$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a35393a3a2f34382d3438203d3e203539323832.roa File: 323430303a643638303a35393a3a2f34382d3438203d3e203539323832.roa (raw, json) Hash identifier: /ARpDaobiYOepxRHR1PDX5TMsKlHHu4YXqHKwEPmRk8= Subject key identifier: 02:AA:C9:03:AA:73:E4:7D:9D:3A:61:0A:89:56:13:43:5B:91:B0:EA Certificate issuer: /CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D Certificate serial: 0322767551B943C0C29522A9C3DE1A233A1F0360 Authority key identifier: 69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a35393a3a2f34382d3438203d3e203539323832.roa Signing time: Sun 03 May 2026 02:57:48 +0000 ROA not before: Sun 03 May 2026 02:52:48 +0000 ROA not after: Sun 02 May 2027 02:57:48 +0000 asID: 59282 IP address blocks: 2400:d680:59::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 12:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:22:76:75:51:b9:43:c0:c2:95:22:a9:c3:de:1a:23:3a:1f:03:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D Validity Not Before: May 3 02:52:48 2026 GMT Not After : May 2 02:57:48 2027 GMT Subject: CN=02AAC903AA73E47D9D3A610A895613435B91B0EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:79:95:3a:04:3d:6a:13:ff:ff:5e:f7:71:d9: 80:06:ac:1e:dd:8d:55:1a:65:78:94:33:84:29:72: fd:75:80:bb:a9:7b:89:72:0d:d4:eb:44:78:0a:8d: 46:a0:4d:1b:33:2c:24:0c:3b:69:69:7d:47:bc:c2: 45:7c:44:db:e8:7b:f2:28:6e:83:c0:44:03:c5:9f: 8b:64:01:63:fc:c9:27:bc:2c:f0:95:7e:68:0f:cc: 8f:18:de:41:ab:9a:50:a0:a9:17:a7:bc:cc:4f:b3: 55:fd:17:cd:32:e4:e7:78:ac:53:7f:b5:87:1f:81: 18:ae:ab:f7:97:9b:16:d7:9b:4b:5f:54:a3:46:f1: dd:11:95:12:98:e7:46:8e:9f:55:a2:b9:3f:da:9e: 0f:9b:87:3f:81:2d:a2:e6:80:6a:65:e8:9a:23:69: 7d:14:62:52:f5:45:46:16:de:06:69:d9:bd:54:cf: db:f9:23:d8:6a:81:02:7f:5a:e4:f8:31:0f:a0:a2: 93:94:2a:5c:13:e1:ee:6d:7a:28:4c:e4:58:29:88: 72:54:55:c7:ae:2d:ab:46:49:0b:35:32:9e:89:c5: 5f:1e:8d:52:4b:59:f7:5e:d0:a7:b3:ca:6b:62:e5: 66:2a:e3:8c:2d:76:5d:27:fe:3f:e4:b9:a8:05:89: 7b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AA:C9:03:AA:73:E4:7D:9D:3A:61:0A:89:56:13:43:5B:91:B0:EA X509v3 Authority Key Identifier: keyid:69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a35393a3a2f34382d3438203d3e203539323832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:d680:59::/48 Signature Algorithm: sha256WithRSAEncryption 9e:d9:d5:a5:92:b9:5c:95:96:9b:44:5d:2e:2d:e1:85:6b:14: b3:5d:14:6c:e4:0f:df:6f:ae:f0:0a:f0:7f:cc:cf:91:87:47: 12:60:18:f0:c9:49:d5:78:8b:96:9c:7d:83:25:9e:28:a4:5e: 0d:3a:54:87:d2:a5:03:be:03:cd:2d:3c:9e:b0:f8:ec:22:be: 32:07:14:11:f1:48:7b:72:64:13:d8:98:9b:bb:6b:74:08:63: be:91:6c:94:a3:a7:af:e3:d8:a8:68:4f:85:93:0b:f5:8a:94: 44:d2:27:a0:06:1f:09:aa:22:c0:d1:b9:af:3f:91:28:6c:15: 21:d1:c8:b0:31:b2:6c:82:8c:13:fe:f1:aa:52:6f:e9:a6:a6: b4:c9:2d:e4:a0:de:df:71:6a:38:40:00:43:a4:20:78:41:0a: 84:de:b5:32:8f:6b:85:49:b8:64:50:5b:3c:58:53:7d:a5:62: 29:db:f8:dc:24:de:62:f5:c8:a4:c4:f7:33:ce:6f:73:e9:82: 95:f6:85:15:52:22:2b:62:02:a5:29:5a:c4:af:2c:aa:2d:52: b2:60:b4:3b:b2:79:0b:7c:b5:bc:bc:16:48:33:39:98:b1:3b: 05:7f:eb:5f:7e:33:31:e0:cb:95:3b:d9:96:c2:16:db:0b:b8: 31:d5:82:bf -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUAyJ2dVG5Q8DClSKpw94aIzofA2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk5NTVGQzczRjEyODgwMjRFN0NBRjBDMUQ4MjVFODM4 OUI2QjI1RDAeFw0yNjA1MDMwMjUyNDhaFw0yNzA1MDIwMjU3NDhaMDMxMTAvBgNV BAMTKDAyQUFDOTAzQUE3M0U0N0Q5RDNBNjEwQTg5NTYxMzQzNUI5MUIwRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTeZU6BD1qE///Xvdx2YAGrB7d jVUaZXiUM4Qpcv11gLupe4lyDdTrRHgKjUagTRszLCQMO2lpfUe8wkV8RNvoe/Io boPARAPFn4tkAWP8ySe8LPCVfmgPzI8Y3kGrmlCgqRenvMxPs1X9F80y5Od4rFN/ tYcfgRiuq/eXmxbXm0tfVKNG8d0RlRKY50aOn1WiuT/ang+bhz+BLaLmgGpl6Joj aX0UYlL1RUYW3gZp2b1Uz9v5I9hqgQJ/WuT4MQ+gopOUKlwT4e5teihM5FgpiHJU VceuLatGSQs1Mp6JxV8ejVJLWfde0Kezymti5WYq44wtdl0n/j/kuagFiXu5AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUAqrJA6pz5H2dOmEKiVYTQ1uRsOowHwYDVR0j BBgwFoAUaZVfxz8SiAJOfK8MHYJeg4m2sl0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg0NjRhNWItMmZjZS00N2RhLTgwNDctNjhkMmJkNjNjOWMzLzAvNjk5NTVGQzcz RjEyODgwMjRFN0NBRjBDMUQ4MjVFODM4OUI2QjI1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OTk1NUZDNzNGMTI4ODAyNEU3Q0FGMEMxRDgyNUU4Mzg5QjZC MjVELmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04 MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzUzOTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzkzMjM4MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkANaAAFkw DQYJKoZIhvcNAQELBQADggEBAJ7Z1aWSuVyVlptEXS4t4YVrFLNdFGzkD99vrvAK 8H/Mz5GHRxJgGPDJSdV4i5acfYMlniikXg06VIfSpQO+A80tPJ6w+OwivjIHFBHx SHtyZBPYmJu7a3QIY76RbJSjp6/j2KhoT4WTC/WKlETSJ6AGHwmqIsDRua8/kShs FSHRyLAxsmyCjBP+8apSb+mmprTJLeSg3t9xajhAAEOkIHhBCoTetTKPa4VJuGRQ WzxYU32lYinb+Nwk3mL1yKTE9zPOb3PpgpX2hRVSIitiAqUpWsSvLKotUrJgtDuy eQt8tby8FkgzOZixOwV/619+MzHgy5U72ZbCFtsLuDHVgr8= -----END CERTIFICATE-----Generated at Tue May 5 21:06:40 2026 by rpki-client