcAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzMwM2U2YmItNzM0OS00N2FhLWE0Y2QtNTFkOGEwZTIyMmY2LzAvMTVGQkVBQ0ZB RUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2MzIxQTVDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNUZCRUFDRkFFRDNGOUYzMzI1OTczMzhGNDAyQzg3MjYzMjFB NUMwLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzg2MTMwMzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAigAwDQYJKoZIhvcNAQELBQADggEBAESxIbKWj5dkYHutHJHzVEcwf0HetSdO E10xMPp6QQKN3vaBAl174j8KVtV23kb2VhzjbZFmAclJbrDX1w4f37bo2XnTxuXC J5iQOQiq0Wmcz/76VDnGyiUHRdByJhFPkt/gTJEzSH5Dp2ju60zCfEM0tbCwdyix k4vBhgsQ3PRoSB7ul7PAq8ruTKFgT1LvXkFPsHflv7rCN4hoZUsXpXiTfFGzh5/S om49Gq4brhQeXG7YfPJVYXV1zmyzXaqSNMJ28ryHGkaaAnGmwyrfV21mQ1NHURUl 7cFZxNv3x2govECRaNrObvLnjTAphyg9zv4MuK/2flSfo4z8itfIcPc= -----END CERTIFICATE-----Generated at Wed May 13 12:18:50 2026 by rpki-client