$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386632303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a386632303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: 8tGhbMcHFhSeHJ1+v1o6oJ+m1QJVMjn6R17bKwRGAeY= Subject key identifier: 1E:BC:84:ED:4E:C0:3C:A3:04:3A:19:D9:37:BC:A6:B5:98:3B:7B:E7 Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0 Certificate serial: 3702C727378CDEE3C2252128B85DF6080A485ED1 Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386632303a3a2f34342d3434203d3e20313333373938.roa Signing time: Sun 03 May 2026 03:04:16 +0000 ROA not before: Sun 03 May 2026 02:59:16 +0000 ROA not after: Sun 02 May 2027 03:04:16 +0000 asID: 133798 IP address blocks: 2402:5680:8f20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:02:c7:27:37:8c:de:e3:c2:25:21:28:b8:5d:f6:08:0a:48:5e:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0 Validity Not Before: May 3 02:59:16 2026 GMT Not After : May 2 03:04:16 2027 GMT Subject: CN=1EBC84ED4EC03CA3043A19D937BCA6B5983B7BE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d4:ec:35:28:e5:dd:94:da:e0:8f:d3:14:e5: 18:b7:db:03:ef:ab:60:8f:38:89:58:1f:eb:7b:ba: 28:bd:f7:e1:dc:cc:78:f2:af:b3:43:68:7c:bf:01: ad:56:8e:ba:fb:65:2c:0a:17:6f:64:42:64:1b:5b: e0:53:8b:f0:e1:e9:aa:3b:74:c8:64:f8:1f:59:ba: 79:3e:b6:3e:4b:f6:8b:37:10:20:77:be:4c:68:41: d3:df:8b:9d:af:8c:d7:4f:60:69:55:e7:d6:2b:4a: a0:94:fa:1d:a9:ff:56:f5:6c:fe:5a:0a:73:31:21: fb:95:a0:12:28:bc:72:ca:d4:e9:79:ac:06:8f:25: 05:a3:12:60:6a:67:35:87:7c:33:db:12:88:ec:d9: 49:00:ce:e2:06:8c:cb:b3:8c:50:64:f5:da:4a:0e: a2:b6:e1:57:ba:62:9a:dd:80:19:3b:0f:ba:83:04: e8:73:32:9a:9b:0c:49:31:fc:e2:19:0c:42:9a:56: ed:94:09:fe:f2:54:35:b9:99:c1:61:47:c7:c1:53: 56:5e:bf:9c:97:71:ca:19:aa:2d:62:86:6c:e9:53: f6:f0:db:58:0e:f5:82:e6:8c:65:7d:58:e3:da:2a: a6:d5:5b:7b:24:ef:9e:39:f9:3b:f0:de:11:da:9d: ec:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:BC:84:ED:4E:C0:3C:A3:04:3A:19:D9:37:BC:A6:B5:98:3B:7B:E7 X509v3 Authority Key Identifier: keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386632303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:8f20::/44 Signature Algorithm: sha256WithRSAEncryption 8a:e0:92:41:7b:a1:bf:12:cc:38:fc:b6:be:be:3d:1a:6e:ee: 77:50:41:1d:5d:53:83:47:b4:c4:75:a2:8e:34:20:55:11:c2: da:4f:a2:aa:43:a6:88:9d:42:f0:5a:0e:eb:f7:07:8c:5b:27: a7:38:23:55:c1:a7:c0:0b:29:af:69:4d:6a:6a:19:96:8c:21: 1d:38:8d:1d:82:87:95:3a:61:e8:23:6d:ea:42:d7:48:17:6e: a3:eb:41:f8:fe:e8:c1:1a:c7:f4:e4:8f:c5:e2:8b:3f:c8:7a: 8e:5a:71:40:41:8c:5d:4b:6c:80:ae:94:9e:f8:3c:c1:2f:a0: db:12:d5:89:2f:c0:03:43:c9:ae:c2:2f:fb:f7:6a:d7:57:3b: 83:08:73:82:b5:04:2b:5d:75:45:13:a4:84:8f:6b:e9:1d:67: bf:01:db:31:df:87:40:c8:6e:4a:83:2b:ef:7f:b9:45:a5:d1: 2d:1c:fd:bf:9b:6d:77:f8:1e:76:c9:28:da:0b:78:66:4d:3c: 93:47:5e:87:0e:c1:f0:04:5f:84:10:9b:43:45:93:ce:7e:56: 77:b5:18:a0:03:f3:e2:51:2a:59:9b:14:69:ab:b1:b8:68:fd: f6:91:88:7a:7b:3a:4c:fc:0c:1e:9b:3c:aa:c0:92:ad:1e:17: 23:df:89:da -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUNwLHJzeM3uPCJSEouF32CApIXtEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVGQkVBQ0ZBRUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2 MzIxQTVDMDAeFw0yNjA1MDMwMjU5MTZaFw0yNzA1MDIwMzA0MTZaMDMxMTAvBgNV BAMTKDFFQkM4NEVENEVDMDNDQTMwNDNBMTlEOTM3QkNBNkI1OTgzQjdCRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY1Ow1KOXdlNrgj9MU5Ri32wPv q2CPOIlYH+t7uii99+HczHjyr7NDaHy/Aa1Wjrr7ZSwKF29kQmQbW+BTi/Dh6ao7 dMhk+B9Zunk+tj5L9os3ECB3vkxoQdPfi52vjNdPYGlV59YrSqCU+h2p/1b1bP5a CnMxIfuVoBIovHLK1Ol5rAaPJQWjEmBqZzWHfDPbEojs2UkAzuIGjMuzjFBk9dpK DqK24Ve6YprdgBk7D7qDBOhzMpqbDEkx/OIZDEKaVu2UCf7yVDW5mcFhR8fBU1Ze v5yXccoZqi1ihmzpU/bw21gO9YLmjGV9WOPaKqbVW3sk7545+Tvw3hHanexLAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUHryE7U7APKMEOhnZN7ymtZg7e+cwHwYDVR0j BBgwFoAUFfvqz67T+fMyWXM49ALIcmMhpcAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzMwM2U2YmItNzM0OS00N2FhLWE0Y2QtNTFkOGEwZTIyMmY2LzAvMTVGQkVBQ0ZB RUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2MzIxQTVDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNUZCRUFDRkFFRDNGOUYzMzI1OTczMzhGNDAyQzg3MjYzMjFB NUMwLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzg2NjMyMzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAjyAwDQYJKoZIhvcNAQELBQADggEBAIrgkkF7ob8SzDj8tr6+PRpu7ndQQR1d U4NHtMR1oo40IFURwtpPoqpDpoidQvBaDuv3B4xbJ6c4I1XBp8ALKa9pTWpqGZaM IR04jR2Ch5U6YegjbepC10gXbqPrQfj+6MEax/Tkj8Xiiz/Ieo5acUBBjF1LbICu lJ74PMEvoNsS1YkvwANDya7CL/v3atdXO4MIc4K1BCtddUUTpISPa+kdZ78B2zHf h0DIbkqDK+9/uUWl0S0c/b+bbXf4HnbJKNoLeGZNPJNHXocOwfAEX4QQm0NFk85+ Vne1GKAD8+JRKlmbFGmrsbho/faRiHp7Okz8DB6bPKrAkq0eFyPfido= -----END CERTIFICATE-----Generated at Wed May 13 14:13:40 2026 by rpki-client