$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396132303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a396132303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: FNey8FdIk2SzN7dxXBaedFNltW38SGCShA/vJaCQx8k= Subject key identifier: 4B:C1:3C:88:EF:1B:EA:FE:A0:EF:30:5C:95:06:E5:C8:4E:0E:22:9E Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0 Certificate serial: 7DEC43B3F0165DDF629EB2C9A3D8F43EBBF74C67 Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396132303a3a2f34342d3434203d3e20313333373938.roa Signing time: Sun 03 May 2026 03:04:24 +0000 ROA not before: Sun 03 May 2026 02:59:24 +0000 ROA not after: Sun 02 May 2027 03:04:24 +0000 asID: 133798 IP address blocks: 2402:5680:9a20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ec:43:b3:f0:16:5d:df:62:9e:b2:c9:a3:d8:f4:3e:bb:f7:4c:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0 Validity Not Before: May 3 02:59:24 2026 GMT Not After : May 2 03:04:24 2027 GMT Subject: CN=4BC13C88EF1BEAFEA0EF305C9506E5C84E0E229E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d3:18:48:5c:ac:2f:5f:40:ad:3a:d2:e7:63: ea:b6:4a:35:42:b6:52:aa:71:60:03:55:01:28:c1: 19:70:e0:e3:ce:6d:97:81:67:6a:b4:02:35:a8:0b: 48:13:54:6a:13:66:dc:e9:f7:19:fc:8f:2e:2f:be: c9:34:72:83:11:ce:ae:74:54:ea:4a:67:31:b9:e4: 08:54:29:ff:8d:5b:6f:9c:0f:07:42:69:29:c9:d7: a8:e1:37:85:08:13:8c:3c:59:ea:4d:c1:39:ee:f2: 99:f6:f5:fc:9b:fa:17:a1:82:2b:d0:fd:9a:dd:fa: bc:eb:47:d1:f7:03:01:10:b9:50:5a:6a:ec:87:4d: d9:e0:6d:20:4f:34:23:49:1b:8d:96:23:54:ce:4d: 72:13:7e:cc:b5:06:60:21:8e:8b:c1:43:85:08:19: db:42:00:eb:fa:1f:a9:a2:e8:b8:35:a1:37:9a:60: 2f:ee:1e:2f:39:1e:c2:ce:32:c6:27:aa:1f:bc:5d: 74:94:1c:92:f6:eb:1d:e7:14:66:e4:43:94:24:b9: 90:74:a7:c6:7d:85:55:63:07:f1:62:5f:13:30:bf: 25:5f:71:b2:04:ce:b9:89:64:06:6d:4f:0b:22:35: 33:45:2e:c0:ad:6d:14:bf:f6:97:34:27:d7:03:ad: 90:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C1:3C:88:EF:1B:EA:FE:A0:EF:30:5C:95:06:E5:C8:4E:0E:22:9E X509v3 Authority Key Identifier: keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396132303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:9a20::/44 Signature Algorithm: sha256WithRSAEncryption 90:0b:b7:57:75:05:f6:1c:a6:35:e1:e4:b9:d5:81:e2:7e:5f: 12:d8:ca:2e:50:ed:fa:c3:d3:72:5e:c3:59:12:32:0d:a8:e1: 69:da:0b:79:4a:45:90:50:9c:03:ea:fb:a7:26:66:33:00:03: cb:b4:0a:23:e3:29:8b:5c:06:7b:b6:55:de:c9:97:04:6a:e7: 1b:f8:fe:20:d5:20:0f:58:7d:39:a1:53:88:a9:69:32:87:7a: 04:a8:0f:49:9a:68:cb:71:a7:30:50:f2:01:d1:67:ed:75:b4: c0:c3:86:56:9f:dc:20:de:5a:15:b6:0b:13:aa:cd:11:b3:d5: dc:46:c2:a4:bc:32:f1:b6:c3:5b:90:21:39:07:45:94:da:f3: 2c:92:62:3e:1b:57:5a:cb:2b:ab:96:75:87:c6:b3:4d:b7:c8: 44:04:fc:e7:15:b4:27:57:47:ff:e0:7a:ab:96:e7:f4:2f:d6: 81:f4:bf:24:18:49:ff:62:ab:b7:52:a1:31:82:90:8b:3f:26: 5e:30:d8:4d:0f:47:d2:d7:c0:16:7f:7e:af:66:d6:c9:06:13: 0e:5b:69:11:24:6c:ec:c5:8d:0e:9f:e9:7f:75:7f:10:42:86: 50:96:80:9c:66:fa:87:b7:31:04:b1:62:4e:b5:22:47:44:e5: b4:71:71:f0 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUfexDs/AWXd9inrLJo9j0Prv3TGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVGQkVBQ0ZBRUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2 MzIxQTVDMDAeFw0yNjA1MDMwMjU5MjRaFw0yNzA1MDIwMzA0MjRaMDMxMTAvBgNV BAMTKDRCQzEzQzg4RUYxQkVBRkVBMEVGMzA1Qzk1MDZFNUM4NEUwRTIyOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/0xhIXKwvX0CtOtLnY+q2SjVC tlKqcWADVQEowRlw4OPObZeBZ2q0AjWoC0gTVGoTZtzp9xn8jy4vvsk0coMRzq50 VOpKZzG55AhUKf+NW2+cDwdCaSnJ16jhN4UIE4w8WepNwTnu8pn29fyb+hehgivQ /Zrd+rzrR9H3AwEQuVBaauyHTdngbSBPNCNJG42WI1TOTXITfsy1BmAhjovBQ4UI GdtCAOv6H6mi6Lg1oTeaYC/uHi85HsLOMsYnqh+8XXSUHJL26x3nFGbkQ5QkuZB0 p8Z9hVVjB/FiXxMwvyVfcbIEzrmJZAZtTwsiNTNFLsCtbRS/9pc0J9cDrZAZAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUS8E8iO8b6v6g7zBclQblyE4OIp4wHwYDVR0j BBgwFoAUFfvqz67T+fMyWXM49ALIcmMhpcAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzMwM2U2YmItNzM0OS00N2FhLWE0Y2QtNTFkOGEwZTIyMmY2LzAvMTVGQkVBQ0ZB RUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2MzIxQTVDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNUZCRUFDRkFFRDNGOUYzMzI1OTczMzhGNDAyQzg3MjYzMjFB NUMwLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzk2MTMyMzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAmiAwDQYJKoZIhvcNAQELBQADggEBAJALt1d1BfYcpjXh5LnVgeJ+XxLYyi5Q 7frD03Jew1kSMg2o4WnaC3lKRZBQnAPq+6cmZjMAA8u0CiPjKYtcBnu2Vd7JlwRq 5xv4/iDVIA9YfTmhU4ipaTKHegSoD0maaMtxpzBQ8gHRZ+11tMDDhlaf3CDeWhW2 CxOqzRGz1dxGwqS8MvG2w1uQITkHRZTa8yySYj4bV1rLK6uWdYfGs023yEQE/OcV tCdXR//gequW5/Qv1oH0vyQYSf9iq7dSoTGCkIs/Jl4w2E0PR9LXwBZ/fq9m1skG Ew5baREkbOzFjQ6f6X91fxBChlCWgJxm+oe3MQSxYk61IkdE5bRxcfA= -----END CERTIFICATE-----Generated at Wed May 13 13:30:39 2026 by rpki-client