$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/323430323a666463303a633830323a3a2f34382d3438203d3e20313337333633.roa File: 323430323a666463303a633830323a3a2f34382d3438203d3e20313337333633.roa (raw, json) Hash identifier: Gsl3H+Xpktz1qLk/16DVTjg0FvEY5dvYbGDi7zrN6y4= Subject key identifier: FC:37:06:33:77:88:95:BF:A4:FB:34:B1:AB:9F:BA:9D:1E:41:1D:C9 Certificate issuer: /CN=A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305 Certificate serial: 517FCD162C1F80F1B869741095A537739D2E8769 Authority key identifier: A0:6C:E5:EE:EF:DB:5B:66:43:B1:8A:83:EB:E3:9B:3C:52:FF:D3:05 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/323430323a666463303a633830323a3a2f34382d3438203d3e20313337333633.roa Signing time: Sun 03 May 2026 03:08:19 +0000 ROA not before: Sun 03 May 2026 03:03:19 +0000 ROA not after: Sun 02 May 2027 03:08:19 +0000 asID: 137363 IP address blocks: 2402:fdc0:c802::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.crl rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:50:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:7f:cd:16:2c:1f:80:f1:b8:69:74:10:95:a5:37:73:9d:2e:87:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305 Validity Not Before: May 3 03:03:19 2026 GMT Not After : May 2 03:08:19 2027 GMT Subject: CN=FC370633778895BFA4FB34B1AB9FBA9D1E411DC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d9:67:da:85:47:c3:05:a4:71:1c:12:d7:6f: 2b:58:bf:4a:71:cb:e5:14:10:00:c3:17:27:ed:ec: 0b:d1:5e:09:90:94:ed:9a:e0:d9:f2:55:8b:96:24: 61:a7:47:fd:25:3b:74:bd:c9:0a:db:d8:5d:02:86: f5:4b:e2:01:a9:ed:4d:9c:ba:45:e3:ee:31:93:59: 3f:ad:d7:85:f9:fe:57:b4:d0:1b:5c:29:3e:56:90: 74:db:d9:ff:8d:6b:14:b2:16:9c:76:eb:25:d3:14: 40:86:92:f0:3a:15:6a:4c:d0:38:41:69:88:89:cf: e0:d4:39:ac:56:9d:13:c6:a0:06:7f:78:a2:3b:b9: d3:cf:be:2a:83:c1:84:3f:d4:a6:04:7f:05:0b:c3: 0f:21:4c:ec:cf:21:e9:e3:2a:f4:81:50:76:51:02: 20:0c:6d:0a:5a:28:8f:81:cf:23:9f:41:4c:5f:1f: a0:85:ce:7c:aa:ff:34:20:fa:8d:45:4e:a6:a5:85: 12:a7:71:a4:e6:0d:59:83:67:6b:27:d6:dc:3d:57: 1c:7e:71:4b:eb:fd:c7:1c:8b:c5:3e:d4:4e:32:d8: ea:53:0b:fb:c8:6c:64:22:30:c0:30:7e:31:4d:4e: 06:8d:8a:d1:d3:fc:06:41:a7:3d:cf:28:db:2e:fd: ae:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:37:06:33:77:88:95:BF:A4:FB:34:B1:AB:9F:BA:9D:1E:41:1D:C9 X509v3 Authority Key Identifier: keyid:A0:6C:E5:EE:EF:DB:5B:66:43:B1:8A:83:EB:E3:9B:3C:52:FF:D3:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/323430323a666463303a633830323a3a2f34382d3438203d3e20313337333633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:fdc0:c802::/48 Signature Algorithm: sha256WithRSAEncryption ad:db:ad:c7:36:3f:31:15:5e:93:68:57:e1:ee:68:00:a3:ce: 46:08:ec:2e:31:ed:d1:2d:c9:df:ca:98:4a:6e:6b:0f:33:59: 46:b4:f3:ba:b7:03:5b:8a:96:8b:1d:47:4f:ac:6f:1d:54:b0: df:66:93:3f:ba:5a:c6:7b:9f:c4:98:54:3a:d1:36:9c:a6:93: 2e:c4:b5:f8:f6:93:74:35:ef:c7:ef:32:62:27:61:de:80:15: 8f:07:b7:47:28:78:d7:e1:dd:24:f7:ba:33:b3:10:d8:0c:f9: e7:24:12:d7:46:24:98:f0:e5:51:d1:56:b2:66:55:6d:0d:05: 89:7a:b7:31:64:68:08:6c:38:48:6a:f2:2e:7a:7f:ed:35:1f: a5:2c:a0:fa:e6:a5:f6:ac:61:e2:a8:30:5c:23:eb:a4:dd:14: 86:d4:18:71:5e:1d:cc:dc:5f:2f:db:48:75:9a:a0:5b:20:44: e5:66:49:70:53:79:5f:5a:13:74:4f:40:bd:27:fe:f6:d0:cc: 96:da:ca:2b:ed:19:2c:e9:2a:56:f5:da:5d:a1:fa:47:39:f2: ab:2e:ad:8a:89:5c:49:fe:fe:18:f7:25:75:83:d3:13:e5:6b: c3:ef:67:35:09:90:ec:df:4f:c7:df:9e:b5:fa:8f:7d:a3:e9: 0d:29:d2:9c -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUUX/NFiwfgPG4aXQQlaU3c50uh2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA2Q0U1RUVFRkRCNUI2NjQzQjE4QTgzRUJFMzlCM0M1 MkZGRDMwNTAeFw0yNjA1MDMwMzAzMTlaFw0yNzA1MDIwMzA4MTlaMDMxMTAvBgNV BAMTKEZDMzcwNjMzNzc4ODk1QkZBNEZCMzRCMUFCOUZCQTlEMUU0MTFEQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH2WfahUfDBaRxHBLXbytYv0px y+UUEADDFyft7AvRXgmQlO2a4NnyVYuWJGGnR/0lO3S9yQrb2F0ChvVL4gGp7U2c ukXj7jGTWT+t14X5/le00BtcKT5WkHTb2f+NaxSyFpx26yXTFECGkvA6FWpM0DhB aYiJz+DUOaxWnRPGoAZ/eKI7udPPviqDwYQ/1KYEfwULww8hTOzPIenjKvSBUHZR AiAMbQpaKI+BzyOfQUxfH6CFznyq/zQg+o1FTqalhRKncaTmDVmDZ2sn1tw9Vxx+ cUvr/ccci8U+1E4y2OpTC/vIbGQiMMAwfjFNTgaNitHT/AZBpz3PKNsu/a4hAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU/DcGM3eIlb+k+zSxq5+6nR5BHckwHwYDVR0j BBgwFoAUoGzl7u/bW2ZDsYqD6+ObPFL/0wUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDEwODViNGEtZjU3My00MmYzLTgyNWMtMWNmMGM4NzJiMTUyLzAvQTA2Q0U1RUVF RkRCNUI2NjQzQjE4QTgzRUJFMzlCM0M1MkZGRDMwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMDZDRTVFRUVGREI1QjY2NDNCMThBODNFQkUzOUIzQzUyRkZE MzA1LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QxMDg1YjRhLWY1NzMtNDJmMy04 MjVjLTFjZjBjODcyYjE1Mi8wLzMyMzQzMDMyM2E2NjY0NjMzMDNhNjMzODMwMzIz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzczMzM2MzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk Av3AyAIwDQYJKoZIhvcNAQELBQADggEBAK3brcc2PzEVXpNoV+HuaACjzkYI7C4x 7dEtyd/KmEpuaw8zWUa087q3A1uKlosdR0+sbx1UsN9mkz+6WsZ7n8SYVDrRNpym ky7Etfj2k3Q178fvMmInYd6AFY8Ht0coeNfh3ST3ujOzENgM+eckEtdGJJjw5VHR VrJmVW0NBYl6tzFkaAhsOEhq8i56f+01H6UsoPrmpfasYeKoMFwj66TdFIbUGHFe HczcXy/bSHWaoFsgROVmSXBTeV9aE3RPQL0n/vbQzJbayivtGSzpKlb12l2h+kc5 8qsurYqJXEn+/hj3JXWD0xPla8PvZzUJkOzfT8ffnrX6j32j6Q0p0pw= -----END CERTIFICATE-----Generated at Wed May 13 18:21:49 2026 by rpki-client