$ rpki-client -vvf rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/323430333a623230303a3a2f33322d3438203d3e203233363731.roa File: 323430333a623230303a3a2f33322d3438203d3e203233363731.roa (raw, json) Hash identifier: 2aLawRYLy3KCYufu2NaJ3HYybrz6F8WpwigQMHaYOu8= Subject key identifier: 05:AD:5C:F9:1B:2F:C4:FC:34:3A:E0:4A:00:86:D4:FB:4D:97:AD:18 Certificate issuer: /CN=A9BFA348A050E46482F4E00C605FF9961247FC64 Certificate serial: 0EC9EB7924A695ADFF8FF8855A1310C60F75455D Authority key identifier: A9:BF:A3:48:A0:50:E4:64:82:F4:E0:0C:60:5F:F9:96:12:47:FC:64 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/323430333a623230303a3a2f33322d3438203d3e203233363731.roa Signing time: Sun 03 May 2026 03:15:56 +0000 ROA not before: Sun 03 May 2026 03:10:56 +0000 ROA not after: Sun 02 May 2027 03:15:56 +0000 asID: 23671 IP address blocks: 2403:b200::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.crl rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:c9:eb:79:24:a6:95:ad:ff:8f:f8:85:5a:13:10:c6:0f:75:45:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9BFA348A050E46482F4E00C605FF9961247FC64 Validity Not Before: May 3 03:10:56 2026 GMT Not After : May 2 03:15:56 2027 GMT Subject: CN=05AD5CF91B2FC4FC343AE04A0086D4FB4D97AD18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fe:bd:fe:83:99:59:d7:a7:30:79:19:3d:b6: 4c:d4:10:d7:84:3c:b5:9f:5f:aa:9e:c3:90:8e:c2: d2:95:d7:47:94:43:4d:4c:09:c4:61:b3:a1:9d:5e: a6:98:ea:47:6c:8b:09:3d:cd:b4:9f:a5:03:24:76: 95:fe:f4:27:51:2e:30:82:46:e5:9d:ea:ad:89:5c: c4:01:03:4b:b2:e1:12:44:d2:85:d7:f5:0d:bc:dc: 95:d6:d1:be:7c:b1:be:6e:02:f4:b5:5a:a2:eb:a7: 23:a9:31:16:70:f5:61:60:6d:39:15:11:08:ee:d5: 6e:ae:61:38:a9:cb:b7:1f:50:a0:4f:e9:3c:2e:2a: 15:d8:22:df:28:22:59:a7:8f:8e:b1:69:1d:d7:01: 42:d8:98:cc:ce:2b:ad:1a:94:fa:c5:26:99:f4:a3: 17:61:d4:b4:92:18:c5:19:a9:73:68:32:07:d1:ab: d2:01:87:c2:63:d9:11:a9:8f:aa:1c:f2:d8:e5:3f: bf:ad:d6:df:da:0d:7c:d4:f4:a1:27:1e:20:eb:33: 0e:17:b4:4e:22:eb:8c:1b:85:fd:67:aa:de:5c:b4: 5c:1d:07:af:94:f6:59:25:3c:3f:c2:fc:08:d6:f0: 50:cc:d0:fd:d1:b9:cd:e9:74:ec:50:1f:f3:90:00: da:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:AD:5C:F9:1B:2F:C4:FC:34:3A:E0:4A:00:86:D4:FB:4D:97:AD:18 X509v3 Authority Key Identifier: keyid:A9:BF:A3:48:A0:50:E4:64:82:F4:E0:0C:60:5F:F9:96:12:47:FC:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/323430333a623230303a3a2f33322d3438203d3e203233363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b200::/32 Signature Algorithm: sha256WithRSAEncryption 3e:e3:cb:38:c5:4f:eb:27:99:59:f2:b9:8d:6f:0a:4b:9a:03: 3e:e9:66:1f:17:79:2c:e0:dc:7f:de:fa:83:bf:69:23:b8:0d: 92:84:66:62:a5:79:0d:6a:87:4b:a1:03:57:15:3d:f4:60:ab: 3f:90:3f:5b:0c:d6:c1:3f:a8:73:77:cd:05:6f:a1:f2:78:4b: c9:64:9c:1b:dd:0e:1d:ea:98:2f:b5:fb:06:39:7a:f0:c5:57: 27:c6:5e:62:7e:47:56:4f:94:19:17:c9:4c:70:55:93:fc:a2: 17:05:fc:7a:81:43:8a:27:69:be:3e:57:ee:6c:54:e8:64:ab: 40:c2:40:e8:05:f4:d5:83:f6:30:d1:5f:fc:fe:f4:ee:25:55: 64:b2:29:20:b4:71:54:a7:2c:d8:7b:0b:80:fb:8f:c3:bf:d0: 88:cf:a3:4f:a8:91:14:d4:1d:22:18:82:08:dc:ac:4b:17:59: 60:94:b4:4d:7d:0d:24:88:e1:66:9c:fd:58:43:e5:7c:9b:75: d0:94:67:c8:d0:46:91:1f:63:0d:fb:ac:2a:b3:d1:00:79:1b: 1f:c1:7b:fc:09:d6:c7:d0:4b:59:f5:d4:a4:fd:40:6f:06:b9: 11:9c:db:ae:05:2c:03:ec:8a:ab:c7:ed:6f:f7:57:a7:7b:e9: 85:41:d2:37 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUDsnreSSmla3/j/iFWhMQxg91RV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlCRkEzNDhBMDUwRTQ2NDgyRjRFMDBDNjA1RkY5OTYx MjQ3RkM2NDAeFw0yNjA1MDMwMzEwNTZaFw0yNzA1MDIwMzE1NTZaMDMxMTAvBgNV BAMTKDA1QUQ1Q0Y5MUIyRkM0RkMzNDNBRTA0QTAwODZENEZCNEQ5N0FEMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC/r3+g5lZ16cweRk9tkzUENeE PLWfX6qew5COwtKV10eUQ01MCcRhs6GdXqaY6kdsiwk9zbSfpQMkdpX+9CdRLjCC RuWd6q2JXMQBA0uy4RJE0oXX9Q283JXW0b58sb5uAvS1WqLrpyOpMRZw9WFgbTkV EQju1W6uYTipy7cfUKBP6TwuKhXYIt8oIlmnj46xaR3XAULYmMzOK60alPrFJpn0 oxdh1LSSGMUZqXNoMgfRq9IBh8Jj2RGpj6oc8tjlP7+t1t/aDXzU9KEnHiDrMw4X tE4i64wbhf1nqt5ctFwdB6+U9lklPD/C/AjW8FDM0P3Ruc3pdOxQH/OQANoRAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUBa1c+RsvxPw0OuBKAIbU+02XrRgwHwYDVR0j BBgwFoAUqb+jSKBQ5GSC9OAMYF/5lhJH/GQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWQ5YmE5NTMtODQ4OS00NTBlLWJiZGYtNzY0NTcxZmJhY2U3LzAvQTlCRkEzNDhB MDUwRTQ2NDgyRjRFMDBDNjA1RkY5OTYxMjQ3RkM2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOUJGQTM0OEEwNTBFNDY0ODJGNEUwMEM2MDVGRjk5NjEyNDdG QzY0LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2VkOWJhOTUzLTg0ODktNDUwZS1i YmRmLTc2NDU3MWZiYWNlNy8wLzMyMzQzMDMzM2E2MjMyMzAzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMyMzMzNjM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkA7IAMA0GCSqGSIb3 DQEBCwUAA4IBAQA+48s4xU/rJ5lZ8rmNbwpLmgM+6WYfF3ks4Nx/3vqDv2kjuA2S hGZipXkNaodLoQNXFT30YKs/kD9bDNbBP6hzd80Fb6HyeEvJZJwb3Q4d6pgvtfsG OXrwxVcnxl5ifkdWT5QZF8lMcFWT/KIXBfx6gUOKJ2m+PlfubFToZKtAwkDoBfTV g/Yw0V/8/vTuJVVksikgtHFUpyzYewuA+4/Dv9CIz6NPqJEU1B0iGIII3KxLF1lg lLRNfQ0kiOFmnP1YQ+V8m3XQlGfI0EaRH2MN+6wqs9EAeRsfwXv8CdbH0EtZ9dSk /UBvBrkRnNuuBSwD7Iqrx+1v91ene+mFQdI3 -----END CERTIFICATE-----Generated at Wed May 13 06:00:52 2026 by rpki-client