$ rpki-client -vvf rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa File: 323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa (raw, json) Hash identifier: bS5P/W+hj7so9J/fGjANaNnPonvylnMwWx29PNvc6E4= Subject key identifier: 1D:09:AE:34:D3:FF:DC:7A:48:12:7B:83:22:08:19:E1:D9:98:09:C0 Certificate issuer: /CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9 Certificate serial: 4D592E122FFC672320565E58000D4EF059423CF5 Authority key identifier: F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa Signing time: Sun 03 May 2026 02:23:42 +0000 ROA not before: Sun 03 May 2026 02:18:42 +0000 ROA not after: Sun 02 May 2027 02:23:42 +0000 asID: 131749 IP address blocks: 2402:be80:6000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 13:54:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:59:2e:12:2f:fc:67:23:20:56:5e:58:00:0d:4e:f0:59:42:3c:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9 Validity Not Before: May 3 02:18:42 2026 GMT Not After : May 2 02:23:42 2027 GMT Subject: CN=1D09AE34D3FFDC7A48127B83220819E1D99809C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a6:a3:e9:25:05:5e:e0:0f:ca:89:b1:46:a2: b9:ae:8b:2c:71:4c:be:b3:3b:45:d3:83:cc:14:ea: d2:42:9e:c2:f9:94:e4:5c:06:c2:53:d7:ae:0a:14: 6c:dc:c4:db:07:18:04:1d:7f:6d:da:7a:8e:f7:c8: f2:be:19:fb:19:06:5d:07:8c:2b:9e:e6:5b:3b:8d: 27:1a:74:ab:54:c4:7b:63:35:01:ce:df:86:4e:55: 04:30:70:bd:03:c2:92:8a:28:74:12:67:bb:82:21: 8a:7b:f1:67:0a:5c:67:32:37:3e:b9:66:94:73:32: 1c:17:7c:d9:dd:06:42:eb:5b:a5:68:7b:c6:40:9d: 4f:ab:7d:a1:61:c7:77:83:35:53:c4:cd:59:d2:86: db:c6:56:4d:0f:1a:43:24:68:7e:16:9d:14:3d:37: 2a:cc:e8:c9:c6:d4:3f:b1:43:a4:32:dc:42:97:c1: 46:ab:c2:1b:a5:02:92:06:76:54:5f:a7:f5:41:82: 41:2f:92:46:a9:a3:61:8a:f4:50:40:8f:d6:4e:d8: 46:df:e6:db:e3:c6:7c:ba:8f:b1:3e:fa:c5:65:17: 37:41:50:2e:76:48:b9:b0:6e:96:6f:aa:dd:36:58: e2:64:5c:e2:f0:de:36:e4:f1:56:42:56:04:b1:f5: c1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:09:AE:34:D3:FF:DC:7A:48:12:7B:83:22:08:19:E1:D9:98:09:C0 X509v3 Authority Key Identifier: keyid:F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:be80:6000::/35 Signature Algorithm: sha256WithRSAEncryption 0c:ed:f1:43:3a:9c:40:73:a9:1d:b2:95:aa:7a:61:fb:03:c4: 19:62:2b:34:72:34:54:69:33:56:a8:57:43:8e:1d:fa:25:90: 89:21:1c:25:18:50:ec:de:31:c0:19:86:de:d6:9c:61:5d:b2: e8:24:ef:f7:d1:12:c1:80:bb:ae:62:81:66:3c:8c:fe:4b:ce: 83:bf:af:8c:bb:d7:12:77:3b:ac:59:93:8a:39:67:11:96:d8: 04:40:01:e8:56:e6:df:f7:15:1f:71:55:40:bd:ad:b5:41:9d: 2f:08:ac:18:ed:3a:ae:c0:8a:e0:2e:3b:2e:73:a7:5a:17:63: e3:b0:16:ed:6a:e8:9d:6f:4e:88:00:be:f8:2a:8d:df:93:7d: 4e:5e:1b:a8:6d:b6:eb:a7:80:0a:46:53:b4:2f:71:8a:7f:19: 13:0b:3a:49:43:55:b9:27:d6:c7:ea:95:61:20:85:a3:11:eb: 22:f3:8b:c4:8c:e5:90:49:48:9d:c0:e8:57:bb:e5:60:55:7c: c3:33:f3:bc:dc:d4:fb:54:84:3b:67:1a:47:50:55:55:8d:05: b5:1b:55:0d:44:df:d8:6a:07:10:37:ca:7d:e5:3f:f1:63:08: 47:9d:4e:73:4c:59:a9:7f:e3:d6:72:fb:5c:19:c4:04:67:ca: 75:12:c3:53 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUTVkuEi/8ZyMgVl5YAA1O8FlCPPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFQjZGNEU5MURERDQ3RkE4RTA0ODFCNjBENEMxODA4 NkE4MzJDOTAeFw0yNjA1MDMwMjE4NDJaFw0yNzA1MDIwMjIzNDJaMDMxMTAvBgNV BAMTKDFEMDlBRTM0RDNGRkRDN0E0ODEyN0I4MzIyMDgxOUUxRDk5ODA5QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGpqPpJQVe4A/KibFGormuiyxx TL6zO0XTg8wU6tJCnsL5lORcBsJT164KFGzcxNsHGAQdf23aeo73yPK+GfsZBl0H jCue5ls7jScadKtUxHtjNQHO34ZOVQQwcL0DwpKKKHQSZ7uCIYp78WcKXGcyNz65 ZpRzMhwXfNndBkLrW6Voe8ZAnU+rfaFhx3eDNVPEzVnShtvGVk0PGkMkaH4WnRQ9 NyrM6MnG1D+xQ6Qy3EKXwUarwhulApIGdlRfp/VBgkEvkkapo2GK9FBAj9ZO2Ebf 5tvjxny6j7E++sVlFzdBUC52SLmwbpZvqt02WOJkXOLw3jbk8VZCVgSx9cHJAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUHQmuNNP/3HpIEnuDIggZ4dmYCcAwHwYDVR0j BBgwFoAU+OtvTpHd1H+o4EgbYNTBgIaoMskwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzAwZjRmMzctYzdmYi00N2QwLThhODUtZWNmZDEyYjkxNWY1LzAvRjhFQjZGNEU5 MURERDQ3RkE4RTA0ODFCNjBENEMxODA4NkE4MzJDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEVCNkY0RTkxRERENDdGQThFMDQ4MUI2MEQ0QzE4MDg2QTgz MkM5LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzMwMGY0ZjM3LWM3ZmItNDdkMC04 YTg1LWVjZmQxMmI5MTVmNS8wLzMyMzQzMDMyM2E2MjY1MzgzMDNhMzYzMDMwMzAz YTNhMmYzMzM1MmQzMzM1MjAzZDNlMjAzMTMzMzEzNzM0Mzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUk Ar6AYDANBgkqhkiG9w0BAQsFAAOCAQEADO3xQzqcQHOpHbKVqnph+wPEGWIrNHI0 VGkzVqhXQ44d+iWQiSEcJRhQ7N4xwBmG3tacYV2y6CTv99ESwYC7rmKBZjyM/kvO g7+vjLvXEnc7rFmTijlnEZbYBEAB6Fbm3/cVH3FVQL2ttUGdLwisGO06rsCK4C47 LnOnWhdj47AW7WronW9OiAC++CqN35N9Tl4bqG2266eACkZTtC9xin8ZEws6SUNV uSfWx+qVYSCFoxHrIvOLxIzlkElIncDoV7vlYFV8wzPzvNzU+1SEO2caR1BVVY0F tRtVDUTf2GoHEDfKfeU/8WMIR51Oc0xZqX/j1nL7XBnEBGfKdRLDUw== -----END CERTIFICATE-----Generated at Fri May 8 07:11:33 2026 by rpki-client