$ rpki-client -vvf rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a663030303a3a2f33362d3438203d3e20313430343233.roa File: 323430363a323063303a663030303a3a2f33362d3438203d3e20313430343233.roa (raw, json) Hash identifier: Cp0PKl9JjhWDgnLWIVDlqxmFictuLsZeLOz3cpbATsI= Subject key identifier: 89:E7:24:26:DB:91:00:9A:A9:E4:72:A1:19:CC:E5:51:90:55:85:ED Certificate issuer: /CN=5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73 Certificate serial: 0FF12B41D8BEF2019972C17DD9EB94EB7B0E61D5 Authority key identifier: 5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a663030303a3a2f33362d3438203d3e20313430343233.roa Signing time: Sun 03 May 2026 02:16:40 +0000 ROA not before: Sun 03 May 2026 02:11:40 +0000 ROA not after: Sun 02 May 2027 02:16:40 +0000 asID: 140423 IP address blocks: 2406:20c0:f000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.crl rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:f1:2b:41:d8:be:f2:01:99:72:c1:7d:d9:eb:94:eb:7b:0e:61:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73 Validity Not Before: May 3 02:11:40 2026 GMT Not After : May 2 02:16:40 2027 GMT Subject: CN=89E72426DB91009AA9E472A119CCE551905585ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ad:82:67:8b:71:bb:ac:59:dc:6a:3b:0b:10: d1:36:9c:c4:ca:9d:f9:36:f6:2b:8e:65:5f:c3:37: ab:07:a3:f9:0c:9f:31:82:a2:ab:aa:b4:49:aa:27: fa:eb:be:1d:29:90:96:7f:ed:d8:62:16:a9:96:87: 91:5e:b9:5a:5e:b1:90:b4:e8:03:b4:16:20:2c:6e: 8e:9b:64:b5:f9:b2:6b:9c:a5:d0:4f:d2:df:fe:8c: 54:d4:74:eb:02:31:9d:6e:b4:a0:7c:82:37:74:10: f2:5a:7a:dd:02:4d:dc:2f:52:e9:34:90:03:f7:e9: 75:45:46:1c:02:67:57:e5:c0:e8:9a:97:03:95:d1: b5:f3:7f:51:1c:c8:6e:88:09:33:04:7a:70:75:61: 64:d6:99:41:90:bf:81:91:d2:f1:da:de:4c:9f:fd: 93:67:0b:7d:05:fa:fa:db:9c:11:80:22:58:99:09: 7a:6e:63:e1:16:35:7d:d9:41:be:f5:1e:e2:fb:2d: 75:b5:98:a3:a2:ba:91:60:ad:de:8f:f4:93:a1:13: 46:fd:59:82:f5:20:de:64:de:31:28:af:34:92:78: c9:d0:df:d5:e5:6d:00:2c:32:32:83:c8:94:fd:ff: a5:f6:b6:63:0f:50:a6:90:3f:5c:a4:6a:6a:e7:8f: c5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E7:24:26:DB:91:00:9A:A9:E4:72:A1:19:CC:E5:51:90:55:85:ED X509v3 Authority Key Identifier: keyid:5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a663030303a3a2f33362d3438203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:20c0:f000::/36 Signature Algorithm: sha256WithRSAEncryption a7:3b:1d:63:cb:83:65:15:ff:b1:66:e0:f1:fa:8f:ac:85:a0: c7:2c:bf:a3:0f:3a:5b:18:a7:bf:99:27:48:56:89:c2:dc:6f: c6:e7:17:33:bc:46:c9:5a:36:cc:81:58:68:6e:b0:35:2e:66: f5:e5:0c:e0:10:e1:99:bc:e7:8f:4e:e8:b8:f9:7a:24:33:cc: b3:0b:96:b9:bb:7b:97:4b:a0:57:bd:8d:e6:24:32:4f:49:aa: 91:bc:8c:ea:e0:c3:68:35:7a:62:91:cd:9d:59:b9:21:c8:9e: 04:a0:59:13:80:89:fa:42:10:04:a7:4b:68:51:42:e9:88:2d: 0e:6d:70:df:7f:63:a1:43:8c:d0:8a:5d:6f:93:71:b2:6b:fe: 4c:bf:1f:59:d9:81:9f:db:96:2d:af:d9:ea:17:5c:76:d7:89: 3f:fe:bd:b2:c1:59:04:b4:a8:93:a9:ea:ee:49:8c:97:93:49: df:27:8d:f1:a0:bd:22:ea:8a:18:e0:fc:25:b7:bf:e2:d3:ba: 19:ba:bf:e6:41:13:c2:bc:32:ca:70:a7:42:9d:fe:6c:b3:d7: 82:ac:e2:3a:25:5c:79:6e:6a:d9:fe:5d:29:c0:09:a7:85:ba: e4:d2:98:a3:a2:7b:2b:38:f1:70:75:68:eb:3f:cd:f4:9e:4a: 8f:99:c0:0a -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUD/ErQdi+8gGZcsF92euU63sOYdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQyNzJFRjFGRjVGOTk2MDNERkMyQTJCOUM1QUIxQThC RjMyMkU3MzAeFw0yNjA1MDMwMjExNDBaFw0yNzA1MDIwMjE2NDBaMDMxMTAvBgNV BAMTKDg5RTcyNDI2REI5MTAwOUFBOUU0NzJBMTE5Q0NFNTUxOTA1NTg1RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvrYJni3G7rFncajsLENE2nMTK nfk29iuOZV/DN6sHo/kMnzGCoquqtEmqJ/rrvh0pkJZ/7dhiFqmWh5FeuVpesZC0 6AO0FiAsbo6bZLX5smucpdBP0t/+jFTUdOsCMZ1utKB8gjd0EPJaet0CTdwvUuk0 kAP36XVFRhwCZ1flwOialwOV0bXzf1EcyG6ICTMEenB1YWTWmUGQv4GR0vHa3kyf /ZNnC30F+vrbnBGAIliZCXpuY+EWNX3ZQb71HuL7LXW1mKOiupFgrd6P9JOhE0b9 WYL1IN5k3jEorzSSeMnQ39XlbQAsMjKDyJT9/6X2tmMPUKaQP1ykamrnj8WRAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUieckJtuRAJqp5HKhGczlUZBVhe0wHwYDVR0j BBgwFoAUXScu8f9fmWA9/CornFqxqL8yLnMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTlhMDAzNjktNjg0MC00YTk1LTg5YjEtYTQ4NTE4Zjk4ZGM3LzAvNUQyNzJFRjFG RjVGOTk2MDNERkMyQTJCOUM1QUIxQThCRjMyMkU3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDI3MkVGMUZGNUY5OTYwM0RGQzJBMkI5QzVBQjFBOEJGMzIy RTczLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04 OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhNjYzMDMwMzAz YTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BiDA8DANBgkqhkiG9w0BAQsFAAOCAQEApzsdY8uDZRX/sWbg8fqPrIWgxyy/ow86 Wxinv5knSFaJwtxvxucXM7xGyVo2zIFYaG6wNS5m9eUM4BDhmbznj07ouPl6JDPM swuWubt7l0ugV72N5iQyT0mqkbyM6uDDaDV6YpHNnVm5IcieBKBZE4CJ+kIQBKdL aFFC6YgtDm1w339joUOM0Ipdb5Nxsmv+TL8fWdmBn9uWLa/Z6hdcdteJP/69ssFZ BLSok6nq7kmMl5NJ3yeN8aC9IuqKGOD8Jbe/4tO6Gbq/5kETwrwyynCnQp3+bLPX gqziOiVceW5q2f5dKcAJp4W65NKYo6J7KzjxcHVo6z/N9J5Kj5nACg== -----END CERTIFICATE-----Generated at Wed May 13 15:23:33 2026 by rpki-client