$ rpki-client -vvf rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031633a3a2f34382d3438203d3e203338353236.roa File: 323430353a333734303a393031633a3a2f34382d3438203d3e203338353236.roa (raw, json) Hash identifier: BXtxSt8te6M9lX2ehxnBb4zNzZnOZKyHjdYCMUcoIY8= Subject key identifier: D2:E7:9F:63:21:A4:2A:45:30:9D:9B:49:09:E5:E2:01:5B:2C:CE:40 Certificate issuer: /CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7 Certificate serial: 336DE22351FF3C864BCBA0D24444659836933020 Authority key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031633a3a2f34382d3438203d3e203338353236.roa Signing time: Sun 03 May 2026 03:14:05 +0000 ROA not before: Sun 03 May 2026 03:09:05 +0000 ROA not after: Sun 02 May 2027 03:14:05 +0000 asID: 38526 IP address blocks: 2405:3740:901c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:6d:e2:23:51:ff:3c:86:4b:cb:a0:d2:44:44:65:98:36:93:30:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7 Validity Not Before: May 3 03:09:05 2026 GMT Not After : May 2 03:14:05 2027 GMT Subject: CN=D2E79F6321A42A45309D9B4909E5E2015B2CCE40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:42:d7:e6:a0:7a:3b:cc:12:d4:f1:2f:ee:c6: 0c:ac:eb:e0:5a:d3:29:74:7f:4a:5b:32:41:73:09: 3a:5c:6d:41:43:31:85:d2:e5:be:e9:cd:c8:d4:1f: 91:05:ee:d3:dc:84:a1:cd:8e:86:cf:20:60:f6:ee: 69:18:e9:c1:1a:9c:d4:ae:42:c3:68:eb:1b:99:59: df:0c:2f:8a:db:86:ec:88:4f:fc:8e:5c:cf:44:ae: 09:06:32:30:b7:db:ff:7b:ab:73:fa:68:22:02:40: 74:db:67:78:f8:88:41:4d:4e:56:f2:eb:6f:83:94: 98:94:ec:ee:86:c7:41:4b:38:a6:f9:3d:2f:0f:56: 04:de:46:96:09:03:2e:9a:dc:ab:02:8d:48:48:47: 0c:88:ff:d4:aa:b2:c8:c6:ca:06:7c:23:a4:05:e1: b6:3f:78:40:80:bf:16:37:e6:a5:ff:32:b0:74:c1: e3:dc:1b:e6:b9:04:2d:80:85:23:28:55:51:25:49: f5:cd:39:14:f8:06:19:4b:6b:45:00:d5:d0:93:d7: dd:63:f0:a6:c3:c1:d1:44:46:0a:a9:15:cb:d9:de: cc:da:ec:95:87:30:25:05:84:67:3f:1b:15:77:0f: 7b:a3:59:43:d7:87:24:b7:35:af:ae:22:af:fd:b9: a5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E7:9F:63:21:A4:2A:45:30:9D:9B:49:09:E5:E2:01:5B:2C:CE:40 X509v3 Authority Key Identifier: keyid:C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031633a3a2f34382d3438203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740:901c::/48 Signature Algorithm: sha256WithRSAEncryption 71:33:75:84:61:d7:02:65:a6:bd:04:18:ae:ae:c4:62:2e:1d: 3a:2c:17:22:cd:8b:2d:02:06:3d:83:e4:0b:0a:ba:93:42:68: b5:ab:a2:a1:3f:1c:a9:ab:52:42:b4:81:9a:13:c5:35:b5:9f: 17:a5:3b:a7:78:db:4e:f0:0c:7d:2a:46:ed:22:f6:8f:33:05: fc:01:5b:d2:c6:65:95:10:84:7b:b8:f1:25:42:dd:69:71:3f: 2a:b7:af:5d:0f:a1:fd:fc:04:1c:8d:3e:79:5d:44:12:bd:43: 53:47:a4:b7:6f:f5:a1:89:d7:89:75:a4:0d:b6:9e:f1:61:9a: 34:17:15:91:5c:61:e5:2d:9d:3f:29:0b:47:bc:28:9b:22:44: 3b:42:36:cd:ba:72:c3:04:a9:17:9c:80:b4:ea:fb:dd:38:1f: 3e:d8:78:fe:e3:f1:2c:0d:9f:fe:36:cf:8c:8f:28:13:9a:c6: ab:82:ed:03:d0:ba:50:96:ef:88:8a:33:6e:85:c6:2e:88:df: 78:3e:51:66:b4:57:ef:4e:6c:17:79:06:78:a0:03:b7:0a:26: 48:94:b4:4a:e0:3e:d8:48:61:a4:cc:e1:21:47:a4:fe:aa:4c: 0d:cc:40:b3:a6:31:0a:0b:e8:95:de:01:40:25:ac:15:0d:71: d5:49:71:49 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUM23iI1H/PIZLy6DSRERlmDaTMCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYzMkEwQ0Y0REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3 RTNDRkZENzAeFw0yNjA1MDMwMzA5MDVaFw0yNzA1MDIwMzE0MDVaMDMxMTAvBgNV BAMTKEQyRTc5RjYzMjFBNDJBNDUzMDlEOUI0OTA5RTVFMjAxNUIyQ0NFNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWQtfmoHo7zBLU8S/uxgys6+Ba 0yl0f0pbMkFzCTpcbUFDMYXS5b7pzcjUH5EF7tPchKHNjobPIGD27mkY6cEanNSu QsNo6xuZWd8ML4rbhuyIT/yOXM9ErgkGMjC32/97q3P6aCICQHTbZ3j4iEFNTlby 62+DlJiU7O6Gx0FLOKb5PS8PVgTeRpYJAy6a3KsCjUhIRwyI/9SqssjGygZ8I6QF 4bY/eECAvxY35qX/MrB0wePcG+a5BC2AhSMoVVElSfXNORT4BhlLa0UA1dCT191j 8KbDwdFERgqpFcvZ3sza7JWHMCUFhGc/GxV3D3ujWUPXhyS3Na+uIq/9uaXdAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU0uefYyGkKkUwnZtJCeXiAVsszkAwHwYDVR0j BBgwFoAUxjKgz02n3ed8vKwfNnEWoH48/9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTY1ZTc4MTAtNjdmNC00MWMyLTgwMzQtNDY1MjczM2I4ZGQyLzAvQzYzMkEwQ0Y0 REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3RTNDRkZENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNjMyQTBDRjREQTdEREU3N0NCQ0FDMUYzNjcxMTZBMDdFM0NG RkQ3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzkzMDMxNjMz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3 QJAcMA0GCSqGSIb3DQEBCwUAA4IBAQBxM3WEYdcCZaa9BBiursRiLh06LBcizYst AgY9g+QLCrqTQmi1q6KhPxypq1JCtIGaE8U1tZ8XpTuneNtO8Ax9KkbtIvaPMwX8 AVvSxmWVEIR7uPElQt1pcT8qt69dD6H9/AQcjT55XUQSvUNTR6S3b/WhideJdaQN tp7xYZo0FxWRXGHlLZ0/KQtHvCibIkQ7QjbNunLDBKkXnIC06vvdOB8+2Hj+4/Es DZ/+Ns+MjygTmsargu0D0LpQlu+IijNuhcYuiN94PlFmtFfvTmwXeQZ4oAO3CiZI lLRK4D7YSGGkzOEhR6T+qkwNzECzpjEKC+iV3gFAJawVDXHVSXFJ -----END CERTIFICATE-----Generated at Wed May 13 11:53:09 2026 by rpki-client