$ rpki-client -vvf rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a323a3a2f34382d3438203d3e20313431393638.roa File: 323430373a366163303a323a3a2f34382d3438203d3e20313431393638.roa (raw, json) Hash identifier: Xd7kvB2d5pV98w0bGGy07hPiu9BB3biQaz9ZRgtaGiA= Subject key identifier: 71:32:73:87:E8:2B:70:D3:20:87:59:EB:5B:28:AA:02:72:7D:B9:35 Certificate issuer: /CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22 Certificate serial: 45C2E85A77F4EE4A4FCB3FD3E26F025ABE12C73E Authority key identifier: 54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a323a3a2f34382d3438203d3e20313431393638.roa Signing time: Sun 03 May 2026 02:56:13 +0000 ROA not before: Sun 03 May 2026 02:51:13 +0000 ROA not after: Sun 02 May 2027 02:56:13 +0000 asID: 141968 IP address blocks: 2407:6ac0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:19:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:c2:e8:5a:77:f4:ee:4a:4f:cb:3f:d3:e2:6f:02:5a:be:12:c7:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22 Validity Not Before: May 3 02:51:13 2026 GMT Not After : May 2 02:56:13 2027 GMT Subject: CN=71327387E82B70D3208759EB5B28AA02727DB935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:aa:ac:b8:47:3a:70:0d:72:72:e7:29:87:5d: 03:ff:f2:19:6c:9e:1b:ad:4b:2e:69:33:51:93:15: d3:2a:1a:f1:d3:92:1f:2a:c2:94:63:f9:36:f6:df: b3:df:ad:b7:34:71:08:07:6b:30:dc:6c:65:1b:d7: 78:cb:a8:30:6a:6b:3e:80:88:99:25:ec:03:2c:db: ce:13:7f:7b:e5:75:05:a7:4b:e2:5c:60:68:a2:a8: c6:68:88:99:06:43:db:d8:03:ec:bf:ce:f9:54:90: b1:6f:3e:46:76:32:42:08:a8:4d:5b:6c:96:c7:74: b9:51:23:55:0a:aa:dd:a9:4f:2c:5e:83:92:a4:4c: a5:d6:ef:eb:05:cb:b9:ae:05:74:0b:e2:32:77:ca: fb:ad:af:19:c3:e3:75:f0:c9:9f:4c:ce:c4:6c:8f: c4:a3:5f:90:2d:34:43:68:2c:06:06:c5:40:50:a1: d2:65:28:2c:4f:67:73:c5:96:e6:b9:44:56:d3:60: 6d:ee:01:a6:b9:32:1c:5d:01:89:f5:9d:5d:47:ce: f6:48:44:7c:04:aa:0d:5a:f8:f9:3e:52:ee:2f:72: 20:d8:27:0b:ae:de:0e:0f:b6:d7:61:48:6b:fa:5f: b3:85:d4:35:a0:5a:cb:1c:65:58:44:1c:95:84:31: 16:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:32:73:87:E8:2B:70:D3:20:87:59:EB:5B:28:AA:02:72:7D:B9:35 X509v3 Authority Key Identifier: keyid:54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a323a3a2f34382d3438203d3e20313431393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:6ac0:2::/48 Signature Algorithm: sha256WithRSAEncryption 5d:c5:b0:67:53:e5:5c:a0:fe:89:8c:3f:a8:8c:d4:86:32:01: 02:72:cb:80:d1:d8:38:98:ca:61:38:99:cc:6e:3e:5d:8f:98: cd:db:3a:b6:cb:fd:e6:b2:ba:dd:53:26:54:8e:a1:e1:e6:c9: e9:13:4f:eb:06:e7:40:e7:4d:1b:df:dc:65:4c:fc:6d:45:eb: a5:72:3e:3d:4f:7a:53:17:d0:7a:5c:be:30:94:e7:3e:f1:88: 02:26:b9:e0:7e:a0:2f:9e:0c:88:27:25:5f:ab:6a:52:3e:1c: 78:79:d0:73:54:30:1f:a6:3c:cc:7e:20:ab:ef:2f:14:ce:32: 4f:9c:c3:d4:f9:e3:ad:09:9d:fc:b7:9b:1d:3e:85:5e:c0:d0: bd:8a:84:e9:7a:c1:d8:5d:f8:38:04:f5:71:c2:a5:1b:aa:18: 50:96:0e:d5:c0:a1:35:22:02:9c:a4:f1:4d:93:0f:17:d3:72: 74:9e:9c:9e:24:c7:5b:96:19:51:47:70:9b:b9:62:30:ec:02: 7e:71:d0:df:40:81:44:0a:84:5f:ee:ec:92:d1:35:73:33:3b: 58:4c:63:11:bf:cc:d7:a1:ff:be:ba:a5:24:39:f5:a4:68:75: d7:43:0c:32:2a:5f:fa:c5:3b:78:06:8d:b2:cb:09:56:06:cb: 9a:96:6f:11 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIURcLoWnf07kpPyz/T4m8CWr4Sxz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTRGN0EwMDhEOUJCRTlENUQ1MzkzMzY0MjVENEI4RkQz NjhEQkIyMjAeFw0yNjA1MDMwMjUxMTNaFw0yNzA1MDIwMjU2MTNaMDMxMTAvBgNV BAMTKDcxMzI3Mzg3RTgyQjcwRDMyMDg3NTlFQjVCMjhBQTAyNzI3REI5MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjqqy4RzpwDXJy5ymHXQP/8hls nhutSy5pM1GTFdMqGvHTkh8qwpRj+Tb237Pfrbc0cQgHazDcbGUb13jLqDBqaz6A iJkl7AMs284Tf3vldQWnS+JcYGiiqMZoiJkGQ9vYA+y/zvlUkLFvPkZ2MkIIqE1b bJbHdLlRI1UKqt2pTyxeg5KkTKXW7+sFy7muBXQL4jJ3yvutrxnD43XwyZ9MzsRs j8SjX5AtNENoLAYGxUBQodJlKCxPZ3PFlua5RFbTYG3uAaa5MhxdAYn1nV1HzvZI RHwEqg1a+Pk+Uu4vciDYJwuu3g4PttdhSGv6X7OF1DWgWsscZVhEHJWEMRaNAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUcTJzh+grcNMgh1nrWyiqAnJ9uTUwHwYDVR0j BBgwFoAUVPegCNm76dXVOTNkJdS4/TaNuyIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTM2YTIxNzEtMTJhMC00ZTAxLWJjYWItYmUzYjZiODM2ZjVkLzAvNTRGN0EwMDhE OUJCRTlENUQ1MzkzMzY0MjVENEI4RkQzNjhEQkIyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NEY3QTAwOEQ5QkJFOUQ1RDUzOTMzNjQyNUQ0QjhGRDM2OERC QjIyLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2EzNmEyMTcxLTEyYTAtNGUwMS1i Y2FiLWJlM2I2YjgzNmY1ZC8wLzMyMzQzMDM3M2EzNjYxNjMzMDNhMzIzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzEzOTM2Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkB2rAAAIw DQYJKoZIhvcNAQELBQADggEBAF3FsGdT5Vyg/omMP6iM1IYyAQJyy4DR2DiYymE4 mcxuPl2PmM3bOrbL/eayut1TJlSOoeHmyekTT+sG50DnTRvf3GVM/G1F66VyPj1P elMX0HpcvjCU5z7xiAImueB+oC+eDIgnJV+ralI+HHh50HNUMB+mPMx+IKvvLxTO Mk+cw9T5460Jnfy3mx0+hV7A0L2KhOl6wdhd+DgE9XHCpRuqGFCWDtXAoTUiApyk 8U2TDxfTcnSenJ4kx1uWGVFHcJu5YjDsAn5x0N9AgUQKhF/u7JLRNXMzO1hMYxG/ zNeh/766pSQ59aRodddDDDIqX/rFO3gGjbLLCVYGy5qWbxE= -----END CERTIFICATE-----Generated at Wed May 13 04:09:14 2026 by rpki-client