$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a3a2f34372d3437203d3e203435313437.roa File: 323430343a633030303a3a2f34372d3437203d3e203435313437.roa (raw, json) Hash identifier: oh1ZsPdBjEXjMor6cyB295mZuHxr+bpLkIa8NrvojKU= Subject key identifier: 81:DA:C0:C2:DA:0F:FF:EA:15:2D:A0:5B:24:34:EB:BF:05:08:0D:1C Certificate issuer: /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0 Certificate serial: 4A1E5ECB816002C0D9B636A2CB9695786E2C91F8 Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a3a2f34372d3437203d3e203435313437.roa Signing time: Sun 03 May 2026 02:38:31 +0000 ROA not before: Sun 03 May 2026 02:33:31 +0000 ROA not after: Sun 02 May 2027 02:38:31 +0000 asID: 45147 IP address blocks: 2404:c000::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 May 2026 23:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:1e:5e:cb:81:60:02:c0:d9:b6:36:a2:cb:96:95:78:6e:2c:91:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0 Validity Not Before: May 3 02:33:31 2026 GMT Not After : May 2 02:38:31 2027 GMT Subject: CN=81DAC0C2DA0FFFEA152DA05B2434EBBF05080D1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5e:c8:9b:27:d6:6a:d7:e9:86:9e:b9:3a:40: fe:54:41:15:d1:db:ac:ee:13:5c:b4:b8:04:c1:c5: 25:0c:8e:86:8c:15:8b:84:e2:b2:63:35:c9:23:a2: e3:ac:55:e6:44:26:b2:ca:c5:a1:f1:10:3e:5e:25: cb:31:13:6a:c0:c4:a4:b2:aa:aa:5d:56:50:78:c5: 9d:48:56:d7:85:ac:dc:32:69:ca:2f:c3:31:22:99: 8c:eb:a2:e5:e2:95:59:11:e1:24:b2:47:ff:f0:0f: 2a:ff:e5:0d:3f:31:7d:15:50:8a:f2:33:fc:28:d8: 0f:e4:15:2d:47:55:ff:d5:fd:c9:91:54:43:d0:17: 82:f6:b2:d1:f3:e6:28:72:e2:cd:c3:95:36:92:de: 3f:a2:2a:07:4c:53:8f:2b:3e:6a:89:a0:05:94:32: 41:76:52:37:b9:80:4f:6e:5f:6a:d6:0e:20:33:20: 62:b2:b6:2a:07:d6:e8:21:1c:ab:95:1b:6f:5d:f5: 38:fc:31:92:42:8b:1d:4d:78:c9:ed:5c:c4:b0:e6: 44:e9:0f:dd:dd:80:83:86:f4:65:cb:67:45:71:d9: 1d:ec:65:45:2c:a6:92:53:73:b6:80:4a:74:32:a3: 24:bf:d8:3c:d2:32:a9:9b:65:97:f9:79:9f:a1:fe: fe:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:DA:C0:C2:DA:0F:FF:EA:15:2D:A0:5B:24:34:EB:BF:05:08:0D:1C X509v3 Authority Key Identifier: keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a3a2f34372d3437203d3e203435313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:c000::/47 Signature Algorithm: sha256WithRSAEncryption 72:f2:fe:80:0e:d0:1f:b5:c8:be:2e:b9:dd:57:4b:70:56:c5: 92:0d:39:8a:ab:cb:d5:72:c3:b6:aa:ff:48:d9:7c:c5:1a:c1: b5:39:5c:ae:56:ec:35:22:ad:72:29:50:66:c8:d3:b5:08:b1: 1e:f1:d4:ed:00:5a:09:36:fa:ef:7f:cc:ec:7f:48:e6:2d:55: 6e:a9:58:a5:32:1b:9d:15:e4:ba:b1:95:d3:b8:be:f6:9e:c2: c2:85:34:ec:cf:67:b8:70:06:54:f0:6c:0b:48:21:b2:b2:c1: fc:48:ec:fd:55:de:24:51:e0:06:2b:39:54:d0:80:25:0a:5d: d1:ef:5f:73:f9:b2:cb:a8:4c:af:da:4e:b2:a8:e9:64:27:46: be:79:51:3c:ec:09:4f:ee:12:bc:64:e2:eb:d7:1a:e6:41:1a: 42:01:99:76:88:92:92:87:9e:d6:7e:de:9f:74:33:6a:ed:80: bf:5c:bb:61:63:3e:b1:90:38:b3:60:04:30:51:e8:4a:2c:6f: b8:97:dd:d0:4a:4e:16:44:0e:1e:68:ba:48:b5:a5:bd:d9:6e: 87:77:36:2e:ec:f4:7e:15:e9:2e:6f:5c:f3:86:18:26:c9:1d: 42:8d:d8:87:24:2f:aa:fb:de:87:3b:e4:5b:64:fe:db:a6:c1: b5:7a:cd:e5 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUSh5ey4FgAsDZtjaiy5aVeG4skfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFFMTU4QjNDODREMzA3NjhDQkMwRDFENTYwMzRFMjZF NzA0QjVEMDAeFw0yNjA1MDMwMjMzMzFaFw0yNzA1MDIwMjM4MzFaMDMxMTAvBgNV BAMTKDgxREFDMEMyREEwRkZGRUExNTJEQTA1QjI0MzRFQkJGMDUwODBEMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTXsibJ9Zq1+mGnrk6QP5UQRXR 26zuE1y0uATBxSUMjoaMFYuE4rJjNckjouOsVeZEJrLKxaHxED5eJcsxE2rAxKSy qqpdVlB4xZ1IVteFrNwyacovwzEimYzrouXilVkR4SSyR//wDyr/5Q0/MX0VUIry M/wo2A/kFS1HVf/V/cmRVEPQF4L2stHz5ihy4s3DlTaS3j+iKgdMU48rPmqJoAWU MkF2Uje5gE9uX2rWDiAzIGKytioH1ughHKuVG29d9Tj8MZJCix1NeMntXMSw5kTp D93dgIOG9GXLZ0Vx2R3sZUUsppJTc7aASnQyoyS/2DzSMqmbZZf5eZ+h/v49AgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUgdrAwtoP/+oVLaBbJDTrvwUIDRwwHwYDVR0j BBgwFoAU6uFYs8hNMHaMvA0dVgNOJucEtdAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjM1ZjdhMmYtNzI1ZS00Mzk5LTg2OWEtNGIxZmNmMmM2YTBjLzAvRUFFMTU4QjND ODREMzA3NjhDQkMwRDFENTYwMzRFMjZFNzA0QjVEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQUUxNThCM0M4NEQzMDc2OENCQzBEMUQ1NjAzNEUyNkU3MDRC NUQwLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMyMzQzMDM0M2E2MzMwMzAzMDNhM2EyZjM0Mzcy ZDM0MzcyMDNkM2UyMDM0MzUzMTM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwEkBMAAAAAwDQYJKoZI hvcNAQELBQADggEBAHLy/oAO0B+1yL4uud1XS3BWxZINOYqry9Vyw7aq/0jZfMUa wbU5XK5W7DUirXIpUGbI07UIsR7x1O0AWgk2+u9/zOx/SOYtVW6pWKUyG50V5Lqx ldO4vvaewsKFNOzPZ7hwBlTwbAtIIbKywfxI7P1V3iRR4AYrOVTQgCUKXdHvX3P5 ssuoTK/aTrKo6WQnRr55UTzsCU/uErxk4uvXGuZBGkIBmXaIkpKHntZ+3p90M2rt gL9cu2FjPrGQOLNgBDBR6Eosb7iX3dBKThZEDh5ouki1pb3Zbod3Ni7s9H4V6S5v XPOGGCbJHUKN2IckL6r73oc75Ftk/tumwbV6zeU= -----END CERTIFICATE-----Generated at Thu May 7 03:12:24 2026 by rpki-client