$ rpki-client -vvf rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a3a2f33322d3332203d3e20313331373439.roa File: 323430323a626538303a3a2f33322d3332203d3e20313331373439.roa (raw, json) Hash identifier: Fg6XcYLXwzdBTEEbtVqZPj3EQucOEbeogJk1AzgGxAQ= Subject key identifier: 56:5E:DA:87:7B:E1:ED:CB:5E:E0:C1:37:37:A8:D9:5F:6B:08:D0:FC Certificate issuer: /CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9 Certificate serial: 4266ABA3DCE69FC143F45D256DCE341F3254D91C Authority key identifier: F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a3a2f33322d3332203d3e20313331373439.roa Signing time: Sun 03 May 2026 02:23:41 +0000 ROA not before: Sun 03 May 2026 02:18:41 +0000 ROA not after: Sun 02 May 2027 02:23:41 +0000 asID: 131749 IP address blocks: 2402:be80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 13:54:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:66:ab:a3:dc:e6:9f:c1:43:f4:5d:25:6d:ce:34:1f:32:54:d9:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9 Validity Not Before: May 3 02:18:41 2026 GMT Not After : May 2 02:23:41 2027 GMT Subject: CN=565EDA877BE1EDCB5EE0C13737A8D95F6B08D0FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:89:46:72:95:fd:3c:a1:d0:cc:51:67:73:f0: aa:4c:fd:63:3e:af:93:4a:09:3b:90:75:a0:cb:f3: ca:95:d5:ba:89:47:a2:94:75:d6:e8:bb:02:5e:38: 40:8a:d3:01:10:3a:b5:b4:6e:4d:f3:34:4f:83:3a: 1b:5c:aa:94:a2:ec:1b:94:b7:ec:07:ff:0d:1a:5b: b8:64:41:3d:6e:f5:92:3b:d8:86:ec:d5:df:bf:a2: ca:00:26:d0:21:31:f1:86:f9:ee:a9:56:64:06:41: db:a0:cc:c6:02:9f:da:f7:af:bb:55:09:9b:e7:03: 1b:18:d3:92:98:06:cc:c4:3c:3e:1d:21:78:f0:32: 11:b3:ab:9f:e6:4a:a3:25:a0:3c:81:3c:b3:c3:30: 3a:fa:1e:a6:dd:7a:3c:e0:71:32:49:e7:c5:95:52: 2e:8b:71:18:f7:0d:66:ef:68:71:98:06:11:8a:58: 8b:2b:25:43:a7:98:8a:ac:b7:06:b3:05:59:fe:fc: 7e:9d:85:50:3e:2a:41:c9:7b:0d:59:6c:32:46:fa: 28:df:c8:b5:29:d9:fc:8a:30:7a:fe:7d:3e:94:2f: 6d:58:3b:b8:63:44:74:19:f7:57:1c:c9:3b:45:1a: 97:21:20:c4:b7:93:fe:24:19:63:fe:83:52:65:c7: d2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:5E:DA:87:7B:E1:ED:CB:5E:E0:C1:37:37:A8:D9:5F:6B:08:D0:FC X509v3 Authority Key Identifier: keyid:F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a3a2f33322d3332203d3e20313331373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:be80::/32 Signature Algorithm: sha256WithRSAEncryption 45:ca:e6:99:66:1a:1b:bd:df:08:83:d6:21:ce:3d:2a:d7:d0: c9:51:27:df:3a:3d:ac:91:62:bb:7b:f4:73:2f:bc:73:89:95: aa:45:de:39:1f:01:52:9d:35:dd:fc:db:3a:3b:53:63:d5:c1: cd:4c:12:7d:34:b7:ba:df:7c:2d:52:19:ac:62:a5:d5:e7:a0: f2:ec:33:c2:4f:b3:8e:e9:58:bc:8d:c7:b4:c1:05:97:47:c5: 34:7e:c2:d1:43:1f:32:1e:45:32:91:66:04:f0:26:14:c2:24: 6c:48:ce:4e:d9:20:f4:ae:8f:16:89:1d:8f:49:a6:6d:cb:84: d6:06:b0:8e:02:11:4b:06:3c:97:69:44:cb:24:08:d6:c5:f1: 10:f6:71:5c:10:cb:44:01:47:78:ed:9a:a7:03:91:bb:9b:1e: 26:d8:58:18:93:93:17:77:04:83:18:66:84:f3:18:9f:b1:54: f8:3f:a3:f0:de:e4:4c:7e:bc:6a:61:12:58:a4:5c:ef:da:5a: fb:e2:37:4e:33:2e:5d:f7:0f:59:f0:ab:ba:76:c0:65:06:4d: 04:02:a2:1d:ea:e7:47:4d:55:f4:a3:0e:84:db:57:bb:44:dc: 0f:3d:95:35:4a:3f:e1:b3:5e:8b:03:33:66:c8:a9:67:ff:4b: 5d:7f:0f:e9 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUQmaro9zmn8FD9F0lbc40HzJU2RwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFQjZGNEU5MURERDQ3RkE4RTA0ODFCNjBENEMxODA4 NkE4MzJDOTAeFw0yNjA1MDMwMjE4NDFaFw0yNzA1MDIwMjIzNDFaMDMxMTAvBgNV BAMTKDU2NUVEQTg3N0JFMUVEQ0I1RUUwQzEzNzM3QThEOTVGNkIwOEQwRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHiUZylf08odDMUWdz8KpM/WM+ r5NKCTuQdaDL88qV1bqJR6KUddbouwJeOECK0wEQOrW0bk3zNE+DOhtcqpSi7BuU t+wH/w0aW7hkQT1u9ZI72Ibs1d+/osoAJtAhMfGG+e6pVmQGQdugzMYCn9r3r7tV CZvnAxsY05KYBszEPD4dIXjwMhGzq5/mSqMloDyBPLPDMDr6HqbdejzgcTJJ58WV Ui6LcRj3DWbvaHGYBhGKWIsrJUOnmIqstwazBVn+/H6dhVA+KkHJew1ZbDJG+ijf yLUp2fyKMHr+fT6UL21YO7hjRHQZ91ccyTtFGpchIMS3k/4kGWP+g1Jlx9LrAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUVl7ah3vh7cte4ME3N6jZX2sI0PwwHwYDVR0j BBgwFoAU+OtvTpHd1H+o4EgbYNTBgIaoMskwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzAwZjRmMzctYzdmYi00N2QwLThhODUtZWNmZDEyYjkxNWY1LzAvRjhFQjZGNEU5 MURERDQ3RkE4RTA0ODFCNjBENEMxODA4NkE4MzJDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEVCNkY0RTkxRERENDdGQThFMDQ4MUI2MEQ0QzE4MDg2QTgz MkM5LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzMwMGY0ZjM3LWM3ZmItNDdkMC04 YTg1LWVjZmQxMmI5MTVmNS8wLzMyMzQzMDMyM2E2MjY1MzgzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzMTM3MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQCvoAwDQYJKoZI hvcNAQELBQADggEBAEXK5plmGhu93wiD1iHOPSrX0MlRJ986PayRYrt79HMvvHOJ lapF3jkfAVKdNd382zo7U2PVwc1MEn00t7rffC1SGaxipdXnoPLsM8JPs47pWLyN x7TBBZdHxTR+wtFDHzIeRTKRZgTwJhTCJGxIzk7ZIPSujxaJHY9Jpm3LhNYGsI4C EUsGPJdpRMskCNbF8RD2cVwQy0QBR3jtmqcDkbubHibYWBiTkxd3BIMYZoTzGJ+x VPg/o/De5Ex+vGphElikXO/aWvviN04zLl33D1nwq7p2wGUGTQQCoh3q50dNVfSj DoTbV7tE3A89lTVKP+GzXosDM2bIqWf/S11/D+k= -----END CERTIFICATE-----Generated at Fri May 8 07:12:41 2026 by rpki-client