$ rpki-client -vvf rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa File: 323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa (raw, json) Hash identifier: 7CW/WrucWkwMy6n5L6l1Fl9wsuT6MqzAnA/bZ5ATe84= Subject key identifier: 73:D7:E1:22:C9:3B:EA:48:FB:FF:1F:84:9A:9E:40:5C:10:8E:8E:07 Certificate issuer: /CN=AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB Certificate serial: 5B3135F8FA4C07FE3135791A4811D2B963F46904 Authority key identifier: AE:7D:92:7F:47:7C:3D:2C:E6:7B:B0:A5:24:40:38:DA:BC:F4:C4:BB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa Signing time: Sun 03 May 2026 03:18:42 +0000 ROA not before: Sun 03 May 2026 03:13:42 +0000 ROA not after: Sun 02 May 2027 03:18:42 +0000 asID: 131705 IP address blocks: 2406:5c40:7777::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.crl rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:31:35:f8:fa:4c:07:fe:31:35:79:1a:48:11:d2:b9:63:f4:69:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB Validity Not Before: May 3 03:13:42 2026 GMT Not After : May 2 03:18:42 2027 GMT Subject: CN=73D7E122C93BEA48FBFF1F849A9E405C108E8E07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:23:f9:bd:6a:2a:af:16:8d:b6:c3:f7:f2:5f: 84:c7:47:53:fe:10:23:4e:d3:11:75:49:cc:8f:b6: d6:d7:67:60:89:c4:2e:07:2f:28:0a:5c:10:61:e7: 5a:2b:5b:05:6c:71:b1:53:57:e4:22:72:29:e8:48: 8e:99:08:48:7b:82:e5:83:1d:d7:9a:96:22:3e:c7: ae:04:37:cc:17:34:f3:e1:ac:3f:dd:c5:1c:1e:6a: 23:ef:05:67:5f:96:e6:90:87:39:5a:fd:ff:60:a2: eb:15:33:dc:61:e6:e8:7c:a9:87:96:31:4d:fe:fe: 4c:ef:aa:06:43:3e:9d:1e:1b:27:ef:4c:a5:48:3f: 86:97:a5:c3:bf:af:84:54:ea:71:fc:30:ce:62:14: 26:7a:ff:28:91:a9:6b:41:f3:15:26:52:4c:e3:af: 3d:4a:d0:59:82:94:11:ca:89:98:64:35:b8:df:87: 9b:eb:98:67:e8:c2:ac:45:56:d0:03:3d:25:c5:13: 20:ac:09:4a:ec:01:0c:9f:5f:0d:6d:5d:a5:1c:b2: 6f:9f:d6:bb:1e:e4:d6:ec:9f:89:fc:d7:8e:85:fd: fa:a9:93:be:8f:24:f8:8c:99:4e:d8:b8:3b:a8:12: ef:9b:b4:bf:fa:a1:67:48:17:56:e7:08:15:bc:5a: 91:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D7:E1:22:C9:3B:EA:48:FB:FF:1F:84:9A:9E:40:5C:10:8E:8E:07 X509v3 Authority Key Identifier: keyid:AE:7D:92:7F:47:7C:3D:2C:E6:7B:B0:A5:24:40:38:DA:BC:F4:C4:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:5c40:7777::/48 Signature Algorithm: sha256WithRSAEncryption 67:9f:59:8f:bd:f4:48:e3:ce:a6:44:53:ab:b0:00:80:63:cc: 79:1d:c0:92:fa:c3:a8:df:49:4d:79:be:ec:6c:1a:58:ce:d5: ff:00:09:44:0c:c3:5e:98:ff:fd:af:7a:b8:48:d6:08:6c:61: c7:07:9e:0a:12:6a:a5:97:ac:df:7e:06:41:fa:2d:d7:34:5a: 13:74:e9:1c:32:54:28:b6:4a:8e:9c:ee:bc:31:80:df:03:b7: 49:26:3c:47:40:dd:70:88:88:77:86:eb:7b:f1:69:6c:3f:1c: de:b3:05:57:60:01:45:8d:46:31:b0:9c:e4:6d:f1:14:80:0c: 14:1c:21:9f:fa:e7:ae:d4:77:68:9a:fc:d8:e9:e8:d5:1a:df: 11:45:d6:79:36:96:7b:55:57:91:c9:83:1a:9f:8c:d3:76:45: c0:f7:e3:46:6d:5f:7d:13:00:42:42:5a:be:1c:dc:7f:2c:92: 80:a4:51:25:c4:dd:cb:00:04:df:ee:c8:f4:72:9c:98:6e:f1: 09:92:d7:e0:34:e9:0f:78:47:38:10:08:85:61:5b:6d:e6:4e: f6:f4:21:83:4d:d5:08:c7:df:5a:e7:95:41:60:c9:48:0b:52: 69:e0:51:70:7c:a9:21:4b:44:a6:7a:28:e2:6b:2b:3d:05:7d: 09:cb:20:99 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUWzE1+PpMB/4xNXkaSBHSuWP0aQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3RDkyN0Y0NzdDM0QyQ0U2N0JCMEE1MjQ0MDM4REFC Q0Y0QzRCQjAeFw0yNjA1MDMwMzEzNDJaFw0yNzA1MDIwMzE4NDJaMDMxMTAvBgNV BAMTKDczRDdFMTIyQzkzQkVBNDhGQkZGMUY4NDlBOUU0MDVDMTA4RThFMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2I/m9aiqvFo22w/fyX4THR1P+ ECNO0xF1ScyPttbXZ2CJxC4HLygKXBBh51orWwVscbFTV+QicinoSI6ZCEh7guWD HdealiI+x64EN8wXNPPhrD/dxRweaiPvBWdfluaQhzla/f9gousVM9xh5uh8qYeW MU3+/kzvqgZDPp0eGyfvTKVIP4aXpcO/r4RU6nH8MM5iFCZ6/yiRqWtB8xUmUkzj rz1K0FmClBHKiZhkNbjfh5vrmGfowqxFVtADPSXFEyCsCUrsAQyfXw1tXaUcsm+f 1rse5Nbsn4n8146F/fqpk76PJPiMmU7YuDuoEu+btL/6oWdIF1bnCBW8WpG7AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUc9fhIsk76kj7/x+Emp5AXBCOjgcwHwYDVR0j BBgwFoAUrn2Sf0d8PSzme7ClJEA42rz0xLswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjlkNmFjYzYtMGFmMy00Yjk3LTk5YTQtMGY0NWU4ZWNmNTc2LzAvQUU3RDkyN0Y0 NzdDM0QyQ0U2N0JCMEE1MjQ0MDM4REFCQ0Y0QzRCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRTdEOTI3RjQ3N0MzRDJDRTY3QkIwQTUyNDQwMzhEQUJDRjRD NEJCLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Y5ZDZhY2M2LTBhZjMtNGI5Ny05 OWE0LTBmNDVlOGVjZjU3Ni8wLzMyMzQzMDM2M2EzNTYzMzQzMDNhMzczNzM3Mzcz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzEzNzMwMzUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BlxAd3cwDQYJKoZIhvcNAQELBQADggEBAGefWY+99EjjzqZEU6uwAIBjzHkdwJL6 w6jfSU15vuxsGljO1f8ACUQMw16Y//2verhI1ghsYccHngoSaqWXrN9+BkH6Ldc0 WhN06RwyVCi2So6c7rwxgN8Dt0kmPEdA3XCIiHeG63vxaWw/HN6zBVdgAUWNRjGw nORt8RSADBQcIZ/6567Ud2ia/Njp6NUa3xFF1nk2lntVV5HJgxqfjNN2RcD340Zt X30TAEJCWr4c3H8skoCkUSXE3csABN/uyPRynJhu8QmS1+A06Q94RzgQCIVhW23m Tvb0IYNN1QjH31rnlUFgyUgLUmngUXB8qSFLRKZ6KOJrKz0FfQnLIJk= -----END CERTIFICATE-----Generated at Wed May 13 12:21:08 2026 by rpki-client