$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/323430343a3162303a3a2f33322d3438203d3e203138303539.roa File: 323430343a3162303a3a2f33322d3438203d3e203138303539.roa (raw, json) Hash identifier: u7MWc3KmQeBb7M4BmAepVWodPDOV3ndPxTvo89FOvzg= Subject key identifier: B3:A3:FE:83:5B:0A:D8:4D:DD:02:3F:2D:7B:4C:D8:1D:A4:E8:F4:50 Certificate issuer: /CN=67239F5E47D123019D26807163E6542441401507 Certificate serial: 680E92368D3F4B7C74F6ED33586B7AF02A7ECA19 Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/323430343a3162303a3a2f33322d3438203d3e203138303539.roa Signing time: Sun 03 May 2026 03:03:51 +0000 ROA not before: Sun 03 May 2026 02:58:51 +0000 ROA not after: Sun 02 May 2027 03:03:51 +0000 asID: 18059 IP address blocks: 2404:1b0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:0e:92:36:8d:3f:4b:7c:74:f6:ed:33:58:6b:7a:f0:2a:7e:ca:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67239F5E47D123019D26807163E6542441401507 Validity Not Before: May 3 02:58:51 2026 GMT Not After : May 2 03:03:51 2027 GMT Subject: CN=B3A3FE835B0AD84DDD023F2D7B4CD81DA4E8F450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ad:b1:b9:da:45:28:74:4d:bd:18:b2:20:3c: 7a:46:fd:b2:0b:bf:d9:dc:58:5e:ab:43:01:af:2f: d2:64:d5:ad:33:2c:9e:da:98:b6:cd:70:73:8b:17: ed:44:33:da:d9:ee:66:92:8e:a0:39:6b:8e:5a:f4: 75:e8:3d:d6:75:45:59:3f:1a:91:cc:17:e8:2c:c1: 5b:c0:61:3a:e4:c6:7d:dc:64:cf:0d:37:c9:c7:dd: 2b:23:ed:80:6d:d6:f8:b2:52:4a:ed:9b:56:0a:f1: ab:8a:90:fd:d4:59:f6:3a:a7:51:fc:af:34:ec:09: 5d:8d:a9:72:38:4e:8e:21:ae:3c:ca:ad:46:ca:43: c5:ac:74:c7:d8:04:36:21:fd:d5:4e:a1:44:7b:9f: 12:a2:bd:8e:30:92:97:eb:29:cb:0f:49:b8:9f:b5: ef:59:b9:87:38:25:ce:0a:13:0c:a0:53:75:00:06: 43:ac:2a:a7:4f:8e:69:85:37:5d:82:da:dd:9c:27: 1a:c2:4d:3d:87:6f:8a:ba:8d:97:9e:36:40:8f:75: f8:b3:ee:af:d7:3a:c7:46:51:be:5b:26:cf:8d:90: 60:2e:35:0e:3b:80:75:05:bd:58:19:4a:6c:aa:81: fd:89:27:4c:80:08:d2:33:af:10:c7:0d:b4:d2:ca: 5e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A3:FE:83:5B:0A:D8:4D:DD:02:3F:2D:7B:4C:D8:1D:A4:E8:F4:50 X509v3 Authority Key Identifier: keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/323430343a3162303a3a2f33322d3438203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:1b0::/32 Signature Algorithm: sha256WithRSAEncryption 3a:4c:74:78:e0:b4:4f:ea:69:d6:08:69:50:1d:a4:6b:e0:ca: 41:1e:90:dc:8d:e2:ed:4f:db:23:ae:1b:0a:af:de:26:45:bc: 6d:ab:b0:72:3a:1a:b3:1b:7c:c5:45:41:9b:2c:75:e1:a9:e0: 3b:a9:2b:85:62:f9:da:bf:33:ea:39:c2:30:e2:b3:85:3c:d1: 8e:3c:95:c7:20:33:86:a2:34:e6:3b:fb:c3:ad:c0:c8:4b:82: 27:ca:1d:11:58:91:31:ec:6f:08:c6:f9:aa:32:fb:16:df:ac: 0f:34:f4:d2:d7:e1:5d:f1:db:9b:9a:8a:59:fc:d4:50:02:f7: ea:42:65:3e:1e:e7:fe:de:da:a0:85:57:10:03:11:74:67:d4: ed:34:1b:6f:3b:77:08:02:ca:4d:a9:9d:5f:a1:3f:16:3e:d5: 60:4c:59:4b:0c:67:6f:20:49:c5:b6:10:cd:63:2e:97:37:a9: fd:8c:72:dc:de:5f:8d:80:52:00:91:bf:34:ff:9b:bc:63:6f: 9f:61:7a:81:eb:7a:b4:47:44:0d:6e:47:60:7b:21:18:3a:ca: f6:2d:be:19:9d:ca:65:fe:9b:db:0f:c6:6f:ba:8d:ae:3c:22: 2d:e9:8f:fa:39:a3:9f:11:a5:1b:58:be:96:65:38:50:cc:78: da:c5:de:e1 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUaA6SNo0/S3x09u0zWGt68Cp+yhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjcyMzlGNUU0N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0 MTQwMTUwNzAeFw0yNjA1MDMwMjU4NTFaFw0yNzA1MDIwMzAzNTFaMDMxMTAvBgNV BAMTKEIzQTNGRTgzNUIwQUQ4NERERDAyM0YyRDdCNENEODFEQTRFOEY0NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkrbG52kUodE29GLIgPHpG/bIL v9ncWF6rQwGvL9Jk1a0zLJ7amLbNcHOLF+1EM9rZ7maSjqA5a45a9HXoPdZ1RVk/ GpHMF+gswVvAYTrkxn3cZM8NN8nH3Ssj7YBt1viyUkrtm1YK8auKkP3UWfY6p1H8 rzTsCV2NqXI4To4hrjzKrUbKQ8WsdMfYBDYh/dVOoUR7nxKivY4wkpfrKcsPSbif te9ZuYc4Jc4KEwygU3UABkOsKqdPjmmFN12C2t2cJxrCTT2Hb4q6jZeeNkCPdfiz 7q/XOsdGUb5bJs+NkGAuNQ47gHUFvVgZSmyqgf2JJ0yACNIzrxDHDbTSyl43AgMB AAGjggIuMIICKjAdBgNVHQ4EFgQUs6P+g1sK2E3dAj8te0zYHaTo9FAwHwYDVR0j BBgwFoAUZyOfXkfRIwGdJoBxY+ZUJEFAFQcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzI4MzY3NjMtMTJiNi00ZDhmLWFkMGItNGNkNWI2MTk1OWVmLzAvNjcyMzlGNUU0 N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0MTQwMTUwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzIzOUY1RTQ3RDEyMzAxOUQyNjgwNzE2M0U2NTQyNDQxNDAx NTA3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzI4MzY3NjMtMTJiNi00ZDhmLWFk MGItNGNkNWI2MTk1OWVmLzAvMzIzNDMwMzQzYTMxNjIzMDNhM2EyZjMzMzIyZDM0 MzgyMDNkM2UyMDMxMzgzMDM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBAGwMA0GCSqGSIb3DQEB CwUAA4IBAQA6THR44LRP6mnWCGlQHaRr4MpBHpDcjeLtT9sjrhsKr94mRbxtq7By OhqzG3zFRUGbLHXhqeA7qSuFYvnavzPqOcIw4rOFPNGOPJXHIDOGojTmO/vDrcDI S4Inyh0RWJEx7G8IxvmqMvsW36wPNPTS1+Fd8dubmopZ/NRQAvfqQmU+Huf+3tqg hVcQAxF0Z9TtNBtvO3cIAspNqZ1foT8WPtVgTFlLDGdvIEnFthDNYy6XN6n9jHLc 3l+NgFIAkb80/5u8Y2+fYXqB63q0R0QNbkdgeyEYOsr2Lb4Zncpl/pvbD8Zvuo2u PCIt6Y/6OaOfEaUbWL6WZThQzHjaxd7h -----END CERTIFICATE-----Generated at Wed May 13 10:20:23 2026 by rpki-client