$ rpki-client -vvf rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/323030313a6466333a646134303a3a2f34382d3438203d3e20313532373730.roa File: 323030313a6466333a646134303a3a2f34382d3438203d3e20313532373730.roa (raw, json) Hash identifier: m6r5wd4KMCbGIspePg5po6701WHsYOtKsgouEtPwMM8= Subject key identifier: AA:0A:0A:13:7C:55:CC:9C:FE:BE:1E:0F:C7:3C:B0:73:AA:CF:28:F9 Certificate issuer: /CN=41D7B39458C9984F5AC12CC82AF91244F8E3CAC1 Certificate serial: 6E04E844EA0C7863C419AFD8BC15A501B3C0A91B Authority key identifier: 41:D7:B3:94:58:C9:98:4F:5A:C1:2C:C8:2A:F9:12:44:F8:E3:CA:C1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/323030313a6466333a646134303a3a2f34382d3438203d3e20313532373730.roa Signing time: Sun 03 May 2026 02:13:16 +0000 ROA not before: Sun 03 May 2026 02:08:16 +0000 ROA not after: Sun 02 May 2027 02:13:16 +0000 asID: 152770 IP address blocks: 2001:df3:da40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.crl rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:04:e8:44:ea:0c:78:63:c4:19:af:d8:bc:15:a5:01:b3:c0:a9:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41D7B39458C9984F5AC12CC82AF91244F8E3CAC1 Validity Not Before: May 3 02:08:16 2026 GMT Not After : May 2 02:13:16 2027 GMT Subject: CN=AA0A0A137C55CC9CFEBE1E0FC73CB073AACF28F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0f:7e:91:1e:92:e2:b0:a6:bb:30:e4:fd:b9: e6:9a:8a:29:4f:5a:35:6a:8e:1b:78:dd:ac:11:7c: 08:16:88:18:0a:b4:36:d7:6d:72:76:a1:ea:0e:27: c3:2e:1f:08:24:a0:53:f1:7e:7a:dc:30:b4:ce:06: 15:55:5f:02:9f:3d:c3:be:01:f3:88:11:13:77:d4: 7d:47:54:1b:78:69:aa:c3:1c:10:30:f3:12:4a:bd: 13:e7:65:a4:04:84:bd:7b:15:f6:a1:93:8d:75:89: 5f:70:2e:ce:d1:04:cd:94:41:76:bc:66:5d:3b:05: c0:85:e2:77:71:2f:89:e9:21:53:0b:ee:a8:96:16: e3:87:28:33:93:2d:0d:f7:21:e8:79:fd:9d:1f:fe: c2:c2:11:e4:6e:e4:36:7a:3e:35:b4:76:4d:80:fc: 1a:18:e4:cb:ab:4d:e9:8e:24:d4:c1:b8:2f:a5:74: 7a:79:7d:0a:02:26:f0:0f:9c:65:c2:75:d5:cb:cf: f3:52:dc:17:58:f7:2d:d1:2e:04:4e:49:fb:9b:22: 19:4a:5b:97:a7:0e:55:25:d9:7d:84:7d:e5:d3:1f: d2:c8:36:23:a6:8b:4e:5e:e7:f0:f9:76:45:d0:4c: e3:83:73:3a:7e:2c:75:59:d5:85:97:53:fa:4d:4a: 3d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:0A:0A:13:7C:55:CC:9C:FE:BE:1E:0F:C7:3C:B0:73:AA:CF:28:F9 X509v3 Authority Key Identifier: keyid:41:D7:B3:94:58:C9:98:4F:5A:C1:2C:C8:2A:F9:12:44:F8:E3:CA:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D7B39458C9984F5AC12CC82AF91244F8E3CAC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/323030313a6466333a646134303a3a2f34382d3438203d3e20313532373730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:da40::/48 Signature Algorithm: sha256WithRSAEncryption 75:b8:e0:53:a9:91:24:48:1b:e0:b3:5a:7a:e1:12:bb:3d:58: 18:26:81:d4:a7:15:01:7b:a6:29:3c:83:aa:9d:c6:1e:ea:8b: 3d:6e:6f:7d:d4:41:65:bb:6a:7d:14:3a:06:1f:12:73:03:77: 78:cb:d5:67:16:0a:93:e5:05:14:3f:74:d0:77:aa:ef:d6:1a: 8c:dd:d6:d6:67:20:5a:eb:8a:9d:0f:bc:99:02:54:f4:f6:0c: e4:86:d0:f5:b8:d7:1d:0f:55:74:58:2f:09:7e:8c:5f:0f:4e: 43:a1:da:06:78:04:34:70:08:e7:bc:25:c5:c8:16:e5:b8:6e: fc:6d:7a:7b:18:b9:56:ee:41:a7:a8:c3:7f:e8:f1:e3:3b:71: 3e:ec:86:eb:9a:d2:9e:1c:7d:d6:95:6e:0d:19:c7:47:4e:25: 01:c2:18:2f:1d:d3:c3:c5:f5:d2:e4:55:8e:1f:85:90:90:ad: 0e:92:bf:df:5a:5a:68:9b:e1:0f:da:b3:82:5b:2b:99:f3:ef: ac:c5:85:81:c1:6a:cc:8f:c4:51:ca:e9:a9:43:59:af:9c:09: b7:ad:e7:2c:fc:88:76:ed:8c:5a:50:2c:6d:e9:a2:54:00:89: c8:75:8b:ef:cd:00:94:52:5d:5c:20:39:a6:0a:c2:f2:c6:b7: 71:3f:d3:df -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUbgToROoMeGPEGa/YvBWlAbPAqRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFEN0IzOTQ1OEM5OTg0RjVBQzEyQ0M4MkFGOTEyNDRG OEUzQ0FDMTAeFw0yNjA1MDMwMjA4MTZaFw0yNzA1MDIwMjEzMTZaMDMxMTAvBgNV BAMTKEFBMEEwQTEzN0M1NUNDOUNGRUJFMUUwRkM3M0NCMDczQUFDRjI4RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCD36RHpLisKa7MOT9ueaaiilP WjVqjht43awRfAgWiBgKtDbXbXJ2oeoOJ8MuHwgkoFPxfnrcMLTOBhVVXwKfPcO+ AfOIERN31H1HVBt4aarDHBAw8xJKvRPnZaQEhL17Ffahk411iV9wLs7RBM2UQXa8 Zl07BcCF4ndxL4npIVML7qiWFuOHKDOTLQ33Ieh5/Z0f/sLCEeRu5DZ6PjW0dk2A /BoY5MurTemOJNTBuC+ldHp5fQoCJvAPnGXCddXLz/NS3BdY9y3RLgROSfubIhlK W5enDlUl2X2EfeXTH9LINiOmi05e5/D5dkXQTOODczp+LHVZ1YWXU/pNSj1TAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUqgoKE3xVzJz+vh4Pxzywc6rPKPkwHwYDVR0j BBgwFoAUQdezlFjJmE9awSzIKvkSRPjjysEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGRlMmQwOTAtNDc2Ni00NzVjLTljZWYtN2JlYjU4NWNmMjQxLzEvNDFEN0IzOTQ1 OEM5OTg0RjVBQzEyQ0M4MkFGOTEyNDRGOEUzQ0FDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MUQ3QjM5NDU4Qzk5ODRGNUFDMTJDQzgyQUY5MTI0NEY4RTND QUMxLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBkZTJkMDkwLTQ3NjYtNDc1Yy05 Y2VmLTdiZWI1ODVjZjI0MS8xLzMyMzAzMDMxM2E2NDY2MzMzYTY0NjEzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMyMzczNzMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 89pAMA0GCSqGSIb3DQEBCwUAA4IBAQB1uOBTqZEkSBvgs1p64RK7PVgYJoHUpxUB e6YpPIOqncYe6os9bm991EFlu2p9FDoGHxJzA3d4y9VnFgqT5QUUP3TQd6rv1hqM 3dbWZyBa64qdD7yZAlT09gzkhtD1uNcdD1V0WC8JfoxfD05DodoGeAQ0cAjnvCXF yBbluG78bXp7GLlW7kGnqMN/6PHjO3E+7IbrmtKeHH3WlW4NGcdHTiUBwhgvHdPD xfXS5FWOH4WQkK0Okr/fWlpom+EP2rOCWyuZ8++sxYWBwWrMj8RRyumpQ1mvnAm3 recs/Ih27YxaUCxt6aJUAInIdYvvzQCUUl1cIDmmCsLyxrdxP9Pf -----END CERTIFICATE-----Generated at Wed May 13 14:50:18 2026 by rpki-client