$ rpki-client -vvf rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/323030313a6466323a376234303a3a2f34382d3438203d3e20313530323636.roa File: 323030313a6466323a376234303a3a2f34382d3438203d3e20313530323636.roa (raw, json) Hash identifier: VDHJo/qx9d4J355p/1MBoyGSP1OFutt76fTDKsTeD4I= Subject key identifier: 8B:93:E5:C0:95:56:C9:A0:C9:67:4E:E3:D4:8B:F1:BB:0B:EE:98:F0 Certificate issuer: /CN=E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A Certificate serial: 73770850D9E2F9C9755311BC9F0EAF37E4D9D098 Authority key identifier: E6:EF:A0:C9:87:EB:7B:DE:DC:D6:52:0F:CF:EA:A6:C6:F7:BF:D4:7A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/323030313a6466323a376234303a3a2f34382d3438203d3e20313530323636.roa Signing time: Sun 03 May 2026 02:33:50 +0000 ROA not before: Sun 03 May 2026 02:28:50 +0000 ROA not after: Sun 02 May 2027 02:33:50 +0000 asID: 150266 IP address blocks: 2001:df2:7b40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.crl rsync://rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:77:08:50:d9:e2:f9:c9:75:53:11:bc:9f:0e:af:37:e4:d9:d0:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A Validity Not Before: May 3 02:28:50 2026 GMT Not After : May 2 02:33:50 2027 GMT Subject: CN=8B93E5C09556C9A0C9674EE3D48BF1BB0BEE98F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d8:68:df:5b:70:d3:82:80:5e:62:fd:69:37: 3f:e4:2b:53:30:11:d0:4c:2a:4d:6f:6a:75:82:1e: 42:42:ef:f5:a2:ef:83:17:09:81:eb:d6:c2:30:0c: 9f:7f:c3:70:ee:d4:81:d4:97:62:6a:7c:2b:76:ec: 1d:b9:c1:ec:8b:91:a9:f5:8b:4b:30:38:4f:d5:64: c1:29:c4:d5:9f:eb:f5:54:5f:ba:67:f0:3e:be:dc: 96:fb:b5:9a:12:77:d1:66:0a:f4:57:a3:9c:db:8e: 9c:70:1f:fa:04:c3:71:59:b2:17:b0:2d:42:e8:7c: 9e:93:93:36:88:99:4a:44:b8:ac:57:db:09:91:08: 2b:41:f3:0e:c7:2a:b1:d3:e4:88:f3:ed:2a:45:0d: ae:91:ed:03:cb:33:d2:b8:29:53:6c:96:82:40:ea: c8:2d:26:6a:04:54:37:4f:e0:6a:2f:60:ff:95:33: 8b:d6:1b:7b:23:d7:c2:d3:5d:9b:f7:83:b2:53:0f: 3c:f5:5a:18:f3:41:55:26:22:a1:5c:85:06:c1:f3: ed:c2:aa:de:aa:84:9c:7c:26:95:b2:fb:cf:9e:3b: a8:d5:5c:13:60:02:8f:df:92:46:5f:05:45:bd:7b: 97:4e:cf:fa:aa:60:2f:ef:a1:e0:2e:77:73:62:ca: d8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:93:E5:C0:95:56:C9:A0:C9:67:4E:E3:D4:8B:F1:BB:0B:EE:98:F0 X509v3 Authority Key Identifier: keyid:E6:EF:A0:C9:87:EB:7B:DE:DC:D6:52:0F:CF:EA:A6:C6:F7:BF:D4:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/323030313a6466323a376234303a3a2f34382d3438203d3e20313530323636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:7b40::/48 Signature Algorithm: sha256WithRSAEncryption 28:87:37:3b:3b:40:40:59:81:62:1a:2e:db:d0:5e:ed:b3:08: b6:23:e5:ac:0c:fc:16:fd:3c:a3:c0:0e:10:f9:50:fd:e7:2f: 67:5b:e5:dd:94:58:ca:b8:5b:e2:36:12:59:e9:60:77:a8:da: 4e:fc:7f:f4:30:b5:6a:16:7e:63:f2:e5:d8:f8:3d:96:6c:a9: d2:a2:7b:61:f8:92:e1:0a:a8:67:1e:2a:55:4a:00:25:f3:04: bc:5b:ff:93:52:5b:4a:52:1f:4e:1a:89:a5:89:3a:5f:24:c7: 40:2e:80:6c:b5:ba:6c:88:a7:76:e9:bf:7b:9f:6a:52:60:47: 76:49:45:22:59:54:2e:1d:4f:6a:3a:2c:5d:5e:b9:ab:b8:2a: 03:16:5b:aa:d4:c4:4b:8d:5a:9d:84:b6:da:6d:52:f5:bf:00: 79:0a:71:1b:04:97:bf:86:62:94:66:e4:48:9f:29:58:29:cb: 42:f3:3f:d0:83:75:a6:c3:97:70:f2:a1:ee:62:77:13:c9:44: 7a:a4:d0:d7:a4:95:51:58:63:77:6e:2e:50:23:04:ef:6c:67: 86:a4:e1:93:5d:6e:89:6c:61:6d:bd:ce:51:1f:e1:d0:64:86: 78:ab:08:5a:71:1c:d9:a0:20:cf:f2:00:01:0c:2d:be:77:e7: 4c:20:22:43 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUc3cIUNni+cl1UxG8nw6vN+TZ0JgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTZFRkEwQzk4N0VCN0JERURDRDY1MjBGQ0ZFQUE2QzZG N0JGRDQ3QTAeFw0yNjA1MDMwMjI4NTBaFw0yNzA1MDIwMjMzNTBaMDMxMTAvBgNV BAMTKDhCOTNFNUMwOTU1NkM5QTBDOTY3NEVFM0Q0OEJGMUJCMEJFRTk4RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx2GjfW3DTgoBeYv1pNz/kK1Mw EdBMKk1vanWCHkJC7/Wi74MXCYHr1sIwDJ9/w3Du1IHUl2JqfCt27B25weyLkan1 i0swOE/VZMEpxNWf6/VUX7pn8D6+3Jb7tZoSd9FmCvRXo5zbjpxwH/oEw3FZshew LULofJ6TkzaImUpEuKxX2wmRCCtB8w7HKrHT5Ijz7SpFDa6R7QPLM9K4KVNsloJA 6sgtJmoEVDdP4GovYP+VM4vWG3sj18LTXZv3g7JTDzz1WhjzQVUmIqFchQbB8+3C qt6qhJx8JpWy+8+eO6jVXBNgAo/fkkZfBUW9e5dOz/qqYC/voeAud3Niyti3AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUi5PlwJVWyaDJZ07j1IvxuwvumPAwHwYDVR0j BBgwFoAU5u+gyYfre97c1lIPz+qmxve/1HowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTUyYmVhZTEtMzQ4MC00ZTkyLWEzYTktNWE1NGZiYmFjZDJkLzAvRTZFRkEwQzk4 N0VCN0JERURDRDY1MjBGQ0ZFQUE2QzZGN0JGRDQ3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNkVGQTBDOTg3RUI3QkRFRENENjUyMEZDRkVBQTZDNkY3QkZE NDdBLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzU1MmJlYWUxLTM0ODAtNGU5Mi1h M2E5LTVhNTRmYmJhY2QyZC8wLzMyMzAzMDMxM2E2NDY2MzIzYTM3NjIzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMwMzIzNjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8ntAMA0GCSqGSIb3DQEBCwUAA4IBAQAohzc7O0BAWYFiGi7b0F7tswi2I+WsDPwW /TyjwA4Q+VD95y9nW+XdlFjKuFviNhJZ6WB3qNpO/H/0MLVqFn5j8uXY+D2WbKnS onth+JLhCqhnHipVSgAl8wS8W/+TUltKUh9OGomliTpfJMdALoBstbpsiKd26b97 n2pSYEd2SUUiWVQuHU9qOixdXrmruCoDFluq1MRLjVqdhLbabVL1vwB5CnEbBJe/ hmKUZuRInylYKctC8z/Qg3Wmw5dw8qHuYncTyUR6pNDXpJVRWGN3bi5QIwTvbGeG pOGTXW6JbGFtvc5RH+HQZIZ4qwhacRzZoCDP8gABDC2+d+dMICJD -----END CERTIFICATE-----Generated at Wed May 13 05:25:01 2026 by rpki-client