$ rpki-client -vvf rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/323030313a6466313a366263303a3a2f34382d3438203d3e20313431363036.roa File: 323030313a6466313a366263303a3a2f34382d3438203d3e20313431363036.roa (raw, json) Hash identifier: I79Q34o1f2vuvFl40hYKqigyJvsHaAMckuqi63LU5sQ= Subject key identifier: 54:60:68:E1:C7:FE:F6:0D:F4:D8:40:F4:9C:A3:BA:4E:E4:6F:75:41 Certificate issuer: /CN=C7CDFA6BC067C7A495919AAD0E26180B86353954 Certificate serial: 7CFCAD331D320FCCB73BD267ADF0BD95EBA9442E Authority key identifier: C7:CD:FA:6B:C0:67:C7:A4:95:91:9A:AD:0E:26:18:0B:86:35:39:54 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7CDFA6BC067C7A495919AAD0E26180B86353954.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/323030313a6466313a366263303a3a2f34382d3438203d3e20313431363036.roa Signing time: Sun 03 May 2026 02:41:28 +0000 ROA not before: Sun 03 May 2026 02:36:28 +0000 ROA not after: Sun 02 May 2027 02:41:28 +0000 asID: 141606 IP address blocks: 2001:df1:6bc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.crl rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7CDFA6BC067C7A495919AAD0E26180B86353954.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:fc:ad:33:1d:32:0f:cc:b7:3b:d2:67:ad:f0:bd:95:eb:a9:44:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7CDFA6BC067C7A495919AAD0E26180B86353954 Validity Not Before: May 3 02:36:28 2026 GMT Not After : May 2 02:41:28 2027 GMT Subject: CN=546068E1C7FEF60DF4D840F49CA3BA4EE46F7541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b2:c1:80:37:d2:1a:52:35:49:2e:b2:bb:4f: 03:e4:60:c4:5b:a4:66:cf:12:2b:d7:b0:df:23:7e: e2:43:09:1a:46:a3:73:ef:02:83:ab:17:ec:88:5d: 8f:98:bb:7a:b3:d5:be:44:ca:c4:5d:fd:66:69:b6: 76:d0:95:20:b9:df:7a:fb:70:c1:1b:ed:a5:e0:db: 4a:b7:49:cb:d0:fb:4d:87:da:06:d3:37:49:b4:3f: 85:4b:f3:ef:55:bf:23:44:c9:3c:ea:0a:a8:3e:67: 7a:96:1d:03:99:d3:e1:b0:3f:14:16:ef:78:30:55: e3:e5:de:53:09:1d:63:3c:f1:fb:9d:4b:05:30:f6: 56:81:1c:89:63:6b:34:fa:a7:0a:0a:f8:8d:ef:d7: 4d:77:19:0c:ce:11:1a:3c:46:2a:2d:03:ce:40:13: e2:0c:e7:76:dd:d9:88:57:b5:f8:86:0d:22:f7:a6: 47:e3:23:48:67:19:5e:dc:27:5f:3d:cc:2d:f6:1c: 33:d3:bd:2b:87:5b:fc:66:97:e3:96:17:39:2d:35: f9:be:99:ce:83:91:21:21:ef:cc:b2:41:f9:db:de: 84:e3:9b:56:70:71:08:58:7a:0f:ed:a7:fc:69:19: 9a:87:af:0a:a6:3e:df:c4:ac:13:44:1b:ea:ff:bb: b1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:60:68:E1:C7:FE:F6:0D:F4:D8:40:F4:9C:A3:BA:4E:E4:6F:75:41 X509v3 Authority Key Identifier: keyid:C7:CD:FA:6B:C0:67:C7:A4:95:91:9A:AD:0E:26:18:0B:86:35:39:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7CDFA6BC067C7A495919AAD0E26180B86353954.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/323030313a6466313a366263303a3a2f34382d3438203d3e20313431363036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:6bc0::/48 Signature Algorithm: sha256WithRSAEncryption a8:04:f8:18:36:82:3f:60:ff:bc:cb:53:70:2c:f5:7a:c8:86: 76:a7:42:d8:0f:62:60:4c:4e:14:d5:84:3b:d2:ee:90:16:51: e9:9d:d0:cc:47:3a:39:67:91:14:68:12:f3:ce:68:e2:54:20: fe:f1:b8:54:c2:53:33:fc:99:90:4f:b5:4e:48:e0:d1:f4:e3: cc:79:36:f2:14:51:0f:ef:21:c0:32:ed:6a:89:7f:21:31:37: b2:fd:72:04:9a:9c:a4:cb:80:49:c9:c4:1b:93:20:5c:04:62: 10:a7:e9:fb:53:41:f1:b8:fa:23:1d:be:f1:0e:16:f5:d1:72: 7d:a5:5c:fc:9b:a5:09:9f:ea:93:d7:f2:f8:f1:8e:83:a3:2a: 5d:97:bf:44:5a:a7:7b:9e:85:63:35:1e:e2:fd:df:5c:3d:c5: 8a:c2:05:78:e0:2b:ab:08:b9:f3:1b:90:5f:30:ac:d9:50:fd: e8:c8:37:57:b0:93:2e:f0:d5:1c:1b:93:bf:cc:9c:66:61:61: 1a:55:87:24:fb:4c:59:c6:3c:06:74:54:4d:a2:9e:59:12:e6: d0:25:11:95:2a:a0:b2:65:84:d6:13:5d:8d:a2:ed:00:f6:46: 3f:ea:7b:15:ea:d6:7f:4e:3a:71:18:58:a7:0c:36:b7:e3:3f: 47:89:eb:a2 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUfPytMx0yD8y3O9JnrfC9leupRC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdDREZBNkJDMDY3QzdBNDk1OTE5QUFEMEUyNjE4MEI4 NjM1Mzk1NDAeFw0yNjA1MDMwMjM2MjhaFw0yNzA1MDIwMjQxMjhaMDMxMTAvBgNV BAMTKDU0NjA2OEUxQzdGRUY2MERGNEQ4NDBGNDlDQTNCQTRFRTQ2Rjc1NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqssGAN9IaUjVJLrK7TwPkYMRb pGbPEivXsN8jfuJDCRpGo3PvAoOrF+yIXY+Yu3qz1b5EysRd/WZptnbQlSC533r7 cMEb7aXg20q3ScvQ+02H2gbTN0m0P4VL8+9VvyNEyTzqCqg+Z3qWHQOZ0+GwPxQW 73gwVePl3lMJHWM88fudSwUw9laBHIljazT6pwoK+I3v1013GQzOERo8RiotA85A E+IM53bd2YhXtfiGDSL3pkfjI0hnGV7cJ189zC32HDPTvSuHW/xml+OWFzktNfm+ mc6DkSEh78yyQfnb3oTjm1ZwcQhYeg/tp/xpGZqHrwqmPt/ErBNEG+r/u7FBAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUVGBo4cf+9g302ED0nKO6TuRvdUEwHwYDVR0j BBgwFoAUx836a8Bnx6SVkZqtDiYYC4Y1OVQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmQ2NGJmNmEtNDMwMi00NjBmLTk2NjktMDlhNTBhNzNhZjFhLzAvQzdDREZBNkJD MDY3QzdBNDk1OTE5QUFEMEUyNjE4MEI4NjM1Mzk1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DN0NERkE2QkMwNjdDN0E0OTU5MTlBQUQwRTI2MTgwQjg2MzUz OTU0LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZkNjRiZjZhLTQzMDItNDYwZi05 NjY5LTA5YTUwYTczYWYxYS8wLzMyMzAzMDMxM2E2NDY2MzEzYTM2NjI2MzMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMxMzYzMDM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8WvAMA0GCSqGSIb3DQEBCwUAA4IBAQCoBPgYNoI/YP+8y1NwLPV6yIZ2p0LYD2Jg TE4U1YQ70u6QFlHpndDMRzo5Z5EUaBLzzmjiVCD+8bhUwlMz/JmQT7VOSODR9OPM eTbyFFEP7yHAMu1qiX8hMTey/XIEmpyky4BJycQbkyBcBGIQp+n7U0HxuPojHb7x Dhb10XJ9pVz8m6UJn+qT1/L48Y6Doypdl79EWqd7noVjNR7i/d9cPcWKwgV44Cur CLnzG5BfMKzZUP3oyDdXsJMu8NUcG5O/zJxmYWEaVYck+0xZxjwGdFRNop5ZEubQ JRGVKqCyZYTWE12Nou0A9kY/6nsV6tZ/TjpxGFinDDa34z9Hieui -----END CERTIFICATE-----Generated at Wed May 13 10:04:12 2026 by rpki-client