$ rpki-client -vvf rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/323030313a6466343a646138303a3a2f34382d3438203d3e20313431303735.roa File: 323030313a6466343a646138303a3a2f34382d3438203d3e20313431303735.roa (raw, json) Hash identifier: FhG5QtmzILGj+pNjAESoRxWapUF1NIC4JV0xU1Ljgus= Subject key identifier: 5A:DC:49:16:44:9F:F2:2A:03:01:92:6A:ED:3B:73:6E:4A:43:47:64 Certificate issuer: /CN=522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1 Certificate serial: 7C622436347148076D288D5F1CAC64F327CF3E48 Authority key identifier: 52:2A:E2:3C:F8:ED:B1:30:CB:8C:F5:BD:BB:1A:41:3C:88:A0:7F:B1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/323030313a6466343a646138303a3a2f34382d3438203d3e20313431303735.roa Signing time: Sun 03 May 2026 02:29:24 +0000 ROA not before: Sun 03 May 2026 02:24:24 +0000 ROA not after: Sun 02 May 2027 02:29:24 +0000 asID: 141075 IP address blocks: 2001:df4:da80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.crl rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:49:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:62:24:36:34:71:48:07:6d:28:8d:5f:1c:ac:64:f3:27:cf:3e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1 Validity Not Before: May 3 02:24:24 2026 GMT Not After : May 2 02:29:24 2027 GMT Subject: CN=5ADC4916449FF22A0301926AED3B736E4A434764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:71:77:d8:f4:cc:86:ce:d3:ee:4b:bb:f5:00: 13:fc:80:9c:d3:94:b3:31:b3:40:86:db:61:4c:61: e3:c0:91:08:52:26:a1:8b:9d:09:91:12:e7:b6:1e: 44:33:a2:d1:3f:a9:d2:8e:93:9d:c5:7e:3d:1e:f3: 1a:b1:c2:46:c7:01:54:e7:c9:75:b5:72:7d:ce:76: a9:c2:5a:8e:1c:79:24:a3:33:7d:67:46:06:d8:53: 03:b8:f8:95:ac:eb:25:ff:35:22:93:00:50:c7:e5: cd:7e:c0:bd:6d:ae:c4:74:5b:5e:43:67:b1:8c:6a: b9:5c:46:23:6c:a5:c4:37:9f:cb:c9:fc:8a:f6:7a: 23:41:2a:35:35:95:e5:47:d3:56:0c:fe:b5:2e:6c: cd:83:86:6f:87:a5:a5:04:69:db:a2:49:7c:d2:d0: 9a:fd:39:4d:60:98:d8:72:80:cb:88:43:f7:8e:54: bf:b5:4f:f9:85:83:78:a0:f5:00:75:da:ed:78:a8: 98:ea:a0:7e:89:7a:6f:dc:66:48:86:b9:ae:5e:28: 31:7e:3c:be:76:6a:48:6a:d7:2d:76:44:33:e8:eb: e6:a4:b3:0e:59:15:3a:06:38:63:c3:8b:37:36:e5: b1:6a:c3:44:98:6c:06:4f:bc:85:1b:de:5f:9d:df: d1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:DC:49:16:44:9F:F2:2A:03:01:92:6A:ED:3B:73:6E:4A:43:47:64 X509v3 Authority Key Identifier: keyid:52:2A:E2:3C:F8:ED:B1:30:CB:8C:F5:BD:BB:1A:41:3C:88:A0:7F:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/323030313a6466343a646138303a3a2f34382d3438203d3e20313431303735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:da80::/48 Signature Algorithm: sha256WithRSAEncryption 28:0a:15:26:0a:fa:8c:0e:7a:4d:25:1a:48:01:37:cf:27:2f: 88:76:60:bb:da:52:e8:a3:ee:f1:bf:cb:b6:f2:c2:5f:dc:cc: 4b:fe:7f:ca:7a:50:80:fe:62:2b:f9:01:aa:2e:29:a2:2a:1f: 0f:c0:2c:03:80:31:24:0c:f0:31:f0:92:ae:dc:0d:9f:26:d0: 98:96:16:11:25:37:2e:90:da:35:da:ef:5c:d8:35:34:7e:f2: 25:07:22:63:3e:b5:96:7c:50:e7:af:87:89:d7:2b:a8:09:69: 7c:35:85:1a:b2:88:bd:3a:0e:3d:a3:7e:69:be:99:f3:6f:32: b0:30:79:fa:16:74:47:f5:c6:ff:84:af:f8:f5:11:64:55:74: aa:b6:34:b2:db:82:6e:10:56:b6:b6:5c:5a:00:12:b9:4c:17: 6d:61:e7:99:e6:47:69:e9:46:40:18:cc:23:b7:1a:05:98:57: cb:5c:69:b1:0d:f4:a4:b3:20:04:e4:94:db:2f:84:47:0d:1a: 9d:a2:bd:00:6e:9f:17:ed:27:73:6c:2e:19:cb:6f:3d:66:64: 1a:c7:74:b8:34:11:d2:aa:4d:0d:1c:ec:53:e4:46:d7:15:c0: 77:11:59:e9:d2:88:7a:18:10:12:8a:d6:ef:50:b2:79:b8:cc: 85:a3:be:16 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUfGIkNjRxSAdtKI1fHKxk8yfPPkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyQUUyM0NGOEVEQjEzMENCOENGNUJEQkIxQTQxM0M4 OEEwN0ZCMTAeFw0yNjA1MDMwMjI0MjRaFw0yNzA1MDIwMjI5MjRaMDMxMTAvBgNV BAMTKDVBREM0OTE2NDQ5RkYyMkEwMzAxOTI2QUVEM0I3MzZFNEE0MzQ3NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCucXfY9MyGztPuS7v1ABP8gJzT lLMxs0CG22FMYePAkQhSJqGLnQmREue2HkQzotE/qdKOk53Ffj0e8xqxwkbHAVTn yXW1cn3OdqnCWo4ceSSjM31nRgbYUwO4+JWs6yX/NSKTAFDH5c1+wL1trsR0W15D Z7GMarlcRiNspcQ3n8vJ/Ir2eiNBKjU1leVH01YM/rUubM2Dhm+HpaUEaduiSXzS 0Jr9OU1gmNhygMuIQ/eOVL+1T/mFg3ig9QB12u14qJjqoH6Jem/cZkiGua5eKDF+ PL52akhq1y12RDPo6+aksw5ZFToGOGPDizc25bFqw0SYbAZPvIUb3l+d39FFAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUWtxJFkSf8ioDAZJq7TtzbkpDR2QwHwYDVR0j BBgwFoAUUiriPPjtsTDLjPW9uxpBPIigf7EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDM1YmMxMzAtOTY0YS00N2I4LTkyMmItODMwNjlkZTY3YTdjLzAvNTIyQUUyM0NG OEVEQjEzMENCOENGNUJEQkIxQTQxM0M4OEEwN0ZCMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MjJBRTIzQ0Y4RURCMTMwQ0I4Q0Y1QkRCQjFBNDEzQzg4QTA3 RkIxLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQzNWJjMTMwLTk2NGEtNDdiOC05 MjJiLTgzMDY5ZGU2N2E3Yy8wLzMyMzAzMDMxM2E2NDY2MzQzYTY0NjEzODMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMxMzAzNzM1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 9NqAMA0GCSqGSIb3DQEBCwUAA4IBAQAoChUmCvqMDnpNJRpIATfPJy+IdmC72lLo o+7xv8u28sJf3MxL/n/KelCA/mIr+QGqLimiKh8PwCwDgDEkDPAx8JKu3A2fJtCY lhYRJTcukNo12u9c2DU0fvIlByJjPrWWfFDnr4eJ1yuoCWl8NYUasoi9Og49o35p vpnzbzKwMHn6FnRH9cb/hK/49RFkVXSqtjSy24JuEFa2tlxaABK5TBdtYeeZ5kdp 6UZAGMwjtxoFmFfLXGmxDfSksyAE5JTbL4RHDRqdor0Abp8X7SdzbC4Zy289ZmQa x3S4NBHSqk0NHOxT5EbXFcB3EVnp0oh6GBASitbvULJ5uMyFo74W -----END CERTIFICATE-----Generated at Wed May 13 14:03:12 2026 by rpki-client