$ rpki-client -vvf rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/323430363a396163303a3a2f33322d3438203d3e20313431313134.roa File: 323430363a396163303a3a2f33322d3438203d3e20313431313134.roa (raw, json) Hash identifier: pTJhsbE/QsnSwa5lw6Tt2iC9wy8jG1QR42mcBhsUqfg= Subject key identifier: 3F:31:E4:CA:95:51:6F:EC:26:2B:9F:FE:1C:21:0B:20:77:B2:80:E0 Certificate issuer: /CN=AC7439239B591D2499B70C3230C1C35BE2A0104B Certificate serial: 7F1590173D3A9096C5DF4F2DBB936DC99B6EDECD Authority key identifier: AC:74:39:23:9B:59:1D:24:99:B7:0C:32:30:C1:C3:5B:E2:A0:10:4B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7439239B591D2499B70C3230C1C35BE2A0104B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/323430363a396163303a3a2f33322d3438203d3e20313431313134.roa Signing time: Sun 03 May 2026 02:39:34 +0000 ROA not before: Sun 03 May 2026 02:34:34 +0000 ROA not after: Sun 02 May 2027 02:39:34 +0000 asID: 141114 IP address blocks: 2406:9ac0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.crl rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7439239B591D2499B70C3230C1C35BE2A0104B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:09:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:15:90:17:3d:3a:90:96:c5:df:4f:2d:bb:93:6d:c9:9b:6e:de:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC7439239B591D2499B70C3230C1C35BE2A0104B Validity Not Before: May 3 02:34:34 2026 GMT Not After : May 2 02:39:34 2027 GMT Subject: CN=3F31E4CA95516FEC262B9FFE1C210B2077B280E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:61:ab:01:a6:6a:6d:a2:23:97:a7:87:0a:ea: 2b:54:a4:4e:ad:f3:0c:bf:b0:52:4b:c8:fb:da:fd: e3:aa:20:6c:3c:0f:21:a0:4e:89:57:80:17:e9:2d: 49:f3:34:29:7a:24:34:75:ec:de:aa:e2:22:6c:8c: ca:9e:71:ba:c2:d5:3b:a7:53:e9:f9:f5:54:43:14: 64:0a:46:78:d9:15:11:55:87:9c:fd:61:59:59:e5: aa:52:de:75:c0:5d:17:73:8f:e7:e0:5f:fa:80:19: 2c:a4:e6:21:f4:30:86:c8:ab:05:1a:e2:36:99:e8: 35:eb:95:2e:8e:7d:59:ac:9a:ae:5d:36:14:ff:c9: 64:25:ac:b9:52:f8:a6:2e:e5:68:89:89:7b:90:2f: f9:61:ce:e2:33:35:3d:25:84:fe:78:90:c1:fa:58: 93:6b:f1:28:19:e4:a2:20:b6:d6:20:72:d7:eb:f2: 03:c4:96:d7:50:2c:a3:6c:dd:57:a0:48:e2:0f:31: 64:8c:0e:a9:6f:9a:a6:8f:7c:07:72:46:2c:af:16: d4:a3:58:a5:7a:87:a3:9b:75:6d:de:cb:ba:13:e7: 35:00:d4:e5:bc:9e:66:bb:10:e8:6c:7d:be:66:1a: cd:ae:ea:5a:67:87:e5:53:fe:14:5b:2d:fb:ca:6c: ae:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:31:E4:CA:95:51:6F:EC:26:2B:9F:FE:1C:21:0B:20:77:B2:80:E0 X509v3 Authority Key Identifier: keyid:AC:74:39:23:9B:59:1D:24:99:B7:0C:32:30:C1:C3:5B:E2:A0:10:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7439239B591D2499B70C3230C1C35BE2A0104B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/323430363a396163303a3a2f33322d3438203d3e20313431313134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:9ac0::/32 Signature Algorithm: sha256WithRSAEncryption b0:fd:01:75:1a:17:61:40:0e:ca:b8:1f:82:67:ec:d6:ee:41: 31:9e:bf:ff:cb:50:40:80:9c:35:83:34:dd:33:3a:38:0e:bc: 78:31:ee:4f:0b:02:9e:d7:6e:0d:d9:93:e8:4e:0a:2c:e6:a6: e4:2c:7e:10:df:5c:f9:98:b0:0e:42:01:27:db:55:17:1c:35: 62:8c:bc:f0:f0:01:3e:15:09:1f:49:8d:af:6c:46:56:9a:2b: b9:14:ed:ac:23:1c:b0:87:6d:3d:07:1d:56:be:41:e3:64:52: b6:47:b1:3d:39:3b:7b:a2:26:70:c0:40:72:1d:25:42:13:90: 42:58:b5:05:9c:5c:f9:ea:2d:52:d5:a7:41:8e:49:fe:3e:92: ba:b6:17:9b:f4:a0:da:fe:77:3b:3d:4b:e3:17:96:bd:dc:2c: c8:d8:07:ec:ff:42:14:71:74:91:63:bd:39:c1:f4:b6:8b:dd: 3e:67:dc:84:ba:29:49:7f:f6:6c:bd:f8:2d:89:cb:e8:c1:96: 91:11:4d:0f:bf:4a:3c:00:47:51:a3:da:db:83:a7:98:83:9b: 36:9f:64:33:3e:41:da:fd:71:74:4a:75:68:f3:71:48:5c:36: c9:ff:fe:24:b5:51:eb:04:9b:1c:cf:42:e5:3b:3c:3d:3a:4c: e8:db:50:40 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUfxWQFz06kJbF308tu5NtyZtu3s0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM3NDM5MjM5QjU5MUQyNDk5QjcwQzMyMzBDMUMzNUJF MkEwMTA0QjAeFw0yNjA1MDMwMjM0MzRaFw0yNzA1MDIwMjM5MzRaMDMxMTAvBgNV BAMTKDNGMzFFNENBOTU1MTZGRUMyNjJCOUZGRTFDMjEwQjIwNzdCMjgwRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpYasBpmptoiOXp4cK6itUpE6t 8wy/sFJLyPva/eOqIGw8DyGgTolXgBfpLUnzNCl6JDR17N6q4iJsjMqecbrC1Tun U+n59VRDFGQKRnjZFRFVh5z9YVlZ5apS3nXAXRdzj+fgX/qAGSyk5iH0MIbIqwUa 4jaZ6DXrlS6OfVmsmq5dNhT/yWQlrLlS+KYu5WiJiXuQL/lhzuIzNT0lhP54kMH6 WJNr8SgZ5KIgttYgctfr8gPEltdQLKNs3VegSOIPMWSMDqlvmqaPfAdyRiyvFtSj WKV6h6ObdW3ey7oT5zUA1OW8nma7EOhsfb5mGs2u6lpnh+VT/hRbLfvKbK5hAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUPzHkypVRb+wmK5/+HCELIHeygOAwHwYDVR0j BBgwFoAUrHQ5I5tZHSSZtwwyMMHDW+KgEEswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU3ZTg5ZTgtNTNhYS00NGY2LWI2ZDgtNTg3OTA3OGJmNjY0LzAvQUM3NDM5MjM5 QjU5MUQyNDk5QjcwQzMyMzBDMUMzNUJFMkEwMTA0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzc0MzkyMzlCNTkxRDI0OTlCNzBDMzIzMEMxQzM1QkUyQTAx MDRCLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY1N2U4OWU4LTUzYWEtNDRmNi1i NmQ4LTU4NzkwNzhiZjY2NC8wLzMyMzQzMDM2M2EzOTYxNjMzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzQzMTMxMzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQGmsAwDQYJKoZI hvcNAQELBQADggEBALD9AXUaF2FADsq4H4Jn7NbuQTGev//LUECAnDWDNN0zOjgO vHgx7k8LAp7Xbg3Zk+hOCizmpuQsfhDfXPmYsA5CASfbVRccNWKMvPDwAT4VCR9J ja9sRlaaK7kU7awjHLCHbT0HHVa+QeNkUrZHsT05O3uiJnDAQHIdJUITkEJYtQWc XPnqLVLVp0GOSf4+krq2F5v0oNr+dzs9S+MXlr3cLMjYB+z/QhRxdJFjvTnB9LaL 3T5n3IS6KUl/9my9+C2Jy+jBlpERTQ+/SjwAR1Gj2tuDp5iDmzafZDM+Qdr9cXRK dWjzcUhcNsn//iS1UesEmxzPQuU7PD06TOjbUEA= -----END CERTIFICATE-----Generated at Wed May 13 10:36:42 2026 by rpki-client