$ rpki-client -vvf rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/323030313a6466323a376663303a3a2f34382d3438203d3e20313530323432.roa File: 323030313a6466323a376663303a3a2f34382d3438203d3e20313530323432.roa (raw, json) Hash identifier: R//K7f8SQ84W/WhpHi/GP3kDl7olX9IsyMdmQ8qFKuk= Subject key identifier: 43:19:28:A9:CD:EA:D7:F5:40:2B:FF:CE:D0:CF:C6:0F:E0:39:73:2E Certificate issuer: /CN=2E069E30CF7B24CDD77C206550B0BDBDB01683AF Certificate serial: 76B897CFAEC3697BFC9349B4351A39B108B6B710 Authority key identifier: 2E:06:9E:30:CF:7B:24:CD:D7:7C:20:65:50:B0:BD:BD:B0:16:83:AF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/323030313a6466323a376663303a3a2f34382d3438203d3e20313530323432.roa Signing time: Sun 03 May 2026 02:25:09 +0000 ROA not before: Sun 03 May 2026 02:20:09 +0000 ROA not after: Sun 02 May 2027 02:25:09 +0000 asID: 150242 IP address blocks: 2001:df2:7fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.crl rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:b8:97:cf:ae:c3:69:7b:fc:93:49:b4:35:1a:39:b1:08:b6:b7:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E069E30CF7B24CDD77C206550B0BDBDB01683AF Validity Not Before: May 3 02:20:09 2026 GMT Not After : May 2 02:25:09 2027 GMT Subject: CN=431928A9CDEAD7F5402BFFCED0CFC60FE039732E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1d:9c:08:d0:f0:fe:91:70:33:c7:e3:fe:d3: d7:b2:3b:3b:7e:0c:15:80:6d:fc:1b:ff:13:10:b6: 30:dd:b7:a8:eb:8f:5c:3a:ae:6f:46:b6:13:91:33: 5b:4d:1b:e7:bd:51:6f:d9:09:c2:89:01:24:f6:ab: a7:20:19:bc:ad:3f:ca:48:9c:5f:7c:18:73:e8:8f: cb:84:ea:f6:16:9c:8c:8a:83:35:6b:6c:31:cd:2f: c1:73:9f:57:d8:ef:ec:1f:1b:ef:15:e9:92:13:b0: 9f:e2:57:8d:e9:1e:8f:43:6c:84:8d:b1:dd:e1:57: db:af:6a:6e:44:13:43:8e:e0:e5:2f:08:89:ce:72: 3e:26:81:a4:3a:35:f8:37:f5:8e:79:7b:bf:45:01: bd:31:3e:e3:aa:d1:2f:16:4b:49:51:f0:7d:39:03: 36:82:c3:5e:93:6f:1f:ba:79:f0:8f:7a:21:25:cc: e9:89:dd:79:de:e1:88:74:b4:b0:ae:42:c1:d6:db: d8:5e:70:db:77:04:0f:40:73:87:71:b4:62:6f:78: 14:33:30:ff:b1:d7:ed:3d:30:88:3a:7d:4c:f6:ca: 82:fc:7c:de:41:86:c7:84:1b:95:6e:5a:bc:8f:35: 94:bf:d0:90:9c:83:eb:6d:6e:81:14:79:97:47:35: 0d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:19:28:A9:CD:EA:D7:F5:40:2B:FF:CE:D0:CF:C6:0F:E0:39:73:2E X509v3 Authority Key Identifier: keyid:2E:06:9E:30:CF:7B:24:CD:D7:7C:20:65:50:B0:BD:BD:B0:16:83:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/323030313a6466323a376663303a3a2f34382d3438203d3e20313530323432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:7fc0::/48 Signature Algorithm: sha256WithRSAEncryption 6b:70:de:4b:10:5c:66:7d:d5:db:03:d5:21:1b:62:4a:66:a4: 48:4e:eb:58:cf:9e:9e:80:e7:95:aa:4e:80:46:4c:de:7d:b8: da:15:7f:d6:16:5e:2f:3e:84:cc:f2:a2:06:c4:01:b5:71:63: 5c:10:89:ca:7c:4f:77:e4:36:bf:48:b1:fb:45:c8:5b:3f:24: a6:53:bb:48:4a:97:05:62:58:dc:c3:cb:f9:de:6d:a2:56:1c: 86:2f:5c:9e:23:c3:0c:b2:bb:37:7f:72:28:b4:44:7c:71:40: f9:cf:30:f5:0c:8b:0a:e5:76:e2:f8:4c:c6:f9:55:ba:4c:c4: 31:89:dc:a0:a4:43:92:0c:46:3e:dd:63:f4:94:75:e4:89:6f: d7:f0:76:79:e8:7e:92:0c:b2:36:d9:eb:c4:9b:c2:3b:a3:d8: 10:28:97:31:61:7f:58:2d:97:23:18:c9:35:45:52:99:a1:a1: 08:c2:f2:4d:98:6b:90:0c:d3:e5:be:42:e7:c8:bd:22:a4:64: eb:8a:b6:5f:f2:c6:95:28:52:44:6a:c4:85:d6:5e:6a:d9:86: 9d:b9:ff:24:0d:7c:e8:c9:96:73:87:06:d2:1f:ea:29:c1:e0: 11:c3:bf:c7:1c:20:84:d9:18:b3:e3:61:73:f0:db:0c:af:3c: 0b:c6:75:f3 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUdriXz67DaXv8k0m0NRo5sQi2txAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUwNjlFMzBDRjdCMjRDREQ3N0MyMDY1NTBCMEJEQkRC MDE2ODNBRjAeFw0yNjA1MDMwMjIwMDlaFw0yNzA1MDIwMjI1MDlaMDMxMTAvBgNV BAMTKDQzMTkyOEE5Q0RFQUQ3RjU0MDJCRkZDRUQwQ0ZDNjBGRTAzOTczMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhHZwI0PD+kXAzx+P+09eyOzt+ DBWAbfwb/xMQtjDdt6jrj1w6rm9GthORM1tNG+e9UW/ZCcKJAST2q6cgGbytP8pI nF98GHPoj8uE6vYWnIyKgzVrbDHNL8Fzn1fY7+wfG+8V6ZITsJ/iV43pHo9DbISN sd3hV9uvam5EE0OO4OUvCInOcj4mgaQ6Nfg39Y55e79FAb0xPuOq0S8WS0lR8H05 AzaCw16Tbx+6efCPeiElzOmJ3Xne4Yh0tLCuQsHW29hecNt3BA9Ac4dxtGJveBQz MP+x1+09MIg6fUz2yoL8fN5BhseEG5VuWryPNZS/0JCcg+ttboEUeZdHNQ01AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUQxkoqc3q1/VAK//O0M/GD+A5cy4wHwYDVR0j BBgwFoAULgaeMM97JM3XfCBlULC9vbAWg68wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzUyMWU1ZWUtNTg4Mi00OTQzLWI0MDgtNDNjMzc1ODJmYjBiLzAvMkUwNjlFMzBD RjdCMjRDREQ3N0MyMDY1NTBCMEJEQkRCMDE2ODNBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTA2OUUzMENGN0IyNENERDc3QzIwNjU1MEIwQkRCREIwMTY4 M0FGLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzM1MjFlNWVlLTU4ODItNDk0My1i NDA4LTQzYzM3NTgyZmIwYi8wLzMyMzAzMDMxM2E2NDY2MzIzYTM3NjY2MzMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMwMzIzNDMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8n/AMA0GCSqGSIb3DQEBCwUAA4IBAQBrcN5LEFxmfdXbA9UhG2JKZqRITutYz56e gOeVqk6ARkzefbjaFX/WFl4vPoTM8qIGxAG1cWNcEInKfE935Da/SLH7RchbPySm U7tISpcFYljcw8v53m2iVhyGL1yeI8MMsrs3f3IotER8cUD5zzD1DIsK5Xbi+EzG +VW6TMQxidygpEOSDEY+3WP0lHXkiW/X8HZ56H6SDLI22evEm8I7o9gQKJcxYX9Y LZcjGMk1RVKZoaEIwvJNmGuQDNPlvkLnyL0ipGTrirZf8saVKFJEasSF1l5q2Yad uf8kDXzoyZZzhwbSH+opweARw7/HHCCE2Riz42Fz8NsMrzwLxnXz -----END CERTIFICATE-----Generated at Wed May 13 15:35:40 2026 by rpki-client