$ rpki-client -vvf rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/323430343a663863303a3a2f34382d3438203d3e203435333132.roa File: 323430343a663863303a3a2f34382d3438203d3e203435333132.roa (raw, json) Hash identifier: rTq9zOlNTtZOrbja36rf6XUowmgf7qLMjm4V0bgYZ0o= Subject key identifier: FB:87:57:CF:D5:9B:B2:C8:A0:A2:D5:0E:0D:DD:08:D2:FB:10:51:66 Certificate issuer: /CN=E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4 Certificate serial: 7298D75ADAD08EDD140094F3A21CD86A78B1C9DE Authority key identifier: E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/323430343a663863303a3a2f34382d3438203d3e203435333132.roa Signing time: Sun 03 May 2026 03:05:25 +0000 ROA not before: Sun 03 May 2026 03:00:25 +0000 ROA not after: Sun 02 May 2027 03:05:25 +0000 asID: 45312 IP address blocks: 2404:f8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.crl rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:46:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:98:d7:5a:da:d0:8e:dd:14:00:94:f3:a2:1c:d8:6a:78:b1:c9:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4 Validity Not Before: May 3 03:00:25 2026 GMT Not After : May 2 03:05:25 2027 GMT Subject: CN=FB8757CFD59BB2C8A0A2D50E0DDD08D2FB105166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ae:f0:7b:88:c9:9f:ea:26:49:0d:b0:98:7e: fb:95:3c:a2:13:5e:87:2a:55:94:a7:86:07:21:12: 43:c3:36:5f:0c:5d:97:74:e9:eb:fc:a7:78:fe:b1: 69:3e:82:5b:5a:d4:4c:ae:c7:9f:bd:63:a1:e3:2f: 1f:57:f2:76:3f:8b:b6:0b:9d:24:23:b1:0e:86:96: be:ae:d6:40:24:12:63:0a:8b:e5:f1:24:4c:21:ea: 68:cd:bf:a4:cb:3a:ad:22:69:3f:84:7f:ce:93:66: 5c:bc:a4:f4:15:16:9c:4c:d7:4d:25:9f:18:c4:26: 0a:c1:8b:81:b0:af:a3:ae:34:b9:3f:1c:97:99:b9: c9:f7:d9:91:4d:ad:52:a2:e0:fc:27:1e:76:b0:bb: 4a:e9:e3:27:3a:9f:13:d2:13:e7:28:c4:73:fc:4b: c2:fe:c7:20:de:b7:64:e5:3a:0b:a0:90:12:17:d0: 9e:38:f2:f1:2b:0b:63:43:4f:27:8f:8c:e0:71:4b: 42:ed:50:dc:4b:19:be:6b:c9:77:3f:c3:5b:50:e6: e3:7d:53:bf:9e:d0:5f:8b:bc:a2:3d:da:45:0f:73: af:21:34:e6:23:b8:56:c9:fb:6c:91:f5:df:13:e1: 44:c3:ba:6f:28:e2:a7:96:9b:40:c4:07:c1:d9:9f: 87:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:87:57:CF:D5:9B:B2:C8:A0:A2:D5:0E:0D:DD:08:D2:FB:10:51:66 X509v3 Authority Key Identifier: keyid:E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/323430343a663863303a3a2f34382d3438203d3e203435333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:f8c0::/48 Signature Algorithm: sha256WithRSAEncryption 00:91:18:16:3a:47:8f:d7:17:85:84:e5:89:af:c2:8e:ba:75: ed:ef:55:26:34:8f:c1:a7:90:76:7b:8d:c8:bb:e5:6e:73:76: 2b:bf:26:61:d3:4d:8a:34:ac:58:a8:e9:9a:da:1b:c6:b5:e1: 78:f5:aa:45:18:d7:fb:dd:22:c4:f9:7f:ec:62:f5:a4:e9:49: bd:48:7d:d2:d4:98:12:fd:26:7c:5c:4b:18:15:2f:23:a6:da: fe:19:87:36:c8:1d:c7:13:d0:67:2c:a0:2d:b9:56:3d:1f:83: ae:35:96:e4:fd:76:46:73:64:e7:63:b9:5a:a0:82:c1:81:44: 8f:59:f0:fc:2f:08:fd:58:33:62:04:39:d5:e1:b4:53:58:87: 60:7e:cf:c3:35:eb:3a:31:78:1b:86:d4:ea:f4:05:f6:7d:31: 49:75:e6:c9:b0:c6:16:7c:f7:e3:43:0c:9d:db:9a:7e:7e:a5: 48:dd:42:2a:de:bb:f9:00:91:29:70:5b:10:01:06:49:17:c8: 87:f6:53:29:56:7e:ed:a5:2a:f7:b9:01:18:61:30:b9:a6:73: c3:4a:f7:ca:b3:3a:1e:78:a7:da:6e:cc:9d:96:a3:5d:be:9e: df:b2:a2:b8:28:38:aa:d9:20:6f:7d:57:ba:3c:c6:4d:6e:a6: 63:73:6a:ad -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUcpjXWtrQjt0UAJTzohzYanixyd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNDMTE2RDkxNjBCNkYyMUY3QjY0N0Q2RkI4RUMxNDM2 Q0FEODhENDAeFw0yNjA1MDMwMzAwMjVaFw0yNzA1MDIwMzA1MjVaMDMxMTAvBgNV BAMTKEZCODc1N0NGRDU5QkIyQzhBMEEyRDUwRTBEREQwOEQyRkIxMDUxNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4rvB7iMmf6iZJDbCYfvuVPKIT XocqVZSnhgchEkPDNl8MXZd06ev8p3j+sWk+glta1Eyux5+9Y6HjLx9X8nY/i7YL nSQjsQ6Glr6u1kAkEmMKi+XxJEwh6mjNv6TLOq0iaT+Ef86TZly8pPQVFpxM100l nxjEJgrBi4Gwr6OuNLk/HJeZucn32ZFNrVKi4PwnHnawu0rp4yc6nxPSE+coxHP8 S8L+xyDet2TlOgugkBIX0J448vErC2NDTyePjOBxS0LtUNxLGb5ryXc/w1tQ5uN9 U7+e0F+LvKI92kUPc68hNOYjuFbJ+2yR9d8T4UTDum8o4qeWm0DEB8HZn4cRAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQU+4dXz9WbssigotUODd0I0vsQUWYwHwYDVR0j BBgwFoAU48EW2RYLbyH3tkfW+47BQ2ytiNQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzYyMWY3NTMtYTg4ZS00ZWRmLWEzMDYtYmQ5M2Q1YTM4ZmVhLzAvRTNDMTE2RDkx NjBCNkYyMUY3QjY0N0Q2RkI4RUMxNDM2Q0FEODhENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FM0MxMTZEOTE2MEI2RjIxRjdCNjQ3RDZGQjhFQzE0MzZDQUQ4 OEQ0LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M2MjFmNzUzLWE4OGUtNGVkZi1h MzA2LWJkOTNkNWEzOGZlYS8wLzMyMzQzMDM0M2E2NjM4NjMzMDNhM2EyZjM0Mzgy ZDM0MzgyMDNkM2UyMDM0MzUzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBPjAAAAwDQYJKoZI hvcNAQELBQADggEBAACRGBY6R4/XF4WE5Ymvwo66de3vVSY0j8GnkHZ7jci75W5z diu/JmHTTYo0rFio6ZraG8a14Xj1qkUY1/vdIsT5f+xi9aTpSb1IfdLUmBL9Jnxc SxgVLyOm2v4ZhzbIHccT0GcsoC25Vj0fg641luT9dkZzZOdjuVqggsGBRI9Z8Pwv CP1YM2IEOdXhtFNYh2B+z8M16zoxeBuG1Or0BfZ9MUl15smwxhZ89+NDDJ3bmn5+ pUjdQireu/kAkSlwWxABBkkXyIf2UylWfu2lKve5ARhhMLmmc8NK98qzOh54p9pu zJ2Wo12+nt+yorgoOKrZIG99V7o8xk1upmNzaq0= -----END CERTIFICATE-----Generated at Wed May 13 05:54:54 2026 by rpki-client