$ rpki-client -vvf rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/323430353a363634303a3a2f33322d3332203d3e20313430343732.roa File: 323430353a363634303a3a2f33322d3332203d3e20313430343732.roa (raw, json) Hash identifier: BWkQKxIfXCHfh/9a/7ZikuopxvR6ddCoDn8JEUuJXcg= Subject key identifier: 98:CB:53:70:57:84:D9:B7:92:4D:74:F3:97:78:F0:7B:D7:E0:BD:15 Certificate issuer: /CN=AB5711486023F8F0DBFED38BC7FD7BC91735FFCD Certificate serial: 4C028B00DAC38D7A8630043D320D0E6B50AB3AAE Authority key identifier: AB:57:11:48:60:23:F8:F0:DB:FE:D3:8B:C7:FD:7B:C9:17:35:FF:CD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/323430353a363634303a3a2f33322d3332203d3e20313430343732.roa Signing time: Sun 03 May 2026 03:16:01 +0000 ROA not before: Sun 03 May 2026 03:11:01 +0000 ROA not after: Sun 02 May 2027 03:16:01 +0000 asID: 140472 IP address blocks: 2405:6640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.crl rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:02:8b:00:da:c3:8d:7a:86:30:04:3d:32:0d:0e:6b:50:ab:3a:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB5711486023F8F0DBFED38BC7FD7BC91735FFCD Validity Not Before: May 3 03:11:01 2026 GMT Not After : May 2 03:16:01 2027 GMT Subject: CN=98CB53705784D9B7924D74F39778F07BD7E0BD15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:29:a3:a4:f8:e0:75:d6:47:d0:a7:3e:e7:0e: 70:fe:69:1f:bc:2d:a8:ae:df:c7:56:ee:47:36:0a: 4d:a0:9b:39:24:4c:18:76:1e:cb:0c:fa:20:f9:51: ec:93:42:3f:71:d7:72:c4:53:a5:03:af:8e:e4:a2: 72:15:96:ac:33:85:98:60:b5:cc:40:bf:ed:84:6e: 0c:04:bf:69:10:0e:cc:df:71:a1:bf:17:45:de:d0: b2:74:d2:ce:35:88:e1:ad:70:50:fe:97:0c:9a:26: 9e:09:7c:02:52:67:1f:20:c9:ca:59:3b:3c:2b:0d: 4f:9c:8d:cf:88:00:1e:0d:3f:9e:9f:13:bc:0d:08: c6:27:3f:64:f4:57:4d:f7:cd:38:4b:27:1a:a6:9b: 92:e3:73:6f:f5:19:88:bb:69:b5:f6:f9:72:a9:f0: 50:eb:c9:cd:cb:75:f4:bc:de:92:3e:2a:66:23:e9: 2b:20:41:34:dd:dd:c5:b3:5b:01:e5:34:25:f0:c9: 0c:e3:12:22:73:24:0f:92:b3:74:12:2a:c5:4c:5e: d8:e2:1c:16:34:fb:f4:f1:72:0c:5d:5f:f6:e4:af: 37:a6:37:95:83:aa:07:e3:a5:73:ba:6e:cf:83:fd: f0:d4:42:d4:fa:b2:76:aa:8a:8b:6c:2b:bf:02:73: 16:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:CB:53:70:57:84:D9:B7:92:4D:74:F3:97:78:F0:7B:D7:E0:BD:15 X509v3 Authority Key Identifier: keyid:AB:57:11:48:60:23:F8:F0:DB:FE:D3:8B:C7:FD:7B:C9:17:35:FF:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB5711486023F8F0DBFED38BC7FD7BC91735FFCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/323430353a363634303a3a2f33322d3332203d3e20313430343732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:6640::/32 Signature Algorithm: sha256WithRSAEncryption 82:9c:b1:7e:1e:f0:d0:b2:f8:66:ce:43:0b:ab:b6:32:50:6c: ec:85:3a:f1:78:24:fa:07:98:54:ec:49:df:c0:40:c2:32:be: 61:bd:60:33:cc:00:22:e2:4a:42:44:b6:08:90:e2:fb:0c:6f: 7e:aa:91:4e:1d:90:e0:91:ab:9f:0c:18:d1:78:0c:20:50:b4: dc:c8:7f:29:ca:24:be:a7:e8:fa:ec:f7:47:e3:12:ed:49:33: 0d:a6:c2:64:42:3d:cf:d7:8d:64:7f:58:8a:41:f8:3c:e9:bf: 81:64:9e:08:f8:05:f8:34:e8:2d:ae:b2:e1:6f:af:b2:05:39: 1b:c1:e9:94:3e:85:07:a8:e8:10:cc:14:4e:cc:f2:d9:ac:74: 67:59:de:89:36:2d:76:30:89:0c:7c:82:a5:8b:42:19:28:c8: f5:d2:f7:cf:ba:82:17:bc:94:e3:75:85:c8:81:d2:3d:da:54: df:44:97:ee:c7:f4:42:c0:af:75:97:52:28:9b:3f:2e:9a:9c: d7:24:f3:92:f2:7f:51:b9:9d:0d:17:0a:c2:52:5c:4d:87:d9: fd:ab:12:80:54:cb:83:10:c2:f7:10:42:f8:0e:51:ee:81:06: 1d:73:7f:e2:e5:ee:ea:b9:90:2b:f4:15:89:0d:de:fa:2c:58: e4:5c:34:d1 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUTAKLANrDjXqGMAQ9Mg0Oa1CrOq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI1NzExNDg2MDIzRjhGMERCRkVEMzhCQzdGRDdCQzkx NzM1RkZDRDAeFw0yNjA1MDMwMzExMDFaFw0yNzA1MDIwMzE2MDFaMDMxMTAvBgNV BAMTKDk4Q0I1MzcwNTc4NEQ5Qjc5MjRENzRGMzk3NzhGMDdCRDdFMEJEMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgKaOk+OB11kfQpz7nDnD+aR+8 Laiu38dW7kc2Ck2gmzkkTBh2HssM+iD5UeyTQj9x13LEU6UDr47konIVlqwzhZhg tcxAv+2EbgwEv2kQDszfcaG/F0Xe0LJ00s41iOGtcFD+lwyaJp4JfAJSZx8gycpZ OzwrDU+cjc+IAB4NP56fE7wNCMYnP2T0V033zThLJxqmm5Ljc2/1GYi7abX2+XKp 8FDryc3LdfS83pI+KmYj6SsgQTTd3cWzWwHlNCXwyQzjEiJzJA+Ss3QSKsVMXtji HBY0+/TxcgxdX/bkrzemN5WDqgfjpXO6bs+D/fDUQtT6snaqiotsK78CcxYTAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUmMtTcFeE2beSTXTzl3jwe9fgvRUwHwYDVR0j BBgwFoAUq1cRSGAj+PDb/tOLx/17yRc1/80wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWRhZWM2NmMtOWUxZC00MzIxLWIwNjktZWVhYjQ3OTNhMDBiLzAvQUI1NzExNDg2 MDIzRjhGMERCRkVEMzhCQzdGRDdCQzkxNzM1RkZDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQjU3MTE0ODYwMjNGOEYwREJGRUQzOEJDN0ZEN0JDOTE3MzVG RkNELmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2VkYWVjNjZjLTllMWQtNDMyMS1i MDY5LWVlYWI0NzkzYTAwYi8wLzMyMzQzMDM1M2EzNjM2MzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzQzMDM0MzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQFZkAwDQYJKoZI hvcNAQELBQADggEBAIKcsX4e8NCy+GbOQwurtjJQbOyFOvF4JPoHmFTsSd/AQMIy vmG9YDPMACLiSkJEtgiQ4vsMb36qkU4dkOCRq58MGNF4DCBQtNzIfynKJL6n6Prs 90fjEu1JMw2mwmRCPc/XjWR/WIpB+Dzpv4Fkngj4Bfg06C2usuFvr7IFORvB6ZQ+ hQeo6BDMFE7M8tmsdGdZ3ok2LXYwiQx8gqWLQhkoyPXS98+6ghe8lON1hciB0j3a VN9El+7H9ELAr3WXUiibPy6anNck85Lyf1G5nQ0XCsJSXE2H2f2rEoBUy4MQwvcQ QvgOUe6BBh1zf+Ll7uq5kCv0FYkN3vosWORcNNE= -----END CERTIFICATE-----Generated at Wed May 13 10:33:09 2026 by rpki-client