$ rpki-client -vvf rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030613a3a2f34382d3438203d3e203338353236.roa File: 323430353a333734303a393030613a3a2f34382d3438203d3e203338353236.roa (raw, json) Hash identifier: 4A+BYUBvV80F6VFQ79RxObl8FtDYLtzOaM6fkPGOYh8= Subject key identifier: F7:76:BC:6E:FC:58:04:B6:50:56:BC:4B:04:23:37:43:61:A1:9F:D5 Certificate issuer: /CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7 Certificate serial: 40BCAC50ABB7475EC8DDD5D8ED49254C2E0FEA77 Authority key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030613a3a2f34382d3438203d3e203338353236.roa Signing time: Sun 03 May 2026 03:13:58 +0000 ROA not before: Sun 03 May 2026 03:08:58 +0000 ROA not after: Sun 02 May 2027 03:13:58 +0000 asID: 38526 IP address blocks: 2405:3740:900a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:bc:ac:50:ab:b7:47:5e:c8:dd:d5:d8:ed:49:25:4c:2e:0f:ea:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7 Validity Not Before: May 3 03:08:58 2026 GMT Not After : May 2 03:13:58 2027 GMT Subject: CN=F776BC6EFC5804B65056BC4B0423374361A19FD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e4:54:b4:7b:9e:97:74:cb:ae:1a:b4:dd:53: e9:84:7b:b5:95:fa:b8:76:62:7a:3a:c1:c2:c7:98: fc:7b:24:0d:53:33:a9:74:20:03:c6:32:91:ad:37: ac:1e:85:20:42:79:47:98:9d:bc:73:0a:18:0e:b5: be:47:e7:50:2c:09:9f:8b:af:d7:b6:84:0d:a9:ec: 83:43:16:48:77:c0:7e:05:7f:ae:66:b5:d3:32:3b: 8c:36:9d:5e:7c:fb:ed:9b:5f:d3:d6:93:61:8d:26: 07:e3:c1:88:e4:35:8e:63:c6:31:ff:f9:53:fc:8c: 02:9e:d7:38:b5:b7:09:95:fd:c1:da:08:34:0c:de: f5:fb:5a:e0:49:42:9d:07:ec:0b:ad:b7:6f:9e:98: 4a:30:70:42:72:14:60:21:45:c5:e8:13:01:35:0f: 21:cf:13:35:c9:95:fe:44:33:83:46:6c:b8:39:bf: e6:1a:55:4c:3d:20:28:75:87:40:0e:40:86:0e:4c: 90:69:80:a1:de:50:bd:95:c2:d3:cf:45:a8:ae:72: 6e:6b:bd:1b:81:d9:29:4e:27:fe:4f:68:08:f0:db: 49:02:47:92:4e:0f:60:7e:72:bf:bf:40:cb:78:5d: 9e:e1:d4:e4:b6:bf:a0:54:18:e3:13:ac:5c:03:ac: 12:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:76:BC:6E:FC:58:04:B6:50:56:BC:4B:04:23:37:43:61:A1:9F:D5 X509v3 Authority Key Identifier: keyid:C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030613a3a2f34382d3438203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740:900a::/48 Signature Algorithm: sha256WithRSAEncryption 31:ed:67:fd:71:81:3b:17:f2:8e:33:f2:bc:8e:90:62:f2:ac: 64:47:f2:d3:98:ac:e1:9d:f6:ed:93:59:fe:05:35:4e:8b:d7: a3:22:7a:2c:eb:2e:1c:c2:c5:33:fa:dd:f7:31:9b:66:b9:bd: cd:47:97:af:e1:12:82:ea:66:96:7d:d1:a4:e7:98:15:60:d9: 68:9c:30:bc:01:a8:26:e7:f4:26:a5:a8:c1:4a:f9:e3:36:fb: 83:63:86:60:b5:1d:82:73:a8:aa:46:b9:af:1a:0f:43:96:ad: cb:36:94:0a:d1:80:4b:04:17:2e:ff:73:a7:cc:5a:21:73:de: fa:75:c6:9a:a8:6d:65:b9:6b:87:3f:29:7c:8a:72:e5:61:ed: c3:29:f0:cf:af:08:ae:0e:b6:c3:f5:5c:ea:e3:02:22:7f:6a: 8c:73:df:f3:f1:a3:cf:36:74:c1:a6:09:32:b0:56:2c:a4:0f: dd:8f:20:6f:72:7f:9b:13:20:f2:0b:65:d0:60:6f:af:69:a8: 00:cb:9d:d5:70:b7:44:b1:91:6b:3a:2d:d3:95:bf:dd:76:b9: a9:cc:c2:91:22:57:77:e2:db:7f:91:8e:01:e1:80:69:d8:b2: c9:06:01:0f:b7:03:a2:62:77:b5:9e:92:78:c2:c4:55:6d:3f: a8:af:c9:02 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUQLysUKu3R17I3dXY7UklTC4P6ncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYzMkEwQ0Y0REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3 RTNDRkZENzAeFw0yNjA1MDMwMzA4NThaFw0yNzA1MDIwMzEzNThaMDMxMTAvBgNV BAMTKEY3NzZCQzZFRkM1ODA0QjY1MDU2QkM0QjA0MjMzNzQzNjFBMTlGRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi5FS0e56XdMuuGrTdU+mEe7WV +rh2Yno6wcLHmPx7JA1TM6l0IAPGMpGtN6wehSBCeUeYnbxzChgOtb5H51AsCZ+L r9e2hA2p7INDFkh3wH4Ff65mtdMyO4w2nV58++2bX9PWk2GNJgfjwYjkNY5jxjH/ +VP8jAKe1zi1twmV/cHaCDQM3vX7WuBJQp0H7Autt2+emEowcEJyFGAhRcXoEwE1 DyHPEzXJlf5EM4NGbLg5v+YaVUw9ICh1h0AOQIYOTJBpgKHeUL2VwtPPRaiucm5r vRuB2SlOJ/5PaAjw20kCR5JOD2B+cr+/QMt4XZ7h1OS2v6BUGOMTrFwDrBLrAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU93a8bvxYBLZQVrxLBCM3Q2Ghn9UwHwYDVR0j BBgwFoAUxjKgz02n3ed8vKwfNnEWoH48/9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTY1ZTc4MTAtNjdmNC00MWMyLTgwMzQtNDY1MjczM2I4ZGQyLzAvQzYzMkEwQ0Y0 REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3RTNDRkZENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNjMyQTBDRjREQTdEREU3N0NCQ0FDMUYzNjcxMTZBMDdFM0NG RkQ3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzkzMDMwNjEz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3 QJAKMA0GCSqGSIb3DQEBCwUAA4IBAQAx7Wf9cYE7F/KOM/K8jpBi8qxkR/LTmKzh nfbtk1n+BTVOi9ejInos6y4cwsUz+t33MZtmub3NR5ev4RKC6maWfdGk55gVYNlo nDC8Aagm5/QmpajBSvnjNvuDY4ZgtR2Cc6iqRrmvGg9Dlq3LNpQK0YBLBBcu/3On zFohc976dcaaqG1luWuHPyl8inLlYe3DKfDPrwiuDrbD9Vzq4wIif2qMc9/z8aPP NnTBpgkysFYspA/djyBvcn+bEyDyC2XQYG+vaagAy53VcLdEsZFrOi3Tlb/ddrmp zMKRIld34tt/kY4B4YBp2LLJBgEPtwOiYne1npJ4wsRVbT+or8kC -----END CERTIFICATE-----Generated at Wed May 13 11:58:40 2026 by rpki-client