$ rpki-client -vvf rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030623a3a2f34382d3438203d3e203338353236.roa File: 323430353a333734303a393030623a3a2f34382d3438203d3e203338353236.roa (raw, json) Hash identifier: 3iRyC9ittkSzxz1VN4rCdixqF0BAMAzjnbIPEVsYcEI= Subject key identifier: 1E:7A:F5:34:84:5A:F5:68:FD:85:E9:A4:16:9F:EE:8D:1B:78:F2:4F Certificate issuer: /CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7 Certificate serial: 642DE0D648253A9B7B7C33625E9AC6F65C19600F Authority key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030623a3a2f34382d3438203d3e203338353236.roa Signing time: Sun 03 May 2026 03:14:07 +0000 ROA not before: Sun 03 May 2026 03:09:07 +0000 ROA not after: Sun 02 May 2027 03:14:07 +0000 asID: 38526 IP address blocks: 2405:3740:900b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:2d:e0:d6:48:25:3a:9b:7b:7c:33:62:5e:9a:c6:f6:5c:19:60:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7 Validity Not Before: May 3 03:09:07 2026 GMT Not After : May 2 03:14:07 2027 GMT Subject: CN=1E7AF534845AF568FD85E9A4169FEE8D1B78F24F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:72:a9:d4:42:6f:4b:f1:94:68:67:85:47:9a: f4:3a:4c:99:63:83:dd:37:80:b1:2a:f1:f6:c9:1c: 68:d0:fd:4f:30:0c:99:cd:9d:e1:a9:e4:c2:f4:53: 36:77:7f:d6:a9:d5:bb:bf:a1:4e:2b:8a:d2:7a:52: 39:24:64:29:7d:68:bb:85:84:03:4d:2b:38:3f:32: c6:3f:50:c8:34:84:f2:0a:80:a3:f7:9b:7c:31:0c: 1b:20:28:cd:db:4a:b9:f2:60:db:e2:e7:71:ef:75: b7:65:55:12:41:7c:9d:9a:8a:3d:1e:86:0b:b8:f9: c0:94:79:b9:c6:64:6a:f8:15:4d:87:ea:7f:66:d7: 73:06:64:7f:78:c3:be:17:85:db:d4:b3:bf:1e:d2: a7:2f:25:db:92:08:d2:e5:6f:b4:f4:b3:62:f2:0e: d3:5f:49:04:f3:fd:f1:c6:30:21:a9:80:62:97:83: 42:22:b5:a3:f8:4f:b0:bc:f1:64:7a:07:87:f4:95: a2:67:99:2e:92:1c:e1:b5:6c:38:21:65:df:42:9f: 31:f2:3c:81:66:50:a9:7d:be:76:38:ca:8f:c2:4b: 66:7e:1d:b4:7f:0a:8b:21:f2:20:ed:32:4d:94:dc: 1f:13:3a:7b:5c:fb:a6:66:64:11:49:77:ec:a0:86: 5c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7A:F5:34:84:5A:F5:68:FD:85:E9:A4:16:9F:EE:8D:1B:78:F2:4F X509v3 Authority Key Identifier: keyid:C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030623a3a2f34382d3438203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740:900b::/48 Signature Algorithm: sha256WithRSAEncryption 2b:d0:ae:01:d8:cf:d6:7e:08:ef:88:15:8f:eb:da:49:01:53: b8:78:2a:4c:92:25:b5:dc:24:b0:6d:6c:fa:96:e4:3e:79:ce: 6a:ba:83:aa:b4:64:8c:69:b9:3d:e6:28:0c:17:f5:6b:5d:04: 2d:6f:9b:29:36:36:c8:3b:92:e0:46:cf:50:05:4e:b8:1d:60: 1d:d3:02:b2:13:d9:69:02:fa:93:0f:57:37:56:5d:ba:46:e0: 03:95:33:38:bc:26:46:af:a8:e8:02:21:91:53:b8:db:10:11: 08:0a:08:6d:d4:c5:c5:14:8b:0b:62:d7:fe:db:24:72:0c:cf: 85:c9:2b:1f:1a:36:12:7c:f8:a5:99:e6:3a:25:7d:87:cb:70: ab:69:e4:20:e1:b1:c3:10:af:fe:d2:12:94:25:d1:7d:07:22: 79:e0:2f:6b:95:37:0c:36:e0:43:34:2e:15:4d:ff:a3:37:93: b7:55:7c:ce:fa:43:8d:24:6f:f1:22:17:6e:98:58:a8:8b:3d: 13:d8:ee:33:32:33:18:6b:87:5b:c4:fe:80:77:e5:62:f0:fc: 4a:b8:d8:ab:37:f3:71:08:0a:da:76:50:a5:df:d9:c5:73:aa: b5:61:4f:dd:4d:24:e7:8b:e1:45:f4:ec:12:28:35:81:f4:36: 3e:b1:3e:d3 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUZC3g1kglOpt7fDNiXprG9lwZYA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYzMkEwQ0Y0REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3 RTNDRkZENzAeFw0yNjA1MDMwMzA5MDdaFw0yNzA1MDIwMzE0MDdaMDMxMTAvBgNV BAMTKDFFN0FGNTM0ODQ1QUY1NjhGRDg1RTlBNDE2OUZFRThEMUI3OEYyNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCucqnUQm9L8ZRoZ4VHmvQ6TJlj g903gLEq8fbJHGjQ/U8wDJnNneGp5ML0UzZ3f9ap1bu/oU4ritJ6UjkkZCl9aLuF hANNKzg/MsY/UMg0hPIKgKP3m3wxDBsgKM3bSrnyYNvi53HvdbdlVRJBfJ2aij0e hgu4+cCUebnGZGr4FU2H6n9m13MGZH94w74XhdvUs78e0qcvJduSCNLlb7T0s2Ly DtNfSQTz/fHGMCGpgGKXg0IitaP4T7C88WR6B4f0laJnmS6SHOG1bDghZd9CnzHy PIFmUKl9vnY4yo/CS2Z+HbR/Cosh8iDtMk2U3B8TOntc+6ZmZBFJd+yghlyJAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUHnr1NIRa9Wj9hemkFp/ujRt48k8wHwYDVR0j BBgwFoAUxjKgz02n3ed8vKwfNnEWoH48/9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTY1ZTc4MTAtNjdmNC00MWMyLTgwMzQtNDY1MjczM2I4ZGQyLzAvQzYzMkEwQ0Y0 REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3RTNDRkZENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNjMyQTBDRjREQTdEREU3N0NCQ0FDMUYzNjcxMTZBMDdFM0NG RkQ3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzkzMDMwNjIz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3 QJALMA0GCSqGSIb3DQEBCwUAA4IBAQAr0K4B2M/WfgjviBWP69pJAVO4eCpMkiW1 3CSwbWz6luQ+ec5quoOqtGSMabk95igMF/VrXQQtb5spNjbIO5LgRs9QBU64HWAd 0wKyE9lpAvqTD1c3Vl26RuADlTM4vCZGr6joAiGRU7jbEBEICght1MXFFIsLYtf+ 2yRyDM+FySsfGjYSfPilmeY6JX2Hy3CraeQg4bHDEK/+0hKUJdF9ByJ54C9rlTcM NuBDNC4VTf+jN5O3VXzO+kONJG/xIhdumFioiz0T2O4zMjMYa4dbxP6Ad+Vi8PxK uNirN/NxCAradlCl39nFc6q1YU/dTSTni+FF9OwSKDWB9DY+sT7T -----END CERTIFICATE-----Generated at Wed May 13 11:58:51 2026 by rpki-client