$ rpki-client -vvf rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/323430363a313334303a3a2f33322d3332203d3e20313430343037.roa File: 323430363a313334303a3a2f33322d3332203d3e20313430343037.roa (raw, json) Hash identifier: WxEwSz+sWi75wTD9LX4+TZFvBImk89xubZTfF5v2cCg= Subject key identifier: E4:26:0A:7D:07:F0:00:40:38:30:77:FF:AE:BA:39:F6:DE:B5:54:51 Certificate issuer: /CN=ACB5F5BD4845167F55B8DBC49245C40C476C72D1 Certificate serial: 5F71C8AA3535551E885E805BEB46022328A33EDA Authority key identifier: AC:B5:F5:BD:48:45:16:7F:55:B8:DB:C4:92:45:C4:0C:47:6C:72:D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/323430363a313334303a3a2f33322d3332203d3e20313430343037.roa Signing time: Sun 03 May 2026 03:05:03 +0000 ROA not before: Sun 03 May 2026 03:00:03 +0000 ROA not after: Sun 02 May 2027 03:05:03 +0000 asID: 140407 IP address blocks: 2406:1340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.crl rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:71:c8:aa:35:35:55:1e:88:5e:80:5b:eb:46:02:23:28:a3:3e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACB5F5BD4845167F55B8DBC49245C40C476C72D1 Validity Not Before: May 3 03:00:03 2026 GMT Not After : May 2 03:05:03 2027 GMT Subject: CN=E4260A7D07F00040383077FFAEBA39F6DEB55451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:73:1d:b4:18:d7:19:c3:0c:23:72:bd:5d:da: 3a:51:9a:13:e3:78:63:25:49:03:11:8f:28:5c:a8: b5:fc:2f:a7:1a:bb:74:cd:c0:eb:ff:c6:b9:d5:88: 2e:e3:6c:c8:29:2f:98:d5:83:48:01:c4:67:ce:ef: 6e:de:f3:ae:df:05:9a:71:cb:32:07:a3:2e:e2:b4: 4f:f6:a4:6c:ec:65:c3:a4:09:44:66:32:4d:76:4f: 45:98:92:90:eb:67:8f:3d:79:9f:72:f1:27:b2:10: 67:18:1d:db:c9:23:a3:f6:9e:bf:3a:df:e9:26:35: b2:70:0c:be:33:27:94:d8:cd:d4:4d:c5:7c:0e:6b: 3b:51:66:ca:e7:70:b3:eb:30:bd:b7:24:d2:f3:b6: 58:3c:82:28:60:1c:ed:41:8d:8a:c6:16:77:c0:7d: 5a:26:0d:9d:10:e6:0b:f7:29:63:0e:c7:7e:db:d7: 10:00:0b:c2:f0:9f:20:b9:c6:de:9a:13:1a:ca:01: 30:f5:85:5a:04:32:b4:37:ad:32:93:ad:9c:71:68: 1f:dd:df:6e:a4:7d:31:70:be:66:b1:8f:07:01:32: 9c:ba:21:07:a7:cd:9e:d8:a4:d1:f3:06:0a:c9:94: 33:cb:b7:72:79:12:d7:dd:1d:da:b0:b6:63:f3:83: 5d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:26:0A:7D:07:F0:00:40:38:30:77:FF:AE:BA:39:F6:DE:B5:54:51 X509v3 Authority Key Identifier: keyid:AC:B5:F5:BD:48:45:16:7F:55:B8:DB:C4:92:45:C4:0C:47:6C:72:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/323430363a313334303a3a2f33322d3332203d3e20313430343037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:1340::/32 Signature Algorithm: sha256WithRSAEncryption 30:b1:52:e7:ef:c0:fb:a7:12:87:bb:9d:10:b8:a3:11:e9:46: ea:d1:c3:c5:29:5c:1a:f3:e4:cd:02:5a:12:c3:57:c7:8f:be: 90:5f:39:e4:07:6b:6a:a6:2e:dd:26:f6:da:f8:8e:63:5c:dd: 9d:3b:f3:be:3b:b5:8a:a0:34:79:6b:ca:3b:6b:dc:44:76:a6: 25:73:1b:b8:78:b2:94:fd:66:26:a3:09:38:83:9f:67:ad:49: 4a:16:e4:9a:98:1f:30:9c:5e:1f:1e:23:f7:61:51:bb:f7:fc: c4:ca:9f:16:6d:74:8a:58:54:b0:76:be:43:6a:9e:f6:e5:6f: d7:35:a4:6c:52:d6:aa:91:b9:b3:e1:e5:74:87:5f:69:11:74: c4:bb:0a:2e:e2:58:7d:f0:a1:57:d3:d0:8a:15:35:52:5d:4f: 75:ba:d9:69:e2:25:ee:1c:69:87:92:d6:a5:a7:4c:1d:20:6d: dc:9d:60:fa:3b:18:74:12:89:6a:6f:6a:f8:0d:64:9e:b5:3e: 1e:9c:75:5b:a7:81:22:ad:eb:a1:c3:eb:00:52:d2:e5:d1:51: 8d:9b:82:55:7c:61:53:5d:b1:50:87:12:df:94:50:93:42:da: 01:31:38:33:93:f4:ef:da:f9:da:be:0b:ea:dc:94:e1:80:75: 96:c7:eb:60 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUX3HIqjU1VR6IXoBb60YCIyijPtowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNCNUY1QkQ0ODQ1MTY3RjU1QjhEQkM0OTI0NUM0MEM0 NzZDNzJEMTAeFw0yNjA1MDMwMzAwMDNaFw0yNzA1MDIwMzA1MDNaMDMxMTAvBgNV BAMTKEU0MjYwQTdEMDdGMDAwNDAzODMwNzdGRkFFQkEzOUY2REVCNTU0NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrcx20GNcZwwwjcr1d2jpRmhPj eGMlSQMRjyhcqLX8L6cau3TNwOv/xrnViC7jbMgpL5jVg0gBxGfO727e867fBZpx yzIHoy7itE/2pGzsZcOkCURmMk12T0WYkpDrZ489eZ9y8SeyEGcYHdvJI6P2nr86 3+kmNbJwDL4zJ5TYzdRNxXwOaztRZsrncLPrML23JNLztlg8gihgHO1BjYrGFnfA fVomDZ0Q5gv3KWMOx37b1xAAC8LwnyC5xt6aExrKATD1hVoEMrQ3rTKTrZxxaB/d 326kfTFwvmaxjwcBMpy6IQenzZ7YpNHzBgrJlDPLt3J5EtfdHdqwtmPzg13PAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQU5CYKfQfwAEA4MHf/rro59t61VFEwHwYDVR0j BBgwFoAUrLX1vUhFFn9VuNvEkkXEDEdsctEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzU5NmJjYzgtMzhjZC00NDM3LTgwYjEtNWJhZTlmODU3OTM3LzAvQUNCNUY1QkQ0 ODQ1MTY3RjU1QjhEQkM0OTI0NUM0MEM0NzZDNzJEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQ0I1RjVCRDQ4NDUxNjdGNTVCOERCQzQ5MjQ1QzQwQzQ3NkM3 MkQxLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M1OTZiY2M4LTM4Y2QtNDQzNy04 MGIxLTViYWU5Zjg1NzkzNy8wLzMyMzQzMDM2M2EzMTMzMzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzQzMDM0MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQGE0AwDQYJKoZI hvcNAQELBQADggEBADCxUufvwPunEoe7nRC4oxHpRurRw8UpXBrz5M0CWhLDV8eP vpBfOeQHa2qmLt0m9tr4jmNc3Z078747tYqgNHlryjtr3ER2piVzG7h4spT9Ziaj CTiDn2etSUoW5JqYHzCcXh8eI/dhUbv3/MTKnxZtdIpYVLB2vkNqnvblb9c1pGxS 1qqRubPh5XSHX2kRdMS7Ci7iWH3woVfT0IoVNVJdT3W62WniJe4caYeS1qWnTB0g bdydYPo7GHQSiWpvavgNZJ61Ph6cdVungSKt66HD6wBS0uXRUY2bglV8YVNdsVCH Et+UUJNC2gExODOT9O/a+dq+C+rclOGAdZbH62A= -----END CERTIFICATE-----Generated at Wed May 13 10:39:50 2026 by rpki-client