$ rpki-client -vvf rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3a2f33352d3438203d3e20313430343233.roa File: 323430363a323063303a3a2f33352d3438203d3e20313430343233.roa (raw, json) Hash identifier: hhlA0VGzX08tN+OSH4fN4a5In9cg0MfTRLsflSn5raI= Subject key identifier: 04:9A:DB:81:E5:42:A6:47:FA:EB:E0:37:29:D6:11:5B:88:E6:A3:45 Certificate issuer: /CN=5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73 Certificate serial: 05452D180854EA7AB56ADB44452D4ECF7CF567BC Authority key identifier: 5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3a2f33352d3438203d3e20313430343233.roa Signing time: Sun 03 May 2026 02:16:37 +0000 ROA not before: Sun 03 May 2026 02:11:37 +0000 ROA not after: Sun 02 May 2027 02:16:37 +0000 asID: 140423 IP address blocks: 2406:20c0::/35 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.crl rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:45:2d:18:08:54:ea:7a:b5:6a:db:44:45:2d:4e:cf:7c:f5:67:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73 Validity Not Before: May 3 02:11:37 2026 GMT Not After : May 2 02:16:37 2027 GMT Subject: CN=049ADB81E542A647FAEBE03729D6115B88E6A345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:99:cf:e8:d2:cc:1c:fa:26:85:29:55:73:43: 03:99:ba:01:64:65:ce:a9:74:a4:f7:e3:0c:a1:be: c8:12:b7:3d:62:59:b4:38:31:2e:8b:ac:ea:d0:27: 71:63:08:a8:2c:85:01:e4:83:c4:61:f1:11:b9:22: bc:bf:8c:3b:e0:86:10:4a:6f:90:34:a2:c9:db:c9: de:08:13:1e:bb:12:7f:97:1f:09:0d:47:8b:dc:ef: 5a:d3:98:21:06:d1:d2:e6:98:33:91:08:26:58:90: fb:e4:0e:99:f3:fe:b4:7c:d2:cf:a4:c7:89:07:03: 53:ec:19:68:22:4a:3e:55:e7:58:12:6d:c9:d2:3e: 1b:a6:65:5e:e5:52:1f:4c:ef:53:04:1f:ff:bf:05: 0d:67:3a:36:d1:69:02:de:ef:ac:13:37:b0:f1:96: 04:07:bb:18:b5:ce:47:02:61:12:17:57:cc:51:56: d7:52:b2:cf:60:a1:4c:7f:cb:ca:de:c9:1c:c0:7c: a8:17:c3:56:e7:ae:a0:39:23:5e:00:27:fa:e1:3e: 68:df:8d:3e:20:b9:2c:92:2b:d6:40:47:d4:95:37: f0:f9:14:c1:3a:04:bd:46:aa:13:2c:24:81:04:db: 34:09:b2:1a:8a:82:30:5e:76:97:c3:95:3d:fa:e1: ef:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:9A:DB:81:E5:42:A6:47:FA:EB:E0:37:29:D6:11:5B:88:E6:A3:45 X509v3 Authority Key Identifier: keyid:5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3a2f33352d3438203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:20c0::/35 Signature Algorithm: sha256WithRSAEncryption 75:12:11:b4:26:23:f0:12:2c:0d:be:94:5d:d9:30:5d:a0:38: 86:c2:64:00:ac:57:c6:b8:46:0f:60:42:f5:bb:e5:a3:4f:d1: 03:31:43:93:00:b7:bc:eb:93:2b:d9:bc:8e:c1:81:9a:54:8a: c8:32:43:8e:a4:1b:22:6f:0d:89:99:5a:24:67:2e:83:98:d0: ab:fb:b4:3b:54:fe:2d:de:52:91:4a:57:b3:f8:15:9b:3c:b6: f9:97:5e:b2:10:26:20:08:d3:8a:3f:ed:8a:b8:0c:9f:c4:49: f7:a4:2e:5e:45:ca:1f:5f:e3:25:03:f6:eb:4a:c5:eb:99:4c: 9d:4a:cc:af:f3:bb:50:04:15:68:f6:eb:bf:06:22:f6:11:e5: 1f:64:82:ba:31:18:21:20:d6:df:94:6f:5e:83:e3:b4:6f:46: 3c:ae:9b:2d:44:64:95:6f:07:f6:4e:75:cf:96:b5:5c:e8:23: 67:84:14:e1:f7:6d:5c:5d:ec:d2:7e:48:c6:a8:a3:11:51:5b: 6e:f4:26:26:59:92:cb:0f:df:1a:61:29:3a:07:0b:3e:e0:07: 34:aa:d4:02:56:9d:56:dc:65:fd:03:33:43:32:94:d3:7b:ac: a1:62:e5:89:7e:91:8d:ee:04:d2:a5:2b:48:cd:38:c4:c2:fe: bd:bd:d1:3f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUBUUtGAhU6nq1attERS1Oz3z1Z7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQyNzJFRjFGRjVGOTk2MDNERkMyQTJCOUM1QUIxQThC RjMyMkU3MzAeFw0yNjA1MDMwMjExMzdaFw0yNzA1MDIwMjE2MzdaMDMxMTAvBgNV BAMTKDA0OUFEQjgxRTU0MkE2NDdGQUVCRTAzNzI5RDYxMTVCODhFNkEzNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDymc/o0swc+iaFKVVzQwOZugFk Zc6pdKT34wyhvsgStz1iWbQ4MS6LrOrQJ3FjCKgshQHkg8Rh8RG5Iry/jDvghhBK b5A0osnbyd4IEx67En+XHwkNR4vc71rTmCEG0dLmmDORCCZYkPvkDpnz/rR80s+k x4kHA1PsGWgiSj5V51gSbcnSPhumZV7lUh9M71MEH/+/BQ1nOjbRaQLe76wTN7Dx lgQHuxi1zkcCYRIXV8xRVtdSss9goUx/y8reyRzAfKgXw1bnrqA5I14AJ/rhPmjf jT4guSySK9ZAR9SVN/D5FME6BL1GqhMsJIEE2zQJshqKgjBedpfDlT364e8LAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUBJrbgeVCpkf66+A3KdYRW4jmo0UwHwYDVR0j BBgwFoAUXScu8f9fmWA9/CornFqxqL8yLnMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTlhMDAzNjktNjg0MC00YTk1LTg5YjEtYTQ4NTE4Zjk4ZGM3LzAvNUQyNzJFRjFG RjVGOTk2MDNERkMyQTJCOUM1QUIxQThCRjMyMkU3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDI3MkVGMUZGNUY5OTYwM0RGQzJBMkI5QzVBQjFBOEJGMzIy RTczLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04 OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhM2EyZjMzMzUy ZDM0MzgyMDNkM2UyMDMxMzQzMDM0MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSQGIMAAMA0GCSqG SIb3DQEBCwUAA4IBAQB1EhG0JiPwEiwNvpRd2TBdoDiGwmQArFfGuEYPYEL1u+Wj T9EDMUOTALe865Mr2byOwYGaVIrIMkOOpBsibw2JmVokZy6DmNCr+7Q7VP4t3lKR Slez+BWbPLb5l16yECYgCNOKP+2KuAyfxEn3pC5eRcofX+MlA/brSsXrmUydSsyv 87tQBBVo9uu/BiL2EeUfZIK6MRghINbflG9eg+O0b0Y8rpstRGSVbwf2TnXPlrVc 6CNnhBTh921cXezSfkjGqKMRUVtu9CYmWZLLD98aYSk6Bws+4Ac0qtQCVp1W3GX9 AzNDMpTTe6yhYuWJfpGN7gTSpStIzTjEwv69vdE/ -----END CERTIFICATE-----Generated at Wed May 13 12:18:53 2026 by rpki-client