$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a36323a3a2f34382d3438203d3e20313333383237.roa File: 323430343a613634303a36323a3a2f34382d3438203d3e20313333383237.roa (raw, json) Hash identifier: BxCzNrTcp0dp4A7C91gDRudiTOOmKrDBcvkaJa1pltE= Subject key identifier: 75:B0:87:C9:E5:C3:B3:3D:5D:12:5C:9B:DD:01:E9:04:E5:F0:3B:10 Certificate issuer: /CN=AF6B7BCDACF90BA83205EA298327379BAB489418 Certificate serial: 67A6FCC48186ECDE83F6AE73E0ADD4F9FE035A3D Authority key identifier: AF:6B:7B:CD:AC:F9:0B:A8:32:05:EA:29:83:27:37:9B:AB:48:94:18 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a36323a3a2f34382d3438203d3e20313333383237.roa Signing time: Sun 03 May 2026 02:35:29 +0000 ROA not before: Sun 03 May 2026 02:30:29 +0000 ROA not after: Sun 02 May 2027 02:35:29 +0000 asID: 133827 IP address blocks: 2404:a640:62::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.crl rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:11:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:a6:fc:c4:81:86:ec:de:83:f6:ae:73:e0:ad:d4:f9:fe:03:5a:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF6B7BCDACF90BA83205EA298327379BAB489418 Validity Not Before: May 3 02:30:29 2026 GMT Not After : May 2 02:35:29 2027 GMT Subject: CN=75B087C9E5C3B33D5D125C9BDD01E904E5F03B10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d5:69:ee:a1:c3:f6:d4:da:1f:df:fa:c7:aa: 06:c9:62:e3:41:5c:88:f7:53:f1:a9:f5:2d:1e:41: 0c:5c:ef:13:8e:a3:8a:72:02:a3:f4:00:85:1b:49: 1b:d6:5f:21:b4:6e:0f:31:ba:3e:26:71:e2:e3:bb: bf:40:76:11:32:b9:c6:9e:c1:c9:b7:83:a1:ff:63: 59:e2:c0:ad:64:a8:8e:aa:5c:05:c4:02:40:a8:68: c7:38:1e:5a:e8:0c:d8:fb:24:9b:97:ce:53:70:2f: 5f:1b:cf:53:5c:fd:72:8c:4b:35:63:c0:79:dd:73: 1e:29:8a:60:55:29:b4:b8:8a:70:98:43:73:18:68: 31:8f:45:5c:16:56:57:05:73:e4:6a:9f:dc:97:78: 3a:5a:f2:04:30:48:20:b2:0f:10:a0:d7:a1:bc:c4: 41:a8:39:b6:e1:84:98:aa:c5:1b:d3:35:1b:7f:ce: a1:f2:11:ee:f2:d0:98:2d:a5:5d:47:6c:23:8a:37: 24:ca:ca:63:c8:56:4c:b7:ad:0a:86:3a:53:91:a4: 8e:f2:0c:3a:f2:b3:6a:ca:83:17:75:74:2e:40:4e: 2a:d6:66:f2:d7:0f:e1:09:eb:ab:1e:1e:f2:1d:1f: 59:89:6c:d8:aa:4f:0b:6b:58:5c:28:8a:91:63:64: 55:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B0:87:C9:E5:C3:B3:3D:5D:12:5C:9B:DD:01:E9:04:E5:F0:3B:10 X509v3 Authority Key Identifier: keyid:AF:6B:7B:CD:AC:F9:0B:A8:32:05:EA:29:83:27:37:9B:AB:48:94:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a36323a3a2f34382d3438203d3e20313333383237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:a640:62::/48 Signature Algorithm: sha256WithRSAEncryption 9d:00:e8:b4:8c:cc:07:1f:99:9f:1d:a9:f0:fb:e9:16:87:de: b1:a4:29:82:4f:f6:ed:29:ae:85:62:cc:7a:0f:62:3f:4a:68: f8:a4:da:12:55:87:4b:cc:19:3e:00:3c:3e:c2:d7:e1:fc:cd: 58:a7:53:2b:4d:12:60:84:f9:5a:ed:6f:b6:5d:74:1b:e2:4f: 6b:3e:92:dd:b1:88:cc:74:6f:8b:f6:6b:8b:97:65:55:49:56: 5c:22:60:32:6b:9e:e1:23:f3:2c:34:9d:9f:a3:4e:5b:40:ee: 33:92:af:bd:e4:c5:57:c6:8a:2b:f7:bf:8a:8a:00:aa:96:02: c7:4f:8e:9a:f7:7c:92:82:b5:e3:e2:a0:21:37:81:d1:95:ef: 16:62:3f:06:0f:36:d9:07:26:01:5e:a6:2f:cf:7a:da:28:ad: fa:7e:7d:94:37:0f:d2:24:ee:56:db:09:82:d7:87:99:70:4e: b3:02:a3:12:60:21:01:15:d6:1b:97:9b:f5:b9:be:dc:2b:d2: 78:81:2d:38:21:fe:f7:0e:7e:40:f0:e7:ea:32:7e:c4:65:e2: 35:12:96:ec:af:56:05:d7:59:b5:83:a7:17:95:51:db:33:47: 15:ce:37:df:5c:30:12:dc:15:2d:d2:22:8b:2f:4b:b0:9d:7d: 81:72:11:be -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUZ6b8xIGG7N6D9q5z4K3U+f4DWj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY2QjdCQ0RBQ0Y5MEJBODMyMDVFQTI5ODMyNzM3OUJB QjQ4OTQxODAeFw0yNjA1MDMwMjMwMjlaFw0yNzA1MDIwMjM1MjlaMDMxMTAvBgNV BAMTKDc1QjA4N0M5RTVDM0IzM0Q1RDEyNUM5QkREMDFFOTA0RTVGMDNCMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb1WnuocP21Nof3/rHqgbJYuNB XIj3U/Gp9S0eQQxc7xOOo4pyAqP0AIUbSRvWXyG0bg8xuj4mceLju79AdhEyucae wcm3g6H/Y1niwK1kqI6qXAXEAkCoaMc4HlroDNj7JJuXzlNwL18bz1Nc/XKMSzVj wHndcx4pimBVKbS4inCYQ3MYaDGPRVwWVlcFc+Rqn9yXeDpa8gQwSCCyDxCg16G8 xEGoObbhhJiqxRvTNRt/zqHyEe7y0JgtpV1HbCOKNyTKymPIVky3rQqGOlORpI7y DDrys2rKgxd1dC5ATirWZvLXD+EJ66seHvIdH1mJbNiqTwtrWFwoipFjZFX9AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUdbCHyeXDsz1dElyb3QHpBOXwOxAwHwYDVR0j BBgwFoAUr2t7zaz5C6gyBeopgyc3m6tIlBgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWE5OTAxMjUtNjA5YS00OGM4LWFjODYtMWMzYmMzMTViYWQ2LzAvQUY2QjdCQ0RB Q0Y5MEJBODMyMDVFQTI5ODMyNzM3OUJBQjQ4OTQxOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjZCN0JDREFDRjkwQkE4MzIwNUVBMjk4MzI3Mzc5QkFCNDg5 NDE4LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVhOTkwMTI1LTYwOWEtNDhjOC1h Yzg2LTFjM2JjMzE1YmFkNi8wLzMyMzQzMDM0M2E2MTM2MzQzMDNhMzYzMjNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzMzM4MzIzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQEpkAA YjANBgkqhkiG9w0BAQsFAAOCAQEAnQDotIzMBx+Znx2p8PvpFofesaQpgk/27Smu hWLMeg9iP0po+KTaElWHS8wZPgA8PsLX4fzNWKdTK00SYIT5Wu1vtl10G+JPaz6S 3bGIzHRvi/Zri5dlVUlWXCJgMmue4SPzLDSdn6NOW0DuM5KvveTFV8aKK/e/iooA qpYCx0+Omvd8koK14+KgITeB0ZXvFmI/Bg822QcmAV6mL8962iit+n59lDcP0iTu VtsJgteHmXBOswKjEmAhARXWG5eb9bm+3CvSeIEtOCH+9w5+QPDn6jJ+xGXiNRKW 7K9WBddZtYOnF5VR2zNHFc4331wwEtwVLdIiiy9LsJ19gXIRvg== -----END CERTIFICATE-----Generated at Wed May 13 13:25:20 2026 by rpki-client