$ rpki-client -vvf rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/323430313a313063303a343030303a3a2f33342d3334203d3e20313331373137.roa File: 323430313a313063303a343030303a3a2f33342d3334203d3e20313331373137.roa (raw, json) Hash identifier: pwtW5wr69XSa+qZr3l0EvDhYLbCZs1lpWX5AfsziilE= Subject key identifier: 4D:44:8B:72:67:8E:29:CD:E3:7B:B3:9A:AD:00:4D:FC:8E:71:80:E7 Certificate issuer: /CN=CB0A606FD0642E68B5212AE751953E0B9A92959F Certificate serial: 45D643889A8C61945D4D6543822636424F7D4E07 Authority key identifier: CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/323430313a313063303a343030303a3a2f33342d3334203d3e20313331373137.roa Signing time: Sun 03 May 2026 03:08:05 +0000 ROA not before: Sun 03 May 2026 03:03:05 +0000 ROA not after: Sun 02 May 2027 03:08:05 +0000 asID: 131717 IP address blocks: 2401:10c0:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:d6:43:88:9a:8c:61:94:5d:4d:65:43:82:26:36:42:4f:7d:4e:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB0A606FD0642E68B5212AE751953E0B9A92959F Validity Not Before: May 3 03:03:05 2026 GMT Not After : May 2 03:08:05 2027 GMT Subject: CN=4D448B72678E29CDE37BB39AAD004DFC8E7180E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:57:b0:8a:d0:42:bb:0f:90:be:10:2c:30:89: 36:be:10:77:f4:3c:53:27:ad:98:c1:64:8e:27:55: c6:c0:50:33:a8:19:ad:5d:19:71:44:cd:96:b3:21: 8c:1f:65:fe:03:b7:ef:7e:55:a7:88:6e:9f:76:b5: 22:a8:2d:de:25:7e:d0:64:80:39:f8:2e:94:34:bc: c0:9a:8e:9a:23:e0:ba:10:bd:af:b8:b4:be:c1:47: d7:7e:74:8f:32:cc:ce:ca:08:2b:d3:c3:7c:c1:d2: c0:30:1d:65:9b:dc:42:08:b6:54:93:0e:75:43:61: 82:ce:19:7d:41:a6:43:11:97:f4:eb:c2:d3:a5:bb: c9:fc:aa:b5:77:cc:62:2a:7b:47:79:84:50:0a:9a: 15:98:60:38:09:7a:4e:6a:29:19:d0:15:62:4d:69: 2b:84:66:f0:f3:60:dc:6b:38:d5:6c:75:e5:28:e2: 5a:37:8d:19:83:57:04:0e:cd:a8:5e:98:7f:fb:d8: 0a:94:01:e0:0f:61:bd:d8:3c:ea:04:eb:c5:e2:1b: 49:32:00:05:3b:de:69:8f:a7:9e:8a:b6:36:15:6c: d4:d1:54:10:8a:d6:35:70:ab:1e:6a:2b:3c:f4:0c: 69:2a:e5:14:68:fc:b0:9e:ca:24:d4:69:7a:c4:e8: 13:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:44:8B:72:67:8E:29:CD:E3:7B:B3:9A:AD:00:4D:FC:8E:71:80:E7 X509v3 Authority Key Identifier: keyid:CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/323430313a313063303a343030303a3a2f33342d3334203d3e20313331373137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:10c0:4000::/34 Signature Algorithm: sha256WithRSAEncryption 78:f0:2b:5e:0e:7a:1e:a4:f5:b0:fb:c4:cd:87:15:9a:b1:b6: e0:e8:d9:78:89:9b:3e:9b:2f:6f:4c:fd:2d:05:4c:ff:51:a1: 21:82:8d:d2:e9:7a:39:3f:3b:03:77:63:de:b5:d0:a4:ac:dd: 71:eb:6c:ad:67:33:aa:38:ae:25:47:9f:f7:64:ff:81:ce:45: 51:94:52:7a:0b:9a:e5:3f:5e:dc:51:fe:db:8e:95:17:1f:e5: 4b:17:8a:16:6b:eb:c4:70:18:5b:39:6b:15:c8:56:f0:c4:8e: 03:42:7a:41:62:be:af:0a:3d:fe:b1:99:0c:b5:1e:7c:20:0d: 88:2d:80:94:2e:62:a8:a1:bc:21:9b:f3:40:2d:ae:08:64:1b: 43:7f:70:d3:b6:19:21:df:ff:7d:d9:6a:a0:18:78:a2:09:98: 16:02:c8:86:bb:34:1c:09:0c:f0:ce:47:ff:be:38:3e:75:5c: ba:dd:16:17:34:d0:63:5f:14:08:db:d3:c6:57:2c:81:84:94: ad:12:be:75:9e:33:f1:b9:70:57:be:0a:2d:eb:03:be:4f:18: c3:f7:49:a9:a4:90:3b:30:20:b6:28:64:11:10:6a:1b:41:30: 88:72:22:58:66:df:f7:ee:c5:28:4f:ba:b1:c9:bf:66:73:de: 33:75:95:ac -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIURdZDiJqMYZRdTWVDgiY2Qk99TgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0IwQTYwNkZEMDY0MkU2OEI1MjEyQUU3NTE5NTNFMEI5 QTkyOTU5RjAeFw0yNjA1MDMwMzAzMDVaFw0yNzA1MDIwMzA4MDVaMDMxMTAvBgNV BAMTKDRENDQ4QjcyNjc4RTI5Q0RFMzdCQjM5QUFEMDA0REZDOEU3MTgwRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOV7CK0EK7D5C+ECwwiTa+EHf0 PFMnrZjBZI4nVcbAUDOoGa1dGXFEzZazIYwfZf4Dt+9+VaeIbp92tSKoLd4lftBk gDn4LpQ0vMCajpoj4LoQva+4tL7BR9d+dI8yzM7KCCvTw3zB0sAwHWWb3EIItlST DnVDYYLOGX1BpkMRl/TrwtOlu8n8qrV3zGIqe0d5hFAKmhWYYDgJek5qKRnQFWJN aSuEZvDzYNxrONVsdeUo4lo3jRmDVwQOzahemH/72AqUAeAPYb3YPOoE68XiG0ky AAU73mmPp56KtjYVbNTRVBCK1jVwqx5qKzz0DGkq5RRo/LCeyiTUaXrE6BPHAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUTUSLcmeOKc3je7OarQBN/I5xgOcwHwYDVR0j BBgwFoAUywpgb9BkLmi1ISrnUZU+C5qSlZ8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA3NDcxYTMtZWU1My00OTljLTlmMmQtY2YxNmIxZTRhMzUzLzAvQ0IwQTYwNkZE MDY0MkU2OEI1MjEyQUU3NTE5NTNFMEI5QTkyOTU5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjBBNjA2RkQwNjQyRTY4QjUyMTJBRTc1MTk1M0UwQjlBOTI5 NTlGLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QwNzQ3MWEzLWVlNTMtNDk5Yy05 ZjJkLWNmMTZiMWU0YTM1My8wLzMyMzQzMDMxM2EzMTMwNjMzMDNhMzQzMDMwMzAz YTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMTMzMzEzNzMxMzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYk ARDAQDANBgkqhkiG9w0BAQsFAAOCAQEAePArXg56HqT1sPvEzYcVmrG24OjZeImb Ppsvb0z9LQVM/1GhIYKN0ul6OT87A3dj3rXQpKzdcetsrWczqjiuJUef92T/gc5F UZRSegua5T9e3FH+246VFx/lSxeKFmvrxHAYWzlrFchW8MSOA0J6QWK+rwo9/rGZ DLUefCANiC2AlC5iqKG8IZvzQC2uCGQbQ39w07YZId//fdlqoBh4ogmYFgLIhrs0 HAkM8M5H/744PnVcut0WFzTQY18UCNvTxlcsgYSUrRK+dZ4z8blwV74KLesDvk8Y w/dJqaSQOzAgtihkERBqG0EwiHIiWGbf9+7FKE+6scm/ZnPeM3WVrA== -----END CERTIFICATE-----Generated at Wed May 13 11:47:13 2026 by rpki-client