$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/323430363a3663303a3a2f33322d3438203d3e20313430333936.roa File: 323430363a3663303a3a2f33322d3438203d3e20313430333936.roa (raw, json) Hash identifier: /CDimDlLGoFwieJxhxPKJxVZVpw8NVAKdG9UUGzsEz8= Subject key identifier: 8B:A1:3A:62:F2:35:1A:FF:93:74:5A:EA:5E:BF:C2:C7:74:37:A5:93 Certificate issuer: /CN=68227ACB60D3E9E10C6B9A57D383139A1008BCF0 Certificate serial: 27212ED3B9914F839D1E88BE8519576C0EF251BE Authority key identifier: 68:22:7A:CB:60:D3:E9:E1:0C:6B:9A:57:D3:83:13:9A:10:08:BC:F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/323430363a3663303a3a2f33322d3438203d3e20313430333936.roa Signing time: Sun 03 May 2026 02:45:08 +0000 ROA not before: Sun 03 May 2026 02:40:08 +0000 ROA not after: Sun 02 May 2027 02:45:08 +0000 asID: 140396 IP address blocks: 2406:6c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.crl rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:56:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:21:2e:d3:b9:91:4f:83:9d:1e:88:be:85:19:57:6c:0e:f2:51:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68227ACB60D3E9E10C6B9A57D383139A1008BCF0 Validity Not Before: May 3 02:40:08 2026 GMT Not After : May 2 02:45:08 2027 GMT Subject: CN=8BA13A62F2351AFF93745AEA5EBFC2C77437A593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:63:aa:c5:40:1f:d2:1d:d7:a2:15:51:31:a4: 3c:de:27:e0:df:41:d6:5d:55:4c:72:27:54:96:79: fe:2e:ac:5c:c8:de:d2:63:0c:85:44:50:cb:24:05: 8b:24:cd:cc:38:50:8c:18:42:64:9d:e2:46:f7:14: ea:44:f1:e8:cd:7b:0f:e5:e2:93:38:22:b6:ec:06: c4:70:35:64:34:e7:8c:96:6c:48:19:f5:b7:a0:c7: 8b:b0:7b:b7:c6:4c:1f:4f:39:67:0d:07:c8:5b:06: fa:7a:53:c1:d3:bc:66:5e:e9:14:97:34:4a:67:e2: 92:c9:35:c0:ec:43:da:78:d6:b7:62:14:28:fe:6a: f9:5f:ee:e2:9b:80:a7:3b:ec:43:d7:ab:24:19:e6: d0:5d:b2:70:09:e8:2f:e9:91:bb:9f:0b:d4:cc:42: 2c:67:c7:fa:f1:b7:c6:42:96:a6:b4:f1:f6:4e:bd: 30:b1:29:c4:bc:72:56:cd:e7:57:7e:f6:c0:34:e5: f8:f5:29:b8:b9:8e:62:8a:c6:ad:57:2a:14:28:8d: a0:b8:8f:38:74:88:bd:07:d8:13:6b:89:b9:c4:c2: 7a:2d:19:da:db:53:a8:4e:90:db:72:f9:4d:7f:79: 4b:3b:da:8c:db:b4:5d:5c:2b:02:e7:dc:01:9a:eb: be:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A1:3A:62:F2:35:1A:FF:93:74:5A:EA:5E:BF:C2:C7:74:37:A5:93 X509v3 Authority Key Identifier: keyid:68:22:7A:CB:60:D3:E9:E1:0C:6B:9A:57:D3:83:13:9A:10:08:BC:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/323430363a3663303a3a2f33322d3438203d3e20313430333936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:6c0::/32 Signature Algorithm: sha256WithRSAEncryption 74:90:86:18:ff:39:f5:36:7a:7b:66:fd:ff:2f:44:e6:42:82: f7:c5:9e:0e:93:9f:bf:f2:04:8a:f7:8b:85:c5:58:86:ee:2a: b3:17:97:2e:72:5f:64:50:4d:bf:c2:88:08:73:c6:5b:32:ad: 56:e2:ab:d1:18:a2:79:1a:e0:ee:c8:44:a8:63:09:20:cc:b7: 36:da:d3:3a:49:b2:42:03:2c:a4:59:bd:39:22:5b:db:a0:5d: ee:d2:af:30:ef:35:d8:9e:b5:4a:2e:2e:15:42:af:f3:a0:c3: ab:e2:94:44:15:68:5f:9f:64:cb:63:9b:56:0f:1f:e1:f9:52: fa:c7:24:85:c2:6b:ea:be:6e:5f:56:fa:8d:92:ed:39:96:6e: 90:b1:d7:17:33:3e:8a:8b:c2:d5:dc:00:99:71:b5:2c:da:d6: 58:3c:52:5d:89:53:ec:87:2a:be:a7:6d:00:d5:b0:bc:c7:54: 4c:6c:ad:46:96:17:70:08:29:96:71:39:65:b2:5c:11:f3:92: 43:5e:77:5e:1e:57:00:02:6c:21:6e:27:d4:dc:02:18:e8:7f: f5:a9:6f:ce:e5:97:51:97:df:2d:40:de:86:8f:bb:97:67:9d: 97:fe:0a:af:b8:44:7c:e5:1f:b2:d3:e8:0f:21:d1:9b:e1:47: 93:21:f8:d0 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUJyEu07mRT4OdHoi+hRlXbA7yUb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjgyMjdBQ0I2MEQzRTlFMTBDNkI5QTU3RDM4MzEzOUEx MDA4QkNGMDAeFw0yNjA1MDMwMjQwMDhaFw0yNzA1MDIwMjQ1MDhaMDMxMTAvBgNV BAMTKDhCQTEzQTYyRjIzNTFBRkY5Mzc0NUFFQTVFQkZDMkM3NzQzN0E1OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYY6rFQB/SHdeiFVExpDzeJ+Df QdZdVUxyJ1SWef4urFzI3tJjDIVEUMskBYskzcw4UIwYQmSd4kb3FOpE8ejNew/l 4pM4IrbsBsRwNWQ054yWbEgZ9begx4uwe7fGTB9POWcNB8hbBvp6U8HTvGZe6RSX NEpn4pLJNcDsQ9p41rdiFCj+avlf7uKbgKc77EPXqyQZ5tBdsnAJ6C/pkbufC9TM Qixnx/rxt8ZClqa08fZOvTCxKcS8clbN51d+9sA05fj1Kbi5jmKKxq1XKhQojaC4 jzh0iL0H2BNribnEwnotGdrbU6hOkNty+U1/eUs72ozbtF1cKwLn3AGa677TAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUi6E6YvI1Gv+TdFrqXr/Cx3Q3pZMwHwYDVR0j BBgwFoAUaCJ6y2DT6eEMa5pX04MTmhAIvPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I1ZWNkNzQtNDQyNC00ZDQwLTk2YTEtN2ZkNzYzMDExOTQ0LzAvNjgyMjdBQ0I2 MEQzRTlFMTBDNkI5QTU3RDM4MzEzOUExMDA4QkNGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODIyN0FDQjYwRDNFOUUxMEM2QjlBNTdEMzgzMTM5QTEwMDhC Q0YwLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdiNWVjZDc0LTQ0MjQtNGQ0MC05 NmExLTdmZDc2MzAxMTk0NC8wLzMyMzQzMDM2M2EzNjYzMzAzYTNhMmYzMzMyMmQz NDM4MjAzZDNlMjAzMTM0MzAzMzM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBgbAMA0GCSqGSIb3 DQEBCwUAA4IBAQB0kIYY/zn1Nnp7Zv3/L0TmQoL3xZ4Ok5+/8gSK94uFxViG7iqz F5cucl9kUE2/wogIc8ZbMq1W4qvRGKJ5GuDuyESoYwkgzLc22tM6SbJCAyykWb05 IlvboF3u0q8w7zXYnrVKLi4VQq/zoMOr4pREFWhfn2TLY5tWDx/h+VL6xySFwmvq vm5fVvqNku05lm6QsdcXMz6Ki8LV3ACZcbUs2tZYPFJdiVPshyq+p20A1bC8x1RM bK1GlhdwCCmWcTllslwR85JDXndeHlcAAmwhbifU3AIY6H/1qW/O5ZdRl98tQN6G j7uXZ52X/gqvuER85R+y0+gPIdGb4UeTIfjQ -----END CERTIFICATE-----Generated at Wed May 13 08:24:32 2026 by rpki-client