$ rpki-client -vvf rpki-rsync.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/323030313a6466343a6530303a3a2f34382d3438203d3e20313335343731.roa File: 323030313a6466343a6530303a3a2f34382d3438203d3e20313335343731.roa (raw, json) Hash identifier: 3oRCKXggP03TeYQfADSPnmZ6NQSG34iI7wDxyEe4xKM= Subject key identifier: B1:D8:F6:1B:C4:B1:C2:B0:2B:38:B9:31:B3:21:46:33:E3:9B:A0:EF Certificate issuer: /CN=1956B47266ADE221B617582972A27AAFA0CA985C Certificate serial: 18D99FBC34EF5D0AB19721FA84723316CE8176F1 Authority key identifier: 19:56:B4:72:66:AD:E2:21:B6:17:58:29:72:A2:7A:AF:A0:CA:98:5C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1956B47266ADE221B617582972A27AAFA0CA985C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/323030313a6466343a6530303a3a2f34382d3438203d3e20313335343731.roa Signing time: Sun 03 May 2026 02:30:09 +0000 ROA not before: Sun 03 May 2026 02:25:09 +0000 ROA not after: Sun 02 May 2027 02:30:09 +0000 asID: 135471 IP address blocks: 2001:df4:e00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/1956B47266ADE221B617582972A27AAFA0CA985C.crl rsync://rpki-rsync.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/1956B47266ADE221B617582972A27AAFA0CA985C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1956B47266ADE221B617582972A27AAFA0CA985C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:d9:9f:bc:34:ef:5d:0a:b1:97:21:fa:84:72:33:16:ce:81:76:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1956B47266ADE221B617582972A27AAFA0CA985C Validity Not Before: May 3 02:25:09 2026 GMT Not After : May 2 02:30:09 2027 GMT Subject: CN=B1D8F61BC4B1C2B02B38B931B3214633E39BA0EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:66:18:c9:30:a0:8d:fe:3e:6d:2c:21:36:44: 92:14:47:e5:fe:2d:f4:3a:74:35:99:f9:f3:06:84: f5:e5:ad:c5:d7:d2:2e:ec:fb:4c:f3:82:95:aa:6f: 90:b8:5a:83:b9:23:ce:0b:7e:26:43:44:20:df:af: a9:15:e7:3b:95:83:00:27:e1:76:0c:6a:16:bc:17: da:4b:a0:0f:9c:b7:ba:7b:0f:c7:25:7e:9c:3d:cb: ca:fb:a4:77:e3:81:0e:72:ae:34:aa:aa:19:fd:0e: 4f:2a:8c:a3:48:bf:e7:84:c0:16:0a:50:0d:41:f8: d3:ff:76:aa:1d:91:1a:8a:cb:a3:e2:a2:db:09:6c: 67:8d:8e:3d:50:e8:74:fb:a1:6a:4c:05:3e:39:f9: ee:8a:ed:92:78:60:49:04:28:28:9f:d4:8f:0c:e3: 8f:92:f7:19:de:5f:ef:40:c0:43:cb:c8:ad:8a:28: 6a:31:e6:de:71:1c:3e:85:67:55:14:7d:31:51:b8: 00:f3:44:53:43:b9:72:41:6c:97:51:76:90:ed:27: 05:b8:20:ed:fa:60:eb:5a:c7:08:02:26:32:f1:12: 69:03:9b:3e:62:a6:6f:ea:85:53:cd:da:0c:fc:26: 0a:de:22:11:ae:52:da:22:54:a3:d6:b4:7b:ec:06: e7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D8:F6:1B:C4:B1:C2:B0:2B:38:B9:31:B3:21:46:33:E3:9B:A0:EF X509v3 Authority Key Identifier: keyid:19:56:B4:72:66:AD:E2:21:B6:17:58:29:72:A2:7A:AF:A0:CA:98:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/1956B47266ADE221B617582972A27AAFA0CA985C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1956B47266ADE221B617582972A27AAFA0CA985C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/323030313a6466343a6530303a3a2f34382d3438203d3e20313335343731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:e00::/48 Signature Algorithm: sha256WithRSAEncryption 8d:02:13:20:e9:4d:76:a7:45:d9:26:bc:e8:7d:3e:ba:41:b8: 03:56:17:53:df:5d:1f:a8:e8:13:9f:1f:f0:48:c2:35:fe:3c: 8b:fc:85:4a:53:ed:ce:e2:cb:3c:26:9d:37:34:68:bc:2c:08: fd:be:3f:55:06:a7:51:95:bd:be:ed:e8:f2:b1:20:f1:cb:0a: 52:d5:b0:7f:a4:38:3b:c0:2b:8e:4a:29:b0:f2:a9:e7:73:28: a4:5b:97:c2:e1:34:95:6c:a2:ce:55:3e:61:45:ce:74:9c:1f: 55:3e:39:39:73:1c:2b:9a:a3:9a:2f:16:d0:53:2e:14:84:a1: dc:e3:91:89:2b:81:1f:dc:08:fc:c2:a9:e3:4e:f0:a7:1f:24: 05:8c:69:71:ec:b9:9d:b6:99:e2:49:b3:cd:9b:ff:67:7c:6f: ee:f7:7b:9d:23:f9:bf:8b:fb:32:7d:8a:56:bc:94:18:37:9a: 0f:c6:20:5c:a9:38:f5:a6:df:4c:b0:1e:f7:18:49:7b:bb:35: d8:75:89:a2:c7:35:b3:09:c9:ec:54:d1:2c:cd:fe:53:82:0b: dd:99:a6:7a:9e:63:11:ac:7a:95:4e:af:98:97:35:91:21:1e: df:3f:5f:23:a3:e0:cb:32:32:25:08:ec:9a:e5:6a:0c:bb:00: 8f:45:7f:02 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUGNmfvDTvXQqxlyH6hHIzFs6BdvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk1NkI0NzI2NkFERTIyMUI2MTc1ODI5NzJBMjdBQUZB MENBOTg1QzAeFw0yNjA1MDMwMjI1MDlaFw0yNzA1MDIwMjMwMDlaMDMxMTAvBgNV BAMTKEIxRDhGNjFCQzRCMUMyQjAyQjM4QjkzMUIzMjE0NjMzRTM5QkEwRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBZhjJMKCN/j5tLCE2RJIUR+X+ LfQ6dDWZ+fMGhPXlrcXX0i7s+0zzgpWqb5C4WoO5I84LfiZDRCDfr6kV5zuVgwAn 4XYMaha8F9pLoA+ct7p7D8clfpw9y8r7pHfjgQ5yrjSqqhn9Dk8qjKNIv+eEwBYK UA1B+NP/dqodkRqKy6PiotsJbGeNjj1Q6HT7oWpMBT45+e6K7ZJ4YEkEKCif1I8M 44+S9xneX+9AwEPLyK2KKGox5t5xHD6FZ1UUfTFRuADzRFNDuXJBbJdRdpDtJwW4 IO36YOtaxwgCJjLxEmkDmz5ipm/qhVPN2gz8JgreIhGuUtoiVKPWtHvsBufxAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUsdj2G8SxwrArOLkxsyFGM+OboO8wHwYDVR0j BBgwFoAUGVa0cmat4iG2F1gpcqJ6r6DKmFwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDYzMDI4MTAtNTY0Yy00NWI3LThhNzItZWY2YjhmNjMwOWMwLzAvMTk1NkI0NzI2 NkFERTIyMUI2MTc1ODI5NzJBMjdBQUZBMENBOTg1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOTU2QjQ3MjY2QURFMjIxQjYxNzU4Mjk3MkEyN0FBRkEwQ0E5 ODVDLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ2MzAyODEwLTU2NGMtNDViNy04 YTcyLWVmNmI4ZjYzMDljMC8wLzMyMzAzMDMxM2E2NDY2MzQzYTY1MzAzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNTM0MzczMS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDfQO ADANBgkqhkiG9w0BAQsFAAOCAQEAjQITIOlNdqdF2Sa86H0+ukG4A1YXU99dH6jo E58f8EjCNf48i/yFSlPtzuLLPCadNzRovCwI/b4/VQanUZW9vu3o8rEg8csKUtWw f6Q4O8ArjkopsPKp53MopFuXwuE0lWyizlU+YUXOdJwfVT45OXMcK5qjmi8W0FMu FISh3OORiSuBH9wI/MKp407wpx8kBYxpcey5nbaZ4kmzzZv/Z3xv7vd7nSP5v4v7 Mn2KVryUGDeaD8YgXKk49abfTLAe9xhJe7s12HWJosc1swnJ7FTRLM3+U4IL3Zmm ep5jEax6lU6vmJc1kSEe3z9fI6PgyzIyJQjsmuVqDLsAj0V/Ag== -----END CERTIFICATE-----Generated at Wed May 13 14:08:54 2026 by rpki-client