$ rpki-client -vvf rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a393030303a3a2f33362d3438203d3e20313430343233.roa File: 323430363a323063303a393030303a3a2f33362d3438203d3e20313430343233.roa (raw, json) Hash identifier: eweK/QOwAEAZyYt+0HU6CQISu1I/cMb98HQH+ub1M+g= Subject key identifier: 29:55:A1:57:28:5B:12:4A:7D:54:48:A1:C5:B0:70:58:1E:40:8D:49 Certificate issuer: /CN=5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73 Certificate serial: 0F51E72CC4997CD886C548D4BAF6464441917BB6 Authority key identifier: 5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a393030303a3a2f33362d3438203d3e20313430343233.roa Signing time: Sun 03 May 2026 02:16:38 +0000 ROA not before: Sun 03 May 2026 02:11:38 +0000 ROA not after: Sun 02 May 2027 02:16:38 +0000 asID: 140423 IP address blocks: 2406:20c0:9000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.crl rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:51:e7:2c:c4:99:7c:d8:86:c5:48:d4:ba:f6:46:44:41:91:7b:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73 Validity Not Before: May 3 02:11:38 2026 GMT Not After : May 2 02:16:38 2027 GMT Subject: CN=2955A157285B124A7D5448A1C5B070581E408D49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:e0:fa:09:b8:f5:18:9e:43:50:d2:ef:5f:4d: 60:a7:1c:f4:8d:c5:e4:7d:a0:35:d1:40:90:b6:1f: 61:29:50:8b:25:9d:1b:df:32:10:5d:38:ed:ff:30: 7f:62:b3:40:75:66:e4:99:12:dd:41:49:24:0c:e4: 67:6b:98:fa:73:98:1c:f0:09:9d:bf:96:bb:cd:d7: a6:ab:25:4b:e1:4e:e2:15:ef:db:d5:69:26:0b:8f: 41:13:46:a4:72:a0:7c:b1:43:7e:fb:56:6a:2f:99: 94:9c:b5:02:79:e6:83:8a:19:e0:02:18:42:0a:7e: 98:08:5c:b6:51:67:fc:7a:ba:f5:24:65:7c:ea:d2: 8e:9c:4a:0d:87:85:5e:15:c4:78:86:34:d8:d7:ab: 5e:2a:21:07:ba:e3:dd:01:eb:4a:cf:ef:34:c0:88: ef:e4:18:8f:74:ba:a0:f5:ec:44:fe:7d:28:cf:dd: 4b:ae:77:00:af:8c:d2:64:b9:d1:4e:08:80:82:65: 01:98:af:2b:88:3b:b9:67:27:3c:64:51:79:14:19: 25:cb:ce:42:2a:f1:da:6e:50:16:1a:c5:43:6e:83: 22:12:d1:f4:5a:a1:73:30:ae:f3:5a:45:e2:09:b3: 24:f6:43:33:4c:0e:50:27:b6:a2:c1:0a:1e:34:1a: 81:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:55:A1:57:28:5B:12:4A:7D:54:48:A1:C5:B0:70:58:1E:40:8D:49 X509v3 Authority Key Identifier: keyid:5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a393030303a3a2f33362d3438203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:20c0:9000::/36 Signature Algorithm: sha256WithRSAEncryption c1:e3:c8:66:91:ad:b1:4b:a5:ba:e6:22:ef:f5:20:a3:5c:2d: 98:a7:7d:82:f0:a9:bb:bb:97:9d:0d:fc:a0:db:e2:55:53:13: 2f:86:ad:5d:e6:2d:b7:b7:52:f0:03:29:dd:2e:e8:d3:68:b5: 8e:ba:a6:7e:61:8f:b0:64:8e:90:b9:1b:f4:81:80:9b:07:2a: 12:fc:88:f9:2c:ad:f6:c9:b3:ef:05:8a:88:cf:9b:fb:6d:24: f0:f0:c5:7c:cf:08:6f:5b:d1:9f:96:a4:4d:3b:eb:ab:79:6c: 93:0c:2e:43:bb:c4:1f:af:88:c6:75:9d:c6:cd:3d:58:0b:8d: b0:70:df:ab:e1:c3:78:1a:73:34:a5:14:58:9c:ae:a2:31:98: 26:d3:b6:49:5f:d1:17:46:57:29:8a:5d:12:60:eb:a6:7a:35: 10:1b:fc:a8:ff:57:87:f8:b1:7e:a5:94:cd:c6:4f:c7:ac:62: a7:4c:f4:05:2d:d9:e4:4a:9b:df:65:26:c9:c4:13:08:9e:23: fc:49:19:71:be:f5:63:6a:2f:46:77:a8:52:bb:8d:27:1c:0b: c0:58:bb:2c:39:db:dc:56:b7:ce:75:16:16:a3:14:b5:09:ec: b5:2d:14:b2:92:27:2f:06:14:2d:82:e5:ad:2b:52:de:ca:0f: ee:e8:e5:8b -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUD1HnLMSZfNiGxUjUuvZGREGRe7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQyNzJFRjFGRjVGOTk2MDNERkMyQTJCOUM1QUIxQThC RjMyMkU3MzAeFw0yNjA1MDMwMjExMzhaFw0yNzA1MDIwMjE2MzhaMDMxMTAvBgNV BAMTKDI5NTVBMTU3Mjg1QjEyNEE3RDU0NDhBMUM1QjA3MDU4MUU0MDhENDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD54PoJuPUYnkNQ0u9fTWCnHPSN xeR9oDXRQJC2H2EpUIslnRvfMhBdOO3/MH9is0B1ZuSZEt1BSSQM5GdrmPpzmBzw CZ2/lrvN16arJUvhTuIV79vVaSYLj0ETRqRyoHyxQ377VmovmZSctQJ55oOKGeAC GEIKfpgIXLZRZ/x6uvUkZXzq0o6cSg2HhV4VxHiGNNjXq14qIQe6490B60rP7zTA iO/kGI90uqD17ET+fSjP3UuudwCvjNJkudFOCICCZQGYryuIO7lnJzxkUXkUGSXL zkIq8dpuUBYaxUNugyIS0fRaoXMwrvNaReIJsyT2QzNMDlAntqLBCh40GoFHAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUKVWhVyhbEkp9VEihxbBwWB5AjUkwHwYDVR0j BBgwFoAUXScu8f9fmWA9/CornFqxqL8yLnMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTlhMDAzNjktNjg0MC00YTk1LTg5YjEtYTQ4NTE4Zjk4ZGM3LzAvNUQyNzJFRjFG RjVGOTk2MDNERkMyQTJCOUM1QUIxQThCRjMyMkU3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDI3MkVGMUZGNUY5OTYwM0RGQzJBMkI5QzVBQjFBOEJGMzIy RTczLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04 OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhMzkzMDMwMzAz YTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BiDAkDANBgkqhkiG9w0BAQsFAAOCAQEAwePIZpGtsUuluuYi7/Ugo1wtmKd9gvCp u7uXnQ38oNviVVMTL4atXeYtt7dS8AMp3S7o02i1jrqmfmGPsGSOkLkb9IGAmwcq EvyI+Syt9smz7wWKiM+b+20k8PDFfM8Ib1vRn5akTTvrq3lskwwuQ7vEH6+IxnWd xs09WAuNsHDfq+HDeBpzNKUUWJyuojGYJtO2SV/RF0ZXKYpdEmDrpno1EBv8qP9X h/ixfqWUzcZPx6xip0z0BS3Z5Eqb32UmycQTCJ4j/EkZcb71Y2ovRneoUruNJxwL wFi7LDnb3Fa3znUWFqMUtQnstS0UspInLwYULYLlrStS3soP7ujliw== -----END CERTIFICATE-----Generated at Wed May 13 15:23:47 2026 by rpki-client