$ rpki-client -vvf rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/323030313a6466303a62333a3a2f34382d3438203d3e203435373138.roa File: 323030313a6466303a62333a3a2f34382d3438203d3e203435373138.roa (raw, json) Hash identifier: lL0LNbFOb3ZMt/gKNiHtSDZhxYdsWPVmvyN1tdNUMJ8= Subject key identifier: B9:B1:F7:A9:10:7B:2F:7A:CF:7B:3E:51:89:76:E2:16:DC:09:3E:C8 Certificate issuer: /CN=7C9D38287AB4C0800F67E516DB04760454CBE9F1 Certificate serial: 15EBCD89E063755D6137E4F3FF819FFBDDF796A1 Authority key identifier: 7C:9D:38:28:7A:B4:C0:80:0F:67:E5:16:DB:04:76:04:54:CB:E9:F1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/323030313a6466303a62333a3a2f34382d3438203d3e203435373138.roa Signing time: Sun 03 May 2026 02:19:09 +0000 ROA not before: Sun 03 May 2026 02:14:09 +0000 ROA not after: Sun 02 May 2027 02:19:09 +0000 asID: 45718 IP address blocks: 2001:df0:b3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.crl rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:eb:cd:89:e0:63:75:5d:61:37:e4:f3:ff:81:9f:fb:dd:f7:96:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C9D38287AB4C0800F67E516DB04760454CBE9F1 Validity Not Before: May 3 02:14:09 2026 GMT Not After : May 2 02:19:09 2027 GMT Subject: CN=B9B1F7A9107B2F7ACF7B3E518976E216DC093EC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8d:ab:de:c3:d0:a8:12:c8:4a:2f:e2:a4:6a: a3:1d:bf:2a:39:3e:0f:f9:e0:8d:e8:24:af:8b:8a: 78:b3:d8:c9:f6:56:e5:f0:e8:75:bf:89:5a:39:8c: 6f:4d:32:e6:57:48:1c:8b:a2:63:f4:50:63:d4:57: fd:c0:8d:0b:7e:81:5f:65:73:48:32:45:d6:1e:3e: 6f:1c:82:25:b6:ee:93:76:e3:51:5e:54:b5:25:f7: 08:a0:18:60:b4:ce:de:76:dc:ab:00:53:4f:a9:1d: 03:71:62:2b:0a:bd:b7:09:8a:5b:e4:30:4f:bd:7b: c8:c3:fa:15:7e:1b:28:56:c1:71:3b:df:3d:50:25: fc:08:52:d1:9c:81:96:5e:39:a5:53:34:62:f8:e9: 7d:02:12:e1:33:ef:67:6f:33:0b:2a:62:14:0b:91: cd:f8:05:6d:71:39:04:b1:27:f9:c3:3f:6b:3c:6e: be:35:53:ae:eb:c2:90:e8:94:02:97:d6:c4:22:d7: 75:48:47:4a:65:01:89:8c:b3:d6:70:d7:06:8e:5b: 62:81:db:fd:eb:c4:a0:1f:8d:e4:c3:49:09:7b:b4: 0b:d0:ae:ce:4b:f6:ed:e2:48:dd:bd:14:76:f3:cb: 07:41:33:bb:1f:48:3e:65:4b:dd:b2:cb:c0:48:7f: 2b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B1:F7:A9:10:7B:2F:7A:CF:7B:3E:51:89:76:E2:16:DC:09:3E:C8 X509v3 Authority Key Identifier: keyid:7C:9D:38:28:7A:B4:C0:80:0F:67:E5:16:DB:04:76:04:54:CB:E9:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/323030313a6466303a62333a3a2f34382d3438203d3e203435373138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:b3::/48 Signature Algorithm: sha256WithRSAEncryption 61:8e:46:7c:85:8a:42:22:91:c2:f2:ce:65:92:61:72:dc:2d: e9:61:5a:3b:41:ae:e5:cc:90:dc:b2:8e:38:17:f9:2b:8f:21: 8a:44:ec:27:f9:65:e0:5a:8c:da:e3:44:5a:9a:10:60:b9:a1: 6d:e1:e0:6c:a7:a2:41:0b:4f:d2:ef:bd:33:84:81:13:c6:8c: 23:c1:89:0e:c5:06:b1:cb:cf:aa:9f:a9:56:d3:ac:bf:75:57: af:dc:3e:d9:71:ac:a8:08:9f:70:2f:04:d1:34:cb:da:0a:bc: 4b:cf:2d:4b:be:41:4c:35:ea:1b:8f:3d:0f:a4:21:93:32:a0: a5:fa:95:b6:8d:29:52:e7:b6:ce:df:f2:76:ca:7c:fb:23:a6: 80:bc:7a:a8:ad:7c:57:42:93:e3:a8:d6:af:ab:c8:af:7f:b3: 76:92:65:ea:fc:34:b9:3f:f5:93:be:49:32:e7:38:3f:51:1d: 9e:11:27:8f:03:e8:72:78:06:27:18:c0:ed:23:db:43:f4:7c: 0d:da:94:cb:28:c0:c2:9a:e9:55:28:62:0b:51:73:d4:ad:08: 43:9a:a3:d4:08:b9:47:bd:a1:0b:96:14:70:d5:c2:b5:a2:ae: 69:e7:7a:68:c1:93:06:1e:2f:6d:68:87:b7:08:7f:68:f1:bd: 51:bb:c2:d1 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUFevNieBjdV1hN+Tz/4Gf+933lqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M5RDM4Mjg3QUI0QzA4MDBGNjdFNTE2REIwNDc2MDQ1 NENCRTlGMTAeFw0yNjA1MDMwMjE0MDlaFw0yNzA1MDIwMjE5MDlaMDMxMTAvBgNV BAMTKEI5QjFGN0E5MTA3QjJGN0FDRjdCM0U1MTg5NzZFMjE2REMwOTNFQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSjavew9CoEshKL+KkaqMdvyo5 Pg/54I3oJK+Liniz2Mn2VuXw6HW/iVo5jG9NMuZXSByLomP0UGPUV/3AjQt+gV9l c0gyRdYePm8cgiW27pN241FeVLUl9wigGGC0zt523KsAU0+pHQNxYisKvbcJilvk ME+9e8jD+hV+GyhWwXE73z1QJfwIUtGcgZZeOaVTNGL46X0CEuEz72dvMwsqYhQL kc34BW1xOQSxJ/nDP2s8br41U67rwpDolAKX1sQi13VIR0plAYmMs9Zw1waOW2KB 2/3rxKAfjeTDSQl7tAvQrs5L9u3iSN29FHbzywdBM7sfSD5lS92yy8BIfyu9AgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUubH3qRB7L3rPez5RiXbiFtwJPsgwHwYDVR0j BBgwFoAUfJ04KHq0wIAPZ+UW2wR2BFTL6fEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjA0OWMyMTAtZjM2NS00MzJmLWE3Y2EtMGI1ZWI4NmIwMWM2LzAvN0M5RDM4Mjg3 QUI0QzA4MDBGNjdFNTE2REIwNDc2MDQ1NENCRTlGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QzlEMzgyODdBQjRDMDgwMEY2N0U1MTZEQjA0NzYwNDU0Q0JF OUYxLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIwNDljMjEwLWYzNjUtNDMyZi1h N2NhLTBiNWViODZiMDFjNi8wLzMyMzAzMDMxM2E2NDY2MzAzYTYyMzMzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzNDM1MzczMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN8ACzMA0G CSqGSIb3DQEBCwUAA4IBAQBhjkZ8hYpCIpHC8s5lkmFy3C3pYVo7Qa7lzJDcso44 F/krjyGKROwn+WXgWoza40RamhBguaFt4eBsp6JBC0/S770zhIETxowjwYkOxQax y8+qn6lW06y/dVev3D7ZcayoCJ9wLwTRNMvaCrxLzy1LvkFMNeobjz0PpCGTMqCl +pW2jSlS57bO3/J2ynz7I6aAvHqorXxXQpPjqNavq8ivf7N2kmXq/DS5P/WTvkky 5zg/UR2eESePA+hyeAYnGMDtI9tD9HwN2pTLKMDCmulVKGILUXPUrQhDmqPUCLlH vaELlhRw1cK1oq5p53powZMGHi9taIe3CH9o8b1Ru8LR -----END CERTIFICATE-----Generated at Wed May 13 13:03:24 2026 by rpki-client