$ rpki-client -vvf rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/323030313a6466333a373263303a3a2f34382d3438203d3e20313532333733.roa File: 323030313a6466333a373263303a3a2f34382d3438203d3e20313532333733.roa (raw, json) Hash identifier: D52uwwzpgaxCjAFI9GaZMm7APMN7ImtqrU9yyVklPWk= Subject key identifier: BD:D2:B8:CB:C8:F8:3E:3E:43:4F:9E:28:B4:EC:24:04:CD:37:A4:F2 Certificate issuer: /CN=2030219AC2D8BDE540B3A06B3E220CC62B6B374E Certificate serial: 5DA37D7EA5E09B307C3AA840FE272E1747E431BE Authority key identifier: 20:30:21:9A:C2:D8:BD:E5:40:B3:A0:6B:3E:22:0C:C6:2B:6B:37:4E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/323030313a6466333a373263303a3a2f34382d3438203d3e20313532333733.roa Signing time: Sun 03 May 2026 02:32:49 +0000 ROA not before: Sun 03 May 2026 02:27:49 +0000 ROA not after: Sun 02 May 2027 02:32:49 +0000 asID: 152373 IP address blocks: 2001:df3:72c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.crl rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:a3:7d:7e:a5:e0:9b:30:7c:3a:a8:40:fe:27:2e:17:47:e4:31:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2030219AC2D8BDE540B3A06B3E220CC62B6B374E Validity Not Before: May 3 02:27:49 2026 GMT Not After : May 2 02:32:49 2027 GMT Subject: CN=BDD2B8CBC8F83E3E434F9E28B4EC2404CD37A4F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5c:da:43:35:36:54:0f:c3:2f:50:13:db:80: 50:64:45:f9:d6:9a:fd:a4:bf:cb:e9:24:ee:fc:17: 89:77:8e:e6:a9:30:3c:49:9d:d2:fa:f6:1f:e9:c9: 2d:ba:af:09:5c:d5:2b:20:d3:49:76:3f:ba:66:21: 66:ff:44:1b:f6:b3:c1:90:45:9b:0f:82:07:5a:df: 31:a6:4c:a3:d6:eb:cd:cb:c9:e1:37:4f:08:05:ac: c7:3a:e3:de:73:4b:bf:ab:67:a8:b9:09:35:84:e0: b3:ed:91:b3:00:f2:e3:71:02:d1:f5:4a:42:e2:37: 93:ed:93:cb:61:1b:9a:08:ee:97:d0:73:f9:61:95: 50:cd:a6:a4:be:9d:e4:95:2c:97:5c:1a:26:c1:82: 73:a5:d7:4b:18:f8:97:74:43:8f:51:e7:fc:1c:01: 7f:ca:fc:6d:f6:16:dc:24:90:22:c2:22:d1:82:f7: ec:b2:4b:58:85:a6:74:df:6e:23:be:10:63:be:28: 32:7b:b0:57:6e:d9:10:49:4a:01:1b:a5:ca:11:f5: ae:b9:6b:84:94:61:4d:b5:b5:7b:c9:fc:f4:0f:bb: 66:9b:b1:bf:18:08:7b:e6:b8:cd:e3:94:3f:13:ea: 34:9b:60:01:55:33:92:75:78:59:1b:50:78:dc:5d: d9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D2:B8:CB:C8:F8:3E:3E:43:4F:9E:28:B4:EC:24:04:CD:37:A4:F2 X509v3 Authority Key Identifier: keyid:20:30:21:9A:C2:D8:BD:E5:40:B3:A0:6B:3E:22:0C:C6:2B:6B:37:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/323030313a6466333a373263303a3a2f34382d3438203d3e20313532333733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:72c0::/48 Signature Algorithm: sha256WithRSAEncryption 25:de:af:16:74:64:20:17:9f:8b:2d:01:0f:38:5f:23:78:70: 5b:c0:b9:bf:1e:db:87:d9:ff:41:0c:70:ac:ec:1e:56:73:8d: 87:90:76:cb:9a:1f:6b:73:65:8f:ef:04:d5:bc:7a:a5:62:72: 78:07:0e:19:e5:65:28:e9:b8:82:0b:77:a8:5f:7a:7a:0d:85: e8:25:11:0f:22:9f:96:f5:10:b1:f2:d9:76:b1:02:b8:e1:5d: af:c4:79:46:07:01:0a:ea:31:3c:3a:bd:c7:e3:2b:5a:2d:d9: dc:e9:6f:9c:7a:eb:41:71:05:0f:08:51:16:b7:cb:3a:16:bd: d0:1f:5f:65:ab:3e:18:c0:7a:b3:88:d8:ec:6b:74:bb:db:04: dd:4c:a1:58:e9:9f:bc:d2:4f:7a:52:2e:77:19:cd:54:60:1e: f9:58:68:6d:99:52:f7:15:cf:5d:82:da:f1:18:8c:d6:85:e1: d6:4d:f5:d7:0a:d6:d6:25:c0:40:b0:f4:32:40:b5:59:28:ef: 7d:9f:fe:b8:07:35:22:b8:b4:a4:52:00:c8:a3:9b:ca:68:87: 8d:0c:2b:4d:52:c6:08:c3:f8:61:9e:5b:31:d9:a9:4f:38:67: c6:ce:ff:20:b2:8d:16:d9:06:f8:f0:22:0a:54:4f:de:b7:70: bc:fa:89:b6 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUXaN9fqXgmzB8OqhA/icuF0fkMb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAzMDIxOUFDMkQ4QkRFNTQwQjNBMDZCM0UyMjBDQzYy QjZCMzc0RTAeFw0yNjA1MDMwMjI3NDlaFw0yNzA1MDIwMjMyNDlaMDMxMTAvBgNV BAMTKEJERDJCOENCQzhGODNFM0U0MzRGOUUyOEI0RUMyNDA0Q0QzN0E0RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0XNpDNTZUD8MvUBPbgFBkRfnW mv2kv8vpJO78F4l3juapMDxJndL69h/pyS26rwlc1Ssg00l2P7pmIWb/RBv2s8GQ RZsPggda3zGmTKPW683LyeE3TwgFrMc6495zS7+rZ6i5CTWE4LPtkbMA8uNxAtH1 SkLiN5Ptk8thG5oI7pfQc/lhlVDNpqS+neSVLJdcGibBgnOl10sY+Jd0Q49R5/wc AX/K/G32FtwkkCLCItGC9+yyS1iFpnTfbiO+EGO+KDJ7sFdu2RBJSgEbpcoR9a65 a4SUYU21tXvJ/PQPu2absb8YCHvmuM3jlD8T6jSbYAFVM5J1eFkbUHjcXdlRAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUvdK4y8j4Pj5DT54otOwkBM03pPIwHwYDVR0j BBgwFoAUIDAhmsLYveVAs6BrPiIMxitrN04wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTEyMzRjNGEtYThmZi00MDM2LTg0MjAtZGE4MTYyMTExODA2LzEvMjAzMDIxOUFD MkQ4QkRFNTQwQjNBMDZCM0UyMjBDQzYyQjZCMzc0RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDMwMjE5QUMyRDhCREU1NDBCM0EwNkIzRTIyMENDNjJCNkIz NzRFLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzUxMjM0YzRhLWE4ZmYtNDAzNi04 NDIwLWRhODE2MjExMTgwNi8xLzMyMzAzMDMxM2E2NDY2MzMzYTM3MzI2MzMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMyMzMzNzMzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 83LAMA0GCSqGSIb3DQEBCwUAA4IBAQAl3q8WdGQgF5+LLQEPOF8jeHBbwLm/HtuH 2f9BDHCs7B5Wc42HkHbLmh9rc2WP7wTVvHqlYnJ4Bw4Z5WUo6biCC3eoX3p6DYXo JREPIp+W9RCx8tl2sQK44V2vxHlGBwEK6jE8Or3H4ytaLdnc6W+ceutBcQUPCFEW t8s6Fr3QH19lqz4YwHqziNjsa3S72wTdTKFY6Z+80k96Ui53Gc1UYB75WGhtmVL3 Fc9dgtrxGIzWheHWTfXXCtbWJcBAsPQyQLVZKO99n/64BzUiuLSkUgDIo5vKaIeN DCtNUsYIw/hhnlsx2alPOGfGzv8gso0W2Qb48CIKVE/et3C8+om2 -----END CERTIFICATE-----Generated at Wed May 13 14:40:09 2026 by rpki-client