$ rpki-client -vvf rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/323430363a373234303a3a2f33322d3332203d3e20313431303634.roa File: 323430363a373234303a3a2f33322d3332203d3e20313431303634.roa (raw, json) Hash identifier: OZMHHHmslz7MYh9R9Ib0RjlOxsJyDimPwwAqaL88/ng= Subject key identifier: 98:6A:86:1A:52:6F:81:D9:BB:95:30:D6:60:0D:2C:C1:EA:70:E3:60 Certificate issuer: /CN=028B3EA251C3A597AF55D4DB3EF43A07C218A5A6 Certificate serial: 600FD9C51004A300462A0679C37548ED813C91F4 Authority key identifier: 02:8B:3E:A2:51:C3:A5:97:AF:55:D4:DB:3E:F4:3A:07:C2:18:A5:A6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/323430363a373234303a3a2f33322d3332203d3e20313431303634.roa Signing time: Sun 03 May 2026 02:31:53 +0000 ROA not before: Sun 03 May 2026 02:26:53 +0000 ROA not after: Sun 02 May 2027 02:31:53 +0000 asID: 141064 IP address blocks: 2406:7240::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.crl rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:0f:d9:c5:10:04:a3:00:46:2a:06:79:c3:75:48:ed:81:3c:91:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028B3EA251C3A597AF55D4DB3EF43A07C218A5A6 Validity Not Before: May 3 02:26:53 2026 GMT Not After : May 2 02:31:53 2027 GMT Subject: CN=986A861A526F81D9BB9530D6600D2CC1EA70E360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:15:dd:cb:38:01:8f:38:e0:c3:63:cc:b2:ca: 91:cc:a7:4f:f2:6b:c3:72:16:e5:3c:96:25:54:6b: 25:b3:d5:66:82:6a:5e:73:46:38:8b:8a:a5:be:7f: 76:23:03:06:ba:d2:06:46:ac:29:d1:72:4b:a3:06: 2c:5a:39:9e:cd:3b:7e:18:11:d4:ab:16:fa:af:89: 7a:26:be:19:54:ba:4d:eb:75:17:36:c1:03:e6:00: e8:a6:96:2f:39:d3:6e:89:45:e4:f0:3a:ad:7a:7e: f8:61:11:6b:bf:44:21:33:1f:ed:18:64:2b:6a:b1: 01:63:f8:32:82:ce:ad:21:47:12:8e:77:35:3a:ef: cf:67:a5:a5:be:d4:ce:40:b0:81:e2:d6:4f:de:15: 5b:6e:d8:93:2f:80:c2:d5:c9:61:07:f0:1f:3a:51: 9f:66:4f:c3:a3:3b:7a:3d:2b:0c:d4:17:55:db:95: db:20:8c:73:e4:0e:cd:f8:ae:cb:7e:cb:f3:ea:48: 6e:02:24:90:58:47:70:cf:ef:2e:b6:52:f1:c7:b3: 04:ec:10:59:3a:bc:df:b8:16:5d:5d:d5:f0:89:6e: ec:ab:f3:7e:9b:20:ec:d6:13:bd:b3:a3:ca:1b:9b: ef:3b:47:13:4f:98:88:53:6a:2b:c8:fa:91:12:26: 06:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:6A:86:1A:52:6F:81:D9:BB:95:30:D6:60:0D:2C:C1:EA:70:E3:60 X509v3 Authority Key Identifier: keyid:02:8B:3E:A2:51:C3:A5:97:AF:55:D4:DB:3E:F4:3A:07:C2:18:A5:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/323430363a373234303a3a2f33322d3332203d3e20313431303634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:7240::/32 Signature Algorithm: sha256WithRSAEncryption be:3c:89:a7:39:3c:ed:e3:98:52:e0:41:02:78:44:ec:fb:cf: da:c6:33:55:df:04:a4:39:82:71:39:24:34:cb:a9:c2:a2:d4: f0:66:f0:54:e8:1d:d5:d6:a0:ba:bb:16:84:3d:2f:ff:fb:55: 0b:ec:e5:51:4a:93:2b:7e:ce:d9:a5:56:26:07:12:ca:eb:23: 48:7e:99:31:34:3d:78:43:29:9b:10:0b:bb:c0:cf:d2:2f:8d: 93:fa:26:77:82:60:9b:b5:9a:d4:4c:66:0d:56:cb:5c:82:d0: 5b:d0:3b:b1:54:8a:23:f4:21:86:12:09:19:38:4c:74:e1:b7: a1:60:d5:5e:cb:9b:15:67:ea:31:bb:a1:ba:68:ae:7f:72:4b: fb:56:bd:40:72:ca:d1:58:d8:df:7c:9b:f5:58:68:7f:6f:c5: b1:bd:e8:b8:a4:c6:71:d1:76:75:33:75:2d:6e:eb:ac:60:c8: ab:2c:cd:c5:37:26:53:44:d5:1b:f9:c1:c3:ea:65:74:3f:70: 9d:b8:e9:84:05:be:6c:aa:12:a2:06:0d:aa:73:25:41:74:6b: 50:52:f2:23:3c:df:21:2a:dc:7e:84:79:05:c7:4d:c8:c8:38: 27:4c:c7:0b:11:b5:dc:1b:fc:a7:6a:b7:8c:7e:89:9a:46:6d: 19:f3:93:ed -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUYA/ZxRAEowBGKgZ5w3VI7YE8kfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI4QjNFQTI1MUMzQTU5N0FGNTVENERCM0VGNDNBMDdD MjE4QTVBNjAeFw0yNjA1MDMwMjI2NTNaFw0yNzA1MDIwMjMxNTNaMDMxMTAvBgNV BAMTKDk4NkE4NjFBNTI2RjgxRDlCQjk1MzBENjYwMEQyQ0MxRUE3MEUzNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrFd3LOAGPOODDY8yyypHMp0/y a8NyFuU8liVUayWz1WaCal5zRjiLiqW+f3YjAwa60gZGrCnRckujBixaOZ7NO34Y EdSrFvqviXomvhlUuk3rdRc2wQPmAOimli85026JReTwOq16fvhhEWu/RCEzH+0Y ZCtqsQFj+DKCzq0hRxKOdzU6789npaW+1M5AsIHi1k/eFVtu2JMvgMLVyWEH8B86 UZ9mT8OjO3o9KwzUF1XbldsgjHPkDs34rst+y/PqSG4CJJBYR3DP7y62UvHHswTs EFk6vN+4Fl1d1fCJbuyr836bIOzWE72zo8obm+87RxNPmIhTaivI+pESJgb9AgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUmGqGGlJvgdm7lTDWYA0swepw42AwHwYDVR0j BBgwFoAUAos+olHDpZevVdTbPvQ6B8IYpaYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM2YjJiZDctZDdmMS00ODE1LWE2MGEtY2FkNTQwMjljZTg4LzAvMDI4QjNFQTI1 MUMzQTU5N0FGNTVENERCM0VGNDNBMDdDMjE4QTVBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjhCM0VBMjUxQzNBNTk3QUY1NUQ0REIzRUY0M0EwN0MyMThB NUE2LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzRjNmIyYmQ3LWQ3ZjEtNDgxNS1h NjBhLWNhZDU0MDI5Y2U4OC8wLzMyMzQzMDM2M2EzNzMyMzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzQzMTMwMzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQGckAwDQYJKoZI hvcNAQELBQADggEBAL48iac5PO3jmFLgQQJ4ROz7z9rGM1XfBKQ5gnE5JDTLqcKi 1PBm8FToHdXWoLq7FoQ9L//7VQvs5VFKkyt+ztmlViYHEsrrI0h+mTE0PXhDKZsQ C7vAz9IvjZP6JneCYJu1mtRMZg1Wy1yC0FvQO7FUiiP0IYYSCRk4THTht6Fg1V7L mxVn6jG7obporn9yS/tWvUByytFY2N98m/VYaH9vxbG96LikxnHRdnUzdS1u66xg yKsszcU3JlNE1Rv5wcPqZXQ/cJ246YQFvmyqEqIGDapzJUF0a1BS8iM83yEq3H6E eQXHTcjIOCdMxwsRtdwb/Kdqt4x+iZpGbRnzk+0= -----END CERTIFICATE-----Generated at Wed May 13 13:00:29 2026 by rpki-client