$ rpki-client -vvf rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030653a3a2f34382d3438203d3e203338353236.roa File: 323430353a333734303a393030653a3a2f34382d3438203d3e203338353236.roa (raw, json) Hash identifier: tYezAqDoBV8XpbZYkMX7/C/ri8cw8YZQppSIwy+ucL0= Subject key identifier: 83:99:F0:3A:0F:A1:7E:BE:B1:06:52:16:4A:39:BB:14:50:5D:D2:A2 Certificate issuer: /CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7 Certificate serial: 40EA174E85979A170A6C8F2E475F615C94E06077 Authority key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030653a3a2f34382d3438203d3e203338353236.roa Signing time: Sun 03 May 2026 03:14:15 +0000 ROA not before: Sun 03 May 2026 03:09:15 +0000 ROA not after: Sun 02 May 2027 03:14:15 +0000 asID: 38526 IP address blocks: 2405:3740:900e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ea:17:4e:85:97:9a:17:0a:6c:8f:2e:47:5f:61:5c:94:e0:60:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7 Validity Not Before: May 3 03:09:15 2026 GMT Not After : May 2 03:14:15 2027 GMT Subject: CN=8399F03A0FA17EBEB10652164A39BB14505DD2A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:24:25:c9:9f:49:68:79:52:51:d2:80:77:87: e1:4e:e7:f5:c9:3d:91:15:a4:9b:05:58:e2:0f:28: 9b:55:7a:cc:00:48:b6:28:3a:0d:bd:6b:bb:e2:fb: 38:5b:4b:26:17:db:f0:19:10:6d:0e:0e:af:bd:61: 18:85:b8:d6:e0:b1:c8:5f:60:38:66:f0:54:16:8e: f8:1d:ee:20:a2:9a:8b:23:f8:04:f3:4e:1d:fd:4d: 1e:72:71:61:6c:c9:68:34:35:c1:6b:ad:f1:01:20: a9:cf:07:27:f8:5b:54:8b:ee:f9:09:38:4e:24:b2: ea:b3:cc:88:cf:ad:b1:42:88:f7:87:ef:6e:7f:e5: 11:99:86:49:f4:0f:b0:11:8b:7e:70:6a:18:6f:0d: 88:dd:ab:a8:7f:7c:7a:ac:b1:ca:7d:69:3e:c7:05: 05:8b:32:c3:00:b4:f2:24:13:72:d2:f6:1e:50:a8: 5a:5f:25:e3:de:4c:1f:58:de:e7:01:61:e7:9d:0c: 22:4a:7b:1b:9e:a9:92:a4:bc:fa:82:34:df:a0:56: d1:c0:51:9b:87:1b:e9:50:5b:04:89:e0:7e:6a:44: 41:7c:08:75:f0:d5:50:9d:98:86:43:d7:a2:a6:51: ee:6d:91:34:fe:24:63:91:f8:a1:bb:15:77:e8:7a: 03:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:99:F0:3A:0F:A1:7E:BE:B1:06:52:16:4A:39:BB:14:50:5D:D2:A2 X509v3 Authority Key Identifier: keyid:C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030653a3a2f34382d3438203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740:900e::/48 Signature Algorithm: sha256WithRSAEncryption 88:73:0f:d6:11:46:ea:a0:0c:58:f4:dc:8c:5b:93:bb:0b:db: 98:2d:be:d3:bf:00:7d:e2:e9:5b:4e:67:8f:d0:a6:72:a6:f9: 99:37:87:1b:01:e5:36:28:18:16:d0:a9:16:9e:a3:0d:d7:cc: 7b:72:00:58:88:cb:2f:8e:5f:e7:8f:42:ad:d7:e1:a8:a4:78: 8a:1f:68:89:ca:79:e2:48:9d:37:90:e0:ff:7e:4c:cb:c0:84: ff:ed:73:f9:14:09:42:cd:2a:c2:3e:34:2b:4d:44:b0:64:ae: dd:7c:28:6a:fe:83:5e:cb:f5:93:bf:f7:e2:34:df:81:8d:88: af:71:23:5a:8d:24:0b:d2:34:dd:61:f2:d3:09:7e:61:83:df: 13:23:28:b0:43:c8:76:9f:11:4d:f2:4b:7d:a7:9e:7b:7e:2c: fb:ab:de:0d:b1:87:96:ac:24:23:58:00:17:b1:8b:2c:c1:bc: 91:47:d4:1d:77:b8:56:df:4d:ac:52:70:d5:30:8f:37:d5:1f: ac:c1:34:9d:d1:7a:93:bb:a7:98:3f:fd:91:bc:57:c4:e2:2f: 47:30:03:33:a3:1b:88:e7:3f:ad:fc:47:20:3b:81:e4:d2:bd: e4:5f:53:bf:89:ef:e5:e6:e4:52:00:63:50:12:77:f5:c9:aa: 60:c3:04:0a -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUQOoXToWXmhcKbI8uR19hXJTgYHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYzMkEwQ0Y0REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3 RTNDRkZENzAeFw0yNjA1MDMwMzA5MTVaFw0yNzA1MDIwMzE0MTVaMDMxMTAvBgNV BAMTKDgzOTlGMDNBMEZBMTdFQkVCMTA2NTIxNjRBMzlCQjE0NTA1REQyQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCJCXJn0loeVJR0oB3h+FO5/XJ PZEVpJsFWOIPKJtVeswASLYoOg29a7vi+zhbSyYX2/AZEG0ODq+9YRiFuNbgschf YDhm8FQWjvgd7iCimosj+ATzTh39TR5ycWFsyWg0NcFrrfEBIKnPByf4W1SL7vkJ OE4ksuqzzIjPrbFCiPeH725/5RGZhkn0D7ARi35wahhvDYjdq6h/fHqsscp9aT7H BQWLMsMAtPIkE3LS9h5QqFpfJePeTB9Y3ucBYeedDCJKexueqZKkvPqCNN+gVtHA UZuHG+lQWwSJ4H5qREF8CHXw1VCdmIZD16KmUe5tkTT+JGOR+KG7FXfoegP3AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUg5nwOg+hfr6xBlIWSjm7FFBd0qIwHwYDVR0j BBgwFoAUxjKgz02n3ed8vKwfNnEWoH48/9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTY1ZTc4MTAtNjdmNC00MWMyLTgwMzQtNDY1MjczM2I4ZGQyLzAvQzYzMkEwQ0Y0 REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3RTNDRkZENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNjMyQTBDRjREQTdEREU3N0NCQ0FDMUYzNjcxMTZBMDdFM0NG RkQ3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzkzMDMwNjUz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3 QJAOMA0GCSqGSIb3DQEBCwUAA4IBAQCIcw/WEUbqoAxY9NyMW5O7C9uYLb7TvwB9 4ulbTmeP0KZypvmZN4cbAeU2KBgW0KkWnqMN18x7cgBYiMsvjl/nj0Kt1+GopHiK H2iJynniSJ03kOD/fkzLwIT/7XP5FAlCzSrCPjQrTUSwZK7dfChq/oNey/WTv/fi NN+BjYivcSNajSQL0jTdYfLTCX5hg98TIyiwQ8h2nxFN8kt9p557fiz7q94NsYeW rCQjWAAXsYsswbyRR9Qdd7hW302sUnDVMI831R+swTSd0XqTu6eYP/2RvFfE4i9H MAMzoxuI5z+t/EcgO4Hk0r3kX1O/ie/l5uRSAGNQEnf1yapgwwQK -----END CERTIFICATE-----Generated at Wed May 13 11:46:35 2026 by rpki-client