$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/323430313a333234303a3a2f33322d3438203d3e203633343930.roa File: 323430313a333234303a3a2f33322d3438203d3e203633343930.roa (raw, json) Hash identifier: iU2N9S4Qs45REYKNT6gJ67+EFrPcrh7561FEIjPKZzI= Subject key identifier: 5E:71:74:68:C8:ED:22:5C:BB:18:1F:5C:39:68:8F:C4:4C:0C:68:2A Certificate issuer: /CN=CA6A68BCE209C28338FC3C0AA659AE591EF6D325 Certificate serial: 3DD7E246B279FC2B65BCCBA4BF22BA1BC8D3E996 Authority key identifier: CA:6A:68:BC:E2:09:C2:83:38:FC:3C:0A:A6:59:AE:59:1E:F6:D3:25 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/323430313a333234303a3a2f33322d3438203d3e203633343930.roa Signing time: Sun 03 May 2026 03:06:38 +0000 ROA not before: Sun 03 May 2026 03:01:38 +0000 ROA not after: Sun 02 May 2027 03:06:38 +0000 asID: 63490 IP address blocks: 2401:3240::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.crl rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:d7:e2:46:b2:79:fc:2b:65:bc:cb:a4:bf:22:ba:1b:c8:d3:e9:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA6A68BCE209C28338FC3C0AA659AE591EF6D325 Validity Not Before: May 3 03:01:38 2026 GMT Not After : May 2 03:06:38 2027 GMT Subject: CN=5E717468C8ED225CBB181F5C39688FC44C0C682A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b7:f8:ac:0d:09:2a:bd:39:06:42:94:a2:bc: 59:79:8f:ed:98:3e:03:f7:ab:ef:96:4b:ff:9b:b5: 05:cc:c2:a6:7f:38:70:9a:2d:c8:1b:21:9c:79:73: 95:e3:8f:7d:b0:87:90:e9:21:ce:34:ca:05:db:bb: b0:95:3a:16:6e:aa:d1:86:b4:d6:1e:0d:5f:3d:62: 26:ce:45:bf:a7:a6:03:d6:a5:91:80:3b:9d:c5:43: cd:61:f7:1c:d9:af:72:75:d4:64:9c:b0:ea:39:03: b3:27:50:f0:af:18:7e:23:66:88:dd:02:53:04:18: e7:f1:21:c9:1d:ee:70:c4:cc:e5:a5:4a:4c:e7:9b: 0c:dd:37:c6:d5:6f:1b:87:b1:ed:bb:15:2d:5a:dd: d3:39:a6:52:7e:c1:48:b0:98:7e:83:6d:74:7a:a0: 64:78:69:43:d0:48:59:5f:f8:51:23:fd:aa:74:99: 5f:3e:f0:26:57:29:6e:04:53:9a:50:9e:05:8a:ab: 77:2e:c0:8a:5f:be:47:61:d1:07:d2:40:6c:36:16: 8b:71:9c:cf:48:03:c2:e5:fe:37:f1:62:62:fe:e1: 3b:ec:41:f7:0c:44:c4:91:ec:2d:48:51:f3:d4:85: 70:50:43:9d:2d:55:34:b3:f7:08:20:a6:77:a0:44: b4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:71:74:68:C8:ED:22:5C:BB:18:1F:5C:39:68:8F:C4:4C:0C:68:2A X509v3 Authority Key Identifier: keyid:CA:6A:68:BC:E2:09:C2:83:38:FC:3C:0A:A6:59:AE:59:1E:F6:D3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/323430313a333234303a3a2f33322d3438203d3e203633343930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:3240::/32 Signature Algorithm: sha256WithRSAEncryption 2a:98:de:bc:66:c8:1b:ed:40:f8:b4:cf:b6:f0:5f:b4:2a:b6: e1:3a:51:21:37:e9:44:e4:4f:04:b6:a7:b5:08:50:ef:9e:39: 5e:4b:0e:22:23:d1:9c:f6:56:96:00:06:32:a5:2f:62:e9:08: 93:20:eb:8d:fd:36:ed:84:04:cc:9e:1f:81:92:6c:ea:1e:ef: 5b:05:71:50:59:bb:71:f5:6e:0b:e7:ac:ed:55:73:5f:96:a7: dc:a7:59:b1:14:ef:25:9f:66:10:53:ea:11:20:32:52:aa:7b: de:b2:10:2a:05:12:01:a7:61:de:6d:e0:33:5f:79:ce:03:21: 37:50:f8:e9:70:7a:c7:d0:66:79:1e:77:71:c7:4c:33:d4:31: ab:a9:6f:5b:d6:38:5c:0a:8a:a5:c7:a4:dd:d8:ff:61:a2:60: 7e:01:fe:ae:07:1f:a7:03:11:6a:06:f3:5f:f7:15:cf:0f:c6: 87:58:67:81:ab:84:25:e4:04:44:f9:89:6b:80:6c:24:3a:b2: cd:32:35:d6:ab:34:d7:bd:6e:8c:e4:4d:5c:45:f0:39:6d:f9: 24:60:c6:c0:d2:2a:61:f9:59:aa:e0:4f:2f:0b:44:2f:f9:05: 0f:5f:12:63:15:f0:05:df:74:73:d7:94:1b:b9:23:6f:90:2f: cb:e1:6b:2b -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUPdfiRrJ5/CtlvMukvyK6G8jT6ZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E2QTY4QkNFMjA5QzI4MzM4RkMzQzBBQTY1OUFFNTkx RUY2RDMyNTAeFw0yNjA1MDMwMzAxMzhaFw0yNzA1MDIwMzA2MzhaMDMxMTAvBgNV BAMTKDVFNzE3NDY4QzhFRDIyNUNCQjE4MUY1QzM5Njg4RkM0NEMwQzY4MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjt/isDQkqvTkGQpSivFl5j+2Y PgP3q++WS/+btQXMwqZ/OHCaLcgbIZx5c5Xjj32wh5DpIc40ygXbu7CVOhZuqtGG tNYeDV89YibORb+npgPWpZGAO53FQ81h9xzZr3J11GScsOo5A7MnUPCvGH4jZojd AlMEGOfxIckd7nDEzOWlSkznmwzdN8bVbxuHse27FS1a3dM5plJ+wUiwmH6DbXR6 oGR4aUPQSFlf+FEj/ap0mV8+8CZXKW4EU5pQngWKq3cuwIpfvkdh0QfSQGw2Fotx nM9IA8Ll/jfxYmL+4TvsQfcMRMSR7C1IUfPUhXBQQ50tVTSz9wggpnegRLRtAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUXnF0aMjtIly7GB9cOWiPxEwMaCowHwYDVR0j BBgwFoAUympovOIJwoM4/DwKplmuWR720yUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzllMzYwNTYtZjA5Ny00OWE3LWJkMjMtM2Q3MTFlODlmMzA1LzAvQ0E2QTY4QkNF MjA5QzI4MzM4RkMzQzBBQTY1OUFFNTkxRUY2RDMyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQTZBNjhCQ0UyMDlDMjgzMzhGQzNDMEFBNjU5QUU1OTFFRjZE MzI1LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M5ZTM2MDU2LWYwOTctNDlhNy1i ZDIzLTNkNzExZTg5ZjMwNS8wLzMyMzQzMDMxM2EzMzMyMzQzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDM2MzMzNDM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkATJAMA0GCSqGSIb3 DQEBCwUAA4IBAQAqmN68Zsgb7UD4tM+28F+0KrbhOlEhN+lE5E8Etqe1CFDvnjle Sw4iI9Gc9laWAAYypS9i6QiTIOuN/TbthATMnh+BkmzqHu9bBXFQWbtx9W4L56zt VXNflqfcp1mxFO8ln2YQU+oRIDJSqnveshAqBRIBp2HebeAzX3nOAyE3UPjpcHrH 0GZ5Hndxx0wz1DGrqW9b1jhcCoqlx6Td2P9homB+Af6uBx+nAxFqBvNf9xXPD8aH WGeBq4Ql5ARE+YlrgGwkOrLNMjXWqzTXvW6M5E1cRfA5bfkkYMbA0iph+Vmq4E8v C0Qv+QUPXxJjFfAF33Rz15QbuSNvkC/L4Wsr -----END CERTIFICATE-----Generated at Wed May 13 16:16:04 2026 by rpki-client