$ rpki-client -vvf rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/323030313a6466343a333638303a3a2f34382d3438203d3e20313430343536.roa File: 323030313a6466343a333638303a3a2f34382d3438203d3e20313430343536.roa (raw, json) Hash identifier: RzRSXdrIXGBvVPeHVDu3wO8XEsc3GFR1CCktt00WYd8= Subject key identifier: BB:6D:32:15:B5:FC:F2:E3:19:46:B6:0B:DE:E8:71:19:CB:83:C5:79 Certificate issuer: /CN=62531E8BF877F9190055D7D857C21ECBDCFAC237 Certificate serial: 20C9EBA743426065FF02FB59A46862CE0F5D9721 Authority key identifier: 62:53:1E:8B:F8:77:F9:19:00:55:D7:D8:57:C2:1E:CB:DC:FA:C2:37 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62531E8BF877F9190055D7D857C21ECBDCFAC237.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/323030313a6466343a333638303a3a2f34382d3438203d3e20313430343536.roa Signing time: Sun 03 May 2026 02:16:51 +0000 ROA not before: Sun 03 May 2026 02:11:51 +0000 ROA not after: Sun 02 May 2027 02:16:51 +0000 asID: 140456 IP address blocks: 2001:df4:3680::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.crl rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62531E8BF877F9190055D7D857C21ECBDCFAC237.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c9:eb:a7:43:42:60:65:ff:02:fb:59:a4:68:62:ce:0f:5d:97:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62531E8BF877F9190055D7D857C21ECBDCFAC237 Validity Not Before: May 3 02:11:51 2026 GMT Not After : May 2 02:16:51 2027 GMT Subject: CN=BB6D3215B5FCF2E31946B60BDEE87119CB83C579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3d:ea:53:c9:0c:7e:76:21:ee:47:bc:0e:47: 63:6a:d6:6c:27:e3:9c:f1:72:4c:3c:aa:a3:f5:f4: 08:80:6a:da:ab:ad:16:c4:a5:f0:37:95:46:5e:84: 0a:49:ee:77:b5:2e:1a:54:2d:0f:48:55:47:76:a5: 02:89:55:3f:fc:f6:bc:b7:14:78:1b:50:75:95:ef: 99:22:6e:61:ea:01:b8:12:3c:72:77:6a:2c:7e:83: 94:78:7e:cb:85:62:a0:11:56:c9:2e:3a:bc:55:71: 85:7e:d0:9d:2a:ff:14:26:a1:07:7d:cb:f9:01:a8: 6a:65:38:9f:62:ee:10:c8:93:d7:74:0b:e6:c3:60: 39:3a:19:d5:d7:72:f6:87:1a:86:35:d7:dc:cb:41: ff:74:53:a8:d4:1e:09:8d:c5:a3:43:aa:0d:79:06: c4:d9:3a:31:95:6e:63:97:a7:43:41:b1:6a:db:c2: 38:74:95:56:c8:42:74:9e:22:f8:5d:ee:75:6b:c6: b1:78:35:86:e7:2b:5c:6a:33:db:a7:a5:55:0b:f5: 8c:fe:6d:be:6d:6e:c4:58:03:e7:eb:aa:48:ef:99: 11:c8:fc:78:2a:fe:37:5a:df:77:4d:c1:42:a5:cd: 84:b4:93:8b:bf:60:f3:20:4f:cc:16:bc:7c:a6:34: 9b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:6D:32:15:B5:FC:F2:E3:19:46:B6:0B:DE:E8:71:19:CB:83:C5:79 X509v3 Authority Key Identifier: keyid:62:53:1E:8B:F8:77:F9:19:00:55:D7:D8:57:C2:1E:CB:DC:FA:C2:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/62531E8BF877F9190055D7D857C21ECBDCFAC237.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62531E8BF877F9190055D7D857C21ECBDCFAC237.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/323030313a6466343a333638303a3a2f34382d3438203d3e20313430343536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:3680::/48 Signature Algorithm: sha256WithRSAEncryption aa:3a:61:a0:20:70:3a:f1:d7:18:29:e1:b1:87:26:12:32:62: 85:8f:c3:4c:ed:65:b0:96:fd:58:02:37:0e:a2:a8:54:6b:61: 18:2f:0b:39:e2:1e:7f:01:b7:6b:e1:3a:a1:5b:fe:39:cb:31: a0:e3:0b:f7:af:96:33:88:c2:f0:92:a1:4e:ab:10:8f:83:a5: 04:aa:57:11:d0:0f:e8:fa:8c:3b:a9:bf:c8:76:61:b8:6e:ef: 3c:e6:8e:92:48:bd:65:8d:bb:11:91:71:66:7a:a0:28:33:71: ae:87:f5:dd:9c:5d:2c:8d:ce:f7:99:59:25:f0:d3:d9:6f:6a: e5:37:0d:02:b5:c9:bf:8a:fd:b6:ae:cd:40:9c:67:cb:84:d8: b3:1c:ea:75:f1:c1:2a:9e:7a:19:5f:24:fa:12:83:fe:a7:8f: 01:2e:25:16:50:c9:a2:54:22:20:4e:06:35:16:69:59:c6:a4: e5:f6:b1:25:3b:a6:ba:74:09:80:c8:d1:b3:63:75:67:50:34: e7:ba:f3:6e:f1:43:64:73:f8:41:e2:a1:13:f6:75:30:7a:6e: 51:9c:93:de:2f:69:ea:d3:10:99:ec:cd:71:2d:d1:15:44:97: 5e:c7:3f:52:70:92:e5:2a:d1:c8:aa:a2:2c:be:6c:f9:e4:a0: a8:c7:c7:1b -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUIMnrp0NCYGX/AvtZpGhizg9dlyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI1MzFFOEJGODc3RjkxOTAwNTVEN0Q4NTdDMjFFQ0JE Q0ZBQzIzNzAeFw0yNjA1MDMwMjExNTFaFw0yNzA1MDIwMjE2NTFaMDMxMTAvBgNV BAMTKEJCNkQzMjE1QjVGQ0YyRTMxOTQ2QjYwQkRFRTg3MTE5Q0I4M0M1NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6PepTyQx+diHuR7wOR2Nq1mwn 45zxckw8qqP19AiAatqrrRbEpfA3lUZehApJ7ne1LhpULQ9IVUd2pQKJVT/89ry3 FHgbUHWV75kibmHqAbgSPHJ3aix+g5R4fsuFYqARVskuOrxVcYV+0J0q/xQmoQd9 y/kBqGplOJ9i7hDIk9d0C+bDYDk6GdXXcvaHGoY119zLQf90U6jUHgmNxaNDqg15 BsTZOjGVbmOXp0NBsWrbwjh0lVbIQnSeIvhd7nVrxrF4NYbnK1xqM9unpVUL9Yz+ bb5tbsRYA+frqkjvmRHI/Hgq/jda33dNwUKlzYS0k4u/YPMgT8wWvHymNJtnAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUu20yFbX88uMZRrYL3uhxGcuDxXkwHwYDVR0j BBgwFoAUYlMei/h3+RkAVdfYV8Iey9z6wjcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWE5NTIwZmQtOGRlNS00YTY5LTg1ZjEtYzQ0ODk3YWU2MTIxLzAvNjI1MzFFOEJG ODc3RjkxOTAwNTVEN0Q4NTdDMjFFQ0JEQ0ZBQzIzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjUzMUU4QkY4NzdGOTE5MDA1NUQ3RDg1N0MyMUVDQkRDRkFD MjM3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFhOTUyMGZkLThkZTUtNGE2OS04 NWYxLWM0NDg5N2FlNjEyMS8wLzMyMzAzMDMxM2E2NDY2MzQzYTMzMzYzODMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMwMzQzNTM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 9DaAMA0GCSqGSIb3DQEBCwUAA4IBAQCqOmGgIHA68dcYKeGxhyYSMmKFj8NM7WWw lv1YAjcOoqhUa2EYLws54h5/Abdr4TqhW/45yzGg4wv3r5YziMLwkqFOqxCPg6UE qlcR0A/o+ow7qb/IdmG4bu885o6SSL1ljbsRkXFmeqAoM3Guh/XdnF0sjc73mVkl 8NPZb2rlNw0Ctcm/iv22rs1AnGfLhNizHOp18cEqnnoZXyT6EoP+p48BLiUWUMmi VCIgTgY1FmlZxqTl9rElO6a6dAmAyNGzY3VnUDTnuvNu8UNkc/hB4qET9nUwem5R nJPeL2nq0xCZ7M1xLdEVRJdexz9ScJLlKtHIqqIsvmz55KCox8cb -----END CERTIFICATE-----Generated at Wed May 13 16:14:54 2026 by rpki-client