$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/323030313a6466343a3763303a3a2f34382d3438203d3e20313531353735.roa File: 323030313a6466343a3763303a3a2f34382d3438203d3e20313531353735.roa (raw, json) Hash identifier: eZupa4yD5dYmRchDIoQ9Vr1OSpDO1UCvdkhlGFp59RU= Subject key identifier: 8E:66:0B:6C:BF:73:2B:54:47:0A:3B:A5:E7:7D:E3:FD:88:4B:0B:CF Certificate issuer: /CN=387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8 Certificate serial: 76C1583AD6B4CEB9EA34F7DE38AE89245171CE1D Authority key identifier: 38:7D:A9:5F:F9:9D:3F:CB:2B:BB:D2:F3:B2:29:D9:F3:37:2D:D3:B8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/323030313a6466343a3763303a3a2f34382d3438203d3e20313531353735.roa Signing time: Sun 03 May 2026 02:22:14 +0000 ROA not before: Sun 03 May 2026 02:17:14 +0000 ROA not after: Sun 02 May 2027 02:22:14 +0000 asID: 151575 IP address blocks: 2001:df4:7c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.crl rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:c1:58:3a:d6:b4:ce:b9:ea:34:f7:de:38:ae:89:24:51:71:ce:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8 Validity Not Before: May 3 02:17:14 2026 GMT Not After : May 2 02:22:14 2027 GMT Subject: CN=8E660B6CBF732B54470A3BA5E77DE3FD884B0BCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:be:cc:53:f9:62:58:24:c2:19:4d:a1:84:ed: a7:c6:41:ba:6f:04:1b:3e:21:e1:c6:5b:f0:98:d5: 5c:ea:91:f4:b1:06:2a:d2:e3:29:3e:ff:57:4b:f2: 3b:42:38:ec:2b:60:10:ec:11:5d:1d:92:4c:2f:c7: 0c:da:ae:dd:7d:e5:76:52:3a:ab:7e:44:e9:87:a0: e7:9b:d5:a1:61:cd:17:ff:5a:58:3d:94:3b:a7:ec: f8:d9:0c:1b:01:e2:11:d7:f6:94:1c:2d:53:e0:7b: ae:6b:eb:33:57:31:68:02:89:c9:55:3c:75:4e:09: 15:eb:ab:58:ec:d5:31:c7:8a:19:22:4c:fb:fb:ab: 06:fe:02:fc:9d:d6:10:7b:13:9a:07:0b:91:d8:2e: 37:3c:e0:34:2c:eb:f8:28:db:6c:be:1b:0c:91:a4: bd:10:31:25:71:8c:f9:95:fb:9d:0a:c0:f4:1e:b3: 88:e9:72:59:1b:f2:a3:d6:e4:48:b9:8a:1d:1f:bd: 55:e4:f4:de:85:71:a4:cc:6d:92:a9:3f:fe:48:f8: 82:ce:9d:01:2e:6a:ff:06:07:13:ed:0a:f9:4e:32: 56:23:9a:28:a8:92:4b:2b:6d:1a:99:93:59:f4:94: 15:53:7e:8c:76:09:5b:89:b6:e9:8c:a5:c3:14:6d: ae:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:66:0B:6C:BF:73:2B:54:47:0A:3B:A5:E7:7D:E3:FD:88:4B:0B:CF X509v3 Authority Key Identifier: keyid:38:7D:A9:5F:F9:9D:3F:CB:2B:BB:D2:F3:B2:29:D9:F3:37:2D:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/323030313a6466343a3763303a3a2f34382d3438203d3e20313531353735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:7c0::/48 Signature Algorithm: sha256WithRSAEncryption bf:c6:93:cd:4b:30:47:76:f5:ea:c7:7d:b0:ed:c1:cf:96:35: 43:f4:ca:6d:03:95:44:9b:9b:f0:7c:90:da:27:94:22:c6:45: 72:67:88:0e:04:d7:04:0e:49:37:95:23:73:9d:ec:01:6d:d3: 47:b0:a2:fe:d8:6b:bf:3e:d5:69:e1:29:87:a7:3d:79:68:28: e5:e0:84:f5:c0:77:76:b2:35:17:bf:3a:aa:08:5c:12:a7:d4: 4e:bc:0c:d7:82:6d:7f:77:f3:1f:3d:91:53:b6:6f:c1:ba:c7: 21:1b:5b:d7:92:9a:3f:a7:88:2c:18:3b:41:6d:36:6e:d0:be: 72:c2:50:90:6b:b3:66:01:99:81:f9:fd:e9:75:c6:6e:31:78: 4f:91:28:7f:cc:30:8a:4d:8e:a1:04:7a:1f:ae:c6:85:ac:23: 81:1c:cb:74:13:94:bc:e8:b6:8f:8b:71:92:69:7a:d4:23:16: ce:eb:bf:1d:0b:dd:89:91:2a:b9:ed:55:bc:20:dc:b7:ff:84: 13:8a:f6:3c:8e:56:b1:6f:a0:84:b0:0e:fe:83:52:44:e4:96: cc:35:b7:41:01:a2:5d:da:d5:f2:42:d6:aa:a9:9d:77:00:6b: 9a:c4:ac:db:75:04:e6:d4:d3:20:7b:8f:f7:88:ac:c9:16:4e: 3c:81:af:16 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUdsFYOta0zrnqNPfeOK6JJFFxzh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg3REE5NUZGOTlEM0ZDQjJCQkJEMkYzQjIyOUQ5RjMz NzJERDNCODAeFw0yNjA1MDMwMjE3MTRaFw0yNzA1MDIwMjIyMTRaMDMxMTAvBgNV BAMTKDhFNjYwQjZDQkY3MzJCNTQ0NzBBM0JBNUU3N0RFM0ZEODg0QjBCQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpvsxT+WJYJMIZTaGE7afGQbpv BBs+IeHGW/CY1VzqkfSxBirS4yk+/1dL8jtCOOwrYBDsEV0dkkwvxwzart195XZS Oqt+ROmHoOeb1aFhzRf/Wlg9lDun7PjZDBsB4hHX9pQcLVPge65r6zNXMWgCiclV PHVOCRXrq1js1THHihkiTPv7qwb+Avyd1hB7E5oHC5HYLjc84DQs6/go22y+GwyR pL0QMSVxjPmV+50KwPQes4jpclkb8qPW5Ei5ih0fvVXk9N6FcaTMbZKpP/5I+ILO nQEuav8GBxPtCvlOMlYjmiiokksrbRqZk1n0lBVTfox2CVuJtumMpcMUba7/AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUjmYLbL9zK1RHCjul533j/YhLC88wHwYDVR0j BBgwFoAUOH2pX/mdP8sru9LzsinZ8zct07gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMyODBhZjMtYWExZC00MjcxLThjMDYtYTNmYTI4ODk4NDI2LzAvMzg3REE5NUZG OTlEM0ZDQjJCQkJEMkYzQjIyOUQ5RjMzNzJERDNCOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zODdEQTk1RkY5OUQzRkNCMkJCQkQyRjNCMjI5RDlGMzM3MkRE M0I4LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJjMjgwYWYzLWFhMWQtNDI3MS04 YzA2LWEzZmEyODg5ODQyNi8wLzMyMzAzMDMxM2E2NDY2MzQzYTM3NjMzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzUzMTM1MzczNS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDfQH wDANBgkqhkiG9w0BAQsFAAOCAQEAv8aTzUswR3b16sd9sO3Bz5Y1Q/TKbQOVRJub 8HyQ2ieUIsZFcmeIDgTXBA5JN5Ujc53sAW3TR7Ci/thrvz7VaeEph6c9eWgo5eCE 9cB3drI1F786qghcEqfUTrwM14Jtf3fzHz2RU7ZvwbrHIRtb15KaP6eILBg7QW02 btC+csJQkGuzZgGZgfn96XXGbjF4T5Eof8wwik2OoQR6H67GhawjgRzLdBOUvOi2 j4txkml61CMWzuu/HQvdiZEque1VvCDct/+EE4r2PI5WsW+ghLAO/oNSROSWzDW3 QQGiXdrV8kLWqqmddwBrmsSs23UE5tTTIHuP94isyRZOPIGvFg== -----END CERTIFICATE-----Generated at Wed May 13 10:20:49 2026 by rpki-client