$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/323030313a6466303a353463303a3a2f34382d3438203d3e20313431353936.roa File: 323030313a6466303a353463303a3a2f34382d3438203d3e20313431353936.roa (raw, json) Hash identifier: bGA0iX1ida39LzySmJX22+VfeVCRxUu8cves5zOxb1c= Subject key identifier: C5:A8:34:A7:BA:F4:1C:27:BD:FE:E5:87:B7:FE:DB:2D:08:77:14:0A Certificate issuer: /CN=58775F16B86C66299D9AF904F73786CD365D8787 Certificate serial: 7558552F185AF842E66EBD28E241156A997D2039 Authority key identifier: 58:77:5F:16:B8:6C:66:29:9D:9A:F9:04:F7:37:86:CD:36:5D:87:87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58775F16B86C66299D9AF904F73786CD365D8787.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/323030313a6466303a353463303a3a2f34382d3438203d3e20313431353936.roa Signing time: Sun 03 May 2026 02:17:29 +0000 ROA not before: Sun 03 May 2026 02:12:29 +0000 ROA not after: Sun 02 May 2027 02:17:29 +0000 asID: 141596 IP address blocks: 2001:df0:54c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.crl rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58775F16B86C66299D9AF904F73786CD365D8787.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:58:55:2f:18:5a:f8:42:e6:6e:bd:28:e2:41:15:6a:99:7d:20:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58775F16B86C66299D9AF904F73786CD365D8787 Validity Not Before: May 3 02:12:29 2026 GMT Not After : May 2 02:17:29 2027 GMT Subject: CN=C5A834A7BAF41C27BDFEE587B7FEDB2D0877140A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bd:3e:b7:e9:5d:70:c5:55:33:cf:83:b0:84: a7:8d:27:9c:f7:ba:3d:0a:75:a9:5e:85:50:3e:7d: 22:8b:e9:72:c3:70:b9:16:b5:42:63:e3:18:55:1e: f5:cb:11:cc:6a:06:8a:50:a5:38:0f:9b:c5:9b:3e: 5b:93:0c:d1:21:b0:79:a1:b3:37:00:bd:4e:7b:fe: 5f:21:f5:62:61:74:50:ba:4d:2d:bd:4b:4d:88:17: 57:74:13:03:d6:29:ae:a2:07:e2:d1:a8:09:86:eb: bd:d5:08:75:8e:2c:e5:53:a6:af:4a:18:19:eb:68: ee:ed:a6:c3:49:0c:c1:e9:21:b8:fd:eb:34:aa:70: 73:72:ba:83:b2:67:c8:f8:92:74:7d:25:95:95:04: e6:9b:29:3b:5a:cf:7c:f9:f8:07:06:ca:22:bb:e9: b2:59:2e:26:9c:ac:76:6c:0a:e7:8f:f4:cc:65:92: 7c:f9:05:71:98:5d:77:cf:8f:d8:2c:f9:94:39:0d: cf:94:bc:2b:83:6d:cd:01:37:d6:e6:7d:a6:88:8c: d4:c1:d1:08:3b:5a:47:f4:77:e1:83:b2:1d:3b:00: e4:ab:5f:6c:d7:60:52:4e:89:95:1e:e4:b2:63:ad: cb:d6:25:e2:9f:9e:2d:ea:da:a6:32:6e:5e:84:fc: c9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A8:34:A7:BA:F4:1C:27:BD:FE:E5:87:B7:FE:DB:2D:08:77:14:0A X509v3 Authority Key Identifier: keyid:58:77:5F:16:B8:6C:66:29:9D:9A:F9:04:F7:37:86:CD:36:5D:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/58775F16B86C66299D9AF904F73786CD365D8787.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58775F16B86C66299D9AF904F73786CD365D8787.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/323030313a6466303a353463303a3a2f34382d3438203d3e20313431353936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:54c0::/48 Signature Algorithm: sha256WithRSAEncryption 7a:92:98:78:97:db:d4:09:06:80:8c:1b:bb:ae:75:b5:5b:e9: a4:3d:a7:1e:d0:a8:d5:f1:46:60:cb:13:25:27:10:68:22:eb: 5a:19:bf:ab:76:41:a3:a9:57:b2:84:bf:1a:f2:47:1e:88:ac: 15:99:9a:1c:36:52:07:1f:64:09:af:aa:ff:01:61:67:41:8d: 97:32:b2:47:b1:de:b4:e3:e9:dd:c7:c9:f9:67:8c:d1:3c:d8: f3:80:fe:70:3f:e5:1c:47:55:86:48:05:7e:be:84:dc:c9:74: bb:7d:55:b8:c2:32:57:80:a1:b1:4e:89:b6:f7:da:f2:d0:eb: c9:f1:06:a8:7e:83:75:b2:5b:e1:51:c3:32:27:c1:1f:b8:2c: b5:7c:bc:26:48:65:8f:e1:1b:0f:a3:70:97:7e:44:aa:45:e0: 7d:7e:fe:01:90:05:7b:72:ae:65:26:47:03:a0:f3:67:73:58: ba:87:03:ec:18:d7:8d:6f:91:4d:c7:0e:a5:b9:39:89:06:b9: 47:db:af:cf:bd:33:fa:a3:66:b7:2d:e5:c3:c0:24:92:ee:1a: dd:c6:e5:36:08:23:cd:72:55:d5:88:5c:23:f3:16:69:2b:de: 68:44:5f:4c:c9:f2:3e:ca:3c:4a:84:a2:80:63:fe:fd:aa:bc: 00:33:b0:22 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUdVhVLxha+ELmbr0o4kEVapl9IDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg3NzVGMTZCODZDNjYyOTlEOUFGOTA0RjczNzg2Q0Qz NjVEODc4NzAeFw0yNjA1MDMwMjEyMjlaFw0yNzA1MDIwMjE3MjlaMDMxMTAvBgNV BAMTKEM1QTgzNEE3QkFGNDFDMjdCREZFRTU4N0I3RkVEQjJEMDg3NzE0MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8vT636V1wxVUzz4OwhKeNJ5z3 uj0KdalehVA+fSKL6XLDcLkWtUJj4xhVHvXLEcxqBopQpTgPm8WbPluTDNEhsHmh szcAvU57/l8h9WJhdFC6TS29S02IF1d0EwPWKa6iB+LRqAmG673VCHWOLOVTpq9K GBnraO7tpsNJDMHpIbj96zSqcHNyuoOyZ8j4knR9JZWVBOabKTtaz3z5+AcGyiK7 6bJZLiacrHZsCueP9Mxlknz5BXGYXXfPj9gs+ZQ5Dc+UvCuDbc0BN9bmfaaIjNTB 0Qg7Wkf0d+GDsh07AOSrX2zXYFJOiZUe5LJjrcvWJeKfni3q2qYybl6E/MmpAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUxag0p7r0HCe9/uWHt/7bLQh3FAowHwYDVR0j BBgwFoAUWHdfFrhsZimdmvkE9zeGzTZdh4cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWNhMjkyYjItNGFlNC00MWRmLTg4N2EtYzE3MmMzZTFhZTczLzAvNTg3NzVGMTZC ODZDNjYyOTlEOUFGOTA0RjczNzg2Q0QzNjVEODc4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODc3NUYxNkI4NkM2NjI5OUQ5QUY5MDRGNzM3ODZDRDM2NUQ4 Nzg3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFjYTI5MmIyLTRhZTQtNDFkZi04 ODdhLWMxNzJjM2UxYWU3My8wLzMyMzAzMDMxM2E2NDY2MzAzYTM1MzQ2MzMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMxMzUzOTM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8FTAMA0GCSqGSIb3DQEBCwUAA4IBAQB6kph4l9vUCQaAjBu7rnW1W+mkPace0KjV 8UZgyxMlJxBoIutaGb+rdkGjqVeyhL8a8kceiKwVmZocNlIHH2QJr6r/AWFnQY2X MrJHsd604+ndx8n5Z4zRPNjzgP5wP+UcR1WGSAV+voTcyXS7fVW4wjJXgKGxTom2 99ry0OvJ8QaofoN1slvhUcMyJ8EfuCy1fLwmSGWP4RsPo3CXfkSqReB9fv4BkAV7 cq5lJkcDoPNnc1i6hwPsGNeNb5FNxw6luTmJBrlH26/PvTP6o2a3LeXDwCSS7hrd xuU2CCPNclXViFwj8xZpK95oRF9MyfI+yjxKhKKAY/79qrwAM7Ai -----END CERTIFICATE-----Generated at Wed May 13 11:22:04 2026 by rpki-client