$ rpki-client -vvf rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a613030303a3a2f33352d3438203d3e20313430343233.roa File: 323430363a323063303a613030303a3a2f33352d3438203d3e20313430343233.roa (raw, json) Hash identifier: V084rJqfvZtG41FSKmZ9pBoqwj5IFxfsdNqBfJnQAhw= Subject key identifier: 81:C9:3E:BE:81:C3:19:C1:32:F5:CE:94:2F:65:D1:44:D2:85:73:B5 Certificate issuer: /CN=5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73 Certificate serial: 712624BAD312453E1CA868CA09FBF6F318111438 Authority key identifier: 5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a613030303a3a2f33352d3438203d3e20313430343233.roa Signing time: Sun 03 May 2026 02:16:47 +0000 ROA not before: Sun 03 May 2026 02:11:47 +0000 ROA not after: Sun 02 May 2027 02:16:47 +0000 asID: 140423 IP address blocks: 2406:20c0:a000::/35 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.crl rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:26:24:ba:d3:12:45:3e:1c:a8:68:ca:09:fb:f6:f3:18:11:14:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73 Validity Not Before: May 3 02:11:47 2026 GMT Not After : May 2 02:16:47 2027 GMT Subject: CN=81C93EBE81C319C132F5CE942F65D144D28573B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d1:00:1f:17:88:41:5f:2f:82:7e:8e:1c:a6: c8:88:5b:2f:7c:7e:89:99:76:20:5c:6f:fe:0a:25: ab:82:ac:bc:61:a1:93:92:32:44:10:12:93:74:68: 78:d2:86:d0:7f:1c:0d:5b:58:3f:48:5d:b4:64:b8: 54:9f:fa:c6:9f:fe:af:76:cd:8e:0f:6e:20:cd:da: 64:54:94:09:53:0e:db:57:d5:7b:29:15:e1:d5:c8: 3e:e1:c8:52:af:5f:b9:5e:1d:06:49:b9:84:13:08: c5:be:94:13:b8:c0:b6:fa:20:1e:4a:ad:b7:98:61: bd:6a:c1:1a:de:bf:7d:49:36:6c:0f:f9:82:99:1c: 95:22:8a:a4:d9:c0:a0:a8:05:ff:b8:e8:fb:c9:97: 85:9f:b6:29:e3:f9:a1:58:07:6a:78:ca:db:59:3d: 50:bd:0b:04:e4:82:fa:22:65:82:b3:fd:2a:90:de: fa:2e:b3:cd:99:7d:d0:17:8a:92:45:12:e5:9c:ea: f5:e7:c9:1e:94:23:7e:24:fc:a9:95:39:a8:25:ee: 8d:c7:c0:53:96:73:19:9c:1a:40:68:77:31:0b:dd: 5a:58:59:84:41:f2:3f:8f:7c:21:1c:b3:9a:1d:a5: 0a:d7:5d:12:4a:0c:03:70:c5:ae:ee:2e:74:ff:e6: 44:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C9:3E:BE:81:C3:19:C1:32:F5:CE:94:2F:65:D1:44:D2:85:73:B5 X509v3 Authority Key Identifier: keyid:5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a613030303a3a2f33352d3438203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:20c0:a000::/35 Signature Algorithm: sha256WithRSAEncryption 91:e2:53:e7:3a:00:bf:73:d8:43:34:eb:63:dd:e3:96:6f:d3: 22:a3:e8:2e:8b:15:2e:1f:42:0e:1d:9c:96:bf:7e:b1:30:91: 27:e1:36:30:f4:30:9e:87:b5:64:15:c0:b1:5d:7a:a8:78:78: 29:29:88:d8:6d:04:88:46:e6:4e:fe:ae:2b:c0:74:2d:24:85: aa:72:dc:fd:be:34:0a:64:fa:06:d3:e1:6e:2c:99:0d:f2:d0: ad:66:59:82:9a:aa:b7:8b:00:5a:43:bc:29:5c:4e:21:72:3a: 07:eb:aa:2c:a6:ac:0e:e2:dc:c8:e9:23:13:b1:6e:bb:57:27: 9d:e3:19:9e:9c:e9:2c:7a:ba:0e:35:ab:dc:e4:bc:a7:6f:d5: 19:e6:8c:af:80:c8:c9:06:6c:48:95:3e:08:aa:18:5c:1e:20: 8a:d0:14:15:70:c9:80:fe:e1:42:6e:32:db:cd:59:a0:4e:61: b2:50:67:af:4e:43:bc:27:16:89:b8:34:31:71:ef:f6:34:c0: 6f:82:f1:d3:de:2a:a3:c0:80:d3:e5:98:0d:f7:cb:26:c6:54: 85:ed:f5:80:70:61:d7:21:91:46:96:d7:3c:43:05:f5:7f:3f: 6a:0b:d5:98:8e:d9:9f:eb:78:bc:79:3e:5a:9e:54:1b:06:83: 12:d4:bd:a1 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUcSYkutMSRT4cqGjKCfv28xgRFDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQyNzJFRjFGRjVGOTk2MDNERkMyQTJCOUM1QUIxQThC RjMyMkU3MzAeFw0yNjA1MDMwMjExNDdaFw0yNzA1MDIwMjE2NDdaMDMxMTAvBgNV BAMTKDgxQzkzRUJFODFDMzE5QzEzMkY1Q0U5NDJGNjVEMTQ0RDI4NTczQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL0QAfF4hBXy+Cfo4cpsiIWy98 fomZdiBcb/4KJauCrLxhoZOSMkQQEpN0aHjShtB/HA1bWD9IXbRkuFSf+saf/q92 zY4PbiDN2mRUlAlTDttX1XspFeHVyD7hyFKvX7leHQZJuYQTCMW+lBO4wLb6IB5K rbeYYb1qwRrev31JNmwP+YKZHJUiiqTZwKCoBf+46PvJl4Wftinj+aFYB2p4yttZ PVC9CwTkgvoiZYKz/SqQ3vous82ZfdAXipJFEuWc6vXnyR6UI34k/KmVOagl7o3H wFOWcxmcGkBodzEL3VpYWYRB8j+PfCEcs5odpQrXXRJKDANwxa7uLnT/5kTPAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUgck+voHDGcEy9c6UL2XRRNKFc7UwHwYDVR0j BBgwFoAUXScu8f9fmWA9/CornFqxqL8yLnMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTlhMDAzNjktNjg0MC00YTk1LTg5YjEtYTQ4NTE4Zjk4ZGM3LzAvNUQyNzJFRjFG RjVGOTk2MDNERkMyQTJCOUM1QUIxQThCRjMyMkU3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDI3MkVGMUZGNUY5OTYwM0RGQzJBMkI5QzVBQjFBOEJGMzIy RTczLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04 OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhNjEzMDMwMzAz YTNhMmYzMzM1MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUk BiDAoDANBgkqhkiG9w0BAQsFAAOCAQEAkeJT5zoAv3PYQzTrY93jlm/TIqPoLosV Lh9CDh2clr9+sTCRJ+E2MPQwnoe1ZBXAsV16qHh4KSmI2G0EiEbmTv6uK8B0LSSF qnLc/b40CmT6BtPhbiyZDfLQrWZZgpqqt4sAWkO8KVxOIXI6B+uqLKasDuLcyOkj E7Fuu1cnneMZnpzpLHq6DjWr3OS8p2/VGeaMr4DIyQZsSJU+CKoYXB4gitAUFXDJ gP7hQm4y281ZoE5hslBnr05DvCcWibg0MXHv9jTAb4Lx094qo8CA0+WYDffLJsZU he31gHBh1yGRRpbXPEMF9X8/agvVmI7Zn+t4vHk+Wp5UGwaDEtS9oQ== -----END CERTIFICATE-----Generated at Wed May 13 14:57:59 2026 by rpki-client