$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/323430363a366434303a3a2f33322d3332203d3e20313431303536.roa File: 323430363a366434303a3a2f33322d3332203d3e20313431303536.roa (raw, json) Hash identifier: HJzfn1RAcp4KQQSREVoxhT55QfVBdfZXOSmjHed/yCk= Subject key identifier: CE:81:B7:49:64:AA:E6:9B:E2:C6:CD:7E:7F:50:6A:3D:E7:86:96:57 Certificate issuer: /CN=330092B238160780852731102A871D6304465F70 Certificate serial: 24A87AC52BE59FCB098C1FBE054C7FEDADC94ABC Authority key identifier: 33:00:92:B2:38:16:07:80:85:27:31:10:2A:87:1D:63:04:46:5F:70 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/323430363a366434303a3a2f33322d3332203d3e20313431303536.roa Signing time: Sun 03 May 2026 02:28:23 +0000 ROA not before: Sun 03 May 2026 02:23:23 +0000 ROA not after: Sun 02 May 2027 02:28:23 +0000 asID: 141056 IP address blocks: 2406:6d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.crl rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:19:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:a8:7a:c5:2b:e5:9f:cb:09:8c:1f:be:05:4c:7f:ed:ad:c9:4a:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=330092B238160780852731102A871D6304465F70 Validity Not Before: May 3 02:23:23 2026 GMT Not After : May 2 02:28:23 2027 GMT Subject: CN=CE81B74964AAE69BE2C6CD7E7F506A3DE7869657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ef:8a:60:80:e2:c9:57:45:f0:06:96:8e:ad: 68:25:43:12:a0:4a:5d:e7:6c:c5:4e:f9:f9:40:32: 92:51:e9:48:9f:5f:af:d6:cc:ce:81:ec:12:a1:c8: 36:6d:a6:80:0f:28:d4:76:29:84:3c:e3:77:c7:86: bc:d7:94:11:9f:ea:b3:fd:54:fe:7f:c5:62:a0:2e: 62:bc:da:38:3d:b3:6f:8e:e7:e9:07:eb:d6:15:6f: 4c:fd:c7:f0:7b:09:31:64:ae:89:88:d4:31:b2:58: 3b:58:c6:8f:bb:41:5a:c1:08:93:85:0c:73:a1:5c: 10:65:f0:85:00:53:eb:45:b6:b3:09:9f:6d:c1:d8: 1c:23:4b:09:cd:ab:30:3e:b2:fb:60:df:81:67:72: c0:6f:92:81:b4:44:e9:50:81:6c:5e:31:ee:40:d1: ff:9b:fa:a6:62:8f:32:7e:00:be:86:81:4e:4f:74: b6:f4:d1:f8:fd:14:9c:38:60:b0:69:1f:f7:3f:03: 98:36:fa:92:f1:ac:4a:0b:50:16:03:6f:37:8a:a9: 33:38:07:da:85:13:ef:fa:63:6a:a5:21:df:2d:bd: d0:39:90:e9:9e:6f:86:46:5b:fe:ce:d5:f1:7d:41: 65:cd:2b:ae:25:57:83:64:02:04:bb:ab:7b:c6:e7: 9d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:81:B7:49:64:AA:E6:9B:E2:C6:CD:7E:7F:50:6A:3D:E7:86:96:57 X509v3 Authority Key Identifier: keyid:33:00:92:B2:38:16:07:80:85:27:31:10:2A:87:1D:63:04:46:5F:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/323430363a366434303a3a2f33322d3332203d3e20313431303536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:6d40::/32 Signature Algorithm: sha256WithRSAEncryption 66:31:6c:fd:ed:a8:a0:09:90:5f:51:11:fb:d2:f1:c4:21:49: 08:59:ae:31:59:58:cd:85:7d:4a:c2:2d:0f:c7:d9:12:29:01: d6:89:90:52:4a:7b:07:eb:94:5f:b7:f2:99:ea:e7:f0:dc:7f: 36:26:c8:86:10:6a:20:2d:2a:8f:e2:3d:25:fb:81:65:bc:b0: a2:50:70:01:0b:e3:b0:ea:8a:fd:d8:8c:38:26:65:ad:43:3c: 54:1d:74:5c:7d:92:d8:29:f0:08:45:49:17:e1:9e:cb:25:7b: 83:59:e5:94:07:e4:00:91:8f:5a:ed:f7:df:fc:60:5e:aa:38: e8:20:6e:d4:c3:2d:01:f7:aa:ef:66:69:ea:63:1e:8f:c5:a6: 83:eb:3e:47:06:5b:4b:fd:c8:40:f4:98:d1:8d:60:4f:a2:5d: c6:9b:20:3f:c2:bf:92:35:d0:9c:be:1d:57:8e:35:42:0e:24: 06:5b:93:e8:93:04:86:45:2a:c7:87:5c:17:ea:f7:2f:27:63: b9:d1:ef:13:3c:6f:f5:35:3a:5b:04:5d:7d:e4:6c:19:72:4b: 92:8e:f8:ad:6f:e0:f3:de:e6:bb:03:c7:e7:7c:7e:71:56:5f: a9:cd:a4:a8:29:86:39:24:d5:81:64:dc:9f:a4:d3:6c:30:de: be:bb:34:5f -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUJKh6xSvln8sJjB++BUx/7a3JSrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMwMDkyQjIzODE2MDc4MDg1MjczMTEwMkE4NzFENjMw NDQ2NUY3MDAeFw0yNjA1MDMwMjIzMjNaFw0yNzA1MDIwMjI4MjNaMDMxMTAvBgNV BAMTKENFODFCNzQ5NjRBQUU2OUJFMkM2Q0Q3RTdGNTA2QTNERTc4Njk2NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi74pggOLJV0XwBpaOrWglQxKg Sl3nbMVO+flAMpJR6UifX6/WzM6B7BKhyDZtpoAPKNR2KYQ843fHhrzXlBGf6rP9 VP5/xWKgLmK82jg9s2+O5+kH69YVb0z9x/B7CTFkromI1DGyWDtYxo+7QVrBCJOF DHOhXBBl8IUAU+tFtrMJn23B2BwjSwnNqzA+svtg34FncsBvkoG0ROlQgWxeMe5A 0f+b+qZijzJ+AL6GgU5PdLb00fj9FJw4YLBpH/c/A5g2+pLxrEoLUBYDbzeKqTM4 B9qFE+/6Y2qlId8tvdA5kOmeb4ZGW/7O1fF9QWXNK64lV4NkAgS7q3vG552VAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUzoG3SWSq5pvixs1+f1BqPeeGllcwHwYDVR0j BBgwFoAUMwCSsjgWB4CFJzEQKocdYwRGX3AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2UyYzQ4MTUtYjJkYS00YzIwLWJjMzEtNTAzYWRmNDliNDkwLzAvMzMwMDkyQjIz ODE2MDc4MDg1MjczMTEwMkE4NzFENjMwNDQ2NUY3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMzAwOTJCMjM4MTYwNzgwODUyNzMxMTAyQTg3MUQ2MzA0NDY1 RjcwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNlMmM0ODE1LWIyZGEtNGMyMC1i YzMxLTUwM2FkZjQ5YjQ5MC8wLzMyMzQzMDM2M2EzNjY0MzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzQzMTMwMzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQGbUAwDQYJKoZI hvcNAQELBQADggEBAGYxbP3tqKAJkF9REfvS8cQhSQhZrjFZWM2FfUrCLQ/H2RIp AdaJkFJKewfrlF+38pnq5/DcfzYmyIYQaiAtKo/iPSX7gWW8sKJQcAEL47Dqiv3Y jDgmZa1DPFQddFx9ktgp8AhFSRfhnssle4NZ5ZQH5ACRj1rt99/8YF6qOOggbtTD LQH3qu9maepjHo/FpoPrPkcGW0v9yED0mNGNYE+iXcabID/Cv5I10Jy+HVeONUIO JAZbk+iTBIZFKseHXBfq9y8nY7nR7xM8b/U1OlsEXX3kbBlyS5KO+K1v4PPe5rsD x+d8fnFWX6nNpKgphjkk1YFk3J+k02ww3r67NF8= -----END CERTIFICATE-----Generated at Wed May 13 09:20:51 2026 by rpki-client