$ rpki-client -vvf rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a623030303a3a2f33362d3438203d3e20313430343233.roa File: 323430363a323063303a623030303a3a2f33362d3438203d3e20313430343233.roa (raw, json) Hash identifier: Qu0WeBsayWlL0KhGEWpL1G9oYoQmkPpX0w0R35hatac= Subject key identifier: 95:34:37:BE:A3:4F:9B:21:4D:DD:EE:EE:CB:F4:68:58:BF:74:FA:8A Certificate issuer: /CN=5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73 Certificate serial: 0791225AFDBC01E838C15384B95ACAF3EDDAAA96 Authority key identifier: 5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a623030303a3a2f33362d3438203d3e20313430343233.roa Signing time: Sun 03 May 2026 02:16:41 +0000 ROA not before: Sun 03 May 2026 02:11:41 +0000 ROA not after: Sun 02 May 2027 02:16:41 +0000 asID: 140423 IP address blocks: 2406:20c0:b000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.crl rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:91:22:5a:fd:bc:01:e8:38:c1:53:84:b9:5a:ca:f3:ed:da:aa:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73 Validity Not Before: May 3 02:11:41 2026 GMT Not After : May 2 02:16:41 2027 GMT Subject: CN=953437BEA34F9B214DDDEEEECBF46858BF74FA8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:72:ca:9b:00:a9:70:c8:1a:60:42:54:a6:78: 7a:fb:e5:ad:80:fc:15:8f:40:74:65:78:2a:fa:aa: ea:09:d8:fa:71:15:a7:81:a8:0c:bf:4d:80:0a:38: e2:fa:20:7e:f2:d0:98:98:9f:84:ed:7b:67:cb:8c: a4:7d:e8:48:02:88:8e:7f:33:99:8c:2e:46:7c:19: a2:ee:e2:75:fc:3d:a3:1a:65:9a:ce:33:64:e2:92: 6d:95:f6:b6:ba:5f:13:d0:39:26:dd:73:22:cf:7b: 8a:73:00:08:a1:d3:12:70:60:ac:07:a6:cd:fb:eb: 56:40:fb:42:8f:6e:1f:d1:1c:1c:82:46:d7:18:7f: 4d:56:77:b0:41:81:af:8c:02:60:8f:52:ac:91:63: 3f:45:e3:84:70:bb:d5:ca:84:90:97:2e:7d:3d:6c: e1:aa:96:5d:98:c2:7c:0e:6b:5c:e1:94:3b:98:24: fe:ae:46:17:e4:a7:e4:b3:70:77:f1:30:87:9b:18: 85:f5:7e:7a:f9:72:98:c0:6b:22:ea:65:da:86:e9: 4e:37:66:e3:26:7b:1c:15:74:e3:63:c7:32:f0:7a: 99:5b:95:bc:79:f9:fa:34:97:eb:a7:d9:bc:b5:cd: d9:10:8a:51:7d:a6:5a:77:df:0c:97:33:3a:6e:18: 3f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:34:37:BE:A3:4F:9B:21:4D:DD:EE:EE:CB:F4:68:58:BF:74:FA:8A X509v3 Authority Key Identifier: keyid:5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a623030303a3a2f33362d3438203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:20c0:b000::/36 Signature Algorithm: sha256WithRSAEncryption 0f:cd:90:05:83:5a:bf:30:33:7b:96:60:2b:01:4a:ac:03:b8: a0:65:d4:7d:82:ba:30:01:58:8f:b9:4d:d4:08:1b:de:0d:e1: 04:7c:10:59:9d:fd:4f:86:21:40:3e:88:e2:0f:a3:d2:ae:4a: 53:73:7b:bb:08:1b:e1:ff:42:df:86:95:2b:e9:67:e9:a8:2f: 47:7a:17:b0:71:be:84:1b:36:15:17:4a:25:e1:48:66:77:3c: 8d:a2:ce:83:75:f2:df:11:aa:2b:93:2f:96:65:e0:8a:94:ee: d6:95:90:fd:2a:53:44:57:99:b0:92:ca:ef:c8:29:cc:06:68: f8:83:29:5c:b5:c4:9f:83:dc:e1:ab:3a:c7:f7:cb:46:43:cc: f4:2c:8d:3f:d3:4a:7b:ef:c2:76:0e:58:0e:4f:c8:40:d3:24: 59:0f:4e:0e:32:80:33:b8:4a:fe:f3:df:34:27:5c:a7:6b:21: 75:e0:02:4d:02:e7:99:d9:58:18:27:12:6b:d4:d9:10:67:35: 4e:db:0c:62:5c:0b:ce:b6:e8:60:2f:52:d7:21:b0:9a:7f:dd: c1:8f:72:ee:e3:b3:02:8a:5c:26:fd:20:49:45:40:37:18:62: 82:39:74:b4:a2:47:1e:28:5d:14:60:db:99:da:c3:d7:50:e2: b7:c1:18:06 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUB5EiWv28Aeg4wVOEuVrK8+3aqpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQyNzJFRjFGRjVGOTk2MDNERkMyQTJCOUM1QUIxQThC RjMyMkU3MzAeFw0yNjA1MDMwMjExNDFaFw0yNzA1MDIwMjE2NDFaMDMxMTAvBgNV BAMTKDk1MzQzN0JFQTM0RjlCMjE0RERERUVFRUNCRjQ2ODU4QkY3NEZBOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbcsqbAKlwyBpgQlSmeHr75a2A /BWPQHRleCr6quoJ2PpxFaeBqAy/TYAKOOL6IH7y0JiYn4Tte2fLjKR96EgCiI5/ M5mMLkZ8GaLu4nX8PaMaZZrOM2Tikm2V9ra6XxPQOSbdcyLPe4pzAAih0xJwYKwH ps3761ZA+0KPbh/RHByCRtcYf01Wd7BBga+MAmCPUqyRYz9F44Rwu9XKhJCXLn09 bOGqll2YwnwOa1zhlDuYJP6uRhfkp+SzcHfxMIebGIX1fnr5cpjAayLqZdqG6U43 ZuMmexwVdONjxzLweplblbx5+fo0l+un2by1zdkQilF9plp33wyXMzpuGD/1AgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUlTQ3vqNPmyFN3e7uy/RoWL90+oowHwYDVR0j BBgwFoAUXScu8f9fmWA9/CornFqxqL8yLnMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTlhMDAzNjktNjg0MC00YTk1LTg5YjEtYTQ4NTE4Zjk4ZGM3LzAvNUQyNzJFRjFG RjVGOTk2MDNERkMyQTJCOUM1QUIxQThCRjMyMkU3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDI3MkVGMUZGNUY5OTYwM0RGQzJBMkI5QzVBQjFBOEJGMzIy RTczLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04 OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhNjIzMDMwMzAz YTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BiDAsDANBgkqhkiG9w0BAQsFAAOCAQEAD82QBYNavzAze5ZgKwFKrAO4oGXUfYK6 MAFYj7lN1Agb3g3hBHwQWZ39T4YhQD6I4g+j0q5KU3N7uwgb4f9C34aVK+ln6agv R3oXsHG+hBs2FRdKJeFIZnc8jaLOg3Xy3xGqK5MvlmXgipTu1pWQ/SpTRFeZsJLK 78gpzAZo+IMpXLXEn4Pc4as6x/fLRkPM9CyNP9NKe+/Cdg5YDk/IQNMkWQ9ODjKA M7hK/vPfNCdcp2shdeACTQLnmdlYGCcSa9TZEGc1TtsMYlwLzrboYC9S1yGwmn/d wY9y7uOzAopcJv0gSUVANxhigjl0tKJHHihdFGDbmdrD11Dit8EYBg== -----END CERTIFICATE-----Generated at Wed May 13 15:36:01 2026 by rpki-client