$ rpki-client -vvf rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/323430363a323134303a3a2f33322d3438203d3e203234323032.roa File: 323430363a323134303a3a2f33322d3438203d3e203234323032.roa (raw, json) Hash identifier: kqAPpNXie+q2l37gsl3EdI8q/ahDj2lY/Z2RQl2axK8= Subject key identifier: 04:BD:58:9D:84:73:2E:6D:76:C0:B0:1F:50:D3:4F:4A:F5:60:E4:57 Certificate issuer: /CN=A23D2170DA27C430D1B3E7D124ABD655F46B001F Certificate serial: 69B9E04377BABFD04484639A920C22744D850DAF Authority key identifier: A2:3D:21:70:DA:27:C4:30:D1:B3:E7:D1:24:AB:D6:55:F4:6B:00:1F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A23D2170DA27C430D1B3E7D124ABD655F46B001F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/323430363a323134303a3a2f33322d3438203d3e203234323032.roa Signing time: Sun 03 May 2026 02:38:02 +0000 ROA not before: Sun 03 May 2026 02:33:02 +0000 ROA not after: Sun 02 May 2027 02:38:02 +0000 asID: 24202 IP address blocks: 2406:2140::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/A23D2170DA27C430D1B3E7D124ABD655F46B001F.crl rsync://rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/A23D2170DA27C430D1B3E7D124ABD655F46B001F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A23D2170DA27C430D1B3E7D124ABD655F46B001F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:b9:e0:43:77:ba:bf:d0:44:84:63:9a:92:0c:22:74:4d:85:0d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A23D2170DA27C430D1B3E7D124ABD655F46B001F Validity Not Before: May 3 02:33:02 2026 GMT Not After : May 2 02:38:02 2027 GMT Subject: CN=04BD589D84732E6D76C0B01F50D34F4AF560E457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f9:72:83:36:81:ab:ba:00:1e:c0:dd:05:4c: 5f:24:bc:63:ee:4c:53:9d:5b:8e:80:0b:8c:14:62: 85:7f:6f:b0:07:fd:7e:f9:82:e9:a8:78:08:b2:38: b8:c8:5c:da:87:5c:97:ff:13:63:2c:ab:8e:65:de: e3:a9:10:bf:82:da:85:4a:1a:c6:43:01:81:f0:f0: a6:2c:0d:d1:54:83:fb:72:70:0c:87:f6:bd:3f:1b: 19:13:58:65:9c:dd:89:60:07:63:e8:d6:a3:20:f8: 82:56:cd:4a:de:3c:13:dd:02:e1:58:27:2d:a8:f4: 9c:3e:f3:80:f4:1a:6f:ee:da:63:37:a9:7c:92:7c: 47:d5:4b:15:25:49:13:72:f1:f9:f7:7b:05:15:bf: 1e:05:ca:c8:00:64:24:e8:5f:b0:c6:17:4d:df:9a: 34:e6:af:05:d2:fe:91:d1:91:22:79:4d:7d:6d:d9: 5f:7f:a6:01:57:9d:6b:cd:70:9b:31:dd:42:9d:b8: d7:56:2f:67:2f:cf:f4:df:24:60:22:39:d9:38:07: fe:c9:dd:b4:ff:c3:d8:75:d9:8c:4c:dd:96:1d:5b: ff:e2:4e:7c:ab:83:08:39:33:ba:91:1d:24:4a:73: 9a:47:64:19:d4:42:3c:a5:ac:3e:6c:22:77:06:df: a6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:BD:58:9D:84:73:2E:6D:76:C0:B0:1F:50:D3:4F:4A:F5:60:E4:57 X509v3 Authority Key Identifier: keyid:A2:3D:21:70:DA:27:C4:30:D1:B3:E7:D1:24:AB:D6:55:F4:6B:00:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/A23D2170DA27C430D1B3E7D124ABD655F46B001F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A23D2170DA27C430D1B3E7D124ABD655F46B001F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/323430363a323134303a3a2f33322d3438203d3e203234323032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:2140::/32 Signature Algorithm: sha256WithRSAEncryption 4f:76:ec:8f:a0:78:19:96:43:3a:87:bd:d8:89:b7:8f:ae:bd: 5c:ef:73:89:40:7a:a9:0f:03:a7:5f:01:eb:a3:ce:38:2e:31: da:05:f7:7e:aa:14:86:f0:fb:78:6e:22:7b:83:7f:fc:7b:e4: ee:00:5e:f5:51:fe:46:a4:68:aa:3e:a0:5b:88:2a:9d:2f:ba: 77:25:14:07:9b:aa:8e:61:9e:6d:c7:ea:3d:77:13:4c:08:d6: c2:5d:ac:6b:3f:b7:1a:cb:b0:2b:60:22:db:69:b6:40:c6:d6: 30:d6:75:b3:3c:0a:82:b5:0c:3b:c6:2c:de:e6:1c:4c:63:4a: 94:01:e9:5b:b8:6e:f9:39:b4:94:15:53:9b:7c:b2:08:ea:b4: f8:d9:d5:dd:b0:d5:d6:14:f8:e5:e9:9f:11:71:76:c8:da:bc: 21:f9:13:a2:0b:ac:57:e8:c0:26:11:d6:23:b2:35:0a:96:53: 16:90:21:c2:b5:7f:2f:d5:7d:4e:59:a9:24:35:ce:76:57:5d: 16:c6:3a:ce:58:25:b5:42:78:e8:19:26:79:7d:c0:16:d4:67: 7e:c3:5e:fe:b2:98:17:86:0e:b2:a9:8b:e1:e9:26:db:c3:d7: 2e:e2:92:06:a3:15:71:9e:4a:d3:6d:3e:86:88:69:b4:1f:42: c9:a7:ce:b2 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUabngQ3e6v9BEhGOakgwidE2FDa8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIzRDIxNzBEQTI3QzQzMEQxQjNFN0QxMjRBQkQ2NTVG NDZCMDAxRjAeFw0yNjA1MDMwMjMzMDJaFw0yNzA1MDIwMjM4MDJaMDMxMTAvBgNV BAMTKDA0QkQ1ODlEODQ3MzJFNkQ3NkMwQjAxRjUwRDM0RjRBRjU2MEU0NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR+XKDNoGrugAewN0FTF8kvGPu TFOdW46AC4wUYoV/b7AH/X75gumoeAiyOLjIXNqHXJf/E2Msq45l3uOpEL+C2oVK GsZDAYHw8KYsDdFUg/tycAyH9r0/GxkTWGWc3YlgB2Po1qMg+IJWzUrePBPdAuFY Jy2o9Jw+84D0Gm/u2mM3qXySfEfVSxUlSRNy8fn3ewUVvx4FysgAZCToX7DGF03f mjTmrwXS/pHRkSJ5TX1t2V9/pgFXnWvNcJsx3UKduNdWL2cvz/TfJGAiOdk4B/7J 3bT/w9h12YxM3ZYdW//iTnyrgwg5M7qRHSRKc5pHZBnUQjylrD5sIncG36Y3AgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUBL1YnYRzLm12wLAfUNNPSvVg5FcwHwYDVR0j BBgwFoAUoj0hcNonxDDRs+fRJKvWVfRrAB8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjFmMDJhODktN2VlOC00YTgzLTgwMDQtMjM0ZDkxNGEwZmQ0LzAvQTIzRDIxNzBE QTI3QzQzMEQxQjNFN0QxMjRBQkQ2NTVGNDZCMDAxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMjNEMjE3MERBMjdDNDMwRDFCM0U3RDEyNEFCRDY1NUY0NkIw MDFGLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzYxZjAyYTg5LTdlZTgtNGE4My04 MDA0LTIzNGQ5MTRhMGZkNC8wLzMyMzQzMDM2M2EzMjMxMzQzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMyMzQzMjMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBiFAMA0GCSqGSIb3 DQEBCwUAA4IBAQBPduyPoHgZlkM6h73YibePrr1c73OJQHqpDwOnXwHro844LjHa Bfd+qhSG8Pt4biJ7g3/8e+TuAF71Uf5GpGiqPqBbiCqdL7p3JRQHm6qOYZ5tx+o9 dxNMCNbCXaxrP7cay7ArYCLbabZAxtYw1nWzPAqCtQw7xize5hxMY0qUAelbuG75 ObSUFVObfLII6rT42dXdsNXWFPjl6Z8RcXbI2rwh+ROiC6xX6MAmEdYjsjUKllMW kCHCtX8v1X1OWakkNc52V10WxjrOWCW1QnjoGSZ5fcAW1Gd+w17+spgXhg6yqYvh 6Sbbw9cu4pIGoxVxnkrTbT6GiGm0H0LJp86y -----END CERTIFICATE-----Generated at Wed May 13 12:41:36 2026 by rpki-client