$ rpki-client -vvf rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa File: 323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa (raw, json) Hash identifier: apqtipmn5kmXtB7pKv4YlNHER/Ifv3+XPDXaeex3R9k= Subject key identifier: B9:0F:4B:28:3F:0E:64:A6:D4:64:E7:05:6E:EF:46:86:79:5D:0D:BD Certificate issuer: /CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9 Certificate serial: 6FC35DAAD01C135D9EF716406F57B7A301819E02 Authority key identifier: F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa Signing time: Sun 03 May 2026 02:23:43 +0000 ROA not before: Sun 03 May 2026 02:18:43 +0000 ROA not after: Sun 02 May 2027 02:23:43 +0000 asID: 131749 IP address blocks: 2402:be80:e000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 13:54:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:c3:5d:aa:d0:1c:13:5d:9e:f7:16:40:6f:57:b7:a3:01:81:9e:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9 Validity Not Before: May 3 02:18:43 2026 GMT Not After : May 2 02:23:43 2027 GMT Subject: CN=B90F4B283F0E64A6D464E7056EEF4686795D0DBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0c:f7:55:11:56:a5:8f:9a:87:1b:c3:ad:07: 7b:a9:6c:d4:7e:f9:f4:47:61:11:be:96:84:8f:3b: 29:d5:59:ef:bb:3c:f0:eb:bc:ee:f4:d2:73:e2:ac: 14:da:95:c1:48:0e:a5:c8:17:9f:f3:eb:8b:85:f6: 05:66:3d:43:32:74:5f:8f:af:f8:34:5d:6c:bc:d5: 76:f0:4b:58:dd:84:0c:92:1b:5c:63:21:8e:16:50: e7:ee:f5:78:3d:5e:8c:06:21:e7:7d:b4:40:37:4f: 95:43:7c:4d:30:4b:b2:ea:4d:e1:27:ca:e0:c1:2e: cf:8d:3b:9a:46:d2:8f:bb:7e:cb:52:a0:40:96:30: 9b:b3:bb:21:06:c8:ef:24:2c:26:f5:4f:c2:85:0b: cd:38:72:89:28:35:19:d5:9d:11:d1:73:cf:e2:c8: 7a:c1:d3:fb:d0:5f:db:2c:13:92:9e:0c:95:12:70: 4f:56:0a:e7:9b:b2:e7:84:57:fc:4b:5b:97:36:3a: 7c:9b:74:1b:33:ae:fb:df:e0:27:23:ff:b1:54:d5: 59:89:1c:a7:36:cc:0f:49:a4:5e:2e:75:55:ad:69: db:62:37:9d:54:f4:e6:00:7d:46:0f:89:57:00:24: be:94:3a:c3:90:2c:20:70:be:f9:93:6f:45:25:6c: b9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0F:4B:28:3F:0E:64:A6:D4:64:E7:05:6E:EF:46:86:79:5D:0D:BD X509v3 Authority Key Identifier: keyid:F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:be80:e000::/35 Signature Algorithm: sha256WithRSAEncryption 49:7f:62:9a:3c:77:5e:d1:ee:36:4a:2c:08:a8:77:17:73:13: c3:14:a1:b1:38:0d:1a:86:97:c5:f7:60:23:03:84:24:9b:ea: 19:22:1e:bc:99:c0:e5:c5:8e:00:72:02:5d:5b:c1:65:55:50: 6f:b1:c5:39:9f:e9:88:f0:93:e1:14:b9:2e:94:6a:34:b2:e4: 52:0d:01:50:04:52:bf:95:b8:b7:40:62:24:e9:ee:fa:26:ac: 6c:d7:e9:3a:d2:ee:7a:fd:92:52:18:a7:e2:cd:2c:4a:0a:e9: 31:39:6a:4c:b0:66:27:bd:38:4c:7a:e6:92:87:68:cf:e0:65: 79:6a:7d:f6:98:6e:e2:70:bb:09:70:6a:9f:af:f2:3d:a7:bf: a5:5e:1b:8c:2a:6e:42:04:ba:01:23:5b:fc:85:bb:d6:34:65: 61:07:bd:ee:47:8d:ed:b8:75:ce:95:b5:a9:15:98:b5:f0:09: a4:10:ef:14:26:24:31:a3:28:d3:ec:a0:e4:2f:a4:25:ca:3b: 57:fb:80:81:bc:13:40:a4:2f:f2:27:c0:21:82:97:90:a8:f1: 73:b9:aa:3c:e4:08:68:79:51:e2:2a:1f:68:b2:d3:ec:63:95: 68:c7:6d:0c:d9:b9:c1:22:28:68:fe:80:d4:4c:f4:29:a6:85: 43:f0:e2:75 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUb8NdqtAcE12e9xZAb1e3owGBngIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFQjZGNEU5MURERDQ3RkE4RTA0ODFCNjBENEMxODA4 NkE4MzJDOTAeFw0yNjA1MDMwMjE4NDNaFw0yNzA1MDIwMjIzNDNaMDMxMTAvBgNV BAMTKEI5MEY0QjI4M0YwRTY0QTZENDY0RTcwNTZFRUY0Njg2Nzk1RDBEQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0DPdVEValj5qHG8OtB3upbNR+ +fRHYRG+loSPOynVWe+7PPDrvO700nPirBTalcFIDqXIF5/z64uF9gVmPUMydF+P r/g0XWy81XbwS1jdhAySG1xjIY4WUOfu9Xg9XowGIed9tEA3T5VDfE0wS7LqTeEn yuDBLs+NO5pG0o+7fstSoECWMJuzuyEGyO8kLCb1T8KFC804cokoNRnVnRHRc8/i yHrB0/vQX9ssE5KeDJUScE9WCuebsueEV/xLW5c2OnybdBszrvvf4Ccj/7FU1VmJ HKc2zA9JpF4udVWtadtiN51U9OYAfUYPiVcAJL6UOsOQLCBwvvmTb0UlbLnBAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUuQ9LKD8OZKbUZOcFbu9GhnldDb0wHwYDVR0j BBgwFoAU+OtvTpHd1H+o4EgbYNTBgIaoMskwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzAwZjRmMzctYzdmYi00N2QwLThhODUtZWNmZDEyYjkxNWY1LzAvRjhFQjZGNEU5 MURERDQ3RkE4RTA0ODFCNjBENEMxODA4NkE4MzJDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEVCNkY0RTkxRERENDdGQThFMDQ4MUI2MEQ0QzE4MDg2QTgz MkM5LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzMwMGY0ZjM3LWM3ZmItNDdkMC04 YTg1LWVjZmQxMmI5MTVmNS8wLzMyMzQzMDMyM2E2MjY1MzgzMDNhNjUzMDMwMzAz YTNhMmYzMzM1MmQzMzM1MjAzZDNlMjAzMTMzMzEzNzM0Mzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUk Ar6A4DANBgkqhkiG9w0BAQsFAAOCAQEASX9imjx3XtHuNkosCKh3F3MTwxShsTgN GoaXxfdgIwOEJJvqGSIevJnA5cWOAHICXVvBZVVQb7HFOZ/piPCT4RS5LpRqNLLk Ug0BUARSv5W4t0BiJOnu+iasbNfpOtLuev2SUhin4s0sSgrpMTlqTLBmJ704THrm kodoz+BleWp99phu4nC7CXBqn6/yPae/pV4bjCpuQgS6ASNb/IW71jRlYQe97keN 7bh1zpW1qRWYtfAJpBDvFCYkMaMo0+yg5C+kJco7V/uAgbwTQKQv8ifAIYKXkKjx c7mqPOQIaHlR4iofaLLT7GOVaMdtDNm5wSIoaP6A1Ez0KaaFQ/DidQ== -----END CERTIFICATE-----Generated at Fri May 8 07:11:33 2026 by rpki-client