$ rpki-client -vvf rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031383a3a2f34382d3438203d3e203338353236.roa File: 323430353a333734303a393031383a3a2f34382d3438203d3e203338353236.roa (raw, json) Hash identifier: cRtJaN+5Z2I1VtGpr4//S/TKWskxEbj85h46wnlk6Bg= Subject key identifier: BB:7D:E6:06:7D:AC:6A:BA:05:AD:A8:0E:DB:E6:F0:A6:F5:16:B3:29 Certificate issuer: /CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7 Certificate serial: 673D2D8E50E0FBF8A810765FCD9B2027A05A7826 Authority key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031383a3a2f34382d3438203d3e203338353236.roa Signing time: Sun 03 May 2026 03:14:00 +0000 ROA not before: Sun 03 May 2026 03:09:00 +0000 ROA not after: Sun 02 May 2027 03:14:00 +0000 asID: 38526 IP address blocks: 2405:3740:9018::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:3d:2d:8e:50:e0:fb:f8:a8:10:76:5f:cd:9b:20:27:a0:5a:78:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7 Validity Not Before: May 3 03:09:00 2026 GMT Not After : May 2 03:14:00 2027 GMT Subject: CN=BB7DE6067DAC6ABA05ADA80EDBE6F0A6F516B329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7e:bc:87:56:94:fb:3d:b7:d3:2a:7b:c1:b1: 7e:ab:02:df:dc:12:a1:ca:0b:63:a8:3c:20:40:26: e5:ce:fa:a1:f5:6a:0a:48:29:38:1a:91:08:b1:46: 2c:e0:e5:74:b9:7f:b4:ab:b9:74:66:56:07:c8:87: d4:e2:da:db:98:31:10:24:60:7b:22:06:5b:2e:eb: fa:1b:e1:71:52:d8:e0:d2:22:b7:02:53:d8:0d:64: 37:fd:ab:69:9a:b3:df:98:d1:20:f1:cd:de:f2:73: 91:aa:5f:a5:3e:ad:57:7f:43:eb:f4:13:04:0a:b9: 39:ba:3b:b1:2e:86:bf:b6:ae:64:0e:0f:a5:58:fb: d0:50:42:6a:de:23:e1:72:d5:9d:e7:9a:81:0a:81: 61:3b:08:b6:b5:73:11:23:4a:15:1d:75:68:e4:d1: c1:19:2d:57:fb:ee:e2:af:00:be:d6:f7:97:b7:6d: 35:48:f6:80:26:c8:d6:8a:11:52:7d:7b:c5:7d:14: 72:40:2d:a1:38:a0:63:f7:cf:fc:f4:5b:6f:db:47: be:e4:ff:94:de:fa:38:86:74:d6:2a:95:01:46:30: e4:64:0b:23:61:fa:60:df:db:b5:2d:26:54:93:c5: 0a:6d:52:30:30:54:e9:21:76:6d:2c:e0:2b:b5:b2: e2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:7D:E6:06:7D:AC:6A:BA:05:AD:A8:0E:DB:E6:F0:A6:F5:16:B3:29 X509v3 Authority Key Identifier: keyid:C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031383a3a2f34382d3438203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740:9018::/48 Signature Algorithm: sha256WithRSAEncryption 68:3f:3c:7d:cd:04:0f:3e:46:ac:b0:70:d6:04:e3:04:15:d1: f5:6b:1b:ae:da:42:01:f2:62:5e:df:87:ee:72:4a:e9:0e:2e: b8:28:b7:40:5f:d1:ab:01:89:e6:51:0d:07:22:c6:7e:d0:d2: 84:61:c7:e9:3d:b9:78:39:08:43:56:ce:1b:eb:8f:41:0c:89: 24:3f:ef:3d:96:53:c7:14:af:62:62:a3:75:02:c9:41:b3:f6: 0b:3e:d1:8b:25:6c:39:d3:01:f1:2a:1c:bb:30:57:04:93:b1: df:a2:31:45:05:cc:fd:3a:80:8d:a9:a1:f0:96:dd:f7:25:ca: 68:c0:f2:51:b8:4e:eb:70:f8:0a:76:6b:bd:85:4c:90:5b:d8: cc:c7:79:18:ec:23:80:fc:73:aa:fe:4b:8f:34:49:3d:a8:11: 6b:cc:22:9b:18:9f:ba:22:b4:17:f0:bb:53:4c:aa:b0:68:81: 63:2d:df:cb:fd:43:c2:99:6a:f8:86:0d:73:52:6b:09:96:5c: 80:74:59:dd:3e:a8:54:55:4e:a8:08:51:1c:b8:3a:4a:12:01: dc:9a:e7:e8:d3:23:f2:34:cf:a4:38:3b:53:b2:e7:02:2c:86: ed:41:c5:b2:a2:c7:77:6d:89:30:70:bc:99:80:01:9f:5e:ac: ac:63:27:c0 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUZz0tjlDg+/ioEHZfzZsgJ6BaeCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYzMkEwQ0Y0REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3 RTNDRkZENzAeFw0yNjA1MDMwMzA5MDBaFw0yNzA1MDIwMzE0MDBaMDMxMTAvBgNV BAMTKEJCN0RFNjA2N0RBQzZBQkEwNUFEQTgwRURCRTZGMEE2RjUxNkIzMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrfryHVpT7PbfTKnvBsX6rAt/c EqHKC2OoPCBAJuXO+qH1agpIKTgakQixRizg5XS5f7SruXRmVgfIh9Ti2tuYMRAk YHsiBlsu6/ob4XFS2ODSIrcCU9gNZDf9q2mas9+Y0SDxzd7yc5GqX6U+rVd/Q+v0 EwQKuTm6O7Euhr+2rmQOD6VY+9BQQmreI+Fy1Z3nmoEKgWE7CLa1cxEjShUddWjk 0cEZLVf77uKvAL7W95e3bTVI9oAmyNaKEVJ9e8V9FHJALaE4oGP3z/z0W2/bR77k /5Te+jiGdNYqlQFGMORkCyNh+mDf27UtJlSTxQptUjAwVOkhdm0s4Cu1suJTAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUu33mBn2saroFragO2+bwpvUWsykwHwYDVR0j BBgwFoAUxjKgz02n3ed8vKwfNnEWoH48/9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTY1ZTc4MTAtNjdmNC00MWMyLTgwMzQtNDY1MjczM2I4ZGQyLzAvQzYzMkEwQ0Y0 REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3RTNDRkZENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNjMyQTBDRjREQTdEREU3N0NCQ0FDMUYzNjcxMTZBMDdFM0NG RkQ3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzkzMDMxMzgz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3 QJAYMA0GCSqGSIb3DQEBCwUAA4IBAQBoPzx9zQQPPkassHDWBOMEFdH1axuu2kIB 8mJe34fuckrpDi64KLdAX9GrAYnmUQ0HIsZ+0NKEYcfpPbl4OQhDVs4b649BDIkk P+89llPHFK9iYqN1AslBs/YLPtGLJWw50wHxKhy7MFcEk7HfojFFBcz9OoCNqaHw lt33JcpowPJRuE7rcPgKdmu9hUyQW9jMx3kY7COA/HOq/kuPNEk9qBFrzCKbGJ+6 IrQX8LtTTKqwaIFjLd/L/UPCmWr4hg1zUmsJllyAdFndPqhUVU6oCFEcuDpKEgHc mufo0yPyNM+kODtTsucCLIbtQcWyosd3bYkwcLyZgAGfXqysYyfA -----END CERTIFICATE-----Generated at Wed May 13 12:43:50 2026 by rpki-client