$ rpki-client -vvf rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/323430363a343563303a383030303a3a2f33332d3438203d3e203634333030.roa File: 323430363a343563303a383030303a3a2f33332d3438203d3e203634333030.roa (raw, json) Hash identifier: 6uG8JEAg5YXu68O6z0VK1/htvcExMqCS4aozBNgJO50= Subject key identifier: CE:D8:E5:63:43:DF:4A:7A:DF:8F:4D:E2:D9:C3:70:71:E5:79:D6:CF Certificate issuer: /CN=04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4 Certificate serial: 46CC03E3E2E1B04648151F136949429EBAC62C7A Authority key identifier: 04:DB:47:55:C7:5A:83:1C:D9:18:17:E6:A9:B7:E4:E1:ED:2D:F2:D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/323430363a343563303a383030303a3a2f33332d3438203d3e203634333030.roa Signing time: Sun 03 May 2026 03:13:15 +0000 ROA not before: Sun 03 May 2026 03:08:15 +0000 ROA not after: Sun 02 May 2027 03:13:15 +0000 asID: 64300 IP address blocks: 2406:45c0:8000::/33 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.crl rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:cc:03:e3:e2:e1:b0:46:48:15:1f:13:69:49:42:9e:ba:c6:2c:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4 Validity Not Before: May 3 03:08:15 2026 GMT Not After : May 2 03:13:15 2027 GMT Subject: CN=CED8E56343DF4A7ADF8F4DE2D9C37071E579D6CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c0:1e:7e:bc:48:a1:34:8d:01:75:fb:d9:ea: dc:87:80:e0:6d:44:be:5c:43:dc:30:b6:ea:11:f0: 93:21:d1:e2:6d:47:55:ab:cd:df:4f:9b:68:80:4e: e4:77:82:61:eb:d4:72:7d:27:3e:2c:f8:c0:e9:f6: 17:f8:eb:46:23:59:3f:46:2d:f7:90:94:c7:5e:a5: 77:ab:f9:15:7d:95:1a:53:93:74:68:d4:2a:0f:0e: 4a:60:dc:6b:b2:8a:5b:15:f4:94:d9:ae:ce:2f:86: 06:ec:e0:f3:c4:54:7b:17:22:bc:6a:7c:03:b1:0c: ea:de:18:05:fe:7f:e8:18:57:ae:d5:56:f7:b2:47: 2b:f3:23:85:28:a0:5a:9d:d8:d3:c3:38:64:28:05: fa:36:55:82:2c:c1:dd:5f:6c:ee:d4:b5:a6:c1:3f: dd:c5:24:ac:3c:c5:5b:5f:3c:58:b8:5c:93:43:1e: 6a:59:27:f1:dc:aa:65:94:b7:17:43:0c:c3:4a:6d: 42:31:cf:b5:55:27:da:cc:1e:07:37:78:05:7f:ac: 9b:48:e3:97:fe:13:94:a6:55:b8:f2:78:3a:42:5f: 29:08:34:ce:ee:f1:cb:5b:f0:f6:be:51:2e:8d:ef: b9:f4:a4:8f:66:45:06:1b:9b:2a:e6:af:2a:fe:29: f0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D8:E5:63:43:DF:4A:7A:DF:8F:4D:E2:D9:C3:70:71:E5:79:D6:CF X509v3 Authority Key Identifier: keyid:04:DB:47:55:C7:5A:83:1C:D9:18:17:E6:A9:B7:E4:E1:ED:2D:F2:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/323430363a343563303a383030303a3a2f33332d3438203d3e203634333030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:45c0:8000::/33 Signature Algorithm: sha256WithRSAEncryption 44:e3:15:58:cf:d6:02:ad:93:de:74:af:51:47:15:62:a2:2a: 71:9a:41:91:46:a5:88:f0:e2:e7:99:8a:e7:45:6f:d5:4a:57: 0e:28:d5:53:58:c7:82:b0:eb:1b:63:c9:30:ca:73:78:7e:4d: 9c:61:10:92:8e:36:81:7a:13:35:09:7d:19:30:0e:8f:35:07: e1:6c:cd:54:3a:71:b4:5e:53:bb:64:ed:5f:18:f0:a8:67:f4: 68:0d:8e:84:95:6a:86:54:70:b5:87:80:a1:64:c9:55:bb:a1: ac:0d:14:7a:b3:59:9d:60:59:c3:f9:ec:d6:3b:82:fd:f1:05: 30:05:62:65:c0:f9:6e:15:d7:63:c8:c4:1d:13:19:20:4a:0b: 31:42:a2:48:d2:fc:b7:84:b4:e1:59:72:3d:84:a7:fc:d7:52: b8:c3:6b:16:f4:a5:f7:09:2f:ea:c4:04:cc:4d:44:dd:03:1c: 8f:5a:51:d4:da:c3:44:e0:14:6d:92:ff:2d:26:40:9b:cc:a1: 13:72:cd:46:76:d9:01:d0:5f:cd:e4:96:d9:9d:f0:f9:a7:b0: 18:16:18:0e:ed:2c:1f:68:f6:b5:7e:78:c4:23:c2:09:3f:cb: d8:f9:3b:5d:92:fa:2d:d9:26:79:8f:a6:6f:68:a6:ca:5f:ec: b5:df:d1:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURswD4+LhsEZIFR8TaUlCnrrGLHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDREQjQ3NTVDNzVBODMxQ0Q5MTgxN0U2QTlCN0U0RTFF RDJERjJENDAeFw0yNjA1MDMwMzA4MTVaFw0yNzA1MDIwMzEzMTVaMDMxMTAvBgNV BAMTKENFRDhFNTYzNDNERjRBN0FERjhGNERFMkQ5QzM3MDcxRTU3OUQ2Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxwB5+vEihNI0BdfvZ6tyHgOBt RL5cQ9wwtuoR8JMh0eJtR1Wrzd9Pm2iATuR3gmHr1HJ9Jz4s+MDp9hf460YjWT9G LfeQlMdepXer+RV9lRpTk3Ro1CoPDkpg3GuyilsV9JTZrs4vhgbs4PPEVHsXIrxq fAOxDOreGAX+f+gYV67VVveyRyvzI4UooFqd2NPDOGQoBfo2VYIswd1fbO7UtabB P93FJKw8xVtfPFi4XJNDHmpZJ/HcqmWUtxdDDMNKbUIxz7VVJ9rMHgc3eAV/rJtI 45f+E5SmVbjyeDpCXykINM7u8ctb8Pa+US6N77n0pI9mRQYbmyrmryr+KfCdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUztjlY0PfSnrfj03i2cNwceV51s8wHwYDVR0j BBgwFoAUBNtHVcdagxzZGBfmqbfk4e0t8tQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTQzMDRiNjQtMjg5OS00ODMwLTljM2MtMzc1ODRhMzI3ZTFlLzAvMDREQjQ3NTVD NzVBODMxQ0Q5MTgxN0U2QTlCN0U0RTFFRDJERjJENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNERCNDc1NUM3NUE4MzFDRDkxODE3RTZBOUI3RTRFMUVEMkRG MkQ0LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U0MzA0YjY0LTI4OTktNDgzMC05 YzNjLTM3NTg0YTMyN2UxZS8wLzMyMzQzMDM2M2EzNDM1NjMzMDNhMzgzMDMwMzAz YTNhMmYzMzMzMmQzNDM4MjAzZDNlMjAzNjM0MzMzMDMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHJAZF wIAwDQYJKoZIhvcNAQELBQADggEBAETjFVjP1gKtk950r1FHFWKiKnGaQZFGpYjw 4ueZiudFb9VKVw4o1VNYx4Kw6xtjyTDKc3h+TZxhEJKONoF6EzUJfRkwDo81B+Fs zVQ6cbReU7tk7V8Y8Khn9GgNjoSVaoZUcLWHgKFkyVW7oawNFHqzWZ1gWcP57NY7 gv3xBTAFYmXA+W4V12PIxB0TGSBKCzFCokjS/LeEtOFZcj2Ep/zXUrjDaxb0pfcJ L+rEBMxNRN0DHI9aUdTaw0TgFG2S/y0mQJvMoRNyzUZ22QHQX83kltmd8PmnsBgW GA7tLB9o9rV+eMQjwgk/y9j5O12S+i3ZJnmPpm9opspf7LXf0XQ= -----END CERTIFICATE-----Generated at Wed May 13 12:29:09 2026 by rpki-client