$ rpki-client -vvf rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/323430323a326134303a3a2f33322d3438203d3e20313336383733.roa File: 323430323a326134303a3a2f33322d3438203d3e20313336383733.roa (raw, json) Hash identifier: ZSQfDBDx08SMOJ9/mfQRF6dJyZ/7l6GG2dcY9tQkt/U= Subject key identifier: 0D:61:D8:7E:A2:3C:CE:4D:BD:FC:3D:5C:0B:F7:F8:9D:EF:E1:D6:07 Certificate issuer: /CN=5B8474CD5AD7F598A4826899DD65217A1BB85C61 Certificate serial: 18CFCD0ABA5509A8A9AE6228C9B92D1F0159DEEC Authority key identifier: 5B:84:74:CD:5A:D7:F5:98:A4:82:68:99:DD:65:21:7A:1B:B8:5C:61 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/323430323a326134303a3a2f33322d3438203d3e20313336383733.roa Signing time: Sun 03 May 2026 02:39:29 +0000 ROA not before: Sun 03 May 2026 02:34:29 +0000 ROA not after: Sun 02 May 2027 02:39:29 +0000 asID: 136873 IP address blocks: 2402:2a40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.crl rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:cf:cd:0a:ba:55:09:a8:a9:ae:62:28:c9:b9:2d:1f:01:59:de:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B8474CD5AD7F598A4826899DD65217A1BB85C61 Validity Not Before: May 3 02:34:29 2026 GMT Not After : May 2 02:39:29 2027 GMT Subject: CN=0D61D87EA23CCE4DBDFC3D5C0BF7F89DEFE1D607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c9:10:da:32:2e:a0:eb:7f:ba:db:10:f7:42: e8:0d:ef:b0:6b:59:6b:f8:b6:29:0c:b6:44:f4:ca: 0d:6c:11:91:25:a6:41:7f:9f:be:98:52:a7:8d:22: f5:a3:18:84:66:f9:54:51:af:ee:9f:69:25:66:26: e3:10:33:98:7d:89:bd:30:f1:40:e7:c8:04:06:4d: 60:f2:15:16:d9:f8:26:75:1c:ef:8e:98:f0:ad:11: f4:dc:85:94:24:80:e3:a8:74:8c:1e:4e:f1:70:57: 13:12:ec:a6:ae:c6:ea:b5:bd:77:10:f2:07:70:60: e1:1c:e4:bd:a1:19:ff:1b:a2:b4:f9:84:25:c6:66: 13:fd:9a:87:d3:e6:7b:6d:38:4d:dc:2f:12:f6:c0: c9:c0:fa:25:ed:53:7f:de:81:75:b6:a6:75:b5:d7: 9a:ee:99:e9:1f:eb:73:5b:82:77:69:37:55:09:66: d5:27:a8:e6:a8:1d:42:42:69:f3:8a:23:17:be:bb: 6f:52:2f:3f:02:fb:b4:3f:f8:59:45:01:fd:89:54: fc:7a:28:83:ac:e1:d1:44:ef:3c:64:5a:0c:90:4c: f3:b8:1c:06:fe:21:e8:3d:3c:4d:32:8a:d4:e5:fa: 28:00:4a:a5:96:a3:84:d2:75:96:03:5d:f7:41:7a: c6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:61:D8:7E:A2:3C:CE:4D:BD:FC:3D:5C:0B:F7:F8:9D:EF:E1:D6:07 X509v3 Authority Key Identifier: keyid:5B:84:74:CD:5A:D7:F5:98:A4:82:68:99:DD:65:21:7A:1B:B8:5C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/323430323a326134303a3a2f33322d3438203d3e20313336383733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:2a40::/32 Signature Algorithm: sha256WithRSAEncryption 6b:9c:4a:89:1e:51:b4:00:5a:6e:07:54:2f:6a:4c:bd:1f:8f: 25:e0:1c:ab:32:9a:08:64:b8:cd:7a:f2:95:7d:88:6f:f4:55: b1:9c:85:6b:25:4f:c4:0f:90:54:69:cc:67:16:30:dd:cf:1b: 04:5b:95:91:05:b9:e5:7c:4c:94:18:01:6e:ad:b2:9f:c6:15: bd:96:da:38:9a:7a:f5:8f:77:05:da:91:7a:71:f0:1f:b0:b8: bc:4c:34:21:09:d7:b2:80:0a:02:dc:9c:07:ee:fe:b2:b7:39: 3d:b8:5b:f2:6c:35:68:f7:03:80:21:49:e4:be:ab:6c:06:d9: bc:f5:f1:65:91:1a:c2:85:a8:db:52:ed:ee:d6:a9:ab:00:d6: 64:3f:eb:75:a1:86:17:ab:98:9a:2d:2c:4c:5f:7e:61:d7:d7: 9d:fc:3b:bf:ef:40:f0:1a:6d:2f:3f:47:ab:fb:e0:5b:f7:20: 38:5d:18:a9:50:4b:03:60:bf:65:2a:4d:cb:3e:d4:14:1b:ac: 3d:4d:d4:ea:b4:cc:d3:48:71:97:27:cd:b4:9d:40:db:e5:14: 27:92:0a:be:07:4c:bd:86:e9:e1:3d:68:0f:da:f7:e6:8c:c3: 48:0d:d2:b6:f3:b9:5e:e7:97:d9:c6:9f:5a:dd:99:35:77:42: 0d:63:ea:ef -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUGM/NCrpVCaiprmIoybktHwFZ3uwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI4NDc0Q0Q1QUQ3RjU5OEE0ODI2ODk5REQ2NTIxN0Ex QkI4NUM2MTAeFw0yNjA1MDMwMjM0MjlaFw0yNzA1MDIwMjM5MjlaMDMxMTAvBgNV BAMTKDBENjFEODdFQTIzQ0NFNERCREZDM0Q1QzBCRjdGODlERUZFMUQ2MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtyRDaMi6g63+62xD3QugN77Br WWv4tikMtkT0yg1sEZElpkF/n76YUqeNIvWjGIRm+VRRr+6faSVmJuMQM5h9ib0w 8UDnyAQGTWDyFRbZ+CZ1HO+OmPCtEfTchZQkgOOodIweTvFwVxMS7Kauxuq1vXcQ 8gdwYOEc5L2hGf8borT5hCXGZhP9mofT5nttOE3cLxL2wMnA+iXtU3/egXW2pnW1 15rumekf63NbgndpN1UJZtUnqOaoHUJCafOKIxe+u29SLz8C+7Q/+FlFAf2JVPx6 KIOs4dFE7zxkWgyQTPO4HAb+Ieg9PE0yitTl+igASqWWo4TSdZYDXfdBesbPAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUDWHYfqI8zk29/D1cC/f4ne/h1gcwHwYDVR0j BBgwFoAUW4R0zVrX9ZikgmiZ3WUhehu4XGEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU3YTZiY2ItOWViNi00OWRlLWI5OTgtMGJlZDNjNWMxMjc4LzAvNUI4NDc0Q0Q1 QUQ3RjU5OEE0ODI2ODk5REQ2NTIxN0ExQkI4NUM2MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81Qjg0NzRDRDVBRDdGNTk4QTQ4MjY4OTlERDY1MjE3QTFCQjg1 QzYxLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY1N2E2YmNiLTllYjYtNDlkZS1i OTk4LTBiZWQzYzVjMTI3OC8wLzMyMzQzMDMyM2EzMjYxMzQzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzMzNjM4MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQCKkAwDQYJKoZI hvcNAQELBQADggEBAGucSokeUbQAWm4HVC9qTL0fjyXgHKsymghkuM168pV9iG/0 VbGchWslT8QPkFRpzGcWMN3PGwRblZEFueV8TJQYAW6tsp/GFb2W2jiaevWPdwXa kXpx8B+wuLxMNCEJ17KACgLcnAfu/rK3OT24W/JsNWj3A4AhSeS+q2wG2bz18WWR GsKFqNtS7e7WqasA1mQ/63WhhhermJotLExffmHX1538O7/vQPAabS8/R6v74Fv3 IDhdGKlQSwNgv2UqTcs+1BQbrD1N1Oq0zNNIcZcnzbSdQNvlFCeSCr4HTL2G6eE9 aA/a9+aMw0gN0rbzuV7nl9nGn1rdmTV3Qg1j6u8= -----END CERTIFICATE-----Generated at Tue May 5 13:31:06 2026 by rpki-client