$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/323030313a6466303a313730303a3a2f34382d3438203d3e20313336303730.roa File: 323030313a6466303a313730303a3a2f34382d3438203d3e20313336303730.roa (raw, json) Hash identifier: HwpDGD2SJ/iUFIW/7Q0l9KkQ0CWL7/v9c6sBLXd1KZY= Subject key identifier: 57:9D:A1:49:BC:D4:BB:F1:3B:A8:94:F1:55:56:6C:10:73:1B:00:54 Certificate issuer: /CN=25C2ACFFB836196566A3BCCE3421DBB96CD84116 Certificate serial: 0740E6F2A7BBD7604CE7DE21B6B9904F7CC4D7E2 Authority key identifier: 25:C2:AC:FF:B8:36:19:65:66:A3:BC:CE:34:21:DB:B9:6C:D8:41:16 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25C2ACFFB836196566A3BCCE3421DBB96CD84116.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/323030313a6466303a313730303a3a2f34382d3438203d3e20313336303730.roa Signing time: Sun 03 May 2026 02:32:17 +0000 ROA not before: Sun 03 May 2026 02:27:17 +0000 ROA not after: Sun 02 May 2027 02:32:17 +0000 asID: 136070 IP address blocks: 2001:df0:1700::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.crl rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25C2ACFFB836196566A3BCCE3421DBB96CD84116.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:04:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:40:e6:f2:a7:bb:d7:60:4c:e7:de:21:b6:b9:90:4f:7c:c4:d7:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C2ACFFB836196566A3BCCE3421DBB96CD84116 Validity Not Before: May 3 02:27:17 2026 GMT Not After : May 2 02:32:17 2027 GMT Subject: CN=579DA149BCD4BBF13BA894F155566C10731B0054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:98:e9:56:f6:a2:49:19:a5:d4:00:3a:c0:06: 70:5b:5d:4b:aa:8f:bc:f3:91:83:18:54:43:b3:79: 8d:e4:9a:8b:55:a7:16:91:bc:01:e9:7a:53:44:d5: a1:16:40:e8:c4:20:45:1a:8b:38:13:6e:6d:56:2d: 0e:d6:46:4f:ac:a1:48:a9:3c:ec:0e:f0:74:1b:5e: ac:12:a6:c7:52:36:09:e9:69:12:5d:15:66:b1:64: 18:d9:e7:da:a7:23:c1:a4:4f:11:5e:08:d7:20:17: 85:97:47:63:0b:85:d1:43:90:58:05:de:35:ac:31: df:e6:c0:ff:30:12:3f:0c:8a:40:bd:f0:b8:ea:49: 12:11:2b:58:24:1a:26:f4:94:2e:3d:60:7e:4e:5d: 85:a7:26:3e:93:1f:e1:af:94:4f:7a:ae:7e:2b:d4: be:2a:31:bf:81:d0:88:86:d2:5c:be:53:c6:99:33: 45:3f:8d:e8:36:ac:ac:c3:d7:d1:f3:fe:dc:1e:ab: 03:c0:71:56:49:db:4c:72:3a:b7:cd:82:b5:09:43: c1:27:3a:df:c4:f1:91:08:30:3e:30:4b:cb:a0:0d: e6:fd:1e:49:33:e4:da:3b:8e:e3:56:e7:90:2e:52: 98:23:dc:fd:ea:35:99:65:2f:23:13:62:be:ae:e8: 21:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:9D:A1:49:BC:D4:BB:F1:3B:A8:94:F1:55:56:6C:10:73:1B:00:54 X509v3 Authority Key Identifier: keyid:25:C2:AC:FF:B8:36:19:65:66:A3:BC:CE:34:21:DB:B9:6C:D8:41:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25C2ACFFB836196566A3BCCE3421DBB96CD84116.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/323030313a6466303a313730303a3a2f34382d3438203d3e20313336303730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:1700::/48 Signature Algorithm: sha256WithRSAEncryption 59:73:1b:8a:1a:e0:ec:03:8c:d6:83:1b:26:00:e9:db:e2:45: bf:2a:d7:5d:63:1f:8f:56:35:33:2c:21:77:30:f0:36:9d:1b: 74:68:b7:c4:81:da:4b:4c:d3:b0:8d:99:bb:4f:22:f0:c8:b0: ed:32:79:f0:e1:a9:2b:25:84:fc:59:41:55:49:a9:58:d2:f0: e6:bc:cf:a4:10:0f:47:ac:8f:3b:c7:76:e3:0e:a8:02:75:b6: 43:18:c2:3f:32:e3:fc:de:4f:9d:38:49:90:32:30:bb:9f:e3: f9:18:35:64:b5:7e:34:f2:a5:2e:5f:45:26:64:75:28:08:ba: dd:ec:b6:82:7a:4d:d1:a2:a3:05:ba:44:b9:4b:cc:bd:2a:37: ad:b4:32:48:76:51:94:f2:de:b8:d3:1f:0d:b1:41:06:08:10: cb:c0:a3:ad:00:79:c6:3d:d2:10:07:05:0d:ff:e0:f8:ec:0b: c3:69:dc:23:79:4c:98:b2:a9:d1:98:21:ee:93:ba:7e:2d:52: 0a:f5:f4:c0:0c:04:e2:b8:cf:ff:08:b0:0c:20:be:9d:b7:93: c8:c8:ef:89:74:2b:3e:e9:8e:ad:42:13:76:33:4d:ef:2d:db: 65:cc:eb:5e:f4:31:46:cc:30:42:4f:d5:4a:4c:28:b1:cc:83: 70:3c:24:85 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUB0Dm8qe712BM594htrmQT3zE1+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDMkFDRkZCODM2MTk2NTY2QTNCQ0NFMzQyMURCQjk2 Q0Q4NDExNjAeFw0yNjA1MDMwMjI3MTdaFw0yNzA1MDIwMjMyMTdaMDMxMTAvBgNV BAMTKDU3OURBMTQ5QkNENEJCRjEzQkE4OTRGMTU1NTY2QzEwNzMxQjAwNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMmOlW9qJJGaXUADrABnBbXUuq j7zzkYMYVEOzeY3kmotVpxaRvAHpelNE1aEWQOjEIEUaizgTbm1WLQ7WRk+soUip POwO8HQbXqwSpsdSNgnpaRJdFWaxZBjZ59qnI8GkTxFeCNcgF4WXR2MLhdFDkFgF 3jWsMd/mwP8wEj8MikC98LjqSRIRK1gkGib0lC49YH5OXYWnJj6TH+GvlE96rn4r 1L4qMb+B0IiG0ly+U8aZM0U/jeg2rKzD19Hz/tweqwPAcVZJ20xyOrfNgrUJQ8En Ot/E8ZEIMD4wS8ugDeb9Hkkz5No7juNW55AuUpgj3P3qNZllLyMTYr6u6CFhAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUV52hSbzUu/E7qJTxVVZsEHMbAFQwHwYDVR0j BBgwFoAUJcKs/7g2GWVmo7zONCHbuWzYQRYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGYzNzc3MTEtMWUzZC00ZTVhLWE0YWMtMDVhMWM1MDJhZDI4LzAvMjVDMkFDRkZC ODM2MTk2NTY2QTNCQ0NFMzQyMURCQjk2Q0Q4NDExNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNUMyQUNGRkI4MzYxOTY1NjZBM0JDQ0UzNDIxREJCOTZDRDg0 MTE2LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzRmMzc3NzExLTFlM2QtNGU1YS1h NGFjLTA1YTFjNTAyYWQyOC8wLzMyMzAzMDMxM2E2NDY2MzAzYTMxMzczMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzAzNzMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8BcAMA0GCSqGSIb3DQEBCwUAA4IBAQBZcxuKGuDsA4zWgxsmAOnb4kW/KtddYx+P VjUzLCF3MPA2nRt0aLfEgdpLTNOwjZm7TyLwyLDtMnnw4akrJYT8WUFVSalY0vDm vM+kEA9HrI87x3bjDqgCdbZDGMI/MuP83k+dOEmQMjC7n+P5GDVktX408qUuX0Um ZHUoCLrd7LaCek3RoqMFukS5S8y9KjettDJIdlGU8t640x8NsUEGCBDLwKOtAHnG PdIQBwUN/+D47AvDadwjeUyYsqnRmCHuk7p+LVIK9fTADATiuM//CLAMIL6dt5PI yO+JdCs+6Y6tQhN2M03vLdtlzOte9DFGzDBCT9VKTCixzINwPCSF -----END CERTIFICATE-----Generated at Wed May 13 15:36:18 2026 by rpki-client