$ rpki-client -vvf rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031363a3a2f34382d3438203d3e203338353236.roa File: 323430353a333734303a393031363a3a2f34382d3438203d3e203338353236.roa (raw, json) Hash identifier: qldDw11lTL69OP6TAd7UOmPGmLq9EZoNG5OdE+0JPjE= Subject key identifier: 37:30:19:66:53:43:A7:3E:74:33:7B:9E:84:2E:C5:F1:69:14:71:92 Certificate issuer: /CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7 Certificate serial: 1A1DF4F63084FFDE79E1A9A3498A6C796AFF8538 Authority key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031363a3a2f34382d3438203d3e203338353236.roa Signing time: Sun 03 May 2026 03:14:12 +0000 ROA not before: Sun 03 May 2026 03:09:12 +0000 ROA not after: Sun 02 May 2027 03:14:12 +0000 asID: 38526 IP address blocks: 2405:3740:9016::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:1d:f4:f6:30:84:ff:de:79:e1:a9:a3:49:8a:6c:79:6a:ff:85:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7 Validity Not Before: May 3 03:09:12 2026 GMT Not After : May 2 03:14:12 2027 GMT Subject: CN=373019665343A73E74337B9E842EC5F169147192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c6:bc:6f:15:ff:c0:dd:a1:8e:f2:46:c1:91: ef:3a:95:d0:f4:8f:f5:fc:28:65:95:75:97:ea:01: 47:1a:85:05:e8:e0:fe:c6:95:ca:43:56:dd:3e:24: 08:3f:a0:bb:6e:2a:59:1c:87:1f:ee:bf:6a:7a:7b: 0c:7f:93:17:17:76:6d:20:be:75:6e:03:05:e2:a7: d0:9b:bb:e3:55:21:57:c8:ba:0c:79:83:15:0e:d4: 79:4e:05:dd:6f:3b:4e:29:ad:3d:84:d9:63:43:54: 35:b0:f0:0c:39:4b:ef:f2:71:33:e4:14:63:c7:d9: 25:29:8a:2f:de:77:6b:f6:d9:96:f0:63:1c:f1:25: dd:cb:35:be:4f:26:42:1d:8e:bf:62:c3:36:d0:ac: 78:62:07:22:95:0e:02:91:d5:7a:86:3d:8d:86:b8: 6f:e7:15:42:8a:7e:f0:2f:00:d9:36:12:36:0d:c2: 83:96:a8:f9:ac:8f:10:99:3f:3d:a2:a9:f2:96:80: 62:a9:df:bd:b8:7d:d9:e1:13:75:fd:71:55:69:4b: 98:e9:1d:43:54:e3:b9:74:69:70:3d:3f:02:aa:4b: 83:f1:d6:f2:7c:6f:c7:a9:b2:4c:e0:0d:72:3b:4d: c9:5d:60:8d:62:ff:38:e0:0f:e8:18:41:1e:d6:84: 69:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:30:19:66:53:43:A7:3E:74:33:7B:9E:84:2E:C5:F1:69:14:71:92 X509v3 Authority Key Identifier: keyid:C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031363a3a2f34382d3438203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740:9016::/48 Signature Algorithm: sha256WithRSAEncryption 25:f5:bc:02:4c:26:60:61:a3:17:cb:b6:78:bd:c9:9e:93:33: 2b:c2:3e:bb:64:63:8c:69:b5:ab:62:cd:b7:90:de:b2:7b:99: b9:1e:af:0c:cc:d5:ae:6d:79:57:22:4e:0f:74:17:34:6f:f2: 0b:a4:84:78:15:5b:40:2e:a4:e5:db:19:c4:44:a1:ba:85:b4: 31:be:5e:a4:20:51:ca:b8:6e:98:6d:eb:b5:1e:9b:31:df:24: 92:29:d9:1e:78:0f:41:f4:86:66:dd:06:d5:80:17:4a:1d:9c: 92:b9:a4:38:58:d9:3a:fe:43:49:1e:56:44:2b:a1:40:04:35: f5:82:4d:85:2a:d8:be:43:9f:fb:cb:35:e7:16:77:71:36:28: 18:3f:a1:f6:1c:b5:22:4d:21:7e:03:3a:3b:ab:97:a1:9a:69: 27:18:00:dc:33:89:9a:0e:02:07:c4:91:48:1e:94:a8:52:fb: f4:75:a0:84:2a:3a:ec:48:a8:fe:f7:b3:e3:67:ab:a9:41:d7: f1:1d:3d:6d:bd:c3:e0:25:1b:b8:67:10:be:65:51:a1:e3:30: 2e:3c:8c:87:dd:8b:6d:4e:a7:37:d9:c5:da:c3:ad:f4:41:ca: 3f:0c:fe:ba:c6:8e:6b:6a:be:72:78:5a:18:f2:cd:aa:40:f3: 80:4b:93:16 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUGh309jCE/9554amjSYpseWr/hTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYzMkEwQ0Y0REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3 RTNDRkZENzAeFw0yNjA1MDMwMzA5MTJaFw0yNzA1MDIwMzE0MTJaMDMxMTAvBgNV BAMTKDM3MzAxOTY2NTM0M0E3M0U3NDMzN0I5RTg0MkVDNUYxNjkxNDcxOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyxrxvFf/A3aGO8kbBke86ldD0 j/X8KGWVdZfqAUcahQXo4P7GlcpDVt0+JAg/oLtuKlkchx/uv2p6ewx/kxcXdm0g vnVuAwXip9Cbu+NVIVfIugx5gxUO1HlOBd1vO04prT2E2WNDVDWw8Aw5S+/ycTPk FGPH2SUpii/ed2v22ZbwYxzxJd3LNb5PJkIdjr9iwzbQrHhiByKVDgKR1XqGPY2G uG/nFUKKfvAvANk2EjYNwoOWqPmsjxCZPz2iqfKWgGKp3724fdnhE3X9cVVpS5jp HUNU47l0aXA9PwKqS4Px1vJ8b8epskzgDXI7TcldYI1i/zjgD+gYQR7WhGlFAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUNzAZZlNDpz50M3uehC7F8WkUcZIwHwYDVR0j BBgwFoAUxjKgz02n3ed8vKwfNnEWoH48/9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTY1ZTc4MTAtNjdmNC00MWMyLTgwMzQtNDY1MjczM2I4ZGQyLzAvQzYzMkEwQ0Y0 REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3RTNDRkZENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNjMyQTBDRjREQTdEREU3N0NCQ0FDMUYzNjcxMTZBMDdFM0NG RkQ3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzkzMDMxMzYz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3 QJAWMA0GCSqGSIb3DQEBCwUAA4IBAQAl9bwCTCZgYaMXy7Z4vcmekzMrwj67ZGOM abWrYs23kN6ye5m5Hq8MzNWubXlXIk4PdBc0b/ILpIR4FVtALqTl2xnERKG6hbQx vl6kIFHKuG6Ybeu1Hpsx3ySSKdkeeA9B9IZm3QbVgBdKHZySuaQ4WNk6/kNJHlZE K6FABDX1gk2FKti+Q5/7yzXnFndxNigYP6H2HLUiTSF+Azo7q5ehmmknGADcM4ma DgIHxJFIHpSoUvv0daCEKjrsSKj+97PjZ6upQdfxHT1tvcPgJRu4ZxC+ZVGh4zAu PIyH3YttTqc32cXaw630Qco/DP66xo5rar5yeFoY8s2qQPOAS5MW -----END CERTIFICATE-----Generated at Wed May 13 13:33:54 2026 by rpki-client