$ rpki-client -vvf rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3a2f33332d3438203d3e20313430343233.roa File: 323430363a323063303a3a2f33332d3438203d3e20313430343233.roa (raw, json) Hash identifier: Q0bQnkdNnHnsxO+GXiI1DfAStNISNi67o3iXE1u81M4= Subject key identifier: 24:DB:7E:20:D6:D7:EF:BE:09:00:43:F2:9E:3B:91:99:F8:54:B8:9B Certificate issuer: /CN=5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73 Certificate serial: 06166B22085891CB391F7CF53D41128F2C756B1D Authority key identifier: 5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3a2f33332d3438203d3e20313430343233.roa Signing time: Sun 03 May 2026 02:16:42 +0000 ROA not before: Sun 03 May 2026 02:11:42 +0000 ROA not after: Sun 02 May 2027 02:16:42 +0000 asID: 140423 IP address blocks: 2406:20c0::/33 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.crl rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:16:6b:22:08:58:91:cb:39:1f:7c:f5:3d:41:12:8f:2c:75:6b:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73 Validity Not Before: May 3 02:11:42 2026 GMT Not After : May 2 02:16:42 2027 GMT Subject: CN=24DB7E20D6D7EFBE090043F29E3B9199F854B89B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d7:c4:51:6b:16:17:1d:fb:9c:0f:60:88:32: 23:c6:d1:56:fd:f3:cc:84:a6:ab:5e:94:6e:eb:6d: 33:c9:af:38:cd:7c:54:3b:b4:c7:a0:26:c5:45:ba: fb:94:fc:b7:5b:6f:67:8b:51:ca:bc:6b:83:ec:75: ef:92:0d:75:8a:09:01:f0:ab:68:e5:78:80:12:3e: 1e:8b:6c:ba:df:7d:50:ba:97:5d:bb:91:35:eb:b1: 07:0c:aa:73:d1:5f:1e:a2:29:50:6e:bc:0b:8e:ca: e9:da:ba:6d:fa:c2:1d:19:39:49:14:45:d6:02:62: c4:36:e7:9f:6d:ea:93:2f:f9:1b:de:34:b2:b4:fa: 86:ac:d9:8f:bd:4c:7b:43:76:98:f6:2e:a0:f6:76: f2:57:b9:60:7e:2f:89:e8:f0:86:7c:92:ab:32:28: d8:c1:dc:ef:27:45:e3:26:74:06:8a:80:ef:ec:77: 0f:37:9b:0a:9d:38:9c:c0:70:8e:50:8e:d4:a8:70: aa:4e:ef:5c:ed:d1:7a:5f:50:c6:0a:86:72:b5:cc: 39:75:fa:d9:e7:ac:c0:a6:3b:0a:1f:18:c7:16:7c: 67:e5:ed:37:a7:0d:69:28:d5:bf:d8:4a:e0:07:6d: 59:cf:5b:c8:52:64:7a:b9:1f:e9:48:21:62:1d:c8: df:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:DB:7E:20:D6:D7:EF:BE:09:00:43:F2:9E:3B:91:99:F8:54:B8:9B X509v3 Authority Key Identifier: keyid:5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3a2f33332d3438203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:20c0::/33 Signature Algorithm: sha256WithRSAEncryption 9d:3c:ba:2d:93:42:fb:d3:0a:7e:0f:c2:54:f9:f5:9c:e4:7c: 10:49:a0:f0:cb:c9:10:94:a9:7d:a0:e5:a9:b2:1a:3f:67:9e: 35:9d:1d:f4:21:4a:c2:d5:0c:cf:ef:b2:10:95:cf:b6:d5:08: fc:b8:3e:d2:6d:e5:84:78:9a:8f:c4:ee:03:99:1a:0e:2f:84: 89:81:ce:c4:d8:7c:75:7d:29:5e:48:54:9c:35:9f:c7:31:31: 52:04:38:58:43:70:fd:b9:50:7b:74:dc:f6:90:fa:13:ce:9a: 82:3a:87:e1:69:09:5f:0a:b8:98:34:88:33:ce:3c:db:fa:71: bf:7c:96:95:bd:5c:91:54:d7:d0:32:15:ec:f1:6d:f8:f4:b8: 41:46:e3:0d:6d:6b:e6:37:3a:d6:42:7b:f1:a4:eb:99:7f:3e: 70:72:58:4c:6b:6f:79:3a:6f:ff:f6:eb:41:4a:c2:18:e3:4a: 8a:f2:d5:59:b3:0d:61:66:64:90:c7:1b:7b:0a:e1:1f:21:ad: 0e:64:26:ea:e1:b7:c6:47:8a:7e:1b:d5:90:4e:01:7d:fc:62: 84:3b:90:84:c4:4a:6e:0f:58:84:ef:e4:27:08:5c:3a:d7:bd: b3:d4:e5:ee:30:27:bc:51:b6:41:1a:34:a2:97:36:82:a4:62: 63:2d:7e:33 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUBhZrIghYkcs5H3z1PUESjyx1ax0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQyNzJFRjFGRjVGOTk2MDNERkMyQTJCOUM1QUIxQThC RjMyMkU3MzAeFw0yNjA1MDMwMjExNDJaFw0yNzA1MDIwMjE2NDJaMDMxMTAvBgNV BAMTKDI0REI3RTIwRDZEN0VGQkUwOTAwNDNGMjlFM0I5MTk5Rjg1NEI4OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu18RRaxYXHfucD2CIMiPG0Vb9 88yEpqtelG7rbTPJrzjNfFQ7tMegJsVFuvuU/Ldbb2eLUcq8a4Psde+SDXWKCQHw q2jleIASPh6LbLrffVC6l127kTXrsQcMqnPRXx6iKVBuvAuOyunaum36wh0ZOUkU RdYCYsQ2559t6pMv+RveNLK0+oas2Y+9THtDdpj2LqD2dvJXuWB+L4no8IZ8kqsy KNjB3O8nReMmdAaKgO/sdw83mwqdOJzAcI5QjtSocKpO71zt0XpfUMYKhnK1zDl1 +tnnrMCmOwofGMcWfGfl7TenDWko1b/YSuAHbVnPW8hSZHq5H+lIIWIdyN93AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUJNt+INbX774JAEPynjuRmfhUuJswHwYDVR0j BBgwFoAUXScu8f9fmWA9/CornFqxqL8yLnMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTlhMDAzNjktNjg0MC00YTk1LTg5YjEtYTQ4NTE4Zjk4ZGM3LzAvNUQyNzJFRjFG RjVGOTk2MDNERkMyQTJCOUM1QUIxQThCRjMyMkU3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDI3MkVGMUZGNUY5OTYwM0RGQzJBMkI5QzVBQjFBOEJGMzIy RTczLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04 OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhM2EyZjMzMzMy ZDM0MzgyMDNkM2UyMDMxMzQzMDM0MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGByQGIMAAMA0GCSqG SIb3DQEBCwUAA4IBAQCdPLotk0L70wp+D8JU+fWc5HwQSaDwy8kQlKl9oOWpsho/ Z541nR30IUrC1QzP77IQlc+21Qj8uD7SbeWEeJqPxO4DmRoOL4SJgc7E2Hx1fSle SFScNZ/HMTFSBDhYQ3D9uVB7dNz2kPoTzpqCOofhaQlfCriYNIgzzjzb+nG/fJaV vVyRVNfQMhXs8W349LhBRuMNbWvmNzrWQnvxpOuZfz5wclhMa295Om//9utBSsIY 40qK8tVZsw1hZmSQxxt7CuEfIa0OZCbq4bfGR4p+G9WQTgF9/GKEO5CExEpuD1iE 7+QnCFw6172z1OXuMCe8UbZBGjSilzaCpGJjLX4z -----END CERTIFICATE-----Generated at Wed May 13 12:51:34 2026 by rpki-client