$ rpki-client -vvf rpki-rsync.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/323030313a6466303a376163303a3a2f34382d3438203d3e20313439333838.roa File: 323030313a6466303a376163303a3a2f34382d3438203d3e20313439333838.roa (raw, json) Hash identifier: ZpWBUTYuQcAKlvk2d2JG20XN4fDhWIahOn1m4ehuvWM= Subject key identifier: CE:92:50:85:5A:40:41:9C:58:3F:48:1C:1A:99:41:94:DC:6F:03:E8 Certificate issuer: /CN=1072303E63837C5CAD6D6208D064394F85518DC3 Certificate serial: 0C579F67C1980A12B349ADC40496E26174E07458 Authority key identifier: 10:72:30:3E:63:83:7C:5C:AD:6D:62:08:D0:64:39:4F:85:51:8D:C3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1072303E63837C5CAD6D6208D064394F85518DC3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/323030313a6466303a376163303a3a2f34382d3438203d3e20313439333838.roa Signing time: Sun 03 May 2026 02:21:16 +0000 ROA not before: Sun 03 May 2026 02:16:16 +0000 ROA not after: Sun 02 May 2027 02:21:16 +0000 asID: 149388 IP address blocks: 2001:df0:7ac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/1072303E63837C5CAD6D6208D064394F85518DC3.crl rsync://rpki-rsync.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/1072303E63837C5CAD6D6208D064394F85518DC3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1072303E63837C5CAD6D6208D064394F85518DC3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:57:9f:67:c1:98:0a:12:b3:49:ad:c4:04:96:e2:61:74:e0:74:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1072303E63837C5CAD6D6208D064394F85518DC3 Validity Not Before: May 3 02:16:16 2026 GMT Not After : May 2 02:21:16 2027 GMT Subject: CN=CE9250855A40419C583F481C1A994194DC6F03E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:98:e9:18:91:fa:1b:84:ab:14:ce:0f:a2:fa: f5:ec:fb:50:ea:fc:42:88:05:82:75:04:58:c7:89: 26:8a:76:c1:2b:f8:6e:64:a0:e9:36:03:da:0f:9f: 9d:2b:9a:e8:16:d6:84:77:0d:26:c2:f4:27:02:dc: 48:8f:a1:2e:d0:9b:6f:98:9d:93:f7:aa:2f:57:b4: 25:83:7b:ac:44:7e:7a:96:e1:b3:c2:26:a8:34:f1: e4:2e:7b:72:8b:48:96:6a:0f:66:61:f5:67:65:c9: b3:2b:e7:9e:cd:b0:93:0c:a8:1d:9c:fa:d5:44:ec: 40:dd:06:2c:de:ed:aa:bb:cf:35:bd:54:a4:17:88: 66:03:4b:2c:bd:39:55:05:07:e7:85:d3:4d:67:b2: 14:56:2d:74:99:f7:ff:62:10:1c:9a:17:a0:be:34: f9:e9:22:16:12:64:a7:ec:d9:16:ca:84:ac:1b:62: 4b:9d:32:05:c0:f5:31:d3:14:10:77:7f:0c:8c:de: 30:13:dd:16:85:e6:71:ba:98:7d:a3:7b:ee:4b:41: 66:f5:27:23:a1:2e:c6:44:f6:49:27:c9:6a:07:7e: 3a:db:09:90:91:6f:42:18:4a:ff:fb:a2:c5:c1:35: bd:5f:d0:f8:82:0c:f4:e7:13:aa:a8:9e:1a:e3:e0: 68:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:92:50:85:5A:40:41:9C:58:3F:48:1C:1A:99:41:94:DC:6F:03:E8 X509v3 Authority Key Identifier: keyid:10:72:30:3E:63:83:7C:5C:AD:6D:62:08:D0:64:39:4F:85:51:8D:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/1072303E63837C5CAD6D6208D064394F85518DC3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1072303E63837C5CAD6D6208D064394F85518DC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/323030313a6466303a376163303a3a2f34382d3438203d3e20313439333838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:7ac0::/48 Signature Algorithm: sha256WithRSAEncryption b2:6e:a3:3d:15:20:49:9f:60:d3:62:59:58:db:bc:3e:d5:d1: 88:e6:72:c2:d5:8f:24:21:15:16:59:fa:77:fd:22:db:0a:4a: f4:e9:58:87:9b:33:ee:74:38:02:40:2a:89:5f:b7:cd:8b:26: 3a:68:ba:6c:10:83:57:e9:11:67:9b:86:8e:6e:2d:51:69:04: 9e:c0:82:b9:0f:fe:6f:45:a0:d8:ce:64:02:e1:7e:48:ba:ae: 31:36:a9:06:77:3c:35:cc:fa:7a:19:cb:c5:1c:e0:fe:f3:a3: a7:f3:f5:1d:85:46:1a:17:ab:f0:bb:15:3e:8b:77:5e:bf:7e: 57:8f:0f:9d:3e:51:c1:b9:9f:2c:19:83:22:c5:8b:1b:56:ba: 5c:02:28:5c:fe:b2:4d:cd:3b:59:e2:28:59:4d:0f:92:1b:3e: 6d:9b:5c:81:9d:f4:c5:2c:d3:64:53:0c:af:9d:fa:8a:89:c1: 82:fd:28:30:e0:8a:e6:e1:b4:99:de:0e:29:75:d6:0f:f7:61: 4a:82:df:b1:97:70:08:48:54:fa:68:5a:2e:4e:5e:2d:a1:60: 6a:97:08:c6:a3:81:9e:8c:33:6d:3b:bd:c7:7e:17:cc:94:82: 88:ae:bd:25:f1:e3:ae:03:58:a8:1d:96:a2:08:1c:ea:5e:6f: e2:d4:61:91 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUDFefZ8GYChKzSa3EBJbiYXTgdFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA3MjMwM0U2MzgzN0M1Q0FENkQ2MjA4RDA2NDM5NEY4 NTUxOERDMzAeFw0yNjA1MDMwMjE2MTZaFw0yNzA1MDIwMjIxMTZaMDMxMTAvBgNV BAMTKENFOTI1MDg1NUE0MDQxOUM1ODNGNDgxQzFBOTk0MTk0REM2RjAzRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEmOkYkfobhKsUzg+i+vXs+1Dq /EKIBYJ1BFjHiSaKdsEr+G5koOk2A9oPn50rmugW1oR3DSbC9CcC3EiPoS7Qm2+Y nZP3qi9XtCWDe6xEfnqW4bPCJqg08eQue3KLSJZqD2Zh9WdlybMr557NsJMMqB2c +tVE7EDdBize7aq7zzW9VKQXiGYDSyy9OVUFB+eF001nshRWLXSZ9/9iEByaF6C+ NPnpIhYSZKfs2RbKhKwbYkudMgXA9THTFBB3fwyM3jAT3RaF5nG6mH2je+5LQWb1 JyOhLsZE9kknyWoHfjrbCZCRb0IYSv/7osXBNb1f0PiCDPTnE6qonhrj4GjJAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUzpJQhVpAQZxYP0gcGplBlNxvA+gwHwYDVR0j BBgwFoAUEHIwPmODfFytbWII0GQ5T4VRjcMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mjg1MjQzZTUtYzY2MC00MTEyLWJkYzMtNTk0NDEyZGVkYzRkLzAvMTA3MjMwM0U2 MzgzN0M1Q0FENkQ2MjA4RDA2NDM5NEY4NTUxOERDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDcyMzAzRTYzODM3QzVDQUQ2RDYyMDhEMDY0Mzk0Rjg1NTE4 REMzLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzI4NTI0M2U1LWM2NjAtNDExMi1i ZGMzLTU5NDQxMmRlZGM0ZC8wLzMyMzAzMDMxM2E2NDY2MzAzYTM3NjE2MzMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDM5MzMzODM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8HrAMA0GCSqGSIb3DQEBCwUAA4IBAQCybqM9FSBJn2DTYllY27w+1dGI5nLC1Y8k IRUWWfp3/SLbCkr06ViHmzPudDgCQCqJX7fNiyY6aLpsEINX6RFnm4aObi1RaQSe wIK5D/5vRaDYzmQC4X5Iuq4xNqkGdzw1zPp6GcvFHOD+86On8/UdhUYaF6vwuxU+ i3dev35Xjw+dPlHBuZ8sGYMixYsbVrpcAihc/rJNzTtZ4ihZTQ+SGz5tm1yBnfTF LNNkUwyvnfqKicGC/Sgw4Irm4bSZ3g4pddYP92FKgt+xl3AISFT6aFouTl4toWBq lwjGo4GejDNtO73HfhfMlIKIrr0l8eOuA1ioHZaiCBzqXm/i1GGR -----END CERTIFICATE-----Generated at Wed May 13 13:45:07 2026 by rpki-client