$ rpki-client -vvf rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/323030313a6466323a653538303a3a2f34382d3438203d3e20313339393935.roa File: 323030313a6466323a653538303a3a2f34382d3438203d3e20313339393935.roa (raw, json) Hash identifier: kBjc6OXZ/6vxacL9UgjRAviZ4OmFuFSXJVueUFg8fnE= Subject key identifier: 89:06:50:ED:29:EC:BD:BB:B2:7D:7C:8D:29:07:65:C0:B7:FC:1A:86 Certificate issuer: /CN=2469BE3E79EE624DE9C3D6D6307B6482C1DE832E Certificate serial: 59AC37D52558D995F7C647EBD6134B219DCEE69F Authority key identifier: 24:69:BE:3E:79:EE:62:4D:E9:C3:D6:D6:30:7B:64:82:C1:DE:83:2E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/323030313a6466323a653538303a3a2f34382d3438203d3e20313339393935.roa Signing time: Sun 03 May 2026 02:37:45 +0000 ROA not before: Sun 03 May 2026 02:32:45 +0000 ROA not after: Sun 02 May 2027 02:37:45 +0000 asID: 139995 IP address blocks: 2001:df2:e580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.crl rsync://rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:20:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:ac:37:d5:25:58:d9:95:f7:c6:47:eb:d6:13:4b:21:9d:ce:e6:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2469BE3E79EE624DE9C3D6D6307B6482C1DE832E Validity Not Before: May 3 02:32:45 2026 GMT Not After : May 2 02:37:45 2027 GMT Subject: CN=890650ED29ECBDBBB27D7C8D290765C0B7FC1A86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9c:3d:94:bf:4b:8e:68:44:8a:9f:97:63:88: bc:b7:9f:7b:6b:f9:a1:88:0c:6f:a7:fa:75:38:be: 18:22:a3:8c:00:bf:2e:a5:39:21:5d:b7:2d:2b:c7: e5:be:5f:ca:d6:79:51:21:70:1e:2b:fd:30:1d:f6: 1f:e4:17:a9:f0:57:b6:f2:a4:ad:72:d1:38:5b:fc: a7:a9:fe:8f:99:24:6a:85:f8:dc:d1:8b:7d:23:96: 22:08:05:d1:a5:79:f3:3e:89:89:e5:d6:50:14:2a: db:ed:82:af:d8:b1:c2:44:23:4c:1b:9b:3f:ac:61: 1b:29:12:98:ff:19:10:04:ef:b8:9f:1d:b7:cf:0d: 1e:ed:89:92:27:26:9c:35:25:c2:65:4c:10:01:07: e1:f5:5b:b7:a2:2f:96:b4:c5:63:d2:c4:d0:e8:6f: 09:d3:cc:7f:cf:dc:d1:1a:8a:65:37:f2:1c:7b:34: 6f:40:68:f2:a8:a7:9a:5e:fe:8c:d3:6b:9f:4f:b6: 89:12:52:5e:50:14:83:7a:4c:74:5b:a5:fd:00:8f: 4e:cd:d9:c6:e0:58:8f:f5:bc:48:14:d6:94:7e:ab: 9c:2b:36:97:4a:36:ed:4b:4a:45:e2:79:af:d5:17: fb:7a:12:98:ac:40:7f:e8:6a:34:b1:a1:1c:07:66: ce:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:06:50:ED:29:EC:BD:BB:B2:7D:7C:8D:29:07:65:C0:B7:FC:1A:86 X509v3 Authority Key Identifier: keyid:24:69:BE:3E:79:EE:62:4D:E9:C3:D6:D6:30:7B:64:82:C1:DE:83:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/323030313a6466323a653538303a3a2f34382d3438203d3e20313339393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:e580::/48 Signature Algorithm: sha256WithRSAEncryption 66:00:9d:fc:f0:56:cf:28:6a:00:8f:16:77:43:3f:db:c2:e7: 1e:fa:54:58:bf:94:77:a1:1d:5f:6d:16:03:34:d0:f5:b7:5e: 43:0b:39:7d:8c:89:38:2c:96:28:bf:07:3e:3e:f9:7a:d4:fe: b9:88:65:95:3b:f7:88:8d:d7:5a:ae:f5:07:ff:af:54:58:5e: 80:e0:c2:d1:54:72:bf:36:db:f9:57:60:ae:e0:e9:d1:9b:5e: 6a:9c:ae:f9:0f:bf:8e:2a:da:b8:1a:1a:5b:46:01:a7:59:12: 0c:2a:1d:a2:7f:41:1d:38:22:f6:63:96:d1:7f:86:d3:08:bf: b2:85:ad:38:a3:45:05:6e:9d:22:55:53:51:6a:7d:58:c6:62: 90:eb:31:c7:fb:00:9f:a5:dc:88:bf:be:2f:6b:13:59:2d:75: 58:a1:68:d4:f6:eb:ac:fc:95:b1:ec:68:a9:96:21:17:9f:90: 55:c9:75:37:4b:d4:03:01:b4:b9:4e:3b:00:f1:54:bb:f5:37: 72:bc:87:d2:2c:a5:41:06:78:66:91:c5:05:d2:5d:9a:68:da: e1:8f:41:68:10:61:f2:72:76:3b:83:ea:88:f3:9f:e2:6b:aa: 63:31:77:32:68:9e:5a:ce:b1:b4:3b:0f:f1:06:54:cc:2a:56: e1:8c:2f:05 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUWaw31SVY2ZX3xkfr1hNLIZ3O5p8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ2OUJFM0U3OUVFNjI0REU5QzNENkQ2MzA3QjY0ODJD MURFODMyRTAeFw0yNjA1MDMwMjMyNDVaFw0yNzA1MDIwMjM3NDVaMDMxMTAvBgNV BAMTKDg5MDY1MEVEMjlFQ0JEQkJCMjdEN0M4RDI5MDc2NUMwQjdGQzFBODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAnD2Uv0uOaESKn5djiLy3n3tr +aGIDG+n+nU4vhgio4wAvy6lOSFdty0rx+W+X8rWeVEhcB4r/TAd9h/kF6nwV7by pK1y0Thb/Kep/o+ZJGqF+NzRi30jliIIBdGlefM+iYnl1lAUKtvtgq/YscJEI0wb mz+sYRspEpj/GRAE77ifHbfPDR7tiZInJpw1JcJlTBABB+H1W7eiL5a0xWPSxNDo bwnTzH/P3NEaimU38hx7NG9AaPKop5pe/ozTa59PtokSUl5QFIN6THRbpf0Aj07N 2cbgWI/1vEgU1pR+q5wrNpdKNu1LSkXiea/VF/t6EpisQH/oajSxoRwHZs5pAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUiQZQ7SnsvbuyfXyNKQdlwLf8GoYwHwYDVR0j BBgwFoAUJGm+PnnuYk3pw9bWMHtkgsHegy4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjBiNTkwZTgtNGY4OS00Nzg1LWFlNzktMmJmZmZhMmM1MmM5LzAvMjQ2OUJFM0U3 OUVFNjI0REU5QzNENkQ2MzA3QjY0ODJDMURFODMyRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNDY5QkUzRTc5RUU2MjRERTlDM0Q2RDYzMDdCNjQ4MkMxREU4 MzJFLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzYwYjU5MGU4LTRmODktNDc4NS1h ZTc5LTJiZmZmYTJjNTJjOS8wLzMyMzAzMDMxM2E2NDY2MzIzYTY1MzUzODMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM5MzkzOTM1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8uWAMA0GCSqGSIb3DQEBCwUAA4IBAQBmAJ388FbPKGoAjxZ3Qz/bwuce+lRYv5R3 oR1fbRYDNND1t15DCzl9jIk4LJYovwc+Pvl61P65iGWVO/eIjddarvUH/69UWF6A 4MLRVHK/Ntv5V2Cu4OnRm15qnK75D7+OKtq4GhpbRgGnWRIMKh2if0EdOCL2Y5bR f4bTCL+yha04o0UFbp0iVVNRan1YxmKQ6zHH+wCfpdyIv74vaxNZLXVYoWjU9uus /JWx7GipliEXn5BVyXU3S9QDAbS5TjsA8VS79TdyvIfSLKVBBnhmkcUF0l2aaNrh j0FoEGHycnY7g+qI85/ia6pjMXcyaJ5azrG0Ow/xBlTMKlbhjC8F -----END CERTIFICATE-----Generated at Wed May 13 11:46:22 2026 by rpki-client