$ rpki-client -vvf rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/323430343a6563303a3a2f33322d3332203d3e20313338313132.roa File: 323430343a6563303a3a2f33322d3332203d3e20313338313132.roa (raw, json) Hash identifier: ebJX0xmBUCyzAXEckdnMbEf0pSEsLD4g9s9OXuyGYmM= Subject key identifier: 12:9A:F9:86:7C:07:4B:F8:16:8E:4B:23:1A:9A:E5:E1:51:54:CE:3E Certificate issuer: /CN=F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214 Certificate serial: 6DD7730EB2930362CFE556564BCF5036D8D533B7 Authority key identifier: F8:E9:D4:8D:17:CC:38:E3:4C:BF:C7:4B:5C:07:F4:A9:B1:EB:D2:14 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/323430343a6563303a3a2f33322d3332203d3e20313338313132.roa Signing time: Sun 03 May 2026 03:11:34 +0000 ROA not before: Sun 03 May 2026 03:06:34 +0000 ROA not after: Sun 02 May 2027 03:11:34 +0000 asID: 138112 IP address blocks: 2404:ec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.crl rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:d7:73:0e:b2:93:03:62:cf:e5:56:56:4b:cf:50:36:d8:d5:33:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214 Validity Not Before: May 3 03:06:34 2026 GMT Not After : May 2 03:11:34 2027 GMT Subject: CN=129AF9867C074BF8168E4B231A9AE5E15154CE3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:14:8a:f2:82:87:fd:a3:21:fb:2c:7c:02:48: 96:a5:f7:e6:c3:a9:9b:af:c9:a6:81:ac:aa:b9:f3: 28:01:11:a9:31:f7:f9:4f:67:32:7b:d7:ec:a3:a8: 99:6d:fc:73:2b:f4:4f:21:4d:3e:4c:37:51:b3:47: 13:91:4d:2c:07:7f:41:a7:ee:1e:0d:08:3e:2c:cb: 8e:43:c2:88:e7:2c:2e:f1:46:08:ca:c0:2a:96:e7: a0:2c:d1:fe:d8:d8:cd:14:92:f6:07:ee:fd:f1:07: 76:91:82:92:e3:ee:bb:5f:a1:11:47:4d:81:ef:25: ad:97:7d:94:48:0b:96:1e:4b:e3:d5:9b:be:67:3b: 17:b1:7b:ea:df:17:2d:b8:45:02:05:f1:5a:2a:f9: 07:1c:c9:73:3a:d3:d7:7e:79:ea:59:f1:02:8d:ba: 5a:49:a1:16:f3:44:e2:1e:48:23:d1:be:89:0a:c0: 1a:8d:de:d6:74:e2:f7:13:69:e1:63:2a:d9:07:dd: 57:d1:92:b7:d8:e9:92:94:9a:40:80:85:d2:fe:36: c9:e8:46:90:48:51:5a:6e:dd:3a:6c:a6:09:43:89: 38:c7:55:dd:de:36:68:13:50:bd:ad:20:30:d7:c3: ee:d7:3b:57:4d:05:76:a0:ba:da:3b:8e:c9:54:c0: 2c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9A:F9:86:7C:07:4B:F8:16:8E:4B:23:1A:9A:E5:E1:51:54:CE:3E X509v3 Authority Key Identifier: keyid:F8:E9:D4:8D:17:CC:38:E3:4C:BF:C7:4B:5C:07:F4:A9:B1:EB:D2:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/323430343a6563303a3a2f33322d3332203d3e20313338313132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:ec0::/32 Signature Algorithm: sha256WithRSAEncryption 3c:da:d6:98:65:3e:6a:db:ab:91:c5:d7:6e:40:3d:86:a3:77: 70:55:46:c8:3e:6c:1e:c8:97:cb:46:56:d8:06:2f:27:0f:4d: 39:e6:a3:f5:de:f4:52:1e:d3:13:ce:00:98:e1:63:62:21:16: f9:69:0e:0b:54:91:87:02:55:09:c9:d3:a1:9f:6f:b9:7d:55: 32:ba:0c:81:9b:d6:77:36:3f:f0:da:ef:5f:fd:80:2e:74:5b: dc:90:38:5e:fb:67:1d:4f:bf:c7:2a:c3:c3:45:ba:ae:8b:79: d5:a7:e4:9d:06:58:7d:21:dd:1e:a1:4d:61:4a:b2:80:41:6c: a9:ab:ad:4f:0c:3c:1c:48:1f:90:3e:a9:ec:0a:67:83:af:83: 33:bb:35:e6:61:32:d5:86:d8:48:8c:69:8e:a0:e8:fd:68:8e: d4:fd:fd:8a:a2:cd:7f:ca:df:80:34:93:4a:76:63:e0:36:f7: f9:76:b9:11:2c:dc:78:46:e8:e8:a0:3f:e5:14:8b:43:47:21: 89:31:56:58:a4:26:95:91:3d:91:21:6c:59:b5:51:c0:43:7c: 2f:8a:9e:1b:a3:d4:2f:22:2b:24:31:ae:5c:cf:68:cc:14:0c: 4d:b1:71:db:a4:b3:f4:a4:4f:dd:65:41:83:b8:6a:c9:21:32: d0:b6:72:2f -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUbddzDrKTA2LP5VZWS89QNtjVM7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFOUQ0OEQxN0NDMzhFMzRDQkZDNzRCNUMwN0Y0QTlC MUVCRDIxNDAeFw0yNjA1MDMwMzA2MzRaFw0yNzA1MDIwMzExMzRaMDMxMTAvBgNV BAMTKDEyOUFGOTg2N0MwNzRCRjgxNjhFNEIyMzFBOUFFNUUxNTE1NENFM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPFIrygof9oyH7LHwCSJal9+bD qZuvyaaBrKq58ygBEakx9/lPZzJ71+yjqJlt/HMr9E8hTT5MN1GzRxORTSwHf0Gn 7h4NCD4sy45DwojnLC7xRgjKwCqW56As0f7Y2M0UkvYH7v3xB3aRgpLj7rtfoRFH TYHvJa2XfZRIC5YeS+PVm75nOxexe+rfFy24RQIF8Voq+QccyXM609d+eepZ8QKN ulpJoRbzROIeSCPRvokKwBqN3tZ04vcTaeFjKtkH3VfRkrfY6ZKUmkCAhdL+Nsno RpBIUVpu3TpspglDiTjHVd3eNmgTUL2tIDDXw+7XO1dNBXaguto7jslUwCxjAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUEpr5hnwHS/gWjksjGprl4VFUzj4wHwYDVR0j BBgwFoAU+OnUjRfMOONMv8dLXAf0qbHr0hQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGRiOGQ5MDgtMWI5OS00NTVjLWFjNzYtOGQ2MjRkZmE0M2I2LzAvRjhFOUQ0OEQx N0NDMzhFMzRDQkZDNzRCNUMwN0Y0QTlCMUVCRDIxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEU5RDQ4RDE3Q0MzOEUzNENCRkM3NEI1QzA3RjRBOUIxRUJE MjE0LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RkYjhkOTA4LTFiOTktNDU1Yy1h Yzc2LThkNjI0ZGZhNDNiNi8wLzMyMzQzMDM0M2E2NTYzMzAzYTNhMmYzMzMyMmQz MzMyMjAzZDNlMjAzMTMzMzgzMTMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBA7AMA0GCSqGSIb3 DQEBCwUAA4IBAQA82taYZT5q26uRxdduQD2Go3dwVUbIPmweyJfLRlbYBi8nD005 5qP13vRSHtMTzgCY4WNiIRb5aQ4LVJGHAlUJydOhn2+5fVUyugyBm9Z3Nj/w2u9f /YAudFvckDhe+2cdT7/HKsPDRbqui3nVp+SdBlh9Id0eoU1hSrKAQWypq61PDDwc SB+QPqnsCmeDr4MzuzXmYTLVhthIjGmOoOj9aI7U/f2Kos1/yt+ANJNKdmPgNvf5 drkRLNx4RujooD/lFItDRyGJMVZYpCaVkT2RIWxZtVHAQ3wvip4bo9QvIiskMa5c z2jMFAxNsXHbpLP0pE/dZUGDuGrJITLQtnIv -----END CERTIFICATE-----Generated at Wed May 13 05:48:12 2026 by rpki-client