$ rpki-client -vvf rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa File: 323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa (raw, json) Hash identifier: Q18y495vHxKdcsVM96pc/tUI9Fl6GfmbLs035wir/JU= Subject key identifier: CD:1C:52:22:A6:F1:96:EC:0D:48:C6:B9:44:07:30:94:82:54:B3:75 Certificate issuer: /CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9 Certificate serial: 2127BB56D6AD16864C5812914A16B972C47202B3 Authority key identifier: F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa Signing time: Sun 03 May 2026 02:23:43 +0000 ROA not before: Sun 03 May 2026 02:18:43 +0000 ROA not after: Sun 02 May 2027 02:23:43 +0000 asID: 131749 IP address blocks: 2402:be80:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 13:54:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:27:bb:56:d6:ad:16:86:4c:58:12:91:4a:16:b9:72:c4:72:02:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9 Validity Not Before: May 3 02:18:43 2026 GMT Not After : May 2 02:23:43 2027 GMT Subject: CN=CD1C5222A6F196EC0D48C6B9440730948254B375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0f:a7:6a:fc:03:39:f3:d1:9c:f9:a5:5b:09: 2e:f7:d2:84:22:d2:9a:a8:da:55:1b:4a:97:c6:20: ff:f6:8d:24:e9:18:e7:ed:d6:16:bc:da:02:ae:a4: e4:17:6a:a0:06:32:f9:44:df:d5:09:00:1d:b9:77: 3b:15:65:4f:53:84:6b:13:84:b9:0a:d4:75:ea:00: 9c:1b:41:b7:df:2e:be:03:87:fa:24:22:0c:5f:cb: 55:79:36:2a:4e:f7:f2:36:3d:60:82:1c:f6:2f:c8: 48:e9:a8:e1:6f:f1:5c:5a:47:51:bb:29:15:ed:25: a6:a4:0e:7b:77:66:43:9d:3f:3f:0e:18:e2:8d:07: 0c:bd:ae:b3:f0:aa:63:7d:4e:18:6f:b6:91:ad:e4: 90:48:82:d3:f2:8f:ff:56:e3:8e:a3:45:2b:bd:b7: 56:b9:67:20:e3:b3:83:9f:51:3c:ac:3a:7f:74:c1: a5:e2:fe:2d:ad:ff:05:54:07:3b:e6:4a:c7:44:05: cc:b7:bc:e9:f4:56:df:7e:89:9c:3d:ef:77:03:86: 20:b4:50:13:3e:36:75:12:bb:6f:02:df:cb:ef:29: d9:2c:db:f5:92:87:c8:59:63:e4:42:73:09:15:65: b5:4d:f5:f7:13:94:9e:6b:75:44:a2:18:0f:19:e2: 75:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:1C:52:22:A6:F1:96:EC:0D:48:C6:B9:44:07:30:94:82:54:B3:75 X509v3 Authority Key Identifier: keyid:F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:be80:4000::/34 Signature Algorithm: sha256WithRSAEncryption b2:00:9a:32:33:ef:ed:c4:56:b3:a8:ac:1d:45:c6:25:d4:22: af:de:e7:b6:50:1a:c2:5d:58:23:ab:a1:f0:f8:50:f5:8a:3e: 12:08:4d:94:90:ee:48:2f:31:4c:16:da:90:58:f1:47:97:10: b6:90:c8:5b:6a:a9:64:3f:70:a9:fe:70:57:ee:3d:4d:dd:14: 43:b7:bd:12:51:83:a0:e0:bf:df:cf:24:62:5e:a9:94:8f:b1: d4:56:70:f0:dc:52:03:04:77:3e:43:50:1a:9f:49:9b:89:0c: bb:09:0a:e3:12:e9:fa:11:c8:14:93:bf:39:3b:77:ec:3a:2f: 22:ff:bf:a8:2b:2b:df:23:32:11:44:dd:02:fa:bb:c6:1c:d9: b5:4e:10:e7:24:1f:37:74:cd:be:6b:f5:0c:c1:03:66:f7:b6: bd:e7:aa:15:f7:4a:80:72:31:e1:c8:f2:f6:6a:29:7f:83:5f: f6:68:69:a9:d7:14:7b:40:03:e7:93:5a:92:ad:40:77:c1:e6: c6:89:60:83:76:3c:5a:e7:9e:dd:9e:ab:3c:e6:13:13:5d:f2: 10:de:2c:cd:ad:fb:d4:19:7b:aa:6d:19:f7:98:17:0e:12:06: fb:67:77:9d:71:0e:b2:25:11:f6:d6:32:b1:6d:8a:52:04:6f: a1:3f:c9:f0 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUISe7VtatFoZMWBKRSha5csRyArMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFQjZGNEU5MURERDQ3RkE4RTA0ODFCNjBENEMxODA4 NkE4MzJDOTAeFw0yNjA1MDMwMjE4NDNaFw0yNzA1MDIwMjIzNDNaMDMxMTAvBgNV BAMTKENEMUM1MjIyQTZGMTk2RUMwRDQ4QzZCOTQ0MDczMDk0ODI1NEIzNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsD6dq/AM589Gc+aVbCS730oQi 0pqo2lUbSpfGIP/2jSTpGOft1ha82gKupOQXaqAGMvlE39UJAB25dzsVZU9ThGsT hLkK1HXqAJwbQbffLr4Dh/okIgxfy1V5NipO9/I2PWCCHPYvyEjpqOFv8VxaR1G7 KRXtJaakDnt3ZkOdPz8OGOKNBwy9rrPwqmN9ThhvtpGt5JBIgtPyj/9W446jRSu9 t1a5ZyDjs4OfUTysOn90waXi/i2t/wVUBzvmSsdEBcy3vOn0Vt9+iZw973cDhiC0 UBM+NnUSu28C38vvKdks2/WSh8hZY+RCcwkVZbVN9fcTlJ5rdUSiGA8Z4nVJAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUzRxSIqbxluwNSMa5RAcwlIJUs3UwHwYDVR0j BBgwFoAU+OtvTpHd1H+o4EgbYNTBgIaoMskwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzAwZjRmMzctYzdmYi00N2QwLThhODUtZWNmZDEyYjkxNWY1LzAvRjhFQjZGNEU5 MURERDQ3RkE4RTA0ODFCNjBENEMxODA4NkE4MzJDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEVCNkY0RTkxRERENDdGQThFMDQ4MUI2MEQ0QzE4MDg2QTgz MkM5LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzMwMGY0ZjM3LWM3ZmItNDdkMC04 YTg1LWVjZmQxMmI5MTVmNS8wLzMyMzQzMDMyM2E2MjY1MzgzMDNhMzQzMDMwMzAz YTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMTMzMzEzNzM0Mzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYk Ar6AQDANBgkqhkiG9w0BAQsFAAOCAQEAsgCaMjPv7cRWs6isHUXGJdQir97ntlAa wl1YI6uh8PhQ9Yo+EghNlJDuSC8xTBbakFjxR5cQtpDIW2qpZD9wqf5wV+49Td0U Q7e9ElGDoOC/388kYl6plI+x1FZw8NxSAwR3PkNQGp9Jm4kMuwkK4xLp+hHIFJO/ OTt37DovIv+/qCsr3yMyEUTdAvq7xhzZtU4Q5yQfN3TNvmv1DMEDZve2veeqFfdK gHIx4cjy9mopf4Nf9mhpqdcUe0AD55Nakq1Ad8Hmxolgg3Y8Wuee3Z6rPOYTE13y EN4sza371Bl7qm0Z95gXDhIG+2d3nXEOsiUR9tYysW2KUgRvoT/J8A== -----END CERTIFICATE-----Generated at Fri May 8 07:11:56 2026 by rpki-client