$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/323430373a613563303a3130303a3a2f34382d3438203d3e20313432333339.roa File: 323430373a613563303a3130303a3a2f34382d3438203d3e20313432333339.roa (raw, json) Hash identifier: NxZyATvn5vq2FKc65c4Nnkb5SqJdxZb7IhVwK0ixCrY= Subject key identifier: 22:0D:68:C2:B4:C7:2A:CB:F8:C1:E5:2E:4D:AC:67:B2:12:7B:00:B0 Certificate issuer: /CN=498FC3DB03528A64214589740CA13E84E4775306 Certificate serial: B00429BC6D4677BEFDC9C7D0402614899557E2 Authority key identifier: 49:8F:C3:DB:03:52:8A:64:21:45:89:74:0C:A1:3E:84:E4:77:53:06 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/323430373a613563303a3130303a3a2f34382d3438203d3e20313432333339.roa Signing time: Tue 11 Aug 2026 04:13:14 +0000 ROA not before: Tue 11 Aug 2026 04:08:14 +0000 ROA not after: Tue 10 Aug 2027 04:13:14 +0000 asID: 142339 IP address blocks: 2407:a5c0:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.crl rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 19:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: b0:04:29:bc:6d:46:77:be:fd:c9:c7:d0:40:26:14:89:95:57:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498FC3DB03528A64214589740CA13E84E4775306 Validity Not Before: Aug 11 04:08:14 2026 GMT Not After : Aug 10 04:13:14 2027 GMT Subject: CN=220D68C2B4C72ACBF8C1E52E4DAC67B2127B00B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:05:4c:4b:0e:e6:92:c9:29:2c:b2:e6:ab:6d: 89:e8:98:e9:e6:61:ba:73:a7:9a:20:99:41:c3:cf: aa:55:f4:0c:7d:4c:89:9d:71:41:be:11:a2:68:ed: c1:1e:94:b6:7e:20:9a:47:20:2b:0b:b7:cd:92:48: 25:cf:8a:d8:9a:97:44:13:0e:00:01:1d:f8:e1:71: 30:99:bb:60:e1:8a:6b:da:c3:18:9a:19:cf:24:4f: 73:e7:aa:be:f6:eb:e2:d5:85:a4:d8:54:db:f7:f5: 7b:b7:96:bb:fc:52:2a:34:c0:f6:f4:b5:1a:23:e0: 4c:cb:a9:b1:5d:db:84:de:0d:db:f2:a9:8a:20:98: 92:a8:8c:95:d3:8f:ba:5a:a0:3b:67:15:c5:3f:b1: 19:5d:51:9e:bb:88:cb:e9:37:8e:97:a3:4d:42:94: 92:5d:77:e7:32:b6:92:04:0c:d2:1e:4d:75:0f:10: 22:0b:c4:6b:25:ba:cb:ab:ea:4e:21:34:5a:90:c5: bc:44:55:a2:1d:bc:3a:89:b0:9f:89:10:51:7b:67: 23:76:42:68:89:3f:c0:75:66:44:a3:62:77:1f:e2: 08:32:26:52:15:b4:ce:7f:7f:8d:20:25:cf:dc:94: 95:3d:4b:c9:a2:9a:2f:8c:fd:86:93:35:b1:3b:0d: 8e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0D:68:C2:B4:C7:2A:CB:F8:C1:E5:2E:4D:AC:67:B2:12:7B:00:B0 X509v3 Authority Key Identifier: keyid:49:8F:C3:DB:03:52:8A:64:21:45:89:74:0C:A1:3E:84:E4:77:53:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/323430373a613563303a3130303a3a2f34382d3438203d3e20313432333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:a5c0:100::/48 Signature Algorithm: sha256WithRSAEncryption 59:79:08:6d:b0:68:d9:91:7f:a0:b5:64:9f:2f:9d:2a:4d:c5: 9d:1d:56:77:d9:df:94:da:f7:4f:b2:60:80:fd:49:d0:16:6e: e6:14:75:08:b5:6d:75:ee:8a:bf:09:18:07:b6:cc:26:fc:f1: 74:8d:d3:bd:c0:0f:b8:37:1a:21:5b:e9:e3:c4:49:5b:80:8e: a9:72:d9:30:46:d6:79:09:73:49:21:6f:ed:a4:23:e4:c7:4e: b1:13:67:3a:cc:b2:29:55:9a:1e:bc:e6:3f:d0:18:34:84:57: 42:07:fb:5b:fc:eb:87:60:06:af:19:cc:44:ad:87:b0:dd:a4: 76:d1:ba:73:2b:61:c6:56:94:5c:27:0d:86:a9:52:b4:3e:0a: ef:3a:70:aa:52:c0:65:89:6b:a3:46:bd:df:c0:20:23:2d:f3: f3:32:32:9f:52:2d:16:fc:40:4e:a2:fa:59:43:2b:3f:69:1a: 21:13:e8:bf:29:ae:8d:4e:b2:98:c7:1a:61:fb:c8:bc:77:e5: 82:6f:a5:34:28:03:49:ee:1b:60:c6:14:4d:66:ef:c9:e2:1f: b4:82:90:c6:21:55:ae:1b:61:b0:df:bb:59:b1:10:35:02:9d: 97:fe:21:0a:e8:2e:85:0d:e2:ce:db:05:66:66:ba:f6:dc:61: cc:2c:dd:8d -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUALAEKbxtRne+/cnH0EAmFImVV+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk4RkMzREIwMzUyOEE2NDIxNDU4OTc0MENBMTNFODRF NDc3NTMwNjAeFw0yNjA4MTEwNDA4MTRaFw0yNzA4MTAwNDEzMTRaMDMxMTAvBgNV BAMTKDIyMEQ2OEMyQjRDNzJBQ0JGOEMxRTUyRTREQUM2N0IyMTI3QjAwQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5BUxLDuaSySkssuarbYnomOnm Ybpzp5ogmUHDz6pV9Ax9TImdcUG+EaJo7cEelLZ+IJpHICsLt82SSCXPitial0QT DgABHfjhcTCZu2DhimvawxiaGc8kT3Pnqr726+LVhaTYVNv39Xu3lrv8Uio0wPb0 tRoj4EzLqbFd24TeDdvyqYogmJKojJXTj7paoDtnFcU/sRldUZ67iMvpN46Xo01C lJJdd+cytpIEDNIeTXUPECILxGslusur6k4hNFqQxbxEVaIdvDqJsJ+JEFF7ZyN2 QmiJP8B1ZkSjYncf4ggyJlIVtM5/f40gJc/clJU9S8mimi+M/YaTNbE7DY6VAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUIg1owrTHKsv4weUuTaxnshJ7ALAwHwYDVR0j BBgwFoAUSY/D2wNSimQhRYl0DKE+hOR3UwYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTE5MjAyMWUtMzkwNC00MTE1LWFmNWUtM2VkYjcxM2JhYTE0LzAvNDk4RkMzREIw MzUyOEE2NDIxNDU4OTc0MENBMTNFODRFNDc3NTMwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OThGQzNEQjAzNTI4QTY0MjE0NTg5NzQwQ0ExM0U4NEU0Nzc1 MzA2LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzExOTIwMjFlLTM5MDQtNDExNS1h ZjVlLTNlZGI3MTNiYWExNC8wLzMyMzQzMDM3M2E2MTM1NjMzMDNhMzEzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMyMzMzMzM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAel wAEAMA0GCSqGSIb3DQEBCwUAA4IBAQBZeQhtsGjZkX+gtWSfL50qTcWdHVZ32d+U 2vdPsmCA/UnQFm7mFHUItW117oq/CRgHtswm/PF0jdO9wA+4NxohW+njxElbgI6p ctkwRtZ5CXNJIW/tpCPkx06xE2c6zLIpVZoevOY/0Bg0hFdCB/tb/OuHYAavGcxE rYew3aR20bpzK2HGVpRcJw2GqVK0PgrvOnCqUsBliWujRr3fwCAjLfPzMjKfUi0W /EBOovpZQys/aRohE+i/Ka6NTrKYxxph+8i8d+WCb6U0KANJ7htgxhRNZu/J4h+0 gpDGIVWuG2Gw37tZsRA1Ap2X/iEK6C6FDeLO2wVmZrr23GHMLN2N -----END CERTIFICATE-----Generated at Thu Sep 3 05:56:13 2026 by rpki-client