$ rpki-client -vvf rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa File: 323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa (raw, json) Hash identifier: 43hN5CD23xxhiHpx+833RrzIqG8jDW9esNMFg94JtSw= Subject key identifier: 22:84:2D:9C:F1:57:D6:53:A2:05:FB:51:9E:11:38:21:57:A7:42:93 Certificate issuer: /CN=207EA811568CF1DB9A757936B650F6F68EBB08B5 Certificate serial: 666DB48D79E1B685E11A048E58117EC7475C32A9 Authority key identifier: 20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa Signing time: Sun 03 May 2026 02:53:08 +0000 ROA not before: Sun 03 May 2026 02:48:08 +0000 ROA not after: Sun 02 May 2027 02:53:08 +0000 asID: 140405 IP address blocks: 2406:7e00:59::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:6d:b4:8d:79:e1:b6:85:e1:1a:04:8e:58:11:7e:c7:47:5c:32:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=207EA811568CF1DB9A757936B650F6F68EBB08B5 Validity Not Before: May 3 02:48:08 2026 GMT Not After : May 2 02:53:08 2027 GMT Subject: CN=22842D9CF157D653A205FB519E11382157A74293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e9:ef:69:f3:39:93:e0:12:e4:8a:01:8f:04: d4:54:6f:96:94:ee:87:38:82:40:bc:9a:d6:c0:0c: a1:64:1d:17:12:2f:0d:2e:eb:7f:0c:68:a5:07:56: 5d:6d:0b:29:b4:be:2d:b5:6d:4b:cb:c0:89:02:66: a3:c5:58:a0:c5:74:fb:3c:b9:28:b3:2e:2a:92:5c: cf:68:45:76:37:f4:47:48:79:de:1d:65:8a:8d:a9: 76:83:26:17:ba:23:42:52:59:c3:06:27:30:22:8f: ee:df:6e:6e:d6:90:db:fb:a3:10:09:20:5b:fa:c2: 3d:7a:30:3a:89:38:81:63:8c:1a:06:72:6d:ff:83: d1:72:0b:31:1c:b2:56:a2:2b:31:e4:5e:12:d8:f6: 67:93:2d:c0:70:73:db:a6:73:90:87:ca:43:67:70: a3:74:3f:37:0f:b9:a7:a8:0d:a0:77:5e:ed:e4:b6: c3:3a:73:a7:63:9b:36:c3:fb:8d:40:84:8d:61:22: e6:c2:af:26:1e:c2:50:e0:7a:b3:a8:34:0e:a8:2b: 59:c1:aa:d8:6e:17:f2:26:ca:73:ed:20:f1:08:04: 46:c6:9b:26:ca:c1:f4:b1:9c:8b:83:2c:c2:2d:35: c2:cc:31:5b:10:0c:52:57:ce:8d:e1:91:bc:1d:44: 65:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:84:2D:9C:F1:57:D6:53:A2:05:FB:51:9E:11:38:21:57:A7:42:93 X509v3 Authority Key Identifier: keyid:20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:7e00:59::/48 Signature Algorithm: sha256WithRSAEncryption 18:27:8d:09:3f:bf:06:47:8e:cb:17:00:e5:27:52:43:17:2e: 34:63:d6:79:25:35:01:98:ca:bb:5c:be:74:b6:f7:30:95:04: eb:39:76:1a:f1:88:a0:06:e4:2a:f1:3d:2c:f2:90:1b:c7:5e: 37:d8:7d:f9:ea:ce:1e:b3:7f:f2:ac:51:6c:c4:e4:81:08:4a: d8:3c:7f:6d:49:5a:be:11:72:f8:a1:75:57:2d:93:64:b6:3b: 1b:ce:51:c8:85:11:97:65:95:d9:8c:82:fc:39:f3:32:e3:86: 17:70:d5:66:b8:2d:b7:a6:d3:72:f5:ed:c0:73:3e:ef:ca:91: 7f:9f:d8:52:0a:72:9e:ad:a3:9a:8a:b3:0b:58:c8:e9:72:16: c7:93:ef:82:21:26:4a:39:db:6d:d2:ac:bd:d1:24:3c:ea:81: aa:9f:37:57:75:43:c7:37:8b:aa:74:45:6e:c0:38:fb:02:8e: bd:5f:a1:81:7f:e5:07:78:55:0d:8e:2a:f1:de:1c:b3:76:80: e9:58:67:f3:cd:74:5f:b9:d1:d8:a5:09:38:2e:46:70:5b:c5: d6:b5:ff:65:21:fb:a8:ab:65:87:cc:1e:0a:ed:2c:18:a5:a9: 7b:dd:9b:c9:c0:34:c0:a3:22:03:b7:3a:96:74:ac:12:25:e3: 4a:18:f7:49 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUZm20jXnhtoXhGgSOWBF+x0dcMqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA3RUE4MTE1NjhDRjFEQjlBNzU3OTM2QjY1MEY2RjY4 RUJCMDhCNTAeFw0yNjA1MDMwMjQ4MDhaFw0yNzA1MDIwMjUzMDhaMDMxMTAvBgNV BAMTKDIyODQyRDlDRjE1N0Q2NTNBMjA1RkI1MTlFMTEzODIxNTdBNzQyOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE6e9p8zmT4BLkigGPBNRUb5aU 7oc4gkC8mtbADKFkHRcSLw0u638MaKUHVl1tCym0vi21bUvLwIkCZqPFWKDFdPs8 uSizLiqSXM9oRXY39EdIed4dZYqNqXaDJhe6I0JSWcMGJzAij+7fbm7WkNv7oxAJ IFv6wj16MDqJOIFjjBoGcm3/g9FyCzEcslaiKzHkXhLY9meTLcBwc9umc5CHykNn cKN0PzcPuaeoDaB3Xu3ktsM6c6djmzbD+41AhI1hIubCryYewlDgerOoNA6oK1nB qthuF/ImynPtIPEIBEbGmybKwfSxnIuDLMItNcLMMVsQDFJXzo3hkbwdRGWpAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUIoQtnPFX1lOiBftRnhE4IVenQpMwHwYDVR0j BBgwFoAUIH6oEVaM8duadXk2tlD29o67CLUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTYxMjQzMjktZWMyMC00NDYwLWFjMzEtOWMzNmNmOTRmM2ZiLzAvMjA3RUE4MTE1 NjhDRjFEQjlBNzU3OTM2QjY1MEY2RjY4RUJCMDhCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDdFQTgxMTU2OENGMURCOUE3NTc5MzZCNjUwRjZGNjhFQkIw OEI1LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzk2MTI0MzI5LWVjMjAtNDQ2MC1h YzMxLTljMzZjZjk0ZjNmYi8wLzMyMzQzMDM2M2EzNzY1MzAzMDNhMzUzOTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzMDM0MzAzNS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQGfgAA WTANBgkqhkiG9w0BAQsFAAOCAQEAGCeNCT+/BkeOyxcA5SdSQxcuNGPWeSU1AZjK u1y+dLb3MJUE6zl2GvGIoAbkKvE9LPKQG8deN9h9+erOHrN/8qxRbMTkgQhK2Dx/ bUlavhFy+KF1Vy2TZLY7G85RyIURl2WV2YyC/DnzMuOGF3DVZrgtt6bTcvXtwHM+ 78qRf5/YUgpynq2jmoqzC1jI6XIWx5PvgiEmSjnbbdKsvdEkPOqBqp83V3VDxzeL qnRFbsA4+wKOvV+hgX/lB3hVDY4q8d4cs3aA6Vhn8810X7nR2KUJOC5GcFvF1rX/ ZSH7qKtlh8weCu0sGKWpe92bycA0wKMiA7c6lnSsEiXjShj3SQ== -----END CERTIFICATE-----Generated at Wed May 13 11:56:21 2026 by rpki-client