$ rpki-client -vvf rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030333a3a2f34382d3438203d3e203338353236.roa File: 323430353a333734303a393030333a3a2f34382d3438203d3e203338353236.roa (raw, json) Hash identifier: lCx6Uo8Pq5dIT0S+iOC2BWsFS1WGrzjCoSGgNNoTGx0= Subject key identifier: 99:A2:9F:5B:A1:42:7F:16:08:ED:DA:F6:F7:2B:FC:4B:35:F5:05:60 Certificate issuer: /CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7 Certificate serial: 7189FDC38A064FCBD9E903B95B2FA217D7826652 Authority key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030333a3a2f34382d3438203d3e203338353236.roa Signing time: Sun 03 May 2026 03:14:05 +0000 ROA not before: Sun 03 May 2026 03:09:05 +0000 ROA not after: Sun 02 May 2027 03:14:05 +0000 asID: 38526 IP address blocks: 2405:3740:9003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:89:fd:c3:8a:06:4f:cb:d9:e9:03:b9:5b:2f:a2:17:d7:82:66:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7 Validity Not Before: May 3 03:09:05 2026 GMT Not After : May 2 03:14:05 2027 GMT Subject: CN=99A29F5BA1427F1608EDDAF6F72BFC4B35F50560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:46:03:74:46:42:12:8d:a4:b9:0c:6a:24:31: 9f:62:b7:a5:cf:21:5c:56:bc:f2:cc:42:4b:93:05: 5c:61:03:4e:f6:16:ea:35:b8:8c:a4:0d:00:d6:9c: b9:e4:6d:03:4f:b3:50:8b:6a:e8:d5:ca:9d:b7:80: cd:60:7a:aa:40:44:54:53:21:2d:c4:ed:8e:da:dd: 2c:48:6c:ba:71:f5:5e:01:7b:c8:9c:62:94:9e:f8: 8b:e7:e8:ec:19:e5:85:d2:4b:e7:49:8d:98:7d:b7: 0e:d1:ee:19:04:34:d2:ef:89:4a:52:a9:66:46:62: 1e:3e:a8:ab:80:86:f5:13:4c:fe:13:6e:05:5c:34: 88:94:7e:99:7b:d7:10:8a:68:89:c7:e9:22:d1:0b: c5:3d:0e:c2:09:0b:4d:7f:e8:a2:c9:ec:b4:a4:b9: 8b:e5:6c:3d:1f:39:03:51:ff:b3:2d:3a:50:2e:ce: a4:7e:e6:72:a5:a7:3f:b9:6d:b0:2b:7c:fe:41:80: 51:c9:82:60:68:88:bd:18:9c:7d:b0:4e:99:39:09: 56:32:18:bc:ac:aa:ef:94:1f:b8:87:94:0c:af:71: 89:ca:38:9b:56:b1:08:11:3d:9a:70:22:a9:c8:cd: ae:6d:a2:41:68:7f:91:dc:3e:99:18:cb:22:da:8f: 65:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A2:9F:5B:A1:42:7F:16:08:ED:DA:F6:F7:2B:FC:4B:35:F5:05:60 X509v3 Authority Key Identifier: keyid:C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030333a3a2f34382d3438203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740:9003::/48 Signature Algorithm: sha256WithRSAEncryption 03:5b:0a:66:cc:9c:74:50:1c:2c:2b:ca:71:3a:c9:68:64:30: 75:f7:43:fa:d6:1c:52:dd:98:8e:8b:67:42:90:da:54:b6:92: 29:f4:6c:48:78:a2:b7:6a:a8:c1:96:77:0c:29:d8:93:56:d2: 7a:82:ae:51:af:a0:43:5f:3c:9a:9d:f7:31:e3:88:a1:25:d1: 39:24:07:a5:05:4d:fc:d8:01:47:bd:90:f3:43:3b:c1:f7:c9: c6:39:7c:ee:3b:b5:c6:fa:40:f7:46:48:95:de:1f:d4:68:fe: 42:c9:9d:15:3b:06:63:2c:cd:55:2a:ac:77:59:2b:17:30:6d: 66:e9:97:b6:c6:8d:d0:41:6b:3c:4a:ce:b7:3e:a5:b7:de:7d: 86:67:e5:ac:bf:15:df:d3:1e:9c:6a:59:7d:77:94:3f:75:e3: 23:80:43:97:66:c7:92:79:7f:ec:1f:43:e6:04:d9:6a:87:ec: b2:79:e5:18:d6:b3:e3:94:42:c1:03:ca:97:7b:ed:5e:b5:a3: 01:dc:76:53:4f:85:59:38:85:bd:61:91:12:9a:28:14:25:6b: cd:fd:64:59:8d:a1:19:f4:23:f9:1e:70:d8:94:29:3d:0c:a0: fb:4d:f2:1c:df:83:2e:c3:e6:d0:b6:91:f5:51:5c:96:a1:3c: 98:1b:72:d4 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUcYn9w4oGT8vZ6QO5Wy+iF9eCZlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYzMkEwQ0Y0REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3 RTNDRkZENzAeFw0yNjA1MDMwMzA5MDVaFw0yNzA1MDIwMzE0MDVaMDMxMTAvBgNV BAMTKDk5QTI5RjVCQTE0MjdGMTYwOEVEREFGNkY3MkJGQzRCMzVGNTA1NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMRgN0RkISjaS5DGokMZ9it6XP IVxWvPLMQkuTBVxhA072Fuo1uIykDQDWnLnkbQNPs1CLaujVyp23gM1geqpARFRT IS3E7Y7a3SxIbLpx9V4Be8icYpSe+Ivn6OwZ5YXSS+dJjZh9tw7R7hkENNLviUpS qWZGYh4+qKuAhvUTTP4TbgVcNIiUfpl71xCKaInH6SLRC8U9DsIJC01/6KLJ7LSk uYvlbD0fOQNR/7MtOlAuzqR+5nKlpz+5bbArfP5BgFHJgmBoiL0YnH2wTpk5CVYy GLysqu+UH7iHlAyvcYnKOJtWsQgRPZpwIqnIza5tokFof5HcPpkYyyLaj2WPAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUmaKfW6FCfxYI7dr29yv8SzX1BWAwHwYDVR0j BBgwFoAUxjKgz02n3ed8vKwfNnEWoH48/9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTY1ZTc4MTAtNjdmNC00MWMyLTgwMzQtNDY1MjczM2I4ZGQyLzAvQzYzMkEwQ0Y0 REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3RTNDRkZENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNjMyQTBDRjREQTdEREU3N0NCQ0FDMUYzNjcxMTZBMDdFM0NG RkQ3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzkzMDMwMzMz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3 QJADMA0GCSqGSIb3DQEBCwUAA4IBAQADWwpmzJx0UBwsK8pxOsloZDB190P61hxS 3ZiOi2dCkNpUtpIp9GxIeKK3aqjBlncMKdiTVtJ6gq5Rr6BDXzyanfcx44ihJdE5 JAelBU382AFHvZDzQzvB98nGOXzuO7XG+kD3RkiV3h/UaP5CyZ0VOwZjLM1VKqx3 WSsXMG1m6Ze2xo3QQWs8Ss63PqW33n2GZ+WsvxXf0x6call9d5Q/deMjgEOXZseS eX/sH0PmBNlqh+yyeeUY1rPjlELBA8qXe+1etaMB3HZTT4VZOIW9YZESmigUJWvN /WRZjaEZ9CP5HnDYlCk9DKD7TfIc34Muw+bQtpH1UVyWoTyYG3LU -----END CERTIFICATE-----Generated at Wed May 13 13:00:25 2026 by rpki-client