$ rpki-client -vvf rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/323030313a6466323a623263303a3a2f34382d3438203d3e20313530393538.roa File: 323030313a6466323a623263303a3a2f34382d3438203d3e20313530393538.roa (raw, json) Hash identifier: DNfu6S0MfyEIbWVxydJYNYlQdSHELvJkaaSCCqoydj0= Subject key identifier: DF:24:78:34:26:8C:5B:56:AD:8C:68:D0:10:9E:43:BF:E4:ED:F4:D9 Certificate issuer: /CN=C9A0E983269384F00CCE857E3A8E8887BE9B7FC8 Certificate serial: 09706A98BF367FD3347846403ECA199D88753629 Authority key identifier: C9:A0:E9:83:26:93:84:F0:0C:CE:85:7E:3A:8E:88:87:BE:9B:7F:C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/323030313a6466323a623263303a3a2f34382d3438203d3e20313530393538.roa Signing time: Sun 03 May 2026 02:13:42 +0000 ROA not before: Sun 03 May 2026 02:08:42 +0000 ROA not after: Sun 02 May 2027 02:13:42 +0000 asID: 150958 IP address blocks: 2001:df2:b2c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.crl rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:70:6a:98:bf:36:7f:d3:34:78:46:40:3e:ca:19:9d:88:75:36:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9A0E983269384F00CCE857E3A8E8887BE9B7FC8 Validity Not Before: May 3 02:08:42 2026 GMT Not After : May 2 02:13:42 2027 GMT Subject: CN=DF247834268C5B56AD8C68D0109E43BFE4EDF4D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e5:91:fc:0a:6b:35:6e:7e:dd:23:a8:2c:d8: 8b:a6:c8:62:32:fd:b8:77:f7:f6:07:6d:fb:f4:16: 9c:47:0c:0b:cc:d2:df:58:2a:b8:04:17:e5:ee:36: 51:0c:20:31:47:8d:5f:4e:21:4f:89:71:a8:a7:27: 93:d6:4c:c9:32:6f:d6:a6:5c:36:11:dc:5e:19:81: 0d:13:65:b0:1b:f6:73:b3:f8:5f:2f:36:f3:66:71: e7:bb:f7:90:87:53:c9:1f:68:e1:bc:50:a0:34:fa: 8f:90:c2:24:71:0b:33:7d:c1:dc:be:fd:f8:53:7a: 64:24:a7:2d:c0:ee:2d:09:b1:7b:bd:3b:48:e3:6f: bd:f2:de:cd:8f:29:7f:9f:cf:89:b0:c9:36:67:c3: 8b:bf:1c:0d:f0:15:a8:71:e5:88:c7:e2:22:30:c5: 5c:78:d7:8f:da:29:75:e4:1d:fb:09:18:37:95:61: fa:ae:0a:f6:5f:45:c4:a8:9e:de:fb:78:64:c2:04: f4:be:91:c4:db:6f:b7:7a:61:23:d8:3b:7e:41:56: 0b:c5:d2:c4:b0:c1:90:22:6b:d4:cd:6b:71:2c:e6: a5:77:a9:c9:e3:a2:63:e9:ab:24:37:48:22:92:f7: 9e:04:08:62:33:96:c9:ea:23:59:43:76:3e:60:ca: 49:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:24:78:34:26:8C:5B:56:AD:8C:68:D0:10:9E:43:BF:E4:ED:F4:D9 X509v3 Authority Key Identifier: keyid:C9:A0:E9:83:26:93:84:F0:0C:CE:85:7E:3A:8E:88:87:BE:9B:7F:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9A0E983269384F00CCE857E3A8E8887BE9B7FC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/323030313a6466323a623263303a3a2f34382d3438203d3e20313530393538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:b2c0::/48 Signature Algorithm: sha256WithRSAEncryption 02:ad:5f:e6:f4:37:5b:9c:6f:0d:c8:d7:fe:9e:10:5b:eb:bc: c3:5b:98:41:ae:50:cc:9e:63:f1:b3:02:38:f5:ce:c6:ca:69: 4d:38:84:04:35:25:35:a6:6a:1e:49:47:89:be:26:51:ab:af: 5b:f1:d8:78:11:ee:13:1f:93:ad:de:45:00:40:39:3f:0f:c1: fb:70:16:28:07:66:06:86:b5:19:21:c1:98:28:5a:52:e1:ca: d8:e9:c3:27:a1:dc:7d:16:f9:fe:5b:82:55:84:68:9b:d9:46: 50:63:e7:c9:c1:f3:63:76:c2:2f:8b:59:30:10:a2:38:e9:3c: 08:58:7c:44:63:c5:44:9a:b3:82:d8:d8:32:73:4d:4f:4c:c5: c1:66:18:2b:7b:cf:3e:1f:66:90:5e:97:62:5f:17:50:ae:11: fd:66:85:28:2d:a5:cc:e6:6f:89:c3:28:62:e0:76:58:95:17: 7b:6f:69:56:e5:4c:3b:47:5a:a7:d9:15:9a:76:e0:bb:2e:b3: 5f:05:f6:a7:79:08:66:6e:99:d1:39:0d:36:27:91:4d:ad:4c: 43:f5:99:35:4c:47:05:3b:9d:95:db:cf:00:f0:ff:63:58:bd: 49:b4:97:69:26:a1:36:51:14:f4:3b:df:a0:58:01:ec:b1:ec: 98:de:37:f4 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUCXBqmL82f9M0eEZAPsoZnYh1NikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlBMEU5ODMyNjkzODRGMDBDQ0U4NTdFM0E4RTg4ODdC RTlCN0ZDODAeFw0yNjA1MDMwMjA4NDJaFw0yNzA1MDIwMjEzNDJaMDMxMTAvBgNV BAMTKERGMjQ3ODM0MjY4QzVCNTZBRDhDNjhEMDEwOUU0M0JGRTRFREY0RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC5ZH8Cms1bn7dI6gs2IumyGIy /bh39/YHbfv0FpxHDAvM0t9YKrgEF+XuNlEMIDFHjV9OIU+JcainJ5PWTMkyb9am XDYR3F4ZgQ0TZbAb9nOz+F8vNvNmcee795CHU8kfaOG8UKA0+o+QwiRxCzN9wdy+ /fhTemQkpy3A7i0JsXu9O0jjb73y3s2PKX+fz4mwyTZnw4u/HA3wFahx5YjH4iIw xVx414/aKXXkHfsJGDeVYfquCvZfRcSont77eGTCBPS+kcTbb7d6YSPYO35BVgvF 0sSwwZAia9TNa3Es5qV3qcnjomPpqyQ3SCKS954ECGIzlsnqI1lDdj5gyknHAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU3yR4NCaMW1atjGjQEJ5Dv+Tt9NkwHwYDVR0j BBgwFoAUyaDpgyaThPAMzoV+Oo6Ih76bf8gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGYwYmNkYzMtMGZlYS00NzQ3LTk5MDctNjU2NDg2YmFlOGRhLzAvQzlBMEU5ODMy NjkzODRGMDBDQ0U4NTdFM0E4RTg4ODdCRTlCN0ZDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOUEwRTk4MzI2OTM4NEYwMENDRTg1N0UzQThFODg4N0JFOUI3 RkM4LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBmMGJjZGMzLTBmZWEtNDc0Ny05 OTA3LTY1NjQ4NmJhZThkYS8wLzMyMzAzMDMxM2E2NDY2MzIzYTYyMzI2MzMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMwMzkzNTM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8rLAMA0GCSqGSIb3DQEBCwUAA4IBAQACrV/m9DdbnG8NyNf+nhBb67zDW5hBrlDM nmPxswI49c7GymlNOIQENSU1pmoeSUeJviZRq69b8dh4Ee4TH5Ot3kUAQDk/D8H7 cBYoB2YGhrUZIcGYKFpS4crY6cMnodx9Fvn+W4JVhGib2UZQY+fJwfNjdsIvi1kw EKI46TwIWHxEY8VEmrOC2Ngyc01PTMXBZhgre88+H2aQXpdiXxdQrhH9ZoUoLaXM 5m+Jwyhi4HZYlRd7b2lW5Uw7R1qn2RWaduC7LrNfBfaneQhmbpnROQ02J5FNrUxD 9Zk1TEcFO52V288A8P9jWL1JtJdpJqE2URT0O9+gWAHsseyY3jf0 -----END CERTIFICATE-----Generated at Wed May 13 07:15:15 2026 by rpki-client