$ rpki-client -vvf rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa File: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (raw, json) Hash identifier: r6qxzQ/FpP4apM7+bFGMg0MnfLkYQkINU0oxwojw5KA= Subject key identifier: 0A:6B:23:A5:27:AF:05:79:6B:9E:3C:CA:92:75:D9:C7:D6:4D:A0:40 Certificate issuer: /CN=CE5ECD1D687D040F7BDA17704649E1DFA897CE1A Certificate serial: 7F5AE4E7EB4851488904565788333FD48DF2F1D9 Authority key identifier: CE:5E:CD:1D:68:7D:04:0F:7B:DA:17:70:46:49:E1:DF:A8:97:CE:1A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa Signing time: Sun 03 May 2026 02:15:37 +0000 ROA not before: Sun 03 May 2026 02:10:37 +0000 ROA not after: Sun 02 May 2027 02:15:37 +0000 asID: 152800 IP address blocks: 2001:df3:dfc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.crl rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:5a:e4:e7:eb:48:51:48:89:04:56:57:88:33:3f:d4:8d:f2:f1:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE5ECD1D687D040F7BDA17704649E1DFA897CE1A Validity Not Before: May 3 02:10:37 2026 GMT Not After : May 2 02:15:37 2027 GMT Subject: CN=0A6B23A527AF05796B9E3CCA9275D9C7D64DA040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:74:5a:7e:a7:11:c9:1d:c9:81:71:24:0d:32: 92:8c:bf:f9:0b:ba:59:a5:01:03:c2:a5:31:32:84: 18:3e:de:a7:aa:02:71:25:7e:d2:78:1b:05:d8:69: 6b:c9:1b:e0:e0:5b:1e:b4:fc:15:20:72:7a:ac:aa: d6:50:38:30:93:67:bb:22:24:9a:2c:cf:53:2f:8f: c5:49:4c:eb:3e:ef:11:1d:49:2e:6b:de:fc:d5:ef: 60:b6:bd:7b:1a:21:85:4e:cd:bb:ce:fb:cf:e3:b9: b4:09:c4:87:b6:c9:93:51:15:3b:46:27:3e:e2:4d: 7e:67:31:97:c9:d2:02:3e:12:6e:53:14:c4:c1:d2: f7:d1:06:b5:c5:46:6b:ad:c1:dd:01:0c:b5:47:d9: 5b:0d:49:d8:42:0f:3c:15:6e:00:dd:5f:9f:cc:88: dd:79:ec:e3:91:8c:c0:c1:ad:8a:dd:78:89:f1:66: 3a:6d:32:cd:b6:1e:a2:6d:ee:a5:f8:f4:b2:cd:15: 8f:e2:1a:ff:d8:74:73:f6:34:56:af:1c:bf:e7:31: 6b:04:bd:d6:75:4b:c6:7a:75:ad:90:3a:d9:2c:62: 94:2e:e5:46:b1:5c:e8:44:38:c3:58:c1:22:cc:ca: 3f:88:9b:d5:27:2b:3b:ab:35:7e:6d:56:b7:c2:84: a3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6B:23:A5:27:AF:05:79:6B:9E:3C:CA:92:75:D9:C7:D6:4D:A0:40 X509v3 Authority Key Identifier: keyid:CE:5E:CD:1D:68:7D:04:0F:7B:DA:17:70:46:49:E1:DF:A8:97:CE:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:dfc0::/48 Signature Algorithm: sha256WithRSAEncryption 60:54:5d:2f:11:5e:de:84:bd:45:80:50:88:0e:0f:85:99:34: 79:03:0b:4e:d4:ca:78:eb:6b:e7:32:16:36:21:e2:35:3c:f7: 48:f1:7a:85:18:63:a4:af:f4:17:95:39:9b:20:f3:9f:71:e1: 9a:6c:27:97:af:a3:cb:87:9f:80:ae:c2:3f:92:bd:2c:6d:1d: 88:d1:44:e7:d5:7b:be:e3:e3:ca:83:c8:56:7d:7a:5c:a7:a2: 69:09:9a:8a:30:12:09:31:80:ee:8c:86:2a:3b:c3:be:a0:22: 43:45:3b:7c:7f:26:a7:9c:c8:de:92:9f:d9:f9:8f:82:a2:14: b8:c4:33:1c:34:9a:ac:1e:49:d7:63:be:1f:24:0e:71:e0:09: 2b:01:f8:61:50:63:98:25:48:f4:09:18:32:06:fb:12:bc:a1: 3d:1e:b8:c6:9e:d8:7a:5d:dd:2f:5f:58:ce:eb:60:70:61:1c: 7f:6a:4d:eb:9e:5e:06:07:68:39:5c:bc:d3:8b:2e:40:d4:af: 63:ba:96:83:b6:9e:20:57:a5:cf:d3:00:41:2b:dc:52:c4:a2: 44:67:ad:bb:0f:e5:ee:cf:19:b3:52:a6:12:55:34:be:9f:9a: 74:93:7a:ec:b4:ef:33:43:3d:20:ca:d6:ce:10:fa:17:0e:d4: 40:18:6b:d1 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUf1rk5+tIUUiJBFZXiDM/1I3y8dkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U1RUNEMUQ2ODdEMDQwRjdCREExNzcwNDY0OUUxREZB ODk3Q0UxQTAeFw0yNjA1MDMwMjEwMzdaFw0yNzA1MDIwMjE1MzdaMDMxMTAvBgNV BAMTKDBBNkIyM0E1MjdBRjA1Nzk2QjlFM0NDQTkyNzVEOUM3RDY0REEwNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbdFp+pxHJHcmBcSQNMpKMv/kL ulmlAQPCpTEyhBg+3qeqAnElftJ4GwXYaWvJG+DgWx60/BUgcnqsqtZQODCTZ7si JJosz1Mvj8VJTOs+7xEdSS5r3vzV72C2vXsaIYVOzbvO+8/jubQJxIe2yZNRFTtG Jz7iTX5nMZfJ0gI+Em5TFMTB0vfRBrXFRmutwd0BDLVH2VsNSdhCDzwVbgDdX5/M iN157OORjMDBrYrdeInxZjptMs22HqJt7qX49LLNFY/iGv/YdHP2NFavHL/nMWsE vdZ1S8Z6da2QOtksYpQu5UaxXOhEOMNYwSLMyj+Im9UnKzurNX5tVrfChKOnAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUCmsjpSevBXlrnjzKknXZx9ZNoEAwHwYDVR0j BBgwFoAUzl7NHWh9BA972hdwRknh36iXzhowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTZkYTBlODItMDc2NC00NWQzLWFlZDktZmQyNThlNzJiNmUyLzEvQ0U1RUNEMUQ2 ODdEMDQwRjdCREExNzcwNDY0OUUxREZBODk3Q0UxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRTVFQ0QxRDY4N0QwNDBGN0JEQTE3NzA0NjQ5RTFERkE4OTdD RTFBLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE2ZGEwZTgyLTA3NjQtNDVkMy1h ZWQ5LWZkMjU4ZTcyYjZlMi8xLzMyMzAzMDMxM2E2NDY2MzMzYTY0NjY2MzMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMyMzgzMDMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 89/AMA0GCSqGSIb3DQEBCwUAA4IBAQBgVF0vEV7ehL1FgFCIDg+FmTR5AwtO1Mp4 62vnMhY2IeI1PPdI8XqFGGOkr/QXlTmbIPOfceGabCeXr6PLh5+ArsI/kr0sbR2I 0UTn1Xu+4+PKg8hWfXpcp6JpCZqKMBIJMYDujIYqO8O+oCJDRTt8fyannMjekp/Z +Y+CohS4xDMcNJqsHknXY74fJA5x4AkrAfhhUGOYJUj0CRgyBvsSvKE9HrjGnth6 Xd0vX1jO62BwYRx/ak3rnl4GB2g5XLzTiy5A1K9jupaDtp4gV6XP0wBBK9xSxKJE Z627D+XuzxmzUqYSVTS+n5p0k3rstO8zQz0gytbOEPoXDtRAGGvR -----END CERTIFICATE-----Generated at Wed May 13 10:54:37 2026 by rpki-client