$ rpki-client -vvf rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/323430363a323163303a3a2f33322d3332203d3e20313430343239.roa File: 323430363a323163303a3a2f33322d3332203d3e20313430343239.roa (raw, json) Hash identifier: YKOMJLKY4/MM+iRWpGbN1vcrCXvxf8SN7FOq1BH9gB4= Subject key identifier: 9C:81:D0:FE:65:DC:97:EE:03:4C:8A:40:30:AF:C9:09:AB:92:88:63 Certificate issuer: /CN=45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC Certificate serial: 2A928E4A449DF2519A730257693145BE4A87E60C Authority key identifier: 45:F3:50:E0:24:8C:A8:A2:B2:0B:53:A2:2B:DD:3B:6F:CF:16:C7:AC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/323430363a323163303a3a2f33322d3332203d3e20313430343239.roa Signing time: Sun 03 May 2026 03:19:13 +0000 ROA not before: Sun 03 May 2026 03:14:13 +0000 ROA not after: Sun 02 May 2027 03:19:13 +0000 asID: 140429 IP address blocks: 2406:21c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.crl rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:92:8e:4a:44:9d:f2:51:9a:73:02:57:69:31:45:be:4a:87:e6:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC Validity Not Before: May 3 03:14:13 2026 GMT Not After : May 2 03:19:13 2027 GMT Subject: CN=9C81D0FE65DC97EE034C8A4030AFC909AB928863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9a:b7:95:76:8a:0e:fd:33:c2:eb:33:78:34: 17:a9:4d:3e:9e:62:32:53:e9:47:82:0e:91:9a:44: 3e:34:14:50:5d:ad:c0:74:dc:c1:54:f8:47:ca:b4: d6:97:90:7d:c9:a6:4a:f1:91:f4:eb:44:03:8e:ad: 83:97:12:23:98:83:15:4a:a3:b5:6d:c4:b8:11:78: 32:6b:36:6d:2f:16:d1:52:85:c0:26:07:9a:2e:50: 59:04:59:63:5c:ae:8b:79:59:e0:ca:35:c1:f2:3b: 82:3c:02:13:e5:21:05:e9:bf:a6:68:0a:b4:fe:34: 11:9d:78:0c:fd:b2:09:e2:1f:ed:85:5c:9e:e6:00: 6b:bf:a9:8d:c0:d1:93:60:f5:e6:ce:df:db:b1:95: 84:25:ed:eb:f6:36:21:88:32:04:cd:75:fd:83:dd: fa:17:d9:1e:7b:7e:49:18:1c:b2:87:18:b1:e9:ce: d3:f6:dc:c2:00:77:b4:a7:43:aa:62:09:c4:48:05: c8:1b:5e:b4:59:32:d6:39:35:f2:99:65:72:8f:73: a1:1a:f3:29:9c:dc:db:f9:be:3a:a5:da:5d:73:72: dd:32:63:e0:cd:0a:6e:1c:1e:31:83:a9:8c:7b:5b: 4a:b4:e2:d9:3a:cd:8c:cd:c3:df:67:fd:2b:25:1a: d6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:81:D0:FE:65:DC:97:EE:03:4C:8A:40:30:AF:C9:09:AB:92:88:63 X509v3 Authority Key Identifier: keyid:45:F3:50:E0:24:8C:A8:A2:B2:0B:53:A2:2B:DD:3B:6F:CF:16:C7:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/323430363a323163303a3a2f33322d3332203d3e20313430343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:21c0::/32 Signature Algorithm: sha256WithRSAEncryption 46:9d:7a:12:17:15:3a:e1:92:66:ae:37:53:4d:1d:7c:ae:ef: 22:f8:27:16:57:12:98:e5:55:61:42:59:98:9b:83:49:04:7c: 5e:0d:45:9e:ed:b6:3d:3d:3d:18:2d:53:a2:2e:cb:37:04:04: 24:2e:ed:80:d2:2e:e2:00:0e:e2:59:65:c9:fa:93:dc:c1:8b: fb:70:12:55:56:6b:82:60:63:82:d0:3b:76:cf:1d:51:32:83: e0:4c:7f:69:57:db:f1:b8:77:80:20:0a:cc:96:b8:bd:ee:60: 16:0b:e6:28:3e:93:4e:2e:29:54:5f:a9:0f:bb:b7:bd:f5:09: 23:b6:1a:08:3f:75:39:63:45:6b:b0:12:95:84:47:73:f8:85: 5d:ca:c6:24:54:6e:c7:0b:b8:8e:38:41:14:d1:40:af:4f:e4: 2f:a4:06:4e:96:75:de:03:27:f6:17:4b:2a:33:06:cc:58:c9: 28:a2:56:a3:7c:51:04:d9:4b:02:35:21:92:1e:22:cd:e2:31: 6e:e0:8a:79:cb:10:c0:df:ff:69:4d:a0:bf:e0:d8:c6:a9:cc: f4:a5:12:ae:eb:c1:9f:d5:d9:15:70:ab:9d:7d:17:b8:c1:41: 53:66:f4:d5:ea:05:6a:f6:73:14:dd:01:79:4b:a5:96:4d:b6: da:ee:d3:7f -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUKpKOSkSd8lGacwJXaTFFvkqH5gwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVGMzUwRTAyNDhDQThBMkIyMEI1M0EyMkJERDNCNkZD RjE2QzdBQzAeFw0yNjA1MDMwMzE0MTNaFw0yNzA1MDIwMzE5MTNaMDMxMTAvBgNV BAMTKDlDODFEMEZFNjVEQzk3RUUwMzRDOEE0MDMwQUZDOTA5QUI5Mjg4NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdmreVdooO/TPC6zN4NBepTT6e YjJT6UeCDpGaRD40FFBdrcB03MFU+EfKtNaXkH3JpkrxkfTrRAOOrYOXEiOYgxVK o7VtxLgReDJrNm0vFtFShcAmB5ouUFkEWWNcrot5WeDKNcHyO4I8AhPlIQXpv6Zo CrT+NBGdeAz9sgniH+2FXJ7mAGu/qY3A0ZNg9ebO39uxlYQl7ev2NiGIMgTNdf2D 3foX2R57fkkYHLKHGLHpztP23MIAd7SnQ6piCcRIBcgbXrRZMtY5NfKZZXKPc6Ea 8ymc3Nv5vjql2l1zct0yY+DNCm4cHjGDqYx7W0q04tk6zYzNw99n/SslGtZZAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUnIHQ/mXcl+4DTIpAMK/JCauSiGMwHwYDVR0j BBgwFoAURfNQ4CSMqKKyC1OiK907b88Wx6wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmMyYWIwNjItODcwMy00ZGE2LWFkNzItODBkMjVhZThiZjVmLzAvNDVGMzUwRTAy NDhDQThBMkIyMEI1M0EyMkJERDNCNkZDRjE2QzdBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUYzNTBFMDI0OENBOEEyQjIwQjUzQTIyQkREM0I2RkNGMTZD N0FDLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ZjMmFiMDYyLTg3MDMtNGRhNi1h ZDcyLTgwZDI1YWU4YmY1Zi8wLzMyMzQzMDM2M2EzMjMxNjMzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzQzMDM0MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQGIcAwDQYJKoZI hvcNAQELBQADggEBAEadehIXFTrhkmauN1NNHXyu7yL4JxZXEpjlVWFCWZibg0kE fF4NRZ7ttj09PRgtU6IuyzcEBCQu7YDSLuIADuJZZcn6k9zBi/twElVWa4JgY4LQ O3bPHVEyg+BMf2lX2/G4d4AgCsyWuL3uYBYL5ig+k04uKVRfqQ+7t731CSO2Ggg/ dTljRWuwEpWER3P4hV3KxiRUbscLuI44QRTRQK9P5C+kBk6Wdd4DJ/YXSyozBsxY ySiiVqN8UQTZSwI1IZIeIs3iMW7ginnLEMDf/2lNoL/g2MapzPSlEq7rwZ/V2RVw q519F7jBQVNm9NXqBWr2cxTdAXlLpZZNttru038= -----END CERTIFICATE-----Generated at Wed May 13 10:16:56 2026 by rpki-client