$ rpki-client -vvf rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a363030303a3a2f33352d3438203d3e20313430343233.roa File: 323430363a323063303a363030303a3a2f33352d3438203d3e20313430343233.roa (raw, json) Hash identifier: Wa4kWI19R9UmknDYtwAX+VAmJObZ9NpX4+ik16tpP54= Subject key identifier: C2:79:34:8F:8D:AE:1A:43:8D:5E:77:05:14:A9:EE:D1:A6:12:94:A3 Certificate issuer: /CN=5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73 Certificate serial: 42A7F19821772203434BCE9B1B31D7822F887B1A Authority key identifier: 5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a363030303a3a2f33352d3438203d3e20313430343233.roa Signing time: Sun 03 May 2026 02:16:40 +0000 ROA not before: Sun 03 May 2026 02:11:40 +0000 ROA not after: Sun 02 May 2027 02:16:40 +0000 asID: 140423 IP address blocks: 2406:20c0:6000::/35 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.crl rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a7:f1:98:21:77:22:03:43:4b:ce:9b:1b:31:d7:82:2f:88:7b:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73 Validity Not Before: May 3 02:11:40 2026 GMT Not After : May 2 02:16:40 2027 GMT Subject: CN=C279348F8DAE1A438D5E770514A9EED1A61294A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:85:8d:b6:ba:9d:7e:f7:77:c4:d7:01:1e:85: 7d:ac:4d:3e:a4:f2:fb:90:4c:eb:04:6b:e1:bd:ce: a5:bf:2d:ec:2f:f1:45:89:d6:53:0d:50:2d:85:79: f4:f6:1b:3c:d4:0d:d2:7a:cb:a4:6e:70:ee:c7:8b: f9:18:4d:5e:b5:0e:8b:b1:c7:84:2c:75:f7:72:8e: b3:92:a7:00:8f:7d:e4:98:e0:2b:50:02:61:04:0e: bd:6f:60:d2:2f:3d:f9:8c:25:e8:da:2c:9f:2e:47: 3d:1d:a6:02:0d:4e:f8:60:4d:d5:63:57:cc:c9:a9: 83:6e:fa:a6:0c:dd:88:b1:2f:4b:7e:c4:79:6c:72: 2a:87:fd:43:aa:52:40:48:49:36:9c:33:d1:5b:1a: 96:cd:e8:d2:54:a2:de:9b:44:5d:0f:75:5d:77:bc: 32:54:f7:94:89:98:fb:e1:dc:d1:c5:4d:ff:51:48: 20:bc:49:5c:33:90:31:2b:10:b6:33:f8:a3:d3:9b: 1a:63:0a:f7:10:82:83:53:21:7f:81:6d:29:d8:87: 7a:d4:df:4a:0b:f0:10:e4:e0:80:da:b9:5d:77:ef: c7:db:20:bc:e1:08:bd:23:79:2f:e6:5f:9e:97:58: 62:de:b3:37:97:ea:f7:ac:11:fd:7f:cb:bf:f4:96: 2e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:79:34:8F:8D:AE:1A:43:8D:5E:77:05:14:A9:EE:D1:A6:12:94:A3 X509v3 Authority Key Identifier: keyid:5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a363030303a3a2f33352d3438203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:20c0:6000::/35 Signature Algorithm: sha256WithRSAEncryption bc:b7:24:cd:b0:34:a0:73:6f:0d:0e:d2:02:6a:e2:26:f9:63: a0:24:a9:aa:a6:47:0c:76:f5:23:4d:b5:3c:04:5d:e3:8c:d5: 37:f2:e2:10:5c:2c:a7:50:bf:3e:57:16:b8:e6:c3:51:7d:3a: 16:5e:b3:15:5e:96:45:89:79:06:0f:7f:a5:19:87:37:10:1a: a6:b2:74:df:46:a5:c6:92:73:43:0f:fc:f5:9f:91:0d:40:f8: fc:6d:fd:d8:bd:46:79:fd:90:14:65:9b:7d:63:eb:45:bf:cb: 9d:12:79:32:87:86:43:4a:fd:94:07:a9:bf:c1:78:2b:b0:79: 96:a2:74:51:4a:07:51:1e:38:3e:14:f9:fd:81:66:8b:04:ff: b5:57:72:55:7a:13:88:a4:db:d3:0f:58:c7:bc:f4:b0:5e:ca: c7:6f:94:74:45:e2:b4:28:b5:d1:a8:5a:a5:e6:88:e3:8f:bd: 56:86:ca:be:a0:43:9b:54:4a:43:4e:83:28:70:3b:44:4e:ea: 71:c2:43:d4:39:a7:90:9f:79:c0:a8:9a:9d:4b:13:0f:51:2d: b7:82:6a:66:9c:8c:e4:f9:f0:6d:8b:38:42:b2:0e:c3:76:22: 3c:c9:67:6c:93:3c:c2:2a:e5:e0:51:1f:50:d2:51:1a:5c:a4: f8:de:f7:80 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUQqfxmCF3IgNDS86bGzHXgi+IexowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQyNzJFRjFGRjVGOTk2MDNERkMyQTJCOUM1QUIxQThC RjMyMkU3MzAeFw0yNjA1MDMwMjExNDBaFw0yNzA1MDIwMjE2NDBaMDMxMTAvBgNV BAMTKEMyNzkzNDhGOERBRTFBNDM4RDVFNzcwNTE0QTlFRUQxQTYxMjk0QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLhY22up1+93fE1wEehX2sTT6k 8vuQTOsEa+G9zqW/Lewv8UWJ1lMNUC2FefT2GzzUDdJ6y6RucO7Hi/kYTV61Doux x4QsdfdyjrOSpwCPfeSY4CtQAmEEDr1vYNIvPfmMJejaLJ8uRz0dpgINTvhgTdVj V8zJqYNu+qYM3YixL0t+xHlsciqH/UOqUkBISTacM9FbGpbN6NJUot6bRF0PdV13 vDJU95SJmPvh3NHFTf9RSCC8SVwzkDErELYz+KPTmxpjCvcQgoNTIX+BbSnYh3rU 30oL8BDk4IDauV1378fbILzhCL0jeS/mX56XWGLeszeX6vesEf1/y7/0li5pAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUwnk0j42uGkONXncFFKnu0aYSlKMwHwYDVR0j BBgwFoAUXScu8f9fmWA9/CornFqxqL8yLnMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTlhMDAzNjktNjg0MC00YTk1LTg5YjEtYTQ4NTE4Zjk4ZGM3LzAvNUQyNzJFRjFG RjVGOTk2MDNERkMyQTJCOUM1QUIxQThCRjMyMkU3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDI3MkVGMUZGNUY5OTYwM0RGQzJBMkI5QzVBQjFBOEJGMzIy RTczLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04 OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhMzYzMDMwMzAz YTNhMmYzMzM1MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUk BiDAYDANBgkqhkiG9w0BAQsFAAOCAQEAvLckzbA0oHNvDQ7SAmriJvljoCSpqqZH DHb1I021PARd44zVN/LiEFwsp1C/PlcWuObDUX06Fl6zFV6WRYl5Bg9/pRmHNxAa prJ030alxpJzQw/89Z+RDUD4/G392L1Gef2QFGWbfWPrRb/LnRJ5MoeGQ0r9lAep v8F4K7B5lqJ0UUoHUR44PhT5/YFmiwT/tVdyVXoTiKTb0w9Yx7z0sF7Kx2+UdEXi tCi10ahapeaI44+9VobKvqBDm1RKQ06DKHA7RE7qccJD1DmnkJ95wKianUsTD1Et t4JqZpyM5PnwbYs4QrIOw3YiPMlnbJM8wirl4FEfUNJRGlyk+N73gA== -----END CERTIFICATE-----Generated at Wed May 13 13:41:26 2026 by rpki-client