$ rpki-client -vvf rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/323430363a356463303a3a2f33322d3332203d3e20313336313231.roa File: 323430363a356463303a3a2f33322d3332203d3e20313336313231.roa (raw, json) Hash identifier: dOi5t8zi5JAQodBD98mcsNs1h4au7JIDI+EvfriW4vk= Subject key identifier: 78:40:43:A2:FA:F4:F4:C9:94:BB:BC:59:DB:10:35:EF:DF:55:AB:CA Certificate issuer: /CN=B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E Certificate serial: 51F40B01334C64D70D4B70109D9AC3C98B9E3E63 Authority key identifier: B1:68:CF:A3:79:F4:EA:CD:15:DB:0E:F7:6C:EB:C5:80:AC:1F:BF:6E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/323430363a356463303a3a2f33322d3332203d3e20313336313231.roa Signing time: Sun 03 May 2026 02:33:03 +0000 ROA not before: Sun 03 May 2026 02:28:03 +0000 ROA not after: Sun 02 May 2027 02:33:03 +0000 asID: 136121 IP address blocks: 2406:5dc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.crl rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 07:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:f4:0b:01:33:4c:64:d7:0d:4b:70:10:9d:9a:c3:c9:8b:9e:3e:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E Validity Not Before: May 3 02:28:03 2026 GMT Not After : May 2 02:33:03 2027 GMT Subject: CN=784043A2FAF4F4C994BBBC59DB1035EFDF55ABCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:75:1d:d8:dd:86:c1:f4:e3:7b:95:e1:a1:ea: 7e:5a:cd:8a:f3:d6:db:27:e9:4b:3c:e9:78:6e:d4: 1d:b0:24:c8:f2:41:db:dd:16:f3:ee:59:06:d5:ea: 04:34:ae:5a:3b:d3:d5:dd:ab:20:6e:07:35:d5:b6: 99:fa:84:d9:f8:eb:6f:8b:3e:df:34:c7:66:3c:c2: 5d:87:2d:c5:5b:a0:02:74:db:c4:46:9f:f5:49:85: 14:43:9b:63:4a:96:f4:33:ab:84:19:0f:13:76:f3: 83:50:0e:a9:46:38:68:b4:9b:e7:b8:e2:7d:ef:b8: b0:80:f8:6d:d6:94:15:99:c1:1c:5b:de:30:31:c1: 07:fa:0f:6b:cc:53:22:ff:ed:aa:87:15:68:a5:9c: 5d:ae:7c:32:b8:1a:a4:a5:bb:ea:55:f0:1d:0f:17: eb:ac:e3:c0:7b:70:fb:12:c8:b9:aa:14:a5:5f:52: 01:02:ff:71:11:ae:74:cb:0c:e9:d0:68:26:08:a7: 47:b7:28:4f:eb:9d:d5:65:b2:f5:56:41:4f:77:32: 3d:8f:6e:46:67:a2:21:90:59:9e:25:7f:9d:fb:90: 7e:f2:ba:05:73:72:d6:6e:c8:dd:67:0f:ec:5a:82: cc:aa:34:6a:09:7f:40:87:e8:27:59:bc:d1:94:e2: a8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:40:43:A2:FA:F4:F4:C9:94:BB:BC:59:DB:10:35:EF:DF:55:AB:CA X509v3 Authority Key Identifier: keyid:B1:68:CF:A3:79:F4:EA:CD:15:DB:0E:F7:6C:EB:C5:80:AC:1F:BF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/323430363a356463303a3a2f33322d3332203d3e20313336313231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:5dc0::/32 Signature Algorithm: sha256WithRSAEncryption a2:32:e2:8f:71:28:24:6b:14:19:de:ce:74:bf:e1:f6:e0:e2: 4b:94:41:e4:76:5e:5d:92:76:56:3f:ca:11:3c:24:24:e2:ec: c9:a9:0d:33:03:97:7d:b3:5a:21:d9:c4:01:bc:a0:6d:06:7c: 55:23:ee:0c:fa:bc:21:bf:b4:34:dd:4a:5f:3f:65:51:eb:dc: 8c:00:32:ac:65:bb:13:07:f0:73:b2:13:a0:4f:24:33:32:72: ca:9a:47:5d:f8:f4:10:0e:a4:fd:24:bb:7f:18:0d:c5:c8:7b: 80:32:c2:d4:5d:a2:07:3f:9c:4d:de:9e:9b:9e:58:b1:c4:94: 24:10:99:97:32:69:89:c3:02:1d:9d:1e:37:0e:31:c5:d9:09: 3a:79:ee:49:b5:1e:c1:7d:48:b7:f8:a0:d5:6e:83:a4:fd:f2: e6:5f:f5:a6:9c:25:44:0e:82:3e:50:36:0a:00:e1:c6:66:2c: 3a:3c:e0:63:85:6b:1f:62:f6:11:2b:99:fc:20:6e:70:9a:9a: f3:82:bd:35:d8:4f:34:e6:26:94:24:12:2c:ee:3d:2e:f7:a0: dc:f7:ac:87:d7:16:f9:10:d4:5c:e4:ef:3f:8a:04:6d:0f:18: cd:39:5b:37:aa:e5:31:b0:58:e7:b6:d5:85:17:7a:92:1c:45: 46:cf:0d:45 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUUfQLATNMZNcNS3AQnZrDyYuePmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE2OENGQTM3OUY0RUFDRDE1REIwRUY3NkNFQkM1ODBB QzFGQkY2RTAeFw0yNjA1MDMwMjI4MDNaFw0yNzA1MDIwMjMzMDNaMDMxMTAvBgNV BAMTKDc4NDA0M0EyRkFGNEY0Qzk5NEJCQkM1OURCMTAzNUVGREY1NUFCQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPdR3Y3YbB9ON7leGh6n5azYrz 1tsn6Us86Xhu1B2wJMjyQdvdFvPuWQbV6gQ0rlo709XdqyBuBzXVtpn6hNn462+L Pt80x2Y8wl2HLcVboAJ028RGn/VJhRRDm2NKlvQzq4QZDxN284NQDqlGOGi0m+e4 4n3vuLCA+G3WlBWZwRxb3jAxwQf6D2vMUyL/7aqHFWilnF2ufDK4GqSlu+pV8B0P F+us48B7cPsSyLmqFKVfUgEC/3ERrnTLDOnQaCYIp0e3KE/rndVlsvVWQU93Mj2P bkZnoiGQWZ4lf537kH7yugVzctZuyN1nD+xagsyqNGoJf0CH6CdZvNGU4qihAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUeEBDovr09MmUu7xZ2xA1799Vq8owHwYDVR0j BBgwFoAUsWjPo3n06s0V2w73bOvFgKwfv24wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTIxMjdmZWItOTYxNS00YzU4LWEzYmItZWVmN2I3YTY1NDdlLzAvQjE2OENGQTM3 OUY0RUFDRDE1REIwRUY3NkNFQkM1ODBBQzFGQkY2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTY4Q0ZBMzc5RjRFQUNEMTVEQjBFRjc2Q0VCQzU4MEFDMUZC RjZFLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzUyMTI3ZmViLTk2MTUtNGM1OC1h M2JiLWVlZjdiN2E2NTQ3ZS8wLzMyMzQzMDM2M2EzNTY0NjMzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzNjMxMzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQGXcAwDQYJKoZI hvcNAQELBQADggEBAKIy4o9xKCRrFBneznS/4fbg4kuUQeR2Xl2SdlY/yhE8JCTi 7MmpDTMDl32zWiHZxAG8oG0GfFUj7gz6vCG/tDTdSl8/ZVHr3IwAMqxluxMH8HOy E6BPJDMycsqaR1349BAOpP0ku38YDcXIe4AywtRdogc/nE3enpueWLHElCQQmZcy aYnDAh2dHjcOMcXZCTp57km1HsF9SLf4oNVug6T98uZf9aacJUQOgj5QNgoA4cZm LDo84GOFax9i9hErmfwgbnCamvOCvTXYTzTmJpQkEizuPS73oNz3rIfXFvkQ1Fzk 7z+KBG0PGM05Wzeq5TGwWOe21YUXepIcRUbPDUU= -----END CERTIFICATE-----Generated at Tue May 5 16:55:12 2026 by rpki-client