$ rpki-client -vvf rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a653030303a3a2f33352d3438203d3e20313430343233.roa File: 323430363a323063303a653030303a3a2f33352d3438203d3e20313430343233.roa (raw, json) Hash identifier: vSoD+ZxS07y9yYkbUD3TtKiwko1Tc9P4St2wGL0SBpA= Subject key identifier: 93:A1:C6:D8:4A:4E:7D:70:EB:E8:30:CD:06:D8:DC:FE:22:52:CF:54 Certificate issuer: /CN=5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73 Certificate serial: 423E5147F267F6EE0C01B9DD812CAF0F79E2EE95 Authority key identifier: 5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a653030303a3a2f33352d3438203d3e20313430343233.roa Signing time: Sun 03 May 2026 02:16:43 +0000 ROA not before: Sun 03 May 2026 02:11:43 +0000 ROA not after: Sun 02 May 2027 02:16:43 +0000 asID: 140423 IP address blocks: 2406:20c0:e000::/35 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.crl rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:3e:51:47:f2:67:f6:ee:0c:01:b9:dd:81:2c:af:0f:79:e2:ee:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73 Validity Not Before: May 3 02:11:43 2026 GMT Not After : May 2 02:16:43 2027 GMT Subject: CN=93A1C6D84A4E7D70EBE830CD06D8DCFE2252CF54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0d:ab:2e:09:b8:d3:ca:91:d5:75:63:c5:00: 7c:82:38:ff:ad:9f:53:74:34:26:91:48:fa:f8:00: 10:b7:82:66:83:c6:fa:c6:c5:5f:84:65:5b:38:3b: 23:8e:41:e7:8e:80:67:d8:41:1f:4a:ff:1e:02:68: 65:4d:8f:99:21:93:9d:f3:d2:39:30:50:72:c5:13: 5f:81:2e:2c:02:27:fa:dc:b1:0c:9f:b5:f3:c2:a5: 88:9f:d2:ef:f8:44:d4:5d:9a:82:6b:eb:28:25:64: e5:76:5a:51:41:f0:28:b0:c7:fd:d6:67:37:59:22: f1:41:8d:41:69:0e:1b:1a:f0:73:77:4b:c1:2a:e2: e0:43:e5:6a:30:28:ac:cf:fe:a8:f4:18:52:41:c5: b8:9d:63:07:b6:54:32:84:81:6e:e1:d2:0e:7e:3e: 46:21:92:17:3b:41:d7:a0:d8:b9:b0:97:72:dd:44: 63:4f:9a:7d:75:2e:5a:55:e4:8d:2d:8e:95:45:3b: b9:da:5d:8b:a6:a3:a1:41:15:59:0f:a0:1b:f4:0f: 5a:1b:76:e6:03:0e:dc:b0:a6:b9:c4:8e:18:d9:0b: 40:8b:13:36:c0:36:7b:5f:b4:25:6b:f6:dc:c7:ae: 7c:5c:a2:2c:67:c1:42:5a:c5:a6:45:81:48:df:04: 40:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A1:C6:D8:4A:4E:7D:70:EB:E8:30:CD:06:D8:DC:FE:22:52:CF:54 X509v3 Authority Key Identifier: keyid:5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a653030303a3a2f33352d3438203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:20c0:e000::/35 Signature Algorithm: sha256WithRSAEncryption 31:51:22:cf:ff:d7:4d:80:e7:1d:11:15:43:c6:01:60:32:0b: 98:50:31:86:09:c9:38:e2:06:3f:74:a4:9e:1e:9b:92:23:7f: 39:63:d7:5a:4a:d7:d6:dd:cf:37:d9:d2:16:23:f6:37:9a:c6: b6:6c:79:fe:3f:b8:d3:f4:e1:4d:4b:e9:4c:71:ab:e1:3a:a3: e7:7f:8c:cc:0d:a3:47:3f:66:18:e2:93:4b:27:e1:c1:83:74: 2e:74:0d:df:72:28:a3:c0:cc:27:54:97:a8:d6:a0:30:62:49: 67:b9:4c:5e:25:87:6b:2e:9b:6f:33:2f:db:1e:87:d1:f9:42: 51:6f:b4:cf:6c:29:22:4e:c5:e6:11:b2:07:38:06:12:12:f6: ee:fe:73:c4:a5:8f:d5:69:5e:8e:3b:49:fc:96:31:90:f7:ab: ae:2e:e7:42:71:87:94:e1:47:78:32:e1:1c:35:b0:1c:a8:22: 7d:93:ba:70:93:df:e7:48:99:e9:6f:ef:ce:1b:ac:56:13:5c: c7:f2:d9:3c:41:9d:8e:23:13:d5:f7:c8:fa:6e:12:57:01:aa: 9b:22:43:a2:e3:8f:68:01:64:34:f9:9c:a4:b9:f7:f0:e7:f7: 40:f9:ac:af:ca:40:d1:81:ae:82:cc:ce:2e:b3:94:a4:91:64: ad:8d:ea:c9 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUQj5RR/Jn9u4MAbndgSyvD3ni7pUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQyNzJFRjFGRjVGOTk2MDNERkMyQTJCOUM1QUIxQThC RjMyMkU3MzAeFw0yNjA1MDMwMjExNDNaFw0yNzA1MDIwMjE2NDNaMDMxMTAvBgNV BAMTKDkzQTFDNkQ4NEE0RTdENzBFQkU4MzBDRDA2RDhEQ0ZFMjI1MkNGNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqDasuCbjTypHVdWPFAHyCOP+t n1N0NCaRSPr4ABC3gmaDxvrGxV+EZVs4OyOOQeeOgGfYQR9K/x4CaGVNj5khk53z 0jkwUHLFE1+BLiwCJ/rcsQyftfPCpYif0u/4RNRdmoJr6yglZOV2WlFB8Ciwx/3W ZzdZIvFBjUFpDhsa8HN3S8Eq4uBD5WowKKzP/qj0GFJBxbidYwe2VDKEgW7h0g5+ PkYhkhc7Qdeg2Lmwl3LdRGNPmn11LlpV5I0tjpVFO7naXYumo6FBFVkPoBv0D1ob duYDDtywprnEjhjZC0CLEzbANntftCVr9tzHrnxcoixnwUJaxaZFgUjfBEA5AgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUk6HG2EpOfXDr6DDNBtjc/iJSz1QwHwYDVR0j BBgwFoAUXScu8f9fmWA9/CornFqxqL8yLnMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTlhMDAzNjktNjg0MC00YTk1LTg5YjEtYTQ4NTE4Zjk4ZGM3LzAvNUQyNzJFRjFG RjVGOTk2MDNERkMyQTJCOUM1QUIxQThCRjMyMkU3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDI3MkVGMUZGNUY5OTYwM0RGQzJBMkI5QzVBQjFBOEJGMzIy RTczLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04 OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhNjUzMDMwMzAz YTNhMmYzMzM1MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUk BiDA4DANBgkqhkiG9w0BAQsFAAOCAQEAMVEiz//XTYDnHREVQ8YBYDILmFAxhgnJ OOIGP3Sknh6bkiN/OWPXWkrX1t3PN9nSFiP2N5rGtmx5/j+40/ThTUvpTHGr4Tqj 53+MzA2jRz9mGOKTSyfhwYN0LnQN33Ioo8DMJ1SXqNagMGJJZ7lMXiWHay6bbzMv 2x6H0flCUW+0z2wpIk7F5hGyBzgGEhL27v5zxKWP1WlejjtJ/JYxkPerri7nQnGH lOFHeDLhHDWwHKgifZO6cJPf50iZ6W/vzhusVhNcx/LZPEGdjiMT1ffI+m4SVwGq myJDouOPaAFkNPmcpLn38Of3QPmsr8pA0YGugszOLrOUpJFkrY3qyQ== -----END CERTIFICATE-----Generated at Wed May 13 15:04:05 2026 by rpki-client