$ rpki-client -vvf rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/323030313a6632303a343030303a3a2f33362d3438203d3e2039383735.roa File: 323030313a6632303a343030303a3a2f33362d3438203d3e2039383735.roa (raw, json) Hash identifier: HZhaUoMvo6PbB0DDiHNG1KzdNqQKbOCBQCGJxhRr7TU= Subject key identifier: A3:2F:F1:E8:95:F9:F7:09:BC:A9:89:58:60:86:BD:D2:9E:AB:39:8E Certificate issuer: /CN=4242BEFAB7FD9E772FB16847C540331384EE1024 Certificate serial: 7DC7DBF8F3AE4CA4CD372B299DAC9691DE23F71F Authority key identifier: 42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/323030313a6632303a343030303a3a2f33362d3438203d3e2039383735.roa Signing time: Sun 03 May 2026 03:15:30 +0000 ROA not before: Sun 03 May 2026 03:10:30 +0000 ROA not after: Sun 02 May 2027 03:15:30 +0000 asID: 9875 IP address blocks: 2001:f20:4000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:c7:db:f8:f3:ae:4c:a4:cd:37:2b:29:9d:ac:96:91:de:23:f7:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4242BEFAB7FD9E772FB16847C540331384EE1024 Validity Not Before: May 3 03:10:30 2026 GMT Not After : May 2 03:15:30 2027 GMT Subject: CN=A32FF1E895F9F709BCA989586086BDD29EAB398E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f0:d1:c4:48:a9:68:ba:86:11:04:93:4a:fc: 81:db:3d:7a:3c:9d:0a:5f:8d:d6:ba:3a:11:30:cc: c0:36:f5:0b:9b:ac:51:63:2d:32:87:d5:72:64:af: bb:e8:85:db:26:7b:05:8a:15:6b:ce:78:8c:96:ee: f9:fb:ba:74:cb:cf:0c:18:f2:cb:00:e6:d7:7a:c2: 49:67:99:7c:13:5f:27:c6:42:d7:f4:1e:88:53:3b: 09:92:81:0d:6b:40:94:f9:ca:3b:e4:e4:fc:37:fd: 01:1b:7d:93:d5:fd:1e:84:33:c1:fe:a2:b9:a8:ae: 1a:32:19:db:e4:3e:02:88:d9:3a:2a:21:93:06:c3: 3a:dc:fb:48:13:16:58:a3:28:68:c7:bc:69:07:20: 93:c4:f4:bf:47:25:4b:0b:f0:22:21:4c:47:6c:6e: 9a:ac:b5:da:a0:8b:0f:e7:d2:e4:04:5a:3c:3d:7a: 7c:1c:95:2f:f4:55:68:63:b0:c7:6f:41:81:1c:6e: e8:25:8e:e9:7a:b5:a8:f2:0f:de:b9:2a:8c:c3:ee: b4:e4:9e:79:cc:9a:a1:65:6e:c3:03:32:69:de:1f: db:13:67:e0:bd:4b:ed:31:ef:e5:22:76:e4:0f:3a: 7e:b2:e9:34:3a:a3:2c:98:fb:98:14:1e:f3:37:59: 57:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:2F:F1:E8:95:F9:F7:09:BC:A9:89:58:60:86:BD:D2:9E:AB:39:8E X509v3 Authority Key Identifier: keyid:42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/323030313a6632303a343030303a3a2f33362d3438203d3e2039383735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:f20:4000::/36 Signature Algorithm: sha256WithRSAEncryption 9f:22:52:5f:10:9c:f7:07:6b:ac:ce:c8:10:6a:87:19:c1:4c: 59:00:59:df:8e:ce:d6:8e:7b:19:7c:d8:fc:3f:97:4e:21:25: 41:5e:af:66:13:36:76:af:e2:a2:6e:ba:95:31:46:2c:ac:9e: e9:5f:83:aa:c9:b4:72:0c:d5:dd:91:3a:f2:81:cf:0b:ab:23: 70:8c:c1:7f:63:f9:80:2b:9b:72:57:c3:64:05:7e:b9:fd:9c: 6e:a4:83:67:84:2f:1d:e9:78:53:f3:61:08:fc:16:f0:c7:7c: b6:1f:7e:63:90:41:ce:25:b6:03:98:a9:3c:b0:4c:7f:63:ce: 2f:01:6e:d0:e9:ab:d0:c2:f8:fb:86:45:a5:3c:a4:3d:61:98: c8:4d:c2:bb:a8:e7:92:96:fa:f6:22:46:a6:a6:83:b4:82:92: f9:1d:32:b8:9d:a6:f1:fb:f7:56:0e:a0:ac:90:59:e9:7e:62: 29:05:2a:d3:3b:f5:70:c4:ab:46:c9:23:43:c9:6a:58:a2:11: 53:e9:05:ff:40:8b:f2:8d:97:8d:3f:4f:dd:af:fc:32:28:53: 91:89:9a:18:64:7d:4f:76:da:b7:20:54:9f:d3:c4:96:99:0d: e1:2e:32:c4:dc:ad:1d:6f:67:90:84:c0:7d:59:4b:10:55:ae: 0a:18:35:aa -----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgIUfcfb+POuTKTNNyspnayWkd4j9x8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI0MkJFRkFCN0ZEOUU3NzJGQjE2ODQ3QzU0MDMzMTM4 NEVFMTAyNDAeFw0yNjA1MDMwMzEwMzBaFw0yNzA1MDIwMzE1MzBaMDMxMTAvBgNV BAMTKEEzMkZGMUU4OTVGOUY3MDlCQ0E5ODk1ODYwODZCREQyOUVBQjM5OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt8NHESKlouoYRBJNK/IHbPXo8 nQpfjda6OhEwzMA29QubrFFjLTKH1XJkr7vohdsmewWKFWvOeIyW7vn7unTLzwwY 8ssA5td6wklnmXwTXyfGQtf0HohTOwmSgQ1rQJT5yjvk5Pw3/QEbfZPV/R6EM8H+ ormorhoyGdvkPgKI2ToqIZMGwzrc+0gTFlijKGjHvGkHIJPE9L9HJUsL8CIhTEds bpqstdqgiw/n0uQEWjw9enwclS/0VWhjsMdvQYEcbugljul6tajyD965KozD7rTk nnnMmqFlbsMDMmneH9sTZ+C9S+0x7+UiduQPOn6y6TQ6oyyY+5gUHvM3WVcfAgMB AAGjggI4MIICNDAdBgNVHQ4EFgQUoy/x6JX59wm8qYlYYIa90p6rOY4wHwYDVR0j BBgwFoAUQkK++rf9nncvsWhHxUAzE4TuECQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWJiZmU3NzYtMDBhMy00Nzc2LWJmM2YtNTIxMTk0NjEwMWMzLzAvNDI0MkJFRkFC N0ZEOUU3NzJGQjE2ODQ3QzU0MDMzMTM4NEVFMTAyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MjQyQkVGQUI3RkQ5RTc3MkZCMTY4NDdDNTQwMzMxMzg0RUUx MDI0LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ViYmZlNzc2LTAwYTMtNDc3Ni1i ZjNmLTUyMTE5NDYxMDFjMy8wLzMyMzAzMDMxM2E2NjMyMzAzYTM0MzAzMDMwM2Ez YTJmMzMzNjJkMzQzODIwM2QzZTIwMzkzODM3MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQgAQ8gQDAN BgkqhkiG9w0BAQsFAAOCAQEAnyJSXxCc9wdrrM7IEGqHGcFMWQBZ347O1o57GXzY /D+XTiElQV6vZhM2dq/iom66lTFGLKye6V+Dqsm0cgzV3ZE68oHPC6sjcIzBf2P5 gCubclfDZAV+uf2cbqSDZ4QvHel4U/NhCPwW8Md8th9+Y5BBziW2A5ipPLBMf2PO LwFu0Omr0ML4+4ZFpTykPWGYyE3Cu6jnkpb69iJGpqaDtIKS+R0yuJ2m8fv3Vg6g rJBZ6X5iKQUq0zv1cMSrRskjQ8lqWKIRU+kF/0CL8o2XjT9P3a/8MihTkYmaGGR9 T3batyBUn9PElpkN4S4yxNytHW9nkITAfVlLEFWuChg1qg== -----END CERTIFICATE-----Generated at Wed May 13 02:48:57 2026 by rpki-client