$ rpki-client -vvf rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a343030303a3a2f33342d3438203d3e20313430343233.roa File: 323430363a323063303a343030303a3a2f33342d3438203d3e20313430343233.roa (raw, json) Hash identifier: +j5DE6bPhBgaX+1hWxzB/COb6Ltlclljt4GJO0GxP8M= Subject key identifier: F3:39:24:5C:F6:F8:F3:8C:6A:BE:0B:C6:D0:1D:24:55:9D:5E:A6:01 Certificate issuer: /CN=5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73 Certificate serial: 163E898698430E21080BC57E9CC262FE97940841 Authority key identifier: 5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a343030303a3a2f33342d3438203d3e20313430343233.roa Signing time: Sun 03 May 2026 02:16:41 +0000 ROA not before: Sun 03 May 2026 02:11:41 +0000 ROA not after: Sun 02 May 2027 02:16:41 +0000 asID: 140423 IP address blocks: 2406:20c0:4000::/34 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.crl rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:3e:89:86:98:43:0e:21:08:0b:c5:7e:9c:c2:62:fe:97:94:08:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73 Validity Not Before: May 3 02:11:41 2026 GMT Not After : May 2 02:16:41 2027 GMT Subject: CN=F339245CF6F8F38C6ABE0BC6D01D24559D5EA601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6d:4f:33:2e:e2:fb:fd:76:1f:3a:a2:e0:32: 6b:68:33:0c:2b:91:b7:91:ff:07:71:46:53:cc:f5: a7:23:18:59:f3:19:08:a9:4b:94:38:a0:f8:9f:21: 65:b5:82:1f:f6:86:1f:01:bd:58:12:ac:c6:39:30: 38:a1:40:b8:60:83:28:dc:d6:6e:3f:b1:df:22:af: ee:a3:45:5e:6f:61:3c:82:1b:34:c2:39:d8:57:e0: 07:d3:b4:af:77:9a:de:04:ee:3b:f8:6b:6e:f1:c1: c1:2a:24:d2:7f:f6:48:59:4c:16:46:e5:91:f2:51: ce:3a:6e:51:9a:da:5d:9d:e4:ef:42:66:dc:f7:45: 9c:2a:91:2a:e5:c3:08:47:aa:73:cd:2b:b8:f1:6c: d0:f7:a9:35:85:49:62:39:b7:3e:09:22:78:86:92: 78:39:62:0b:bf:29:84:28:30:0f:80:18:58:ce:e9: e6:a0:18:c5:ed:8d:44:03:dd:37:cd:4f:b1:32:0b: f2:c5:e5:48:4c:1e:63:92:2b:8d:d6:79:67:70:0e: 23:77:16:6e:29:5d:ea:48:a5:79:f5:39:52:b3:f1: 4d:e8:e6:22:6a:07:1d:ae:6e:90:40:d5:ea:e5:0c: 8e:e2:10:02:e3:17:70:e8:2d:2a:af:93:7a:e4:71: fd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:39:24:5C:F6:F8:F3:8C:6A:BE:0B:C6:D0:1D:24:55:9D:5E:A6:01 X509v3 Authority Key Identifier: keyid:5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a343030303a3a2f33342d3438203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:20c0:4000::/34 Signature Algorithm: sha256WithRSAEncryption b2:62:26:35:9e:4c:70:79:e3:89:39:7c:9f:db:9d:56:ca:07: 25:6a:4b:0f:c9:23:6b:31:c8:f7:4e:29:d3:a5:ad:59:16:71: 4c:2f:d1:27:11:0d:89:d4:c9:be:f3:15:aa:14:19:94:59:4f: 7b:0a:a7:23:7a:99:5b:cc:18:24:e5:9c:cb:da:a5:2c:95:fc: ab:01:ac:18:32:c2:8c:d4:44:c4:f8:81:60:28:2e:a6:e5:15: e6:39:c5:20:28:0e:ce:04:d5:0a:26:72:e9:99:70:86:18:7e: 32:d7:04:43:a2:ea:11:96:d2:63:75:9a:2f:f0:11:29:02:9e: ad:34:8b:54:e9:b8:8c:f8:1f:22:38:29:69:1f:19:35:74:54: f1:9e:de:bc:c0:30:f0:d9:68:77:2e:30:18:64:d6:7e:4b:2d: 52:7e:5d:67:3f:94:f3:fb:02:2c:29:e3:19:f5:7e:0e:df:d0: 68:cc:58:9b:97:9d:39:d1:c1:23:d2:60:94:b9:ec:18:53:f0: 94:1d:a1:c2:1d:84:22:0f:59:07:b9:4c:fc:d2:64:59:39:01: 03:64:22:d0:20:14:8d:9a:1d:cc:68:bb:41:63:d4:2e:9d:b7: dc:fd:b7:05:5f:6a:6b:3c:77:31:cb:ac:51:3b:0d:4e:f5:68: 38:d8:e0:c6 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUFj6JhphDDiEIC8V+nMJi/peUCEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQyNzJFRjFGRjVGOTk2MDNERkMyQTJCOUM1QUIxQThC RjMyMkU3MzAeFw0yNjA1MDMwMjExNDFaFw0yNzA1MDIwMjE2NDFaMDMxMTAvBgNV BAMTKEYzMzkyNDVDRjZGOEYzOEM2QUJFMEJDNkQwMUQyNDU1OUQ1RUE2MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+bU8zLuL7/XYfOqLgMmtoMwwr kbeR/wdxRlPM9acjGFnzGQipS5Q4oPifIWW1gh/2hh8BvVgSrMY5MDihQLhggyjc 1m4/sd8ir+6jRV5vYTyCGzTCOdhX4AfTtK93mt4E7jv4a27xwcEqJNJ/9khZTBZG 5ZHyUc46blGa2l2d5O9CZtz3RZwqkSrlwwhHqnPNK7jxbND3qTWFSWI5tz4JIniG kng5Ygu/KYQoMA+AGFjO6eagGMXtjUQD3TfNT7EyC/LF5UhMHmOSK43WeWdwDiN3 Fm4pXepIpXn1OVKz8U3o5iJqBx2ubpBA1erlDI7iEALjF3DoLSqvk3rkcf2VAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQU8zkkXPb484xqvgvG0B0kVZ1epgEwHwYDVR0j BBgwFoAUXScu8f9fmWA9/CornFqxqL8yLnMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTlhMDAzNjktNjg0MC00YTk1LTg5YjEtYTQ4NTE4Zjk4ZGM3LzAvNUQyNzJFRjFG RjVGOTk2MDNERkMyQTJCOUM1QUIxQThCRjMyMkU3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDI3MkVGMUZGNUY5OTYwM0RGQzJBMkI5QzVBQjFBOEJGMzIy RTczLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04 OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhMzQzMDMwMzAz YTNhMmYzMzM0MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYk BiDAQDANBgkqhkiG9w0BAQsFAAOCAQEAsmImNZ5McHnjiTl8n9udVsoHJWpLD8kj azHI904p06WtWRZxTC/RJxENidTJvvMVqhQZlFlPewqnI3qZW8wYJOWcy9qlLJX8 qwGsGDLCjNRExPiBYCgupuUV5jnFICgOzgTVCiZy6Zlwhhh+MtcEQ6LqEZbSY3Wa L/ARKQKerTSLVOm4jPgfIjgpaR8ZNXRU8Z7evMAw8Nlody4wGGTWfkstUn5dZz+U 8/sCLCnjGfV+Dt/QaMxYm5edOdHBI9JglLnsGFPwlB2hwh2EIg9ZB7lM/NJkWTkB A2Qi0CAUjZodzGi7QWPULp233P23BV9qazx3McusUTsNTvVoONjgxg== -----END CERTIFICATE-----Generated at Wed May 13 14:58:00 2026 by rpki-client