$ rpki-client -vvf rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/323430313a313063303a633030303a3a2f33342d3334203d3e20313331373137.roa File: 323430313a313063303a633030303a3a2f33342d3334203d3e20313331373137.roa (raw, json) Hash identifier: 2M+FnZ1ZBmMQrnhoHJr000wngHRS8OoEKdb0quE5URw= Subject key identifier: 46:7F:04:6F:FD:6A:72:F8:C3:D7:08:38:97:1C:B2:FF:9B:B3:EF:BF Certificate issuer: /CN=CB0A606FD0642E68B5212AE751953E0B9A92959F Certificate serial: 3633662BE3CCA7CB7101484FD02E6D99B908A528 Authority key identifier: CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/323430313a313063303a633030303a3a2f33342d3334203d3e20313331373137.roa Signing time: Sun 03 May 2026 03:08:10 +0000 ROA not before: Sun 03 May 2026 03:03:10 +0000 ROA not after: Sun 02 May 2027 03:08:10 +0000 asID: 131717 IP address blocks: 2401:10c0:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:33:66:2b:e3:cc:a7:cb:71:01:48:4f:d0:2e:6d:99:b9:08:a5:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB0A606FD0642E68B5212AE751953E0B9A92959F Validity Not Before: May 3 03:03:10 2026 GMT Not After : May 2 03:08:10 2027 GMT Subject: CN=467F046FFD6A72F8C3D70838971CB2FF9BB3EFBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:15:b2:47:30:a8:65:11:10:b1:d2:38:fe:a0: 06:9c:98:27:1a:95:a7:98:ec:0a:4a:77:1d:8e:42: 47:2a:d7:82:e5:e4:bd:56:b3:95:6b:ae:ac:b1:47: 22:fe:e4:6d:fd:99:52:14:d8:11:38:2b:45:d6:ed: 76:d5:9e:61:e6:b4:89:49:c1:13:d7:29:3a:33:c2: 42:0a:fc:d7:f4:e9:d6:60:f9:0e:22:8a:4a:bc:ef: 49:1b:7f:37:10:45:ae:05:44:90:94:7e:97:f7:fe: 02:a6:f3:c3:fd:aa:ac:0d:41:84:56:e1:d1:33:92: 45:13:6c:aa:d7:2a:c6:16:e5:f9:bb:ac:9c:10:24: 63:cb:31:3c:b0:ab:9f:09:82:f1:02:91:b3:d6:57: fa:13:2d:6a:2a:69:f2:f4:ac:60:51:11:19:24:17: a3:12:cf:85:7f:58:28:7a:a9:ba:97:e6:28:a1:aa: 85:cc:2c:dc:6d:ad:ea:51:33:31:08:65:af:b6:62: 63:f2:08:85:2c:c7:57:31:55:6a:ce:f0:94:0a:ab: 78:bd:4b:bd:f6:63:be:53:cd:f3:6e:c8:4c:e4:b8: 3e:e9:65:b8:97:60:d5:82:44:8c:46:26:10:11:b3: 4c:2c:66:20:7b:63:59:16:90:75:e4:16:78:02:4b: 31:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:7F:04:6F:FD:6A:72:F8:C3:D7:08:38:97:1C:B2:FF:9B:B3:EF:BF X509v3 Authority Key Identifier: keyid:CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/323430313a313063303a633030303a3a2f33342d3334203d3e20313331373137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:10c0:c000::/34 Signature Algorithm: sha256WithRSAEncryption 16:ce:44:6a:94:09:f5:60:a8:11:99:a5:09:cd:75:d3:26:03: 36:30:2a:9a:23:c9:c3:b6:ff:d2:67:04:4a:8f:09:cb:ec:65: 39:bc:bf:bb:e9:d1:23:d3:99:4e:ba:07:22:7c:5b:d2:79:ac: fa:e6:24:78:8e:eb:86:ae:22:a8:0e:2b:f6:05:cd:3a:4a:6d: 29:4f:17:54:52:3d:44:24:31:29:97:b7:ec:87:51:ae:37:d4: c0:9a:4c:53:fd:9d:9f:d3:35:51:e9:0a:f5:9e:b9:50:8f:f3: 0c:3c:e2:f2:5e:55:80:1d:72:6a:ab:65:7c:f3:53:22:c3:56: 2d:5e:f4:9e:67:a4:dd:bd:d4:b6:e8:82:4b:9a:f9:e0:66:40: 11:3b:12:04:53:21:ce:cf:81:a7:63:c1:14:4b:41:e3:36:ec: 2c:f1:73:9b:86:ee:ba:45:53:7f:4c:ff:53:50:3b:49:c8:26: 7f:90:dd:a2:1d:73:5f:3e:5f:38:e5:1b:0c:1a:6b:3a:ec:bc: ef:a8:80:9e:6d:43:21:cc:70:8f:b6:47:9e:0b:ba:d0:57:59: 70:69:d2:62:30:f2:da:8f:8d:37:03:a6:06:a1:c0:2d:60:f0: e5:56:e0:9f:fc:6b:c1:d8:6e:de:47:a6:f7:48:9e:78:ab:4c: 41:2d:e9:e0 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUNjNmK+PMp8txAUhP0C5tmbkIpSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0IwQTYwNkZEMDY0MkU2OEI1MjEyQUU3NTE5NTNFMEI5 QTkyOTU5RjAeFw0yNjA1MDMwMzAzMTBaFw0yNzA1MDIwMzA4MTBaMDMxMTAvBgNV BAMTKDQ2N0YwNDZGRkQ2QTcyRjhDM0Q3MDgzODk3MUNCMkZGOUJCM0VGQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAFbJHMKhlERCx0jj+oAacmCca laeY7ApKdx2OQkcq14Ll5L1Ws5VrrqyxRyL+5G39mVIU2BE4K0XW7XbVnmHmtIlJ wRPXKTozwkIK/Nf06dZg+Q4iikq870kbfzcQRa4FRJCUfpf3/gKm88P9qqwNQYRW 4dEzkkUTbKrXKsYW5fm7rJwQJGPLMTywq58JgvECkbPWV/oTLWoqafL0rGBRERkk F6MSz4V/WCh6qbqX5iihqoXMLNxtrepRMzEIZa+2YmPyCIUsx1cxVWrO8JQKq3i9 S732Y75TzfNuyEzkuD7pZbiXYNWCRIxGJhARs0wsZiB7Y1kWkHXkFngCSzGZAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQURn8Eb/1qcvjD1wg4lxyy/5uz778wHwYDVR0j BBgwFoAUywpgb9BkLmi1ISrnUZU+C5qSlZ8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA3NDcxYTMtZWU1My00OTljLTlmMmQtY2YxNmIxZTRhMzUzLzAvQ0IwQTYwNkZE MDY0MkU2OEI1MjEyQUU3NTE5NTNFMEI5QTkyOTU5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjBBNjA2RkQwNjQyRTY4QjUyMTJBRTc1MTk1M0UwQjlBOTI5 NTlGLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QwNzQ3MWEzLWVlNTMtNDk5Yy05 ZjJkLWNmMTZiMWU0YTM1My8wLzMyMzQzMDMxM2EzMTMwNjMzMDNhNjMzMDMwMzAz YTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMTMzMzEzNzMxMzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYk ARDAwDANBgkqhkiG9w0BAQsFAAOCAQEAFs5EapQJ9WCoEZmlCc110yYDNjAqmiPJ w7b/0mcESo8Jy+xlOby/u+nRI9OZTroHInxb0nms+uYkeI7rhq4iqA4r9gXNOkpt KU8XVFI9RCQxKZe37IdRrjfUwJpMU/2dn9M1UekK9Z65UI/zDDzi8l5VgB1yaqtl fPNTIsNWLV70nmek3b3UtuiCS5r54GZAETsSBFMhzs+Bp2PBFEtB4zbsLPFzm4bu ukVTf0z/U1A7Scgmf5Ddoh1zXz5fOOUbDBprOuy876iAnm1DIcxwj7ZHngu60FdZ cGnSYjDy2o+NNwOmBqHALWDw5Vbgn/xrwdhu3kem90ieeKtMQS3p4A== -----END CERTIFICATE-----Generated at Wed May 13 11:47:22 2026 by rpki-client