$ rpki-client -vvf rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/323030313a6466313a393863303a3a2f34382d3438203d3e20313432333836.roa File: 323030313a6466313a393863303a3a2f34382d3438203d3e20313432333836.roa (raw, json) Hash identifier: UugzJo0XG4CnPFobTcgFSX6/vfuVvh/vQ7HS0KjLKPQ= Subject key identifier: 1B:73:62:EE:2A:79:44:D7:5A:54:A6:2F:C7:CF:E0:69:07:C5:8A:46 Certificate issuer: /CN=4A690EC844644FC7C72921E7FA9D8B8827A68133 Certificate serial: 579BD59BE000288209B6BD4BE3FAF7956C85188F Authority key identifier: 4A:69:0E:C8:44:64:4F:C7:C7:29:21:E7:FA:9D:8B:88:27:A6:81:33 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/323030313a6466313a393863303a3a2f34382d3438203d3e20313432333836.roa Signing time: Sun 03 May 2026 02:14:00 +0000 ROA not before: Sun 03 May 2026 02:09:00 +0000 ROA not after: Sun 02 May 2027 02:14:00 +0000 asID: 142386 IP address blocks: 2001:df1:98c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.crl rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:9b:d5:9b:e0:00:28:82:09:b6:bd:4b:e3:fa:f7:95:6c:85:18:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A690EC844644FC7C72921E7FA9D8B8827A68133 Validity Not Before: May 3 02:09:00 2026 GMT Not After : May 2 02:14:00 2027 GMT Subject: CN=1B7362EE2A7944D75A54A62FC7CFE06907C58A46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:95:ca:83:cb:de:9c:6e:9d:d5:57:36:9e:5a: 44:59:b7:4e:ea:e0:80:fc:b8:fa:6f:12:27:10:91: 2b:eb:e7:3b:d4:07:f2:cf:eb:af:23:e1:ee:7c:9a: da:d9:9b:05:7e:0c:bb:b0:0d:0b:62:fc:73:68:34: fa:74:c7:8e:9c:be:24:1a:34:f7:aa:09:93:9c:7d: 5b:39:5c:05:60:19:5d:1d:7c:e5:c2:19:41:47:95: 20:61:b6:a9:c4:25:17:e9:d6:4c:7c:f0:a5:c6:04: 62:b8:37:c3:4c:79:bb:91:ec:81:54:6b:85:96:d9: fd:fa:a3:44:eb:41:5b:45:07:4e:d2:7f:c6:8e:7c: 38:5f:9d:e5:d0:92:f7:aa:fd:00:f7:f3:38:51:ba: 71:e9:3d:39:32:3f:e8:10:09:ac:bb:00:d8:37:a9: c1:36:e8:1a:84:7d:10:1c:23:3d:b1:e0:be:22:41: ee:53:8f:a4:4a:5d:53:94:c3:c8:83:4d:e3:23:13: 04:6c:00:92:7f:1c:b5:27:28:16:e9:fd:ef:be:0c: c9:04:86:58:66:e6:1d:6e:53:f7:ee:07:aa:91:22: 1f:70:27:98:24:a3:9e:68:92:c3:c3:6f:6a:73:9e: 5b:5b:d4:8b:2d:f0:3d:8d:ad:54:22:23:b9:4c:16: f5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:73:62:EE:2A:79:44:D7:5A:54:A6:2F:C7:CF:E0:69:07:C5:8A:46 X509v3 Authority Key Identifier: keyid:4A:69:0E:C8:44:64:4F:C7:C7:29:21:E7:FA:9D:8B:88:27:A6:81:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/323030313a6466313a393863303a3a2f34382d3438203d3e20313432333836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:98c0::/48 Signature Algorithm: sha256WithRSAEncryption 66:68:80:df:d5:1d:ae:9d:ed:54:f5:00:bc:35:c7:dc:84:90: 42:4c:83:0b:88:ff:ca:7a:d8:f7:5c:53:28:1f:7b:fc:a1:c8: e2:f2:da:0b:ef:b1:7c:3a:f1:70:41:7f:a5:1c:12:ad:5b:69: 51:b6:ee:2f:aa:c8:1e:e4:b1:d3:a7:14:08:9f:59:e2:ef:58: a6:01:6f:ab:74:02:c4:b0:ff:4d:0f:17:96:53:8d:41:4a:cc: d8:31:c3:8a:58:50:53:f8:bf:25:b0:40:f0:1c:07:6c:b4:8b: cc:b5:6e:e0:d7:b3:48:38:77:34:b1:26:7c:f2:f9:95:6b:c3: d7:d1:c1:ea:31:81:64:c4:9c:04:0f:54:17:dd:32:a8:5f:13: ae:cb:22:7c:de:37:e1:07:76:61:32:db:c6:37:51:81:92:14: 8a:b8:c6:36:ee:c0:fc:07:a7:fe:54:74:b9:9c:37:f2:a3:9e: b2:a3:26:a8:41:a4:f0:36:79:05:bd:99:36:6f:43:01:b0:5f: b5:1b:ce:15:a4:45:20:75:a0:76:92:1c:e1:11:3b:10:8e:12: 9e:94:c6:70:70:b8:6f:5c:f7:12:b4:8a:ac:b8:ab:56:be:04: a6:fc:e0:28:ed:6e:11:71:4c:95:4a:b2:8d:b3:40:c0:bf:d3: 0e:ac:7b:c0 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUV5vVm+AAKIIJtr1L4/r3lWyFGI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE2OTBFQzg0NDY0NEZDN0M3MjkyMUU3RkE5RDhCODgy N0E2ODEzMzAeFw0yNjA1MDMwMjA5MDBaFw0yNzA1MDIwMjE0MDBaMDMxMTAvBgNV BAMTKDFCNzM2MkVFMkE3OTQ0RDc1QTU0QTYyRkM3Q0ZFMDY5MDdDNThBNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOlcqDy96cbp3VVzaeWkRZt07q 4ID8uPpvEicQkSvr5zvUB/LP668j4e58mtrZmwV+DLuwDQti/HNoNPp0x46cviQa NPeqCZOcfVs5XAVgGV0dfOXCGUFHlSBhtqnEJRfp1kx88KXGBGK4N8NMebuR7IFU a4WW2f36o0TrQVtFB07Sf8aOfDhfneXQkveq/QD38zhRunHpPTkyP+gQCay7ANg3 qcE26BqEfRAcIz2x4L4iQe5Tj6RKXVOUw8iDTeMjEwRsAJJ/HLUnKBbp/e++DMkE hlhm5h1uU/fuB6qRIh9wJ5gko55oksPDb2pznltb1Ist8D2NrVQiI7lMFvWDAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUG3Ni7ip5RNdaVKYvx8/gaQfFikYwHwYDVR0j BBgwFoAUSmkOyERkT8fHKSHn+p2LiCemgTMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTBmZjAyMmEtOWIxNi00YjRjLTk4YTItNTM0OTk0ZjU4OWQwLzAvNEE2OTBFQzg0 NDY0NEZDN0M3MjkyMUU3RkE5RDhCODgyN0E2ODEzMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QTY5MEVDODQ0NjQ0RkM3QzcyOTIxRTdGQTlEOEI4ODI3QTY4 MTMzLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzEwZmYwMjJhLTliMTYtNGI0Yy05 OGEyLTUzNDk5NGY1ODlkMC8wLzMyMzAzMDMxM2E2NDY2MzEzYTM5Mzg2MzMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMyMzMzODM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8ZjAMA0GCSqGSIb3DQEBCwUAA4IBAQBmaIDf1R2une1U9QC8NcfchJBCTIMLiP/K etj3XFMoH3v8ocji8toL77F8OvFwQX+lHBKtW2lRtu4vqsge5LHTpxQIn1ni71im AW+rdALEsP9NDxeWU41BSszYMcOKWFBT+L8lsEDwHAdstIvMtW7g17NIOHc0sSZ8 8vmVa8PX0cHqMYFkxJwED1QX3TKoXxOuyyJ83jfhB3ZhMtvGN1GBkhSKuMY27sD8 B6f+VHS5nDfyo56yoyaoQaTwNnkFvZk2b0MBsF+1G84VpEUgdaB2khzhETsQjhKe lMZwcLhvXPcStIqsuKtWvgSm/OAo7W4RcUyVSrKNs0DAv9MOrHvA -----END CERTIFICATE-----Generated at Wed May 13 13:27:23 2026 by rpki-client