$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a3a2f33322d3332203d3e20313333383237.roa File: 323430343a613634303a3a2f33322d3332203d3e20313333383237.roa (raw, json) Hash identifier: sxFoSO5566DvevtkqciXR0xAuQamF9AudcC/0/+/BMA= Subject key identifier: 11:06:B4:C7:C0:98:A8:47:53:DF:0E:2F:17:8D:F0:A2:AF:56:08:57 Certificate issuer: /CN=AF6B7BCDACF90BA83205EA298327379BAB489418 Certificate serial: 2B336E49FBCA8617992BB103729FAF01480F075D Authority key identifier: AF:6B:7B:CD:AC:F9:0B:A8:32:05:EA:29:83:27:37:9B:AB:48:94:18 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a3a2f33322d3332203d3e20313333383237.roa Signing time: Sun 03 May 2026 02:35:30 +0000 ROA not before: Sun 03 May 2026 02:30:30 +0000 ROA not after: Sun 02 May 2027 02:35:30 +0000 asID: 133827 IP address blocks: 2404:a640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.crl rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:11:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:33:6e:49:fb:ca:86:17:99:2b:b1:03:72:9f:af:01:48:0f:07:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF6B7BCDACF90BA83205EA298327379BAB489418 Validity Not Before: May 3 02:30:30 2026 GMT Not After : May 2 02:35:30 2027 GMT Subject: CN=1106B4C7C098A84753DF0E2F178DF0A2AF560857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:65:33:4d:0c:a5:c9:d9:28:17:82:0d:cd:46: d8:34:cf:d2:74:03:1c:40:69:b0:42:39:5b:58:2b: b9:11:97:28:ee:8d:ae:24:4b:08:f3:7d:e4:04:20: 8c:6c:5f:7b:af:4f:3a:66:54:37:df:b8:df:99:4d: 5c:ca:b4:cc:f9:b8:df:90:20:94:e5:e7:e0:48:68: ef:c1:b7:ec:98:6e:d2:9e:85:78:0b:d9:12:1a:4e: b6:d9:bf:08:87:17:ba:2f:ac:f3:9a:fc:fe:4c:1f: dd:0b:17:d7:ec:4b:3a:e4:87:42:f0:d6:4c:96:cf: 35:0b:a1:06:bb:bc:50:04:7f:23:f3:65:3a:c9:17: 79:f7:70:2d:5b:7a:a4:88:c0:b9:06:ac:db:09:5d: b6:4c:33:22:e2:7d:90:df:4f:12:b7:a5:53:a8:e1: d6:9b:ac:58:c6:9f:cb:b9:7a:63:33:23:b1:9e:c3: fc:3c:d1:56:df:7c:90:d4:33:d6:d2:7e:9d:50:a7: 97:ba:ee:79:f2:e2:21:ad:22:5c:c8:61:b2:89:6a: 0d:84:85:19:26:eb:be:af:da:ec:16:f8:73:e6:ed: 3b:43:f7:bf:52:28:c0:89:11:38:11:38:9a:a2:1e: 97:d1:85:77:05:08:7c:2f:f6:9b:cc:c3:a5:82:29: 56:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:06:B4:C7:C0:98:A8:47:53:DF:0E:2F:17:8D:F0:A2:AF:56:08:57 X509v3 Authority Key Identifier: keyid:AF:6B:7B:CD:AC:F9:0B:A8:32:05:EA:29:83:27:37:9B:AB:48:94:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a3a2f33322d3332203d3e20313333383237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:a640::/32 Signature Algorithm: sha256WithRSAEncryption 5c:c4:4e:27:08:b8:07:c7:45:c3:a7:e5:1e:ce:36:0a:e3:14: 1a:74:f6:17:69:24:35:a1:6b:4d:39:ea:e7:8a:9a:1f:1e:a9: a9:51:78:54:0b:28:54:7d:77:b2:34:9c:2f:0f:16:08:b6:bf: d3:98:1d:f4:c9:9f:2c:43:57:c1:1c:03:51:c1:de:73:cf:2b: 13:26:7c:cd:89:20:2a:5e:c6:9c:1e:a5:7e:a9:c7:c4:fe:50: 07:be:d7:3b:4e:95:04:00:3a:fe:e2:7f:c9:b4:08:a1:47:ad: 8d:4f:5b:0c:13:09:45:1f:43:32:99:99:d6:4b:ae:46:4a:47: 58:89:97:11:14:a3:56:16:fc:a3:0d:69:62:ab:04:8e:5f:48: 2f:a8:bf:7e:20:fb:54:d4:60:c7:2d:f2:4a:53:0f:c5:da:b6: be:f4:e0:4f:68:ca:cf:74:50:61:81:f8:3f:c8:69:7b:d9:48: e3:a9:6c:63:41:b9:f0:b4:e4:a9:bb:a6:35:51:13:26:46:e5: ba:0d:f3:2c:f2:bc:9c:f5:a4:e6:5b:92:af:0f:d0:46:ab:01: 3b:c5:50:f3:10:16:40:51:cb:8c:fa:6c:95:31:15:71:52:08: 89:36:ca:04:dc:ea:05:25:f8:94:21:51:5a:4a:03:cd:60:bb: 1e:5f:0c:47 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUKzNuSfvKhheZK7EDcp+vAUgPB10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY2QjdCQ0RBQ0Y5MEJBODMyMDVFQTI5ODMyNzM3OUJB QjQ4OTQxODAeFw0yNjA1MDMwMjMwMzBaFw0yNzA1MDIwMjM1MzBaMDMxMTAvBgNV BAMTKDExMDZCNEM3QzA5OEE4NDc1M0RGMEUyRjE3OERGMEEyQUY1NjA4NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiZTNNDKXJ2SgXgg3NRtg0z9J0 AxxAabBCOVtYK7kRlyjuja4kSwjzfeQEIIxsX3uvTzpmVDffuN+ZTVzKtMz5uN+Q IJTl5+BIaO/Bt+yYbtKehXgL2RIaTrbZvwiHF7ovrPOa/P5MH90LF9fsSzrkh0Lw 1kyWzzULoQa7vFAEfyPzZTrJF3n3cC1beqSIwLkGrNsJXbZMMyLifZDfTxK3pVOo 4dabrFjGn8u5emMzI7Gew/w80VbffJDUM9bSfp1Qp5e67nny4iGtIlzIYbKJag2E hRkm676v2uwW+HPm7TtD979SKMCJETgROJqiHpfRhXcFCHwv9pvMw6WCKVbDAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUEQa0x8CYqEdT3w4vF43woq9WCFcwHwYDVR0j BBgwFoAUr2t7zaz5C6gyBeopgyc3m6tIlBgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWE5OTAxMjUtNjA5YS00OGM4LWFjODYtMWMzYmMzMTViYWQ2LzAvQUY2QjdCQ0RB Q0Y5MEJBODMyMDVFQTI5ODMyNzM3OUJBQjQ4OTQxOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjZCN0JDREFDRjkwQkE4MzIwNUVBMjk4MzI3Mzc5QkFCNDg5 NDE4LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVhOTkwMTI1LTYwOWEtNDhjOC1h Yzg2LTFjM2JjMzE1YmFkNi8wLzMyMzQzMDM0M2E2MTM2MzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzMzM4MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQEpkAwDQYJKoZI hvcNAQELBQADggEBAFzETicIuAfHRcOn5R7ONgrjFBp09hdpJDWha0056ueKmh8e qalReFQLKFR9d7I0nC8PFgi2v9OYHfTJnyxDV8EcA1HB3nPPKxMmfM2JICpexpwe pX6px8T+UAe+1ztOlQQAOv7if8m0CKFHrY1PWwwTCUUfQzKZmdZLrkZKR1iJlxEU o1YW/KMNaWKrBI5fSC+ov34g+1TUYMct8kpTD8Xatr704E9oys90UGGB+D/IaXvZ SOOpbGNBufC05Km7pjVREyZG5boN8yzyvJz1pOZbkq8P0EarATvFUPMQFkBRy4z6 bJUxFXFSCIk2ygTc6gUl+JQhUVpKA81gux5fDEc= -----END CERTIFICATE-----Generated at Wed May 13 13:45:41 2026 by rpki-client