$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a3935363a3a2f34382d3438203d3e20313333383237.roa File: 323430343a613634303a3935363a3a2f34382d3438203d3e20313333383237.roa (raw, json) Hash identifier: m+sPMgDP6AqfDbfIIzCUcgfgt53+FkXMgNrd1zzKT1I= Subject key identifier: AB:98:0E:E8:82:14:5F:FA:D3:6B:F6:02:37:86:08:1D:8A:AE:0E:34 Certificate issuer: /CN=AF6B7BCDACF90BA83205EA298327379BAB489418 Certificate serial: 30D16539961CC6D35D63D89C69F691263D647A2A Authority key identifier: AF:6B:7B:CD:AC:F9:0B:A8:32:05:EA:29:83:27:37:9B:AB:48:94:18 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a3935363a3a2f34382d3438203d3e20313333383237.roa Signing time: Sun 03 May 2026 02:35:31 +0000 ROA not before: Sun 03 May 2026 02:30:31 +0000 ROA not after: Sun 02 May 2027 02:35:31 +0000 asID: 133827 IP address blocks: 2404:a640:956::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.crl rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:11:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:d1:65:39:96:1c:c6:d3:5d:63:d8:9c:69:f6:91:26:3d:64:7a:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF6B7BCDACF90BA83205EA298327379BAB489418 Validity Not Before: May 3 02:30:31 2026 GMT Not After : May 2 02:35:31 2027 GMT Subject: CN=AB980EE882145FFAD36BF6023786081D8AAE0E34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:80:f7:33:75:d8:7f:1e:1f:fe:95:20:76:50: 6c:f6:38:b0:25:db:0a:ca:f8:8c:8d:7d:24:f6:29: 68:25:d4:75:83:69:47:1c:29:cc:6c:63:36:b8:68: 6d:15:7d:d9:f1:41:d0:f6:b2:45:bb:42:75:77:05: 79:1e:b1:11:cd:5d:bd:fd:f8:cc:36:bf:03:67:3b: 7b:a4:a2:8e:a2:42:36:56:24:f7:63:15:6c:3a:14: 49:5a:e6:14:50:97:83:f7:89:c0:30:b5:25:6d:d3: db:55:0d:6e:89:a9:15:39:a4:56:92:e5:4b:0f:b6: 19:45:fc:cf:0b:3d:98:f2:71:2b:98:0e:75:bd:0d: f6:f3:42:82:2e:59:66:85:16:4e:b7:35:a2:b5:d9: bb:af:b2:74:e1:ab:4c:77:19:6b:b4:46:73:c1:ee: 2b:72:89:d8:a5:05:4c:3a:f5:50:6a:92:2a:2e:62: 6e:69:46:05:b1:30:1d:f9:79:28:41:b5:78:04:6e: 60:c1:9e:ac:6b:48:8e:22:11:ed:61:da:2d:79:dc: 99:77:01:81:b9:c4:c3:ec:6d:cd:82:7e:e6:a5:90: c3:c4:6f:17:14:67:b6:eb:34:1c:a7:c4:a8:a0:a8: 7e:79:4e:d6:ff:16:1b:e7:a7:40:0f:d6:f7:f8:bc: 52:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:98:0E:E8:82:14:5F:FA:D3:6B:F6:02:37:86:08:1D:8A:AE:0E:34 X509v3 Authority Key Identifier: keyid:AF:6B:7B:CD:AC:F9:0B:A8:32:05:EA:29:83:27:37:9B:AB:48:94:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a3935363a3a2f34382d3438203d3e20313333383237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:a640:956::/48 Signature Algorithm: sha256WithRSAEncryption 70:f1:8b:93:09:e1:96:c9:4c:91:7a:de:fc:34:cb:15:ed:b2: c0:b8:24:28:cf:82:0a:0d:69:b0:43:cf:26:c6:11:6f:f9:a2: 72:bd:d8:96:ab:af:24:9b:91:9c:ef:8c:7c:2b:f6:ec:fc:a1: df:30:7f:f3:39:3d:f4:70:c9:e4:6e:6e:a7:94:48:2d:9d:94: 50:95:06:a7:14:a2:23:cf:c9:79:28:e9:72:e8:8a:36:da:08: 2b:ae:8c:37:8a:7d:c3:9c:14:2e:43:8e:52:8c:00:e1:51:15: 55:a8:65:56:13:fb:a1:df:13:b6:60:40:f1:23:67:1a:e7:ce: ec:18:e8:c1:20:5e:ff:3b:44:98:c5:4c:77:92:f9:61:f2:2f: 6e:72:ce:83:31:11:fa:fe:8d:a8:91:2e:49:f9:f9:f3:46:8c: 37:30:41:9b:87:37:da:98:ff:7d:98:67:6a:20:b4:4f:6b:f0: 55:20:b3:6b:28:b9:72:6f:da:56:08:2f:cf:d4:c0:81:58:87: 60:51:f6:fd:a6:4d:3c:e8:6a:ab:d4:d4:ce:81:94:90:92:50: 30:82:23:05:fa:b4:e6:ef:8b:e5:cc:a9:c2:68:bd:df:0e:57: ae:75:33:3c:67:37:b7:60:b3:e5:08:6c:ea:f6:57:f8:63:0b: 06:90:da:62 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUMNFlOZYcxtNdY9icafaRJj1keiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY2QjdCQ0RBQ0Y5MEJBODMyMDVFQTI5ODMyNzM3OUJB QjQ4OTQxODAeFw0yNjA1MDMwMjMwMzFaFw0yNzA1MDIwMjM1MzFaMDMxMTAvBgNV BAMTKEFCOTgwRUU4ODIxNDVGRkFEMzZCRjYwMjM3ODYwODFEOEFBRTBFMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtgPczddh/Hh/+lSB2UGz2OLAl 2wrK+IyNfST2KWgl1HWDaUccKcxsYza4aG0VfdnxQdD2skW7QnV3BXkesRHNXb39 +Mw2vwNnO3ukoo6iQjZWJPdjFWw6FEla5hRQl4P3icAwtSVt09tVDW6JqRU5pFaS 5UsPthlF/M8LPZjycSuYDnW9DfbzQoIuWWaFFk63NaK12buvsnThq0x3GWu0RnPB 7ityidilBUw69VBqkiouYm5pRgWxMB35eShBtXgEbmDBnqxrSI4iEe1h2i153Jl3 AYG5xMPsbc2CfualkMPEbxcUZ7brNBynxKigqH55Ttb/Fhvnp0AP1vf4vFKDAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUq5gO6IIUX/rTa/YCN4YIHYquDjQwHwYDVR0j BBgwFoAUr2t7zaz5C6gyBeopgyc3m6tIlBgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWE5OTAxMjUtNjA5YS00OGM4LWFjODYtMWMzYmMzMTViYWQ2LzAvQUY2QjdCQ0RB Q0Y5MEJBODMyMDVFQTI5ODMyNzM3OUJBQjQ4OTQxOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjZCN0JDREFDRjkwQkE4MzIwNUVBMjk4MzI3Mzc5QkFCNDg5 NDE4LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVhOTkwMTI1LTYwOWEtNDhjOC1h Yzg2LTFjM2JjMzE1YmFkNi8wLzMyMzQzMDM0M2E2MTM2MzQzMDNhMzkzNTM2M2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzMzMzgzMjM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJASm QAlWMA0GCSqGSIb3DQEBCwUAA4IBAQBw8YuTCeGWyUyRet78NMsV7bLAuCQoz4IK DWmwQ88mxhFv+aJyvdiWq68km5Gc74x8K/bs/KHfMH/zOT30cMnkbm6nlEgtnZRQ lQanFKIjz8l5KOly6Io22ggrrow3in3DnBQuQ45SjADhURVVqGVWE/uh3xO2YEDx I2ca587sGOjBIF7/O0SYxUx3kvlh8i9ucs6DMRH6/o2okS5J+fnzRow3MEGbhzfa mP99mGdqILRPa/BVILNrKLlyb9pWCC/P1MCBWIdgUfb9pk086Gqr1NTOgZSQklAw giMF+rTm74vlzKnCaL3fDleudTM8Zze3YLPlCGzq9lf4YwsGkNpi -----END CERTIFICATE-----Generated at Wed May 13 14:03:31 2026 by rpki-client