$ rpki-client -vvf rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/323430363a343463303a3a2f33322d3438203d3e20313430343632.roa File: 323430363a343463303a3a2f33322d3438203d3e20313430343632.roa (raw, json) Hash identifier: hNE8AnSN+vRbiP5vQpWagsBp5MnBUN8YVklxG43kEGI= Subject key identifier: E5:17:A4:BA:69:AD:6B:2E:0C:C2:F1:D3:0A:46:30:7A:26:A9:A0:01 Certificate issuer: /CN=45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02 Certificate serial: 18F4ADA5C1EBD3361473C3EEBF78F7BEF8FE709E Authority key identifier: 45:A1:C3:F1:DC:A7:B7:CC:A8:DB:A0:23:EE:C2:D5:9E:36:10:8D:02 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/323430363a343463303a3a2f33322d3438203d3e20313430343632.roa Signing time: Sun 03 May 2026 02:25:52 +0000 ROA not before: Sun 03 May 2026 02:20:52 +0000 ROA not after: Sun 02 May 2027 02:25:52 +0000 asID: 140462 IP address blocks: 2406:44c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.crl rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:f4:ad:a5:c1:eb:d3:36:14:73:c3:ee:bf:78:f7:be:f8:fe:70:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02 Validity Not Before: May 3 02:20:52 2026 GMT Not After : May 2 02:25:52 2027 GMT Subject: CN=E517A4BA69AD6B2E0CC2F1D30A46307A26A9A001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4d:c5:b7:64:21:3c:bc:be:c0:a7:b3:24:32: 0e:10:6d:33:4e:87:95:23:50:e7:50:f5:fb:ab:5d: 31:fa:ad:74:1d:34:ce:39:16:cc:5e:b4:0f:62:98: a0:84:93:53:9a:1a:20:be:ae:46:6f:87:25:6d:a0: 4e:30:47:de:8c:1f:d8:fc:68:43:6b:e7:22:ba:9f: 33:40:5e:c2:0f:0c:30:ff:9d:b2:cd:d8:44:98:21: 73:94:d0:21:4e:49:af:5f:06:05:e9:fc:ae:5a:24: f1:b4:03:96:56:83:97:2b:3f:b7:ba:39:2f:9f:af: f2:40:0c:31:60:1e:be:e1:78:59:86:75:75:38:22: 42:c8:43:ae:e9:71:83:fa:59:70:fd:72:ee:74:33: 02:35:6e:57:03:2d:92:9a:12:6e:78:19:8b:e0:fc: 58:ec:f4:e7:0b:26:91:23:64:27:7a:3f:49:47:5b: 63:21:79:f8:d2:aa:c2:08:fb:9c:0b:a5:4d:65:70: 91:8a:5a:89:b3:7d:ff:46:35:2a:82:41:2b:f1:7e: 72:fa:c3:39:21:ec:45:8c:a7:be:81:59:23:f7:8f: 77:0a:1d:ef:7b:d3:cf:cd:be:a9:eb:aa:03:3f:77: d2:57:b4:9f:52:3d:34:ba:7e:43:cd:47:2e:0a:4f: 5e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:17:A4:BA:69:AD:6B:2E:0C:C2:F1:D3:0A:46:30:7A:26:A9:A0:01 X509v3 Authority Key Identifier: keyid:45:A1:C3:F1:DC:A7:B7:CC:A8:DB:A0:23:EE:C2:D5:9E:36:10:8D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/323430363a343463303a3a2f33322d3438203d3e20313430343632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:44c0::/32 Signature Algorithm: sha256WithRSAEncryption 12:61:0a:0a:a2:41:80:cf:87:00:fc:cb:4c:f6:4a:5d:0d:01: 6e:4f:e9:c7:6b:2d:a2:2c:e7:3d:1b:5c:28:e3:a3:20:3f:53: 97:43:90:41:eb:e3:0f:fd:4b:4a:a8:6c:e0:04:3e:9c:b0:fe: dc:0e:71:61:75:de:66:7f:34:c7:92:3c:c7:b0:16:9a:b7:5c: 6b:2b:2c:c7:f8:4b:4e:66:69:91:30:be:0b:c7:91:e7:5e:aa: b1:1c:a4:99:58:8f:c8:ef:d5:97:6e:22:21:b6:3b:cf:25:79: 77:8f:0b:cf:75:bc:a0:ca:55:7d:45:8b:78:7d:0e:e8:52:d6: 65:58:fd:f2:c4:0a:40:09:a7:d9:d5:6a:a3:d2:d1:ee:b8:f5: 0f:45:33:73:ba:66:ca:5d:e5:20:c0:07:64:8a:cb:59:f4:bf: 57:40:63:28:5f:18:c6:c9:b3:59:64:2d:2b:24:53:7d:cb:90: cf:a2:ea:f0:a0:b2:fa:df:69:66:1c:1e:a5:ca:6c:98:7b:76: 7e:f6:a3:a0:58:13:a4:98:8a:33:af:8b:f8:35:94:af:b0:bb: 3e:f7:6a:4f:10:02:f7:d9:b6:99:32:d9:2f:8a:06:4c:9c:92: bc:d0:0f:4e:96:ef:a3:41:34:33:ef:c3:ce:9b:ec:13:67:9c: 3c:20:a2:a6 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUGPStpcHr0zYUc8Puv3j3vvj+cJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVBMUMzRjFEQ0E3QjdDQ0E4REJBMDIzRUVDMkQ1OUUz NjEwOEQwMjAeFw0yNjA1MDMwMjIwNTJaFw0yNzA1MDIwMjI1NTJaMDMxMTAvBgNV BAMTKEU1MTdBNEJBNjlBRDZCMkUwQ0MyRjFEMzBBNDYzMDdBMjZBOUEwMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCTcW3ZCE8vL7Ap7MkMg4QbTNO h5UjUOdQ9furXTH6rXQdNM45FsxetA9imKCEk1OaGiC+rkZvhyVtoE4wR96MH9j8 aENr5yK6nzNAXsIPDDD/nbLN2ESYIXOU0CFOSa9fBgXp/K5aJPG0A5ZWg5crP7e6 OS+fr/JADDFgHr7heFmGdXU4IkLIQ67pcYP6WXD9cu50MwI1blcDLZKaEm54GYvg /Fjs9OcLJpEjZCd6P0lHW2MhefjSqsII+5wLpU1lcJGKWomzff9GNSqCQSvxfnL6 wzkh7EWMp76BWSP3j3cKHe9708/NvqnrqgM/d9JXtJ9SPTS6fkPNRy4KT165AgMB AAGjggIzMIICLzAdBgNVHQ4EFgQU5Rekummtay4MwvHTCkYweiapoAEwHwYDVR0j BBgwFoAURaHD8dynt8yo26Aj7sLVnjYQjQIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzgzZWQ3YWItMWFjOS00ZjQyLWFjZGQtNTM1NTdhYzdiM2YzLzAvNDVBMUMzRjFE Q0E3QjdDQ0E4REJBMDIzRUVDMkQ1OUUzNjEwOEQwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUExQzNGMURDQTdCN0NDQThEQkEwMjNFRUMyRDU5RTM2MTA4 RDAyLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzM4M2VkN2FiLTFhYzktNGY0Mi1h Y2RkLTUzNTU3YWM3YjNmMy8wLzMyMzQzMDM2M2EzNDM0NjMzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzQzMDM0MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQGRMAwDQYJKoZI hvcNAQELBQADggEBABJhCgqiQYDPhwD8y0z2Sl0NAW5P6cdrLaIs5z0bXCjjoyA/ U5dDkEHr4w/9S0qobOAEPpyw/twOcWF13mZ/NMeSPMewFpq3XGsrLMf4S05maZEw vgvHkedeqrEcpJlYj8jv1ZduIiG2O88leXePC891vKDKVX1Fi3h9DuhS1mVY/fLE CkAJp9nVaqPS0e649Q9FM3O6Zspd5SDAB2SKy1n0v1dAYyhfGMbJs1lkLSskU33L kM+i6vCgsvrfaWYcHqXKbJh7dn72o6BYE6SYijOvi/g1lK+wuz73ak8QAvfZtpky 2S+KBkyckrzQD06W76NBNDPvw86b7BNnnDwgoqY= -----END CERTIFICATE-----Generated at Wed May 13 11:35:05 2026 by rpki-client