$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/323430353a346338303a3a2f33322d3438203d3e20313335343635.roa File: 323430353a346338303a3a2f33322d3438203d3e20313335343635.roa (raw, json) Hash identifier: A/ozUYyvaDadcj+xsfOVvgriixFLbEAH6FL6zdv2bCc= Subject key identifier: DB:58:DF:C0:36:14:6D:33:EC:72:BA:1F:CE:35:53:F7:0E:91:17:E8 Certificate issuer: /CN=092239A9C28840E7E025454A2EA108ED5A8BF369 Certificate serial: 1D1411A1FAB0DD47AF9414C9A0BA2A747E5C858A Authority key identifier: 09:22:39:A9:C2:88:40:E7:E0:25:45:4A:2E:A1:08:ED:5A:8B:F3:69 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092239A9C28840E7E025454A2EA108ED5A8BF369.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/323430353a346338303a3a2f33322d3438203d3e20313335343635.roa Signing time: Sun 03 May 2026 03:17:31 +0000 ROA not before: Sun 03 May 2026 03:12:31 +0000 ROA not after: Sun 02 May 2027 03:17:31 +0000 asID: 135465 IP address blocks: 2405:4c80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.crl rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092239A9C28840E7E025454A2EA108ED5A8BF369.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:14:11:a1:fa:b0:dd:47:af:94:14:c9:a0:ba:2a:74:7e:5c:85:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=092239A9C28840E7E025454A2EA108ED5A8BF369 Validity Not Before: May 3 03:12:31 2026 GMT Not After : May 2 03:17:31 2027 GMT Subject: CN=DB58DFC036146D33EC72BA1FCE3553F70E9117E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8e:3d:56:96:43:a1:b8:7e:39:cf:72:95:d2: f8:0b:a2:09:5d:bd:dc:04:06:f7:98:d7:32:bd:59: c5:31:72:19:99:22:39:c6:f6:88:8b:5b:ff:26:87: 7c:2a:5d:bb:45:71:d3:86:d0:34:a7:a7:cf:48:66: 9d:df:af:10:68:dc:c6:6c:e2:4e:fc:e7:2a:dd:5a: 78:33:bd:5f:0f:45:51:72:88:2f:82:dc:40:7a:ac: 72:47:64:6e:e8:a9:56:e8:7d:5e:bb:ad:7d:96:89: 0d:6e:27:3f:c1:f4:a8:13:65:ed:2f:cd:8b:5d:38: 78:6d:55:4b:2e:46:ff:fc:b7:99:2f:eb:4b:9c:29: 47:3c:75:28:1d:ca:2e:62:6c:23:e1:ff:08:93:54: bb:9b:7f:30:01:bb:d6:3b:36:b6:97:6e:c1:92:0c: 7b:1f:df:fa:5e:a8:a2:b0:28:16:80:9a:3d:f3:0d: 1b:fb:1a:8a:cb:02:5f:69:a7:0c:77:88:0b:f1:ba: b1:9b:a0:52:0c:7b:9d:b2:dd:52:c7:f6:04:9d:72: b6:59:7f:7e:ad:98:aa:bd:e1:45:55:9c:c2:fd:78: c9:63:b7:8d:4b:7e:da:b8:f8:eb:e9:49:6b:a4:cc: 4f:ab:66:4a:96:5f:16:98:20:a5:c0:62:3e:7d:e0: 37:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:58:DF:C0:36:14:6D:33:EC:72:BA:1F:CE:35:53:F7:0E:91:17:E8 X509v3 Authority Key Identifier: keyid:09:22:39:A9:C2:88:40:E7:E0:25:45:4A:2E:A1:08:ED:5A:8B:F3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092239A9C28840E7E025454A2EA108ED5A8BF369.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/323430353a346338303a3a2f33322d3438203d3e20313335343635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:4c80::/32 Signature Algorithm: sha256WithRSAEncryption 0f:ab:8c:1d:58:d0:e4:0a:09:41:15:b9:67:ed:bc:a8:69:79: 66:d2:6c:5b:1b:4d:d8:fc:6c:6b:d4:b9:d1:d1:e2:8b:44:0f: c6:1f:da:d0:8a:b4:c5:71:f2:e2:e5:a9:a5:d5:58:f3:fe:03: 0a:dd:28:6c:f8:fe:46:ba:08:c2:d1:d9:11:8e:90:9e:c8:4a: 48:8b:aa:52:a2:c4:fc:16:13:00:2f:e4:5c:ff:c9:01:47:cf: ce:2b:51:83:cd:2e:ae:b9:cc:c7:f9:a3:5e:c4:66:22:a8:f4: 9e:a4:a7:f7:ee:94:f5:a1:9a:cd:1b:4f:e1:ce:c3:47:3e:27: 62:80:83:ea:0d:17:65:1e:42:72:86:b1:ad:ee:3e:6c:fd:41: 15:1b:45:8a:fc:d2:c5:a2:55:4a:c3:c9:c2:e6:31:4c:e3:7b: b1:1e:8e:e2:5c:ec:f4:04:e0:39:db:38:6b:c2:13:ef:2d:7d: 45:34:1a:e5:49:54:cb:16:bf:af:3e:10:ce:72:da:d4:1a:94: 38:cd:2c:61:30:07:b1:cd:ca:60:48:6f:f6:b0:f0:f1:89:3e: 93:dd:b7:48:0c:7e:54:83:04:93:88:18:00:8b:99:25:4a:12: 76:73:01:39:f4:9e:32:8d:1a:33:d4:af:c1:69:d4:74:f5:6e: 91:41:8c:22 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUHRQRofqw3UevlBTJoLoqdH5chYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkyMjM5QTlDMjg4NDBFN0UwMjU0NTRBMkVBMTA4RUQ1 QThCRjM2OTAeFw0yNjA1MDMwMzEyMzFaFw0yNzA1MDIwMzE3MzFaMDMxMTAvBgNV BAMTKERCNThERkMwMzYxNDZEMzNFQzcyQkExRkNFMzU1M0Y3MEU5MTE3RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvjj1WlkOhuH45z3KV0vgLogld vdwEBveY1zK9WcUxchmZIjnG9oiLW/8mh3wqXbtFcdOG0DSnp89IZp3frxBo3MZs 4k785yrdWngzvV8PRVFyiC+C3EB6rHJHZG7oqVbofV67rX2WiQ1uJz/B9KgTZe0v zYtdOHhtVUsuRv/8t5kv60ucKUc8dSgdyi5ibCPh/wiTVLubfzABu9Y7NraXbsGS DHsf3/peqKKwKBaAmj3zDRv7GorLAl9ppwx3iAvxurGboFIMe52y3VLH9gSdcrZZ f36tmKq94UVVnML9eMljt41Lftq4+OvpSWukzE+rZkqWXxaYIKXAYj594DfPAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQU21jfwDYUbTPscrofzjVT9w6RF+gwHwYDVR0j BBgwFoAUCSI5qcKIQOfgJUVKLqEI7VqL82kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNhNjJjOWEtZDRmMC00NTRiLTgwN2YtODRmOWIzYzIwMmIzLzAvMDkyMjM5QTlD Mjg4NDBFN0UwMjU0NTRBMkVBMTA4RUQ1QThCRjM2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOTIyMzlBOUMyODg0MEU3RTAyNTQ1NEEyRUExMDhFRDVBOEJG MzY5LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2YzYTYyYzlhLWQ0ZjAtNDU0Yi04 MDdmLTg0ZjliM2MyMDJiMy8wLzMyMzQzMDM1M2EzNDYzMzgzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzMzNTM0MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQFTIAwDQYJKoZI hvcNAQELBQADggEBAA+rjB1Y0OQKCUEVuWftvKhpeWbSbFsbTdj8bGvUudHR4otE D8Yf2tCKtMVx8uLlqaXVWPP+AwrdKGz4/ka6CMLR2RGOkJ7ISkiLqlKixPwWEwAv 5Fz/yQFHz84rUYPNLq65zMf5o17EZiKo9J6kp/fulPWhms0bT+HOw0c+J2KAg+oN F2UeQnKGsa3uPmz9QRUbRYr80sWiVUrDycLmMUzje7EejuJc7PQE4DnbOGvCE+8t fUU0GuVJVMsWv68+EM5y2tQalDjNLGEwB7HNymBIb/aw8PGJPpPdt0gMflSDBJOI GACLmSVKEnZzATn0njKNGjPUr8Fp1HT1bpFBjCI= -----END CERTIFICATE-----Generated at Wed May 13 08:23:56 2026 by rpki-client