$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a323a3a2f34382d3438203d3e20313431363735.roa File: 323430363a616563303a323a3a2f34382d3438203d3e20313431363735.roa (raw, json) Hash identifier: m44IQsih+GAEYeNlxdOnRw3U6wKDlFyxDmcm/uil4os= Subject key identifier: D4:C8:6F:94:AD:5F:84:AA:6C:24:11:02:91:9F:DC:77:E9:11:D6:0D Certificate issuer: /CN=6D5E5420B4349DB7799574D1AA8EFA4234B0638E Certificate serial: 51BFF524BF8ACF3FAF60FB9E6CB883A2552D6239 Authority key identifier: 6D:5E:54:20:B4:34:9D:B7:79:95:74:D1:AA:8E:FA:42:34:B0:63:8E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a323a3a2f34382d3438203d3e20313431363735.roa Signing time: Sun 03 May 2026 03:09:37 +0000 ROA not before: Sun 03 May 2026 03:04:37 +0000 ROA not after: Sun 02 May 2027 03:09:37 +0000 asID: 141675 IP address blocks: 2406:aec0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:bf:f5:24:bf:8a:cf:3f:af:60:fb:9e:6c:b8:83:a2:55:2d:62:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D5E5420B4349DB7799574D1AA8EFA4234B0638E Validity Not Before: May 3 03:04:37 2026 GMT Not After : May 2 03:09:37 2027 GMT Subject: CN=D4C86F94AD5F84AA6C241102919FDC77E911D60D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2a:96:63:d8:7b:41:56:91:1e:41:c4:a1:f0: 75:c3:98:31:3e:c9:93:f4:bf:11:d2:ce:76:aa:80: 2d:e1:7e:e5:c1:65:6c:97:7c:5c:e0:fa:17:62:8f: ee:1b:4a:c7:32:12:9c:8f:68:96:dd:00:a8:2e:99: 0c:a3:73:55:fb:ab:d4:e5:42:75:6d:09:e0:71:5d: 20:3a:9b:dc:de:40:a8:75:5a:f2:50:d3:bb:b8:a7: 0f:3a:5e:9a:1c:8e:90:89:6b:7b:8c:f9:28:5d:2c: 62:72:cc:f2:a4:74:e6:66:1e:b8:9d:26:6d:43:4d: e0:36:93:71:ef:b4:a6:b2:9e:a7:c3:de:2a:75:0c: b2:94:6e:26:e6:64:20:7c:eb:94:e9:4c:1f:b1:a8: 1c:b9:14:de:3d:01:1b:d2:2f:be:d4:cc:b5:68:b2: 7f:c8:d7:c0:d5:17:1d:b5:73:4e:ff:e5:15:77:17: e7:86:c0:09:b6:d7:99:79:58:26:15:fa:59:f5:6a: 7c:c7:38:0b:16:90:98:3c:b7:d3:9a:02:55:e2:be: e4:64:5a:84:23:e1:c6:10:d7:ef:e3:f0:f1:a3:8a: ac:6e:91:ee:f6:00:6d:f3:d3:d4:a0:6c:e5:c1:fa: cd:4b:a8:ed:a4:55:ff:14:81:1c:2c:10:9f:f7:ff: dc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C8:6F:94:AD:5F:84:AA:6C:24:11:02:91:9F:DC:77:E9:11:D6:0D X509v3 Authority Key Identifier: keyid:6D:5E:54:20:B4:34:9D:B7:79:95:74:D1:AA:8E:FA:42:34:B0:63:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a323a3a2f34382d3438203d3e20313431363735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:aec0:2::/48 Signature Algorithm: sha256WithRSAEncryption 42:ca:8d:f1:3f:60:38:48:50:5d:45:b2:68:df:0d:5b:df:e0: 0a:fc:79:bf:ea:a6:99:66:96:fc:12:f3:32:c7:07:0b:c5:5c: e1:3a:96:10:20:32:f3:e4:05:f1:ad:db:1f:b5:e6:b7:e1:f6: 42:2c:74:64:17:2b:dd:a5:5b:03:5b:60:cc:85:61:24:30:05: f0:c4:c2:a2:f3:ae:10:e3:90:2c:2f:85:73:17:a7:46:66:a2: 09:e3:be:4d:99:dc:c2:6c:ea:53:9f:44:9e:c9:df:b6:7e:e6: e2:a9:f7:bc:ff:a0:f7:3d:72:5f:a2:2d:d2:73:3d:05:21:d9: 7d:d8:48:f8:bb:c6:87:3f:80:f0:34:86:ab:54:f4:59:6b:b9: 01:60:b9:1e:1d:15:a0:77:94:84:eb:52:3e:c7:8e:f9:54:7a: 31:60:dd:81:c2:b6:ea:a6:6d:d4:2d:68:51:6f:46:78:bd:bd: 36:8f:29:eb:ef:53:bf:f7:40:e7:cb:3e:43:64:77:37:45:75: a9:89:86:42:d1:72:b2:f9:9b:8a:35:f9:6a:cf:21:b6:88:63: ad:ab:e1:e5:02:65:bf:18:54:e7:63:54:93:3e:56:7c:16:7f: 24:c6:21:b4:25:1d:8d:6a:71:cb:99:79:d1:fa:8b:f0:fa:76: 11:b1:2d:97 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUUb/1JL+Kzz+vYPuebLiDolUtYjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ1RTU0MjBCNDM0OURCNzc5OTU3NEQxQUE4RUZBNDIz NEIwNjM4RTAeFw0yNjA1MDMwMzA0MzdaFw0yNzA1MDIwMzA5MzdaMDMxMTAvBgNV BAMTKEQ0Qzg2Rjk0QUQ1Rjg0QUE2QzI0MTEwMjkxOUZEQzc3RTkxMUQ2MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEKpZj2HtBVpEeQcSh8HXDmDE+ yZP0vxHSznaqgC3hfuXBZWyXfFzg+hdij+4bSscyEpyPaJbdAKgumQyjc1X7q9Tl QnVtCeBxXSA6m9zeQKh1WvJQ07u4pw86XpocjpCJa3uM+ShdLGJyzPKkdOZmHrid Jm1DTeA2k3HvtKaynqfD3ip1DLKUbibmZCB865TpTB+xqBy5FN49ARvSL77UzLVo sn/I18DVFx21c07/5RV3F+eGwAm215l5WCYV+ln1anzHOAsWkJg8t9OaAlXivuRk WoQj4cYQ1+/j8PGjiqxuke72AG3z09SgbOXB+s1LqO2kVf8UgRwsEJ/3/9w3AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU1MhvlK1fhKpsJBECkZ/cd+kR1g0wHwYDVR0j BBgwFoAUbV5UILQ0nbd5lXTRqo76QjSwY44wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDRmMmMwMjUtMWQ3Ni00YTM2LTgxNjAtYTllOGFmZTM1NzlmLzAvNkQ1RTU0MjBC NDM0OURCNzc5OTU3NEQxQUE4RUZBNDIzNEIwNjM4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RDVFNTQyMEI0MzQ5REI3Nzk5NTc0RDFBQThFRkE0MjM0QjA2 MzhFLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q0ZjJjMDI1LTFkNzYtNGEzNi04 MTYwLWE5ZThhZmUzNTc5Zi8wLzMyMzQzMDM2M2E2MTY1NjMzMDNhMzIzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzEzNjM3MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBq7AAAIw DQYJKoZIhvcNAQELBQADggEBAELKjfE/YDhIUF1FsmjfDVvf4Ar8eb/qpplmlvwS 8zLHBwvFXOE6lhAgMvPkBfGt2x+15rfh9kIsdGQXK92lWwNbYMyFYSQwBfDEwqLz rhDjkCwvhXMXp0Zmognjvk2Z3MJs6lOfRJ7J37Z+5uKp97z/oPc9cl+iLdJzPQUh 2X3YSPi7xoc/gPA0hqtU9FlruQFguR4dFaB3lITrUj7HjvlUejFg3YHCtuqmbdQt aFFvRni9vTaPKevvU7/3QOfLPkNkdzdFdamJhkLRcrL5m4o1+WrPIbaIY62r4eUC Zb8YVOdjVJM+VnwWfyTGIbQlHY1qccuZedH6i/D6dhGxLZc= -----END CERTIFICATE-----Generated at Wed May 13 09:18:07 2026 by rpki-client