$ rpki-client -vvf rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030313a3a2f34382d3438203d3e203338353236.roa File: 323430353a333734303a383030313a3a2f34382d3438203d3e203338353236.roa (raw, json) Hash identifier: JwvtFM7AHp8VA3hauLHWbVZ9SPnjtw+hqcZwZNlQevI= Subject key identifier: CB:30:9E:EE:43:F9:0B:70:D7:09:1D:56:7E:FD:48:F4:53:77:88:1C Certificate issuer: /CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7 Certificate serial: 1A65C0C109B01BD33B1534434D4E535DEC7281B1 Authority key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030313a3a2f34382d3438203d3e203338353236.roa Signing time: Sun 03 May 2026 03:14:11 +0000 ROA not before: Sun 03 May 2026 03:09:11 +0000 ROA not after: Sun 02 May 2027 03:14:11 +0000 asID: 38526 IP address blocks: 2405:3740:8001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:65:c0:c1:09:b0:1b:d3:3b:15:34:43:4d:4e:53:5d:ec:72:81:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7 Validity Not Before: May 3 03:09:11 2026 GMT Not After : May 2 03:14:11 2027 GMT Subject: CN=CB309EEE43F90B70D7091D567EFD48F45377881C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6b:f8:6e:33:32:05:9e:16:76:d2:4c:4f:c9: 68:17:a3:06:20:97:0a:ef:42:02:0a:1b:05:4c:0a: da:b5:ba:ca:34:2a:f0:c6:62:01:cc:fe:18:bb:cc: ee:27:91:1c:ba:11:39:86:3d:67:40:73:a8:d9:cd: e5:94:27:92:71:b0:00:5c:ac:a5:9c:90:9c:e2:3f: f1:52:ca:2b:0a:45:4f:63:7c:22:24:bf:48:ad:6b: db:28:b9:b0:f8:ca:60:3a:bd:bd:6d:70:54:eb:03: 36:10:43:a3:26:92:81:5d:25:2c:3e:eb:4c:7d:2d: 45:25:13:5c:f3:80:b8:e7:68:e4:0c:19:95:03:b9: 4b:00:d0:67:dc:14:75:ed:9b:f1:5e:5d:8f:a7:82: 50:b4:9b:6c:82:0a:01:20:dd:b6:78:90:83:d2:47: 60:fc:49:f4:2f:5e:ff:65:20:ae:47:a5:e0:54:17: 50:89:ba:c3:54:a4:66:49:59:c5:7b:02:bc:3b:e5: da:94:73:f2:e7:4a:f7:04:b3:15:1e:3f:91:8b:17: 53:a1:8f:be:e7:95:c4:91:14:08:8d:7c:13:1b:4a: 6f:84:cd:42:b8:e3:d3:af:1f:9d:8c:39:f3:3f:f6: dd:2d:40:31:f0:ce:8e:ea:36:d3:39:73:0c:25:3d: eb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:30:9E:EE:43:F9:0B:70:D7:09:1D:56:7E:FD:48:F4:53:77:88:1C X509v3 Authority Key Identifier: keyid:C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030313a3a2f34382d3438203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740:8001::/48 Signature Algorithm: sha256WithRSAEncryption 6c:ce:e9:2c:13:5e:90:dd:ef:1c:f2:88:63:03:6a:97:77:14: d7:44:7d:96:b3:0f:e7:aa:9e:a5:a6:bc:df:d7:75:f5:c1:ba: 48:68:56:91:f8:8e:4b:47:34:fc:06:3a:0e:13:00:30:31:81: a4:70:1d:6d:54:82:d0:79:c5:b9:5f:13:5c:0c:04:eb:39:45: 8f:4f:c3:8e:05:d8:b3:e1:13:5a:6a:e5:08:e5:c4:21:8f:21: 5b:4d:e8:49:11:a6:3f:4c:26:dd:32:d2:4d:9f:04:1e:1b:d3: e8:ed:cf:00:b0:52:f1:53:12:dd:cf:5c:3a:0d:81:a3:85:bb: b6:f8:d1:fa:b9:46:77:bb:f8:eb:6c:e1:e5:92:60:e8:be:e0: c9:10:86:3c:7a:a7:cd:33:ca:6e:1a:ff:e0:f5:6a:21:11:c1: 21:fb:df:34:33:0b:90:d3:5c:e0:d1:d9:a2:89:a7:25:4b:6a: a1:18:1e:00:f1:12:9e:77:cc:64:4e:76:26:5f:a7:93:cf:88: ef:e2:cb:7d:eb:87:a1:7e:43:65:f6:cb:ab:da:35:f8:ae:7b: 39:94:9f:af:4a:0e:76:17:03:ed:b5:c1:6b:2b:9c:27:fd:92: 21:67:d2:da:c1:eb:47:10:28:d8:ac:a0:ee:5e:fc:b6:5d:6b: 81:25:20:8a -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUGmXAwQmwG9M7FTRDTU5TXexygbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYzMkEwQ0Y0REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3 RTNDRkZENzAeFw0yNjA1MDMwMzA5MTFaFw0yNzA1MDIwMzE0MTFaMDMxMTAvBgNV BAMTKENCMzA5RUVFNDNGOTBCNzBENzA5MUQ1NjdFRkQ0OEY0NTM3Nzg4MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCya/huMzIFnhZ20kxPyWgXowYg lwrvQgIKGwVMCtq1uso0KvDGYgHM/hi7zO4nkRy6ETmGPWdAc6jZzeWUJ5JxsABc rKWckJziP/FSyisKRU9jfCIkv0ita9soubD4ymA6vb1tcFTrAzYQQ6MmkoFdJSw+ 60x9LUUlE1zzgLjnaOQMGZUDuUsA0GfcFHXtm/FeXY+nglC0m2yCCgEg3bZ4kIPS R2D8SfQvXv9lIK5HpeBUF1CJusNUpGZJWcV7Arw75dqUc/LnSvcEsxUeP5GLF1Oh j77nlcSRFAiNfBMbSm+EzUK449OvH52MOfM/9t0tQDHwzo7qNtM5cwwlPevDAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUyzCe7kP5C3DXCR1Wfv1I9FN3iBwwHwYDVR0j BBgwFoAUxjKgz02n3ed8vKwfNnEWoH48/9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTY1ZTc4MTAtNjdmNC00MWMyLTgwMzQtNDY1MjczM2I4ZGQyLzAvQzYzMkEwQ0Y0 REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3RTNDRkZENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNjMyQTBDRjREQTdEREU3N0NCQ0FDMUYzNjcxMTZBMDdFM0NG RkQ3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzgzMDMwMzEz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3 QIABMA0GCSqGSIb3DQEBCwUAA4IBAQBszuksE16Q3e8c8ohjA2qXdxTXRH2Wsw/n qp6lprzf13X1wbpIaFaR+I5LRzT8BjoOEwAwMYGkcB1tVILQecW5XxNcDATrOUWP T8OOBdiz4RNaauUI5cQhjyFbTehJEaY/TCbdMtJNnwQeG9Po7c8AsFLxUxLdz1w6 DYGjhbu2+NH6uUZ3u/jrbOHlkmDovuDJEIY8eqfNM8puGv/g9WohEcEh+980MwuQ 01zg0dmiiaclS2qhGB4A8RKed8xkTnYmX6eTz4jv4st964ehfkNl9sur2jX4rns5 lJ+vSg52FwPttcFrK5wn/ZIhZ9LawetHECjYrKDuXvy2XWuBJSCK -----END CERTIFICATE-----Generated at Wed May 13 14:08:35 2026 by rpki-client