$ rpki-client -vvf rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/323430363a633634303a313a3a2f34382d3438203d3e20313431313337.roa File: 323430363a633634303a313a3a2f34382d3438203d3e20313431313337.roa (raw, json) Hash identifier: SC/sM91Mj29qp/7MnNyzUUwPkBeQTEbv2cnvmQBFqIM= Subject key identifier: 69:02:DE:FB:CC:C6:99:AF:5F:4F:5A:2F:D3:D2:E5:68:9D:95:69:E9 Certificate issuer: /CN=AC861103DDC024E3BEB681351D66B027A8BA785A Certificate serial: 531BE74B6DDB35F19FA11ED6C0BDF5F69A9F8E9D Authority key identifier: AC:86:11:03:DD:C0:24:E3:BE:B6:81:35:1D:66:B0:27:A8:BA:78:5A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC861103DDC024E3BEB681351D66B027A8BA785A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/323430363a633634303a313a3a2f34382d3438203d3e20313431313337.roa Signing time: Sun 03 May 2026 02:20:19 +0000 ROA not before: Sun 03 May 2026 02:15:19 +0000 ROA not after: Sun 02 May 2027 02:20:19 +0000 asID: 141137 IP address blocks: 2406:c640:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.crl rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC861103DDC024E3BEB681351D66B027A8BA785A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:1b:e7:4b:6d:db:35:f1:9f:a1:1e:d6:c0:bd:f5:f6:9a:9f:8e:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC861103DDC024E3BEB681351D66B027A8BA785A Validity Not Before: May 3 02:15:19 2026 GMT Not After : May 2 02:20:19 2027 GMT Subject: CN=6902DEFBCCC699AF5F4F5A2FD3D2E5689D9569E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2c:48:04:6f:ad:9f:be:6d:e1:e5:2a:0f:7d: 72:08:46:b4:e6:cc:9b:ae:f4:80:2b:2f:ba:97:b2: 81:01:09:77:51:0a:ab:08:a1:b1:bb:b9:c5:10:9c: 28:b5:27:d5:14:5f:ef:99:df:fa:86:88:51:14:e9: af:ed:e5:0d:ee:c8:d6:11:55:3e:ad:80:ed:f3:4e: da:e6:52:42:d5:8b:ee:43:35:dc:05:78:33:12:ad: 4a:02:c4:77:32:79:45:92:a2:cf:b2:84:eb:3a:c2: 89:7a:6d:6c:aa:c6:23:09:a6:a0:58:f2:cc:e2:4c: 2d:1f:f6:68:a6:7a:78:5a:1e:ec:1a:07:8c:36:d4: f5:35:e1:35:c9:23:80:9f:b5:f3:3a:8b:1e:c4:55: f1:af:4c:13:53:e7:ed:14:45:1b:c4:3f:1f:af:de: f1:29:41:05:cd:27:18:ed:96:97:15:6f:d9:b3:57: b6:68:52:c1:44:e3:54:4f:a0:b0:9f:ae:a6:66:e0: 9a:66:a7:cd:5e:8f:eb:6f:65:b4:13:34:ce:62:82: ad:58:1a:33:64:86:c6:76:a5:ee:40:de:9a:00:43: b4:01:cf:ec:bd:fe:7b:70:2a:84:db:45:d7:88:36: 56:de:09:84:26:61:02:da:91:90:a3:3d:12:60:56: cf:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:02:DE:FB:CC:C6:99:AF:5F:4F:5A:2F:D3:D2:E5:68:9D:95:69:E9 X509v3 Authority Key Identifier: keyid:AC:86:11:03:DD:C0:24:E3:BE:B6:81:35:1D:66:B0:27:A8:BA:78:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC861103DDC024E3BEB681351D66B027A8BA785A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/323430363a633634303a313a3a2f34382d3438203d3e20313431313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:c640:1::/48 Signature Algorithm: sha256WithRSAEncryption 63:ad:af:b4:c0:a2:d9:c9:02:f3:31:a5:bc:a4:29:21:39:88: 41:7f:54:98:9c:74:60:84:0f:b2:5f:20:50:16:60:18:36:ad: a7:66:36:1c:ab:50:2d:e6:6d:cd:b7:f2:33:05:32:1f:1b:77: d2:ec:7d:0f:f6:08:a2:57:ae:90:63:f1:25:ff:89:82:b9:f4: 99:e5:09:d7:5b:83:b8:bf:ed:c5:07:2c:3d:f5:d9:7e:ad:a4: 63:40:db:0e:e0:f2:26:7b:c3:27:d4:6c:a6:45:78:bb:c3:19: 9c:c7:f7:d1:52:0f:05:0d:5e:8e:ec:08:89:3c:e7:b1:07:9a: 16:fb:dc:56:ac:3f:11:18:0c:e2:cb:28:f8:9a:54:3e:d2:24: a6:3e:0f:41:bb:32:6c:04:15:66:f4:32:3d:86:7a:c9:6f:21: 29:69:f2:da:f8:de:84:64:3c:f8:14:28:de:e9:f2:28:0a:ff: 1d:46:84:ca:4a:c4:ef:41:df:2d:93:19:b4:1d:de:c4:b6:f9: 3f:6b:b5:cf:9b:8e:70:af:62:a8:3b:9e:b2:8a:8e:9c:96:60: 1e:d4:98:79:ba:cd:9d:47:8d:a7:bc:96:17:0b:61:aa:20:b3: 6c:e6:42:ac:46:52:88:90:17:c8:56:90:01:8b:b4:19:8b:d7: 7f:42:80:b8 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUUxvnS23bNfGfoR7WwL319pqfjp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM4NjExMDNEREMwMjRFM0JFQjY4MTM1MUQ2NkIwMjdB OEJBNzg1QTAeFw0yNjA1MDMwMjE1MTlaFw0yNzA1MDIwMjIwMTlaMDMxMTAvBgNV BAMTKDY5MDJERUZCQ0NDNjk5QUY1RjRGNUEyRkQzRDJFNTY4OUQ5NTY5RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvLEgEb62fvm3h5SoPfXIIRrTm zJuu9IArL7qXsoEBCXdRCqsIobG7ucUQnCi1J9UUX++Z3/qGiFEU6a/t5Q3uyNYR VT6tgO3zTtrmUkLVi+5DNdwFeDMSrUoCxHcyeUWSos+yhOs6wol6bWyqxiMJpqBY 8sziTC0f9mimenhaHuwaB4w21PU14TXJI4CftfM6ix7EVfGvTBNT5+0URRvEPx+v 3vEpQQXNJxjtlpcVb9mzV7ZoUsFE41RPoLCfrqZm4Jpmp81ej+tvZbQTNM5igq1Y GjNkhsZ2pe5A3poAQ7QBz+y9/ntwKoTbRdeINlbeCYQmYQLakZCjPRJgVs/fAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUaQLe+8zGma9fT1ov09LlaJ2VaekwHwYDVR0j BBgwFoAUrIYRA93AJOO+toE1HWawJ6i6eFowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjQ5MDM0NWUtMmQ1Ny00MzQ5LWI3OGYtYzhiMThhNDQyNDQ1LzAvQUM4NjExMDNE REMwMjRFM0JFQjY4MTM1MUQ2NkIwMjdBOEJBNzg1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzg2MTEwM0REQzAyNEUzQkVCNjgxMzUxRDY2QjAyN0E4QkE3 ODVBLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzI0OTAzNDVlLTJkNTctNDM0OS1i NzhmLWM4YjE4YTQ0MjQ0NS8wLzMyMzQzMDM2M2E2MzM2MzQzMDNhMzEzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzEzMTMzMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBsZAAAEw DQYJKoZIhvcNAQELBQADggEBAGOtr7TAotnJAvMxpbykKSE5iEF/VJicdGCED7Jf IFAWYBg2radmNhyrUC3mbc238jMFMh8bd9LsfQ/2CKJXrpBj8SX/iYK59JnlCddb g7i/7cUHLD312X6tpGNA2w7g8iZ7wyfUbKZFeLvDGZzH99FSDwUNXo7sCIk857EH mhb73FasPxEYDOLLKPiaVD7SJKY+D0G7MmwEFWb0Mj2GeslvISlp8tr43oRkPPgU KN7p8igK/x1GhMpKxO9B3y2TGbQd3sS2+T9rtc+bjnCvYqg7nrKKjpyWYB7UmHm6 zZ1Hjae8lhcLYaogs2zmQqxGUoiQF8hWkAGLtBmL139CgLg= -----END CERTIFICATE-----Generated at Wed May 13 10:54:44 2026 by rpki-client