$ rpki-client -vvf rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa File: 323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa (raw, json) Hash identifier: od92otk1ZBfK/DphT8D9p9Tw3yqgeInTJA8T3zh0m9Y= Subject key identifier: 57:52:55:AF:A1:39:6E:40:70:AA:4F:06:CC:7A:D4:E4:E6:4D:F8:BF Certificate issuer: /CN=AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB Certificate serial: 01CD0A28A8EA6D5DD2736BC5612238FC1C92BF86 Authority key identifier: AE:7D:92:7F:47:7C:3D:2C:E6:7B:B0:A5:24:40:38:DA:BC:F4:C4:BB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa Signing time: Sun 03 May 2026 03:18:43 +0000 ROA not before: Sun 03 May 2026 03:13:43 +0000 ROA not after: Sun 02 May 2027 03:18:43 +0000 asID: 131705 IP address blocks: 2406:5c40:9999::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.crl rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:cd:0a:28:a8:ea:6d:5d:d2:73:6b:c5:61:22:38:fc:1c:92:bf:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB Validity Not Before: May 3 03:13:43 2026 GMT Not After : May 2 03:18:43 2027 GMT Subject: CN=575255AFA1396E4070AA4F06CC7AD4E4E64DF8BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:27:38:18:48:41:26:38:1d:c3:26:0a:0d:56: 0c:b4:48:b7:1d:cd:a2:e7:ce:13:b8:b2:96:47:22: 35:7c:33:72:69:9d:5d:27:21:ce:65:96:1f:00:06: 9e:d9:76:fa:35:7d:47:87:b3:a1:38:8c:2c:31:45: cc:56:89:77:01:66:bf:1d:47:10:da:e7:67:e3:56: 4f:3d:20:61:15:ed:a9:4e:fb:85:1f:3e:e5:96:47: ed:0b:87:dc:09:b6:96:b4:a2:78:67:69:54:eb:08: 31:09:91:ec:40:7a:c3:7d:b8:57:64:26:cb:cf:7a: e4:43:e3:2d:0b:30:92:70:21:9d:7b:d7:3d:a0:85: 69:61:de:74:ee:1c:80:83:c6:60:63:c7:16:64:7c: b0:ab:3b:fe:85:f4:b6:4e:22:5e:c3:3f:56:78:12: 8e:e6:34:b0:30:c5:24:ff:7f:89:79:2a:f0:d5:4a: 65:f5:c5:00:54:18:05:14:d9:1a:8a:11:c4:95:e8: b9:ca:c4:61:f5:3f:45:9e:85:5d:68:1e:37:df:1f: d7:76:ae:27:ec:73:87:80:79:2d:94:4f:72:ca:d8: d0:5c:30:07:99:ec:47:25:b6:d5:8f:52:6c:61:06: 9c:57:07:87:bc:e3:c6:f5:92:62:cf:26:8b:85:a4: a2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:52:55:AF:A1:39:6E:40:70:AA:4F:06:CC:7A:D4:E4:E6:4D:F8:BF X509v3 Authority Key Identifier: keyid:AE:7D:92:7F:47:7C:3D:2C:E6:7B:B0:A5:24:40:38:DA:BC:F4:C4:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:5c40:9999::/48 Signature Algorithm: sha256WithRSAEncryption 2d:7c:b1:b2:73:93:b4:3d:e7:31:b7:0c:9d:e7:22:9d:9e:e6: 3a:f2:f8:e0:6a:10:85:89:83:b9:75:b7:c2:34:bc:93:c9:61: be:c6:eb:53:fc:6a:cf:c3:be:ab:83:56:3a:7e:f2:7f:95:73: f7:58:51:98:b8:e0:1f:71:c3:63:07:5a:79:3c:01:76:c1:36: 0d:9e:48:ca:e8:9e:5f:a7:5a:45:a0:19:2e:18:1f:0b:d8:ac: aa:66:1d:d9:94:6d:53:0d:f6:c7:e2:58:5d:40:8f:b9:69:14: 14:b3:83:f6:eb:7e:34:51:02:77:d2:b3:f4:c9:71:5f:7a:12: b9:8c:b2:f5:d0:61:12:5a:7e:ba:2c:4a:f6:0a:93:a8:e8:f1: 66:8f:89:27:4b:81:ac:f9:22:67:a9:18:b3:e5:d5:4b:85:17: a9:a1:1d:0d:3a:8b:72:ff:ae:38:61:99:4a:38:2e:32:4f:14: 64:08:5b:b1:46:d0:1b:eb:40:fe:e4:82:04:d9:f2:95:9c:3b: 05:68:2e:1d:61:48:7f:3f:3e:ec:b1:7b:c1:79:0b:72:4d:be: 29:84:7f:ff:b5:95:7c:39:39:a3:67:79:f2:13:7d:99:a5:e9: a9:01:39:84:57:fc:2d:5c:66:e2:b3:00:e8:27:49:0a:1d:4f: 4b:bd:14:c7 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUAc0KKKjqbV3Sc2vFYSI4/BySv4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3RDkyN0Y0NzdDM0QyQ0U2N0JCMEE1MjQ0MDM4REFC Q0Y0QzRCQjAeFw0yNjA1MDMwMzEzNDNaFw0yNzA1MDIwMzE4NDNaMDMxMTAvBgNV BAMTKDU3NTI1NUFGQTEzOTZFNDA3MEFBNEYwNkNDN0FENEU0RTY0REY4QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMJzgYSEEmOB3DJgoNVgy0SLcd zaLnzhO4spZHIjV8M3JpnV0nIc5llh8ABp7Zdvo1fUeHs6E4jCwxRcxWiXcBZr8d RxDa52fjVk89IGEV7alO+4UfPuWWR+0Lh9wJtpa0onhnaVTrCDEJkexAesN9uFdk JsvPeuRD4y0LMJJwIZ171z2ghWlh3nTuHICDxmBjxxZkfLCrO/6F9LZOIl7DP1Z4 Eo7mNLAwxST/f4l5KvDVSmX1xQBUGAUU2RqKEcSV6LnKxGH1P0WehV1oHjffH9d2 rifsc4eAeS2UT3LK2NBcMAeZ7EclttWPUmxhBpxXB4e848b1kmLPJouFpKKpAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUV1JVr6E5bkBwqk8GzHrU5OZN+L8wHwYDVR0j BBgwFoAUrn2Sf0d8PSzme7ClJEA42rz0xLswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjlkNmFjYzYtMGFmMy00Yjk3LTk5YTQtMGY0NWU4ZWNmNTc2LzAvQUU3RDkyN0Y0 NzdDM0QyQ0U2N0JCMEE1MjQ0MDM4REFCQ0Y0QzRCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRTdEOTI3RjQ3N0MzRDJDRTY3QkIwQTUyNDQwMzhEQUJDRjRD NEJCLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Y5ZDZhY2M2LTBhZjMtNGI5Ny05 OWE0LTBmNDVlOGVjZjU3Ni8wLzMyMzQzMDM2M2EzNTYzMzQzMDNhMzkzOTM5Mzkz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzEzNzMwMzUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BlxAmZkwDQYJKoZIhvcNAQELBQADggEBAC18sbJzk7Q95zG3DJ3nIp2e5jry+OBq EIWJg7l1t8I0vJPJYb7G61P8as/DvquDVjp+8n+Vc/dYUZi44B9xw2MHWnk8AXbB Ng2eSMronl+nWkWgGS4YHwvYrKpmHdmUbVMN9sfiWF1Aj7lpFBSzg/brfjRRAnfS s/TJcV96ErmMsvXQYRJafrosSvYKk6jo8WaPiSdLgaz5ImepGLPl1UuFF6mhHQ06 i3L/rjhhmUo4LjJPFGQIW7FG0BvrQP7kggTZ8pWcOwVoLh1hSH8/Puyxe8F5C3JN vimEf/+1lXw5OaNnefITfZml6akBOYRX/C1cZuKzAOgnSQodT0u9FMc= -----END CERTIFICATE-----Generated at Wed May 13 13:08:20 2026 by rpki-client