$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/323430343a366434303a3a2f33322d3438203d3e20313338383130.roa File: 323430343a366434303a3a2f33322d3438203d3e20313338383130.roa (raw, json) Hash identifier: Ttc1yzic4zKa6U83sNQ/9DeGu31iQSJLn/pkQfUTZ0o= Subject key identifier: 1D:6F:D4:E4:58:4F:53:22:77:2A:D7:80:88:E7:88:6C:87:36:BF:78 Certificate issuer: /CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB Certificate serial: 70680F994FAFC1D98433422C5AF7FA46480B5A83 Authority key identifier: 24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/323430343a366434303a3a2f33322d3438203d3e20313338383130.roa Signing time: Sun 03 May 2026 02:49:33 +0000 ROA not before: Sun 03 May 2026 02:44:33 +0000 ROA not after: Sun 02 May 2027 02:49:33 +0000 asID: 138810 IP address blocks: 2404:6d40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:68:0f:99:4f:af:c1:d9:84:33:42:2c:5a:f7:fa:46:48:0b:5a:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB Validity Not Before: May 3 02:44:33 2026 GMT Not After : May 2 02:49:33 2027 GMT Subject: CN=1D6FD4E4584F5322772AD78088E7886C8736BF78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:31:66:3e:fb:ad:c5:ff:07:31:01:a1:a4:c8: 56:60:27:81:61:37:55:1f:0b:c0:36:90:a4:c3:7f: b5:b0:08:df:02:02:be:e3:3e:38:26:f7:5b:17:fd: cf:a8:75:17:cc:29:cd:0a:6b:7b:8a:48:af:72:7f: 46:19:11:da:95:a5:06:9b:99:c2:1e:0b:36:70:01: 08:2b:6c:5c:28:da:00:3d:ca:d0:a7:15:7e:6b:41: aa:32:e2:94:21:82:1e:81:38:45:77:60:07:cf:c1: 9f:fc:d2:3d:8f:fd:83:3f:88:ae:9f:48:18:3d:d5: 7a:4d:2a:9b:45:da:49:73:4e:01:14:7c:a3:ed:c8: c0:7b:a4:0d:51:84:1c:87:77:0d:3e:73:77:db:a9: 66:5f:d7:65:b6:d6:bb:38:e3:98:34:3d:94:43:fb: 71:07:ad:88:38:7e:ad:98:e7:26:3e:0a:31:4c:d7: ab:8c:1e:07:0a:dd:25:ed:52:dc:45:e0:a5:42:5e: 6b:b5:48:90:fb:cb:ec:49:de:a6:9c:54:54:88:7a: fc:05:eb:c2:c7:10:e4:97:a8:28:4f:c6:ca:e3:e7: b9:23:81:3b:50:36:36:29:7b:36:86:d2:04:96:eb: 83:d6:76:fb:53:ed:61:13:24:17:97:2a:12:de:2d: 2f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:6F:D4:E4:58:4F:53:22:77:2A:D7:80:88:E7:88:6C:87:36:BF:78 X509v3 Authority Key Identifier: keyid:24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/323430343a366434303a3a2f33322d3438203d3e20313338383130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:6d40::/32 Signature Algorithm: sha256WithRSAEncryption 43:17:b1:41:38:ac:d1:15:46:fe:19:dd:76:bd:db:0a:33:2f: 50:4f:1a:e9:46:95:f0:b7:16:7a:c2:b9:0b:57:f9:ac:73:af: 47:c9:64:77:2f:c5:1a:96:ba:93:64:1e:f5:96:8f:31:85:06: fa:be:eb:09:2a:37:6e:59:49:1f:57:64:4d:d6:f3:4e:49:8c: 17:f4:1a:94:4b:82:38:57:43:b1:40:ea:5d:d9:f5:e4:a8:a5: 64:17:47:8e:c3:b6:3e:f6:95:5a:2c:68:fa:3d:3e:65:21:cd: 97:1e:81:af:5b:e3:43:f5:14:33:bc:78:c8:51:c3:63:74:4c: 51:2c:12:4c:cc:b3:f2:e4:ef:da:b0:54:e4:17:2c:d8:e6:bb: 77:d6:80:96:88:60:a1:9a:75:b9:fb:b2:57:d6:81:ce:88:0e: 4c:8b:29:d2:0e:56:80:84:da:61:67:30:92:2d:96:e1:24:09: ab:ae:ca:54:a4:69:c9:5a:57:7f:be:e5:09:8e:e2:61:75:5f: fc:5b:59:48:c0:d6:b3:78:b7:88:04:e1:4c:06:d7:88:4b:1f: 41:d4:5b:4f:fb:9a:82:14:f9:ae:1f:97:93:50:0f:6a:d1:94: fa:47:b2:d2:09:48:b8:aa:c2:8a:bb:03:85:37:d3:d6:29:e5: 03:90:34:6b -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUcGgPmU+vwdmEM0IsWvf6RkgLWoMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQzMjRBMUZGM0VCQkY5OTk0MDA4MzEwRDMyRTZCNjFC MkI1RUFBQjAeFw0yNjA1MDMwMjQ0MzNaFw0yNzA1MDIwMjQ5MzNaMDMxMTAvBgNV BAMTKDFENkZENEU0NTg0RjUzMjI3NzJBRDc4MDg4RTc4ODZDODczNkJGNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtMWY++63F/wcxAaGkyFZgJ4Fh N1UfC8A2kKTDf7WwCN8CAr7jPjgm91sX/c+odRfMKc0Ka3uKSK9yf0YZEdqVpQab mcIeCzZwAQgrbFwo2gA9ytCnFX5rQaoy4pQhgh6BOEV3YAfPwZ/80j2P/YM/iK6f SBg91XpNKptF2klzTgEUfKPtyMB7pA1RhByHdw0+c3fbqWZf12W21rs445g0PZRD +3EHrYg4fq2Y5yY+CjFM16uMHgcK3SXtUtxF4KVCXmu1SJD7y+xJ3qacVFSIevwF 68LHEOSXqChPxsrj57kjgTtQNjYpezaG0gSW64PWdvtT7WETJBeXKhLeLS+nAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUHW/U5FhPUyJ3KteAiOeIbIc2v3gwHwYDVR0j BBgwFoAUJDJKH/Prv5mUAIMQ0y5rYbK16qswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGIzNmU4OGQtZDU3My00Y2JiLWI0NjAtYTBiOTY5YWE4NGQ1LzAvMjQzMjRBMUZG M0VCQkY5OTk0MDA4MzEwRDMyRTZCNjFCMkI1RUFBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNDMyNEExRkYzRUJCRjk5OTQwMDgzMTBEMzJFNkI2MUIyQjVF QUFCLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhiMzZlODhkLWQ1NzMtNGNiYi1i NDYwLWEwYjk2OWFhODRkNS8wLzMyMzQzMDM0M2EzNjY0MzQzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzMzODM4MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQEbUAwDQYJKoZI hvcNAQELBQADggEBAEMXsUE4rNEVRv4Z3Xa92wozL1BPGulGlfC3FnrCuQtX+axz r0fJZHcvxRqWupNkHvWWjzGFBvq+6wkqN25ZSR9XZE3W805JjBf0GpRLgjhXQ7FA 6l3Z9eSopWQXR47Dtj72lVosaPo9PmUhzZcega9b40P1FDO8eMhRw2N0TFEsEkzM s/Lk79qwVOQXLNjmu3fWgJaIYKGadbn7slfWgc6IDkyLKdIOVoCE2mFnMJItluEk CauuylSkaclaV3++5QmO4mF1X/xbWUjA1rN4t4gE4UwG14hLH0HUW0/7moIU+a4f l5NQD2rRlPpHstIJSLiqwoq7A4U309Yp5QOQNGs= -----END CERTIFICATE-----Generated at Wed May 13 05:57:18 2026 by rpki-client