$ rpki-client -vvf rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/323030313a6466333a323534303a3a2f34382d3438203d3e20313530313936.roa File: 323030313a6466333a323534303a3a2f34382d3438203d3e20313530313936.roa (raw, json) Hash identifier: pHpItOVKv8esoRGqC1921wkOWFNotJS3YzPQt+5pees= Subject key identifier: A7:3C:56:EE:81:A2:94:FB:A9:E6:CA:DB:8E:01:D8:AB:F5:1E:FA:AE Certificate issuer: /CN=D84B02092CD9FAF487B7FFE8A3CE245E1532817B Certificate serial: 01490CE6CE0EF96D6F5217B33C49A5FF33184993 Authority key identifier: D8:4B:02:09:2C:D9:FA:F4:87:B7:FF:E8:A3:CE:24:5E:15:32:81:7B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/323030313a6466333a323534303a3a2f34382d3438203d3e20313530313936.roa Signing time: Sun 03 May 2026 02:27:03 +0000 ROA not before: Sun 03 May 2026 02:22:03 +0000 ROA not after: Sun 02 May 2027 02:27:03 +0000 asID: 150196 IP address blocks: 2001:df3:2540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.crl rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:49:0c:e6:ce:0e:f9:6d:6f:52:17:b3:3c:49:a5:ff:33:18:49:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D84B02092CD9FAF487B7FFE8A3CE245E1532817B Validity Not Before: May 3 02:22:03 2026 GMT Not After : May 2 02:27:03 2027 GMT Subject: CN=A73C56EE81A294FBA9E6CADB8E01D8ABF51EFAAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:66:d2:9e:af:91:54:72:b7:5c:93:3e:71:1c: 3f:4c:ef:22:6e:99:07:96:42:87:4b:90:65:33:11: d3:d0:52:5e:e8:c1:36:98:c0:9b:71:8a:07:8a:5f: 30:22:00:66:00:14:ee:b8:c3:6f:24:60:10:a2:6d: dd:46:50:76:71:8f:c9:8a:64:0c:be:c4:f2:f9:1a: 73:5c:81:b4:cb:67:ff:af:0b:18:69:02:70:34:03: ec:0b:a1:c7:78:4c:fb:99:d8:c1:24:c2:13:1b:32: f2:28:31:84:1e:1b:6f:79:7a:7a:55:27:3e:76:7a: e8:7a:8e:ee:18:ec:c9:28:30:28:d7:e8:b9:aa:14: 41:56:ce:4e:d1:b4:0a:87:fd:01:4c:98:91:0a:b9: 27:db:85:83:03:ee:9b:a3:24:8c:f9:f3:c9:7b:b9: ca:6b:db:f7:b1:a9:ce:dc:21:9f:89:af:74:fd:52: 5f:74:00:71:0b:cb:d0:bf:a1:cc:22:7d:07:5b:92: 33:0f:e5:7f:b3:4e:e5:84:6e:50:2e:74:8c:a0:b6: ce:9e:cb:e4:11:bc:24:49:24:6b:61:92:8d:5e:ac: eb:67:7f:32:2b:cb:2b:65:fb:7c:ce:6c:03:79:da: c3:73:b0:18:0c:c3:d9:01:a5:58:40:44:17:6f:da: 40:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3C:56:EE:81:A2:94:FB:A9:E6:CA:DB:8E:01:D8:AB:F5:1E:FA:AE X509v3 Authority Key Identifier: keyid:D8:4B:02:09:2C:D9:FA:F4:87:B7:FF:E8:A3:CE:24:5E:15:32:81:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/323030313a6466333a323534303a3a2f34382d3438203d3e20313530313936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:2540::/48 Signature Algorithm: sha256WithRSAEncryption 74:d4:33:9c:f0:16:87:8b:37:84:71:63:d4:2b:0b:3c:4c:ff: 34:17:c4:ee:c1:67:27:92:20:2c:97:17:a2:e7:81:1e:db:8d: 86:f4:b8:f8:72:9b:b1:fc:1b:cd:64:1b:d2:9a:30:7c:8b:eb: 70:af:e0:53:87:63:99:ce:c8:93:4e:54:6b:f3:f7:7a:d1:ed: 36:81:ba:60:1f:2c:4c:c4:bc:8e:a4:4d:14:b8:6d:49:2b:16: 08:a2:47:5d:d7:1d:d9:8b:a1:96:e7:26:26:71:32:cc:60:61: 8d:53:46:5c:9a:d4:85:4d:ca:45:ff:87:c9:31:f5:e0:bc:68: cc:5c:3f:4a:1c:c4:b2:f9:4a:ee:0b:53:07:fb:6c:a2:32:24: 03:98:c0:28:2b:d9:b5:c7:e3:e5:17:88:b2:c5:27:de:e4:16: 83:21:a7:3d:03:fb:9e:97:77:50:df:7c:ba:21:ce:85:1b:fd: f0:aa:a1:e0:5d:f8:35:4c:af:0e:6a:e3:56:8b:9b:be:88:ca: 42:e6:35:af:af:b7:9e:c0:41:4d:45:f3:da:f1:36:78:29:cb: 18:41:f2:50:8f:84:7c:6d:07:1a:47:29:a9:21:c7:70:75:8d: 3b:92:90:41:b2:81:2e:78:4c:73:04:f2:b7:0d:71:ce:da:5d: 64:f1:bd:5c -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUAUkM5s4O+W1vUhezPEml/zMYSZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg0QjAyMDkyQ0Q5RkFGNDg3QjdGRkU4QTNDRTI0NUUx NTMyODE3QjAeFw0yNjA1MDMwMjIyMDNaFw0yNzA1MDIwMjI3MDNaMDMxMTAvBgNV BAMTKEE3M0M1NkVFODFBMjk0RkJBOUU2Q0FEQjhFMDFEOEFCRjUxRUZBQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmZtKer5FUcrdckz5xHD9M7yJu mQeWQodLkGUzEdPQUl7owTaYwJtxigeKXzAiAGYAFO64w28kYBCibd1GUHZxj8mK ZAy+xPL5GnNcgbTLZ/+vCxhpAnA0A+wLocd4TPuZ2MEkwhMbMvIoMYQeG295enpV Jz52euh6ju4Y7MkoMCjX6LmqFEFWzk7RtAqH/QFMmJEKuSfbhYMD7pujJIz588l7 ucpr2/exqc7cIZ+Jr3T9Ul90AHELy9C/ocwifQdbkjMP5X+zTuWEblAudIygts6e y+QRvCRJJGthko1erOtnfzIryytl+3zObAN52sNzsBgMw9kBpVhARBdv2kApAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUpzxW7oGilPup5srbjgHYq/Ue+q4wHwYDVR0j BBgwFoAU2EsCCSzZ+vSHt//oo84kXhUygXswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2I3NWJmZDAtYTg2Yy00YmViLTlmOTktYWFjMzNmYjVlNDlmLzAvRDg0QjAyMDky Q0Q5RkFGNDg3QjdGRkU4QTNDRTI0NUUxNTMyODE3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODRCMDIwOTJDRDlGQUY0ODdCN0ZGRThBM0NFMjQ1RTE1MzI4 MTdCLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNiNzViZmQwLWE4NmMtNGJlYi05 Zjk5LWFhYzMzZmI1ZTQ5Zi8wLzMyMzAzMDMxM2E2NDY2MzMzYTMyMzUzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMwMzEzOTM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8yVAMA0GCSqGSIb3DQEBCwUAA4IBAQB01DOc8BaHizeEcWPUKws8TP80F8TuwWcn kiAslxei54Ee242G9Lj4cpux/BvNZBvSmjB8i+twr+BTh2OZzsiTTlRr8/d60e02 gbpgHyxMxLyOpE0UuG1JKxYIokdd1x3Zi6GW5yYmcTLMYGGNU0ZcmtSFTcpF/4fJ MfXgvGjMXD9KHMSy+UruC1MH+2yiMiQDmMAoK9m1x+PlF4iyxSfe5BaDIac9A/ue l3dQ33y6Ic6FG/3wqqHgXfg1TK8OauNWi5u+iMpC5jWvr7eewEFNRfPa8TZ4KcsY QfJQj4R8bQcaRympIcdwdY07kpBBsoEueExzBPK3DXHO2l1k8b1c -----END CERTIFICATE-----Generated at Wed May 13 11:35:43 2026 by rpki-client