$ rpki-client -vvf rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa File: 323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa (raw, json) Hash identifier: +QD/pWetD0IzXhbj5Z0Qy5abcmZ6aa3dun6UEco+UkE= Subject key identifier: 36:26:87:57:6E:D1:16:B5:A1:C2:68:AF:65:BC:7B:97:02:6D:5E:61 Certificate issuer: /CN=F3144B9CC1B386B202465161BF4D4EAD048C0FC9 Certificate serial: 24B7FA0D0F33B25D6CC71D1F3B368DD2064BBAFA Authority key identifier: F3:14:4B:9C:C1:B3:86:B2:02:46:51:61:BF:4D:4E:AD:04:8C:0F:C9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa Signing time: Sun 03 May 2026 02:24:50 +0000 ROA not before: Sun 03 May 2026 02:19:50 +0000 ROA not after: Sun 02 May 2027 02:24:50 +0000 asID: 153149 IP address blocks: 2001:df4:9a40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.crl rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:b7:fa:0d:0f:33:b2:5d:6c:c7:1d:1f:3b:36:8d:d2:06:4b:ba:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3144B9CC1B386B202465161BF4D4EAD048C0FC9 Validity Not Before: May 3 02:19:50 2026 GMT Not After : May 2 02:24:50 2027 GMT Subject: CN=362687576ED116B5A1C268AF65BC7B97026D5E61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c4:2f:d6:ac:75:a1:45:ad:ce:b1:8b:b9:eb: cb:be:3c:89:75:d0:2b:c5:b6:bc:52:f5:5b:8a:bd: b8:7c:d9:09:80:50:1d:2c:5b:ca:da:4c:7b:f8:a5: f1:bd:cf:44:34:cc:b9:b7:f0:b2:8e:3c:1d:20:07: 16:83:3a:f0:f9:19:26:55:65:cd:60:ae:6a:a3:f6: f9:2f:f0:89:b2:80:61:89:bd:5e:50:f5:3b:43:3a: 85:7e:80:a2:48:3a:4c:8d:c3:30:d4:f7:a3:33:4c: ed:47:b3:f0:0c:c7:98:f3:48:c5:c1:28:43:b6:d6: 57:e3:ff:67:e6:d5:5f:bc:8a:7c:0d:dd:04:ef:f4: 26:34:29:82:21:3a:1c:b8:25:16:38:72:e0:59:24: a0:36:68:3d:c9:9f:e9:53:15:3a:41:a2:0b:62:9e: 93:d6:dd:ab:c8:13:c9:52:bb:8a:5a:96:ec:47:96: 8e:e7:2a:89:fd:a3:fc:f0:f0:fa:4a:ec:8f:da:77: 06:61:f6:7f:a1:0c:6f:38:69:96:80:dd:3c:bc:60: 58:59:ff:3b:5a:e1:a0:fb:7d:7d:98:ee:d6:b2:80: 67:6e:13:8b:70:55:6f:e2:d5:a8:17:d0:6f:4f:13: 73:d0:87:a0:ec:70:c5:70:84:f1:e3:d8:e6:c3:39: 60:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:26:87:57:6E:D1:16:B5:A1:C2:68:AF:65:BC:7B:97:02:6D:5E:61 X509v3 Authority Key Identifier: keyid:F3:14:4B:9C:C1:B3:86:B2:02:46:51:61:BF:4D:4E:AD:04:8C:0F:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:9a40::/48 Signature Algorithm: sha256WithRSAEncryption dd:09:8e:45:71:2a:ed:4d:0d:13:53:c3:c1:e1:27:be:16:23: 84:e4:d2:18:2c:4d:f3:13:66:f5:cc:02:b1:ab:62:ad:57:29: 53:03:f9:f9:79:06:4b:b0:06:41:02:0c:81:e7:1d:ef:4d:e8: 44:d6:09:3a:d4:b4:be:53:e0:05:91:0a:2c:40:1a:36:d5:65: 54:df:9c:a7:d9:50:b6:2b:03:b9:e4:33:e0:a1:c9:27:f6:ed: 6d:15:fa:09:16:d8:d7:49:73:49:8b:90:5c:35:62:f0:01:ce: 4a:59:9b:c8:92:de:22:fe:7f:7b:b4:7c:a7:29:62:e0:65:fd: 41:5c:a0:76:18:eb:86:ec:88:58:f3:30:7c:ba:9f:55:d5:a5: 70:20:e5:1d:fe:0d:69:8f:91:24:1f:bf:2b:ec:7c:19:f9:53: 86:63:da:cb:3c:94:96:7f:ec:31:33:42:3c:a8:c8:44:23:96: b0:fc:fa:47:6a:eb:e9:e0:cf:da:95:b2:1e:4c:a6:41:4d:ca: 4b:24:8b:8f:08:51:45:07:e0:6c:49:66:c4:8a:21:4c:9d:1a: 53:e5:de:43:86:95:11:05:bb:0d:2c:2e:c7:50:80:2f:af:63: a7:fb:8d:ba:9a:7f:0a:57:3c:7c:b7:7e:d1:97:34:62:cb:30: af:02:ac:77 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUJLf6DQ8zsl1sxx0fOzaN0gZLuvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMxNDRCOUNDMUIzODZCMjAyNDY1MTYxQkY0RDRFQUQw NDhDMEZDOTAeFw0yNjA1MDMwMjE5NTBaFw0yNzA1MDIwMjI0NTBaMDMxMTAvBgNV BAMTKDM2MjY4NzU3NkVEMTE2QjVBMUMyNjhBRjY1QkM3Qjk3MDI2RDVFNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaxC/WrHWhRa3OsYu568u+PIl1 0CvFtrxS9VuKvbh82QmAUB0sW8raTHv4pfG9z0Q0zLm38LKOPB0gBxaDOvD5GSZV Zc1grmqj9vkv8ImygGGJvV5Q9TtDOoV+gKJIOkyNwzDU96MzTO1Hs/AMx5jzSMXB KEO21lfj/2fm1V+8inwN3QTv9CY0KYIhOhy4JRY4cuBZJKA2aD3Jn+lTFTpBogti npPW3avIE8lSu4paluxHlo7nKon9o/zw8PpK7I/adwZh9n+hDG84aZaA3Ty8YFhZ /zta4aD7fX2Y7taygGduE4twVW/i1agX0G9PE3PQh6DscMVwhPHj2ObDOWATAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUNiaHV27RFrWhwmivZbx7lwJtXmEwHwYDVR0j BBgwFoAU8xRLnMGzhrICRlFhv01OrQSMD8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNkYzAzNGYtMzgyMy00OGFmLTk1M2QtYWFhODczYjBmYjZhLzEvRjMxNDRCOUND MUIzODZCMjAyNDY1MTYxQkY0RDRFQUQwNDhDMEZDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzE0NEI5Q0MxQjM4NkIyMDI0NjUxNjFCRjRENEVBRDA0OEMw RkM5LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzMzZGMwMzRmLTM4MjMtNDhhZi05 NTNkLWFhYTg3M2IwZmI2YS8xLzMyMzAzMDMxM2E2NDY2MzQzYTM5NjEzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMzMzEzNDM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 9JpAMA0GCSqGSIb3DQEBCwUAA4IBAQDdCY5FcSrtTQ0TU8PB4Se+FiOE5NIYLE3z E2b1zAKxq2KtVylTA/n5eQZLsAZBAgyB5x3vTehE1gk61LS+U+AFkQosQBo21WVU 35yn2VC2KwO55DPgockn9u1tFfoJFtjXSXNJi5BcNWLwAc5KWZvIkt4i/n97tHyn KWLgZf1BXKB2GOuG7IhY8zB8up9V1aVwIOUd/g1pj5EkH78r7HwZ+VOGY9rLPJSW f+wxM0I8qMhEI5aw/PpHauvp4M/albIeTKZBTcpLJIuPCFFFB+BsSWbEiiFMnRpT 5d5DhpURBbsNLC7HUIAvr2On+426mn8KVzx8t37RlzRiyzCvAqx3 -----END CERTIFICATE-----Generated at Wed May 13 16:14:46 2026 by rpki-client