$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/323430323a616230303a3a2f34382d3438203d3e203234323036.roa File: 323430323a616230303a3a2f34382d3438203d3e203234323036.roa (raw, json) Hash identifier: Dgwgj5jmSf0MitHLxiLeWJGMcOFeVudcVpq/Mh8BAbU= Subject key identifier: 0E:04:F6:A3:54:7D:F8:A5:02:A0:04:14:57:B2:A5:E1:74:ED:D5:E2 Certificate issuer: /CN=E6B678AE8DC843399DF534610764D871D4D698D8 Certificate serial: 642B113001EE10F2A7F6DD86418129A66A566BFF Authority key identifier: E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/323430323a616230303a3a2f34382d3438203d3e203234323036.roa Signing time: Sun 03 May 2026 02:57:28 +0000 ROA not before: Sun 03 May 2026 02:52:28 +0000 ROA not after: Sun 02 May 2027 02:57:28 +0000 asID: 24206 IP address blocks: 2402:ab00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:14:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:2b:11:30:01:ee:10:f2:a7:f6:dd:86:41:81:29:a6:6a:56:6b:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6B678AE8DC843399DF534610764D871D4D698D8 Validity Not Before: May 3 02:52:28 2026 GMT Not After : May 2 02:57:28 2027 GMT Subject: CN=0E04F6A3547DF8A502A0041457B2A5E174EDD5E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:06:08:10:02:5e:dd:bb:44:bf:ec:59:f7:72: 98:7c:87:44:52:39:e1:9f:ac:a8:23:0b:54:bf:e6: 3f:a9:7c:ef:40:ca:76:38:61:e6:64:fd:74:08:3f: 28:49:fe:2c:69:9b:4e:27:96:ba:33:0f:ba:9a:04: 42:de:45:d8:bd:d0:c7:3c:a9:ed:a1:c6:82:fc:2e: 3b:30:2b:50:35:f8:32:28:b5:bd:0c:39:20:8d:bd: 7b:4f:0b:95:02:7b:e0:65:ff:40:4f:82:6b:47:95: dd:30:ed:ae:d7:fe:9c:c7:f1:e7:8f:7d:44:78:46: b3:5e:da:92:9b:88:2e:37:49:ca:75:85:b1:3a:ac: 17:f1:a4:df:87:58:2d:06:b1:78:a2:bb:20:04:c7: ef:05:c1:8d:55:5a:05:e8:c4:f3:c2:f1:f2:34:5a: 88:bf:92:bd:91:52:04:a2:70:40:fe:56:a7:f8:4b: 39:01:bd:cc:1e:cd:c4:20:5e:21:f7:f5:0b:3b:2f: d7:69:3a:3b:9d:c2:87:c8:e0:1d:8f:5c:54:d3:93: e8:f9:4d:26:0e:ee:5f:56:16:24:ea:4d:f6:cf:ec: 2b:13:5c:33:32:e6:07:5e:db:12:02:32:2d:c5:fe: 68:99:f2:fd:ef:cc:89:7d:2d:67:3a:bd:91:41:ff: 84:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:04:F6:A3:54:7D:F8:A5:02:A0:04:14:57:B2:A5:E1:74:ED:D5:E2 X509v3 Authority Key Identifier: keyid:E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/323430323a616230303a3a2f34382d3438203d3e203234323036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:ab00::/48 Signature Algorithm: sha256WithRSAEncryption 94:62:ae:89:12:fc:b6:33:38:e7:fe:f3:e3:e6:41:b8:58:59: fc:18:e4:3c:22:6b:55:07:33:ba:4f:9b:e1:5f:0a:1e:77:31: 99:d2:ee:1b:28:4b:58:c7:2c:1e:d2:60:a7:59:bc:b6:05:e2: b2:7c:2b:e1:e3:61:a2:93:72:2e:3c:26:dd:a7:ab:85:74:46: 60:2d:06:d9:2c:e4:57:c6:a6:fa:e9:b0:3d:3a:5f:f2:83:47: 16:2c:70:2b:2b:ee:0a:75:c9:0a:58:84:df:26:5f:84:55:ad: 18:3c:c2:24:61:54:69:7f:fa:d2:b8:4a:5c:69:89:3b:37:46: 90:58:eb:7c:51:cb:29:a1:01:e1:85:36:15:d1:96:ea:1d:49: dc:52:a4:d3:48:16:73:b0:7f:68:6d:37:9d:02:a0:73:03:ac: 81:1b:38:42:76:06:b0:ee:e0:25:10:52:82:52:1e:3f:b5:b1: a7:1d:2c:27:80:21:4d:ce:67:33:b3:c0:77:06:74:b4:c6:ff: 9a:28:d5:fd:be:5d:65:f8:d1:e9:a3:da:d5:20:78:00:80:e9: 13:c8:8b:25:e1:a8:e0:3b:c3:80:2c:6b:67:e2:33:39:2b:e5: 98:ff:cb:63:a9:d6:4e:f7:34:ff:77:a8:4f:b5:45:44:a7:ea: 17:fa:1f:03 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUZCsRMAHuEPKn9t2GQYEppmpWa/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTZCNjc4QUU4REM4NDMzOTlERjUzNDYxMDc2NEQ4NzFE NEQ2OThEODAeFw0yNjA1MDMwMjUyMjhaFw0yNzA1MDIwMjU3MjhaMDMxMTAvBgNV BAMTKDBFMDRGNkEzNTQ3REY4QTUwMkEwMDQxNDU3QjJBNUUxNzRFREQ1RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8BggQAl7du0S/7Fn3cph8h0RS OeGfrKgjC1S/5j+pfO9AynY4YeZk/XQIPyhJ/ixpm04nlrozD7qaBELeRdi90Mc8 qe2hxoL8LjswK1A1+DIotb0MOSCNvXtPC5UCe+Bl/0BPgmtHld0w7a7X/pzH8eeP fUR4RrNe2pKbiC43Scp1hbE6rBfxpN+HWC0GsXiiuyAEx+8FwY1VWgXoxPPC8fI0 Woi/kr2RUgSicED+Vqf4SzkBvcwezcQgXiH39Qs7L9dpOjudwofI4B2PXFTTk+j5 TSYO7l9WFiTqTfbP7CsTXDMy5gde2xICMi3F/miZ8v3vzIl9LWc6vZFB/4SxAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUDgT2o1R9+KUCoAQUV7Kl4XTt1eIwHwYDVR0j BBgwFoAU5rZ4ro3IQzmd9TRhB2TYcdTWmNgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTc5MjJmODktM2U5Yi00YjIxLTkxODYtYTY0OGMyZGEzZjdiLzAvRTZCNjc4QUU4 REM4NDMzOTlERjUzNDYxMDc2NEQ4NzFENEQ2OThEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNkI2NzhBRThEQzg0MzM5OURGNTM0NjEwNzY0RDg3MUQ0RDY5 OEQ4LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E3OTIyZjg5LTNlOWItNGIyMS05 MTg2LWE2NDhjMmRhM2Y3Yi8wLzMyMzQzMDMyM2E2MTYyMzAzMDNhM2EyZjM0Mzgy ZDM0MzgyMDNkM2UyMDMyMzQzMjMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAqsAAAAwDQYJKoZI hvcNAQELBQADggEBAJRirokS/LYzOOf+8+PmQbhYWfwY5Dwia1UHM7pPm+FfCh53 MZnS7hsoS1jHLB7SYKdZvLYF4rJ8K+HjYaKTci48Jt2nq4V0RmAtBtks5FfGpvrp sD06X/KDRxYscCsr7gp1yQpYhN8mX4RVrRg8wiRhVGl/+tK4SlxpiTs3RpBY63xR yymhAeGFNhXRluodSdxSpNNIFnOwf2htN50CoHMDrIEbOEJ2BrDu4CUQUoJSHj+1 sacdLCeAIU3OZzOzwHcGdLTG/5oo1f2+XWX40emj2tUgeACA6RPIiyXhqOA7w4As a2fiMzkr5Zj/y2Op1k73NP93qE+1RUSn6hf6HwM= -----END CERTIFICATE-----Generated at Wed May 13 04:36:28 2026 by rpki-client