$ rpki-client -vvf rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa File: 323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa (raw, json) Hash identifier: CnBcLvoSDxEWtZrVDvNMamVH18oi4O/jyEx1Mt/oRO8= Subject key identifier: F2:9F:04:61:E1:09:C5:78:B2:8F:85:3F:AD:0E:7B:D3:B7:8F:3E:66 Certificate issuer: /CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9 Certificate serial: 0A26076E20534C6304D718576B130927BE23F280 Authority key identifier: F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa Signing time: Sun 03 May 2026 02:23:37 +0000 ROA not before: Sun 03 May 2026 02:18:37 +0000 ROA not after: Sun 02 May 2027 02:23:37 +0000 asID: 131749 IP address blocks: 2402:be80:c000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 13:54:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:26:07:6e:20:53:4c:63:04:d7:18:57:6b:13:09:27:be:23:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9 Validity Not Before: May 3 02:18:37 2026 GMT Not After : May 2 02:23:37 2027 GMT Subject: CN=F29F0461E109C578B28F853FAD0E7BD3B78F3E66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5f:a7:62:11:11:7f:fd:fd:17:82:32:ec:cd: 10:cd:a0:f0:63:ff:0a:cf:29:b7:13:db:c0:7f:2c: 43:ab:f4:c5:e5:9a:72:58:45:88:bb:a5:04:9d:ea: de:10:9e:f5:b2:95:7f:08:1e:84:f2:2e:b4:4e:7a: 8b:0f:95:26:51:18:c2:fd:0a:bd:7a:72:16:0c:12: 29:ee:85:70:ce:18:fd:b1:77:f8:7b:b9:69:a6:aa: d0:45:09:65:e0:50:fb:b1:9d:a6:be:66:fc:62:a8: 0c:d7:0b:69:00:55:31:0d:2f:6c:ba:16:76:5d:b7: 9d:03:83:56:45:bf:e6:be:fd:08:35:45:db:a6:67: 11:e3:c2:c5:fe:e7:61:a7:6c:60:36:21:17:96:1e: 88:38:76:7c:49:45:63:63:3c:9e:4e:66:90:99:82: 7e:23:3a:cb:66:60:1a:36:b4:38:9c:a5:f8:53:17: 9a:46:b6:15:b1:0c:8b:2f:4f:af:5b:63:85:89:a8: 5f:ee:d1:73:ea:e8:ee:1a:a5:f4:37:59:fb:f4:ae: ed:e5:85:da:f4:8f:0a:69:c8:fa:d3:a6:b1:69:69: b2:55:b6:5c:e0:5b:47:38:c9:25:53:2a:e3:fe:c7: 24:aa:6c:9f:61:49:65:ab:cc:81:ba:e6:e1:c2:f9: a0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:9F:04:61:E1:09:C5:78:B2:8F:85:3F:AD:0E:7B:D3:B7:8F:3E:66 X509v3 Authority Key Identifier: keyid:F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:be80:c000::/35 Signature Algorithm: sha256WithRSAEncryption 1a:19:52:2c:54:44:43:1a:dc:29:75:08:4f:db:88:38:b9:15: 26:20:78:32:d0:b7:ef:5b:e5:0c:e2:37:81:dc:9d:8e:18:43: 73:83:1c:6a:d0:cb:3b:96:fc:cb:de:8c:8d:48:9f:9d:ec:4d: 5b:4e:a7:e0:41:3b:f7:6c:f4:5a:3f:1a:fa:a7:eb:f6:e6:d6: a1:e4:e4:26:24:16:fa:06:70:5b:12:09:5a:1c:bc:5a:f5:3e: 05:7e:7e:d6:58:c1:6f:5e:07:5a:98:ad:3e:0a:ae:cb:ea:ed: 75:e8:b2:94:af:df:d8:9f:07:53:0f:37:01:c0:7c:c4:4d:cf: 64:d1:39:12:48:d7:f2:9e:4f:55:09:4f:f1:91:75:fd:b0:67: bd:52:79:48:0c:7e:88:0b:90:f5:b4:7e:1b:8c:82:71:d2:ae: 05:84:9e:77:5f:d2:0f:6d:2e:b0:6c:b8:1a:b9:a5:bd:11:62: 30:89:b3:c8:69:e5:f3:fb:b9:05:90:30:e7:50:7e:4f:bd:2b: a6:62:1e:d5:84:7d:e4:f2:13:08:b5:fd:36:4b:4c:d2:a4:ca: c9:50:0e:6e:fb:36:a7:ac:25:39:af:37:6c:9c:37:81:5a:b7: 61:7a:c4:74:4a:a2:f6:dc:c7:be:62:b1:a0:5c:0f:68:93:7a: 0b:0e:fc:f1 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUCiYHbiBTTGME1xhXaxMJJ74j8oAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFQjZGNEU5MURERDQ3RkE4RTA0ODFCNjBENEMxODA4 NkE4MzJDOTAeFw0yNjA1MDMwMjE4MzdaFw0yNzA1MDIwMjIzMzdaMDMxMTAvBgNV BAMTKEYyOUYwNDYxRTEwOUM1NzhCMjhGODUzRkFEMEU3QkQzQjc4RjNFNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKX6diERF//f0XgjLszRDNoPBj /wrPKbcT28B/LEOr9MXlmnJYRYi7pQSd6t4QnvWylX8IHoTyLrROeosPlSZRGML9 Cr16chYMEinuhXDOGP2xd/h7uWmmqtBFCWXgUPuxnaa+ZvxiqAzXC2kAVTENL2y6 FnZdt50Dg1ZFv+a+/Qg1RdumZxHjwsX+52GnbGA2IReWHog4dnxJRWNjPJ5OZpCZ gn4jOstmYBo2tDicpfhTF5pGthWxDIsvT69bY4WJqF/u0XPq6O4apfQ3Wfv0ru3l hdr0jwppyPrTprFpabJVtlzgW0c4ySVTKuP+xySqbJ9hSWWrzIG65uHC+aAHAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQU8p8EYeEJxXiyj4U/rQ5707ePPmYwHwYDVR0j BBgwFoAU+OtvTpHd1H+o4EgbYNTBgIaoMskwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzAwZjRmMzctYzdmYi00N2QwLThhODUtZWNmZDEyYjkxNWY1LzAvRjhFQjZGNEU5 MURERDQ3RkE4RTA0ODFCNjBENEMxODA4NkE4MzJDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEVCNkY0RTkxRERENDdGQThFMDQ4MUI2MEQ0QzE4MDg2QTgz MkM5LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzMwMGY0ZjM3LWM3ZmItNDdkMC04 YTg1LWVjZmQxMmI5MTVmNS8wLzMyMzQzMDMyM2E2MjY1MzgzMDNhNjMzMDMwMzAz YTNhMmYzMzM1MmQzMzM1MjAzZDNlMjAzMTMzMzEzNzM0Mzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUk Ar6AwDANBgkqhkiG9w0BAQsFAAOCAQEAGhlSLFREQxrcKXUIT9uIOLkVJiB4MtC3 71vlDOI3gdydjhhDc4McatDLO5b8y96MjUifnexNW06n4EE792z0Wj8a+qfr9ubW oeTkJiQW+gZwWxIJWhy8WvU+BX5+1ljBb14HWpitPgquy+rtdeiylK/f2J8HUw83 AcB8xE3PZNE5EkjX8p5PVQlP8ZF1/bBnvVJ5SAx+iAuQ9bR+G4yCcdKuBYSed1/S D20usGy4GrmlvRFiMImzyGnl8/u5BZAw51B+T70rpmIe1YR95PITCLX9NktM0qTK yVAObvs2p6wlOa83bJw3gVq3YXrEdEqi9tzHvmKxoFwPaJN6Cw788Q== -----END CERTIFICATE-----Generated at Fri May 8 07:11:57 2026 by rpki-client