$ rpki-client -vvf rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/323030313a6466343a616138303a3a2f34382d3438203d3e20313431303537.roa File: 323030313a6466343a616138303a3a2f34382d3438203d3e20313431303537.roa (raw, json) Hash identifier: jjOCUf6cliEtxrLXbZn2dk07IB2wq2ND31yEFCqIvbc= Subject key identifier: AE:11:2C:E4:71:1D:A6:B5:E5:92:D5:C2:76:7B:FA:EC:F7:9E:9A:17 Certificate issuer: /CN=1029DD535EA34FFB57B387F3086D6C55F6685227 Certificate serial: 33D10ED85919A693F87124E5612E8A08335A2C84 Authority key identifier: 10:29:DD:53:5E:A3:4F:FB:57:B3:87:F3:08:6D:6C:55:F6:68:52:27 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1029DD535EA34FFB57B387F3086D6C55F6685227.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/323030313a6466343a616138303a3a2f34382d3438203d3e20313431303537.roa Signing time: Sun 03 May 2026 02:42:42 +0000 ROA not before: Sun 03 May 2026 02:37:42 +0000 ROA not after: Sun 02 May 2027 02:42:42 +0000 asID: 141057 IP address blocks: 2001:df4:aa80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.crl rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1029DD535EA34FFB57B387F3086D6C55F6685227.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:d1:0e:d8:59:19:a6:93:f8:71:24:e5:61:2e:8a:08:33:5a:2c:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1029DD535EA34FFB57B387F3086D6C55F6685227 Validity Not Before: May 3 02:37:42 2026 GMT Not After : May 2 02:42:42 2027 GMT Subject: CN=AE112CE4711DA6B5E592D5C2767BFAECF79E9A17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1b:58:93:9c:e1:09:6a:0f:20:8e:93:f1:9e: d3:50:16:b3:8d:e6:e5:60:11:4c:6b:33:b9:1b:36: 3c:b8:b7:9f:80:a0:ff:05:24:67:fa:6e:f6:aa:70: 23:94:c0:11:ae:b0:e4:4f:d6:32:90:af:d8:32:f0: 2f:66:8d:67:5b:9f:8c:25:86:b4:7a:18:6a:1b:46: 4c:41:06:5e:12:fc:93:f3:ee:c6:4f:e7:25:00:ec: 82:84:3d:2c:26:6a:9a:78:b8:d3:45:c4:eb:6e:78: c7:68:53:ea:f1:87:0e:c6:e4:28:a0:d9:5d:17:50: 12:96:b0:0e:05:31:44:e1:ea:2d:c8:5c:10:03:db: 97:d2:8a:7a:00:9a:e4:5d:93:f5:91:bb:0c:04:2e: 93:fa:b6:09:9b:c4:21:a5:0a:47:f4:de:9b:e5:7d: c7:ca:72:ed:bf:86:e0:5e:22:9c:aa:93:98:52:9c: ca:61:26:1e:35:36:7a:85:06:dd:de:15:35:96:13: 31:63:91:c1:73:b2:93:e8:54:4a:cf:69:0d:22:d6: 2c:d5:1f:29:bd:20:43:35:fe:69:36:0f:c4:f3:70: 90:63:02:61:33:bc:b0:3c:67:5b:8e:14:6b:43:bb: a1:5b:e3:ea:22:33:90:f0:5b:d2:12:f3:27:be:cb: a5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:11:2C:E4:71:1D:A6:B5:E5:92:D5:C2:76:7B:FA:EC:F7:9E:9A:17 X509v3 Authority Key Identifier: keyid:10:29:DD:53:5E:A3:4F:FB:57:B3:87:F3:08:6D:6C:55:F6:68:52:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1029DD535EA34FFB57B387F3086D6C55F6685227.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/323030313a6466343a616138303a3a2f34382d3438203d3e20313431303537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:aa80::/48 Signature Algorithm: sha256WithRSAEncryption 65:5b:93:ae:9b:27:df:2d:86:bf:06:d4:c9:21:92:8e:56:64: e7:35:48:c7:40:08:9a:61:be:dd:20:ba:a1:cd:5c:02:1b:e6: e2:6e:3c:55:33:df:cb:fa:37:0e:ba:db:77:b1:68:b2:18:24: d6:33:ef:6e:48:44:bb:41:78:be:98:34:b0:e1:80:cc:c6:31: 65:94:f9:29:cb:3c:cd:3a:6e:c7:f4:11:1a:29:62:0b:73:7b: 83:da:fa:21:5d:c5:6a:8a:de:93:52:7a:1b:91:35:a4:9f:a0: 6c:c2:02:86:c3:85:37:e6:12:d0:94:7b:fc:8e:c6:fc:ec:f9: 98:05:0f:df:70:f8:62:4f:8d:30:d8:4c:91:ef:90:b5:f6:17: 4c:b8:7a:64:f1:1e:b0:25:b4:5f:3d:76:ad:e7:cc:8f:4e:30: d6:b6:ec:0f:aa:7f:e5:22:e4:25:eb:0f:da:43:4d:f8:22:f3: cb:20:a2:93:39:74:03:50:c9:2a:e4:26:3e:0d:19:19:02:b5: 1f:af:2b:f6:14:71:07:16:7e:6a:ce:8a:f1:dd:ba:42:9e:33: 76:05:a7:23:78:3e:6a:e2:74:e2:14:e5:5f:92:29:12:19:6f: fb:66:4e:92:88:a3:a2:96:63:1f:a6:a2:c8:a2:f4:d5:23:7c: e3:ee:eb:cc -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUM9EO2FkZppP4cSTlYS6KCDNaLIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAyOURENTM1RUEzNEZGQjU3QjM4N0YzMDg2RDZDNTVG NjY4NTIyNzAeFw0yNjA1MDMwMjM3NDJaFw0yNzA1MDIwMjQyNDJaMDMxMTAvBgNV BAMTKEFFMTEyQ0U0NzExREE2QjVFNTkyRDVDMjc2N0JGQUVDRjc5RTlBMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcG1iTnOEJag8gjpPxntNQFrON 5uVgEUxrM7kbNjy4t5+AoP8FJGf6bvaqcCOUwBGusORP1jKQr9gy8C9mjWdbn4wl hrR6GGobRkxBBl4S/JPz7sZP5yUA7IKEPSwmapp4uNNFxOtueMdoU+rxhw7G5Cig 2V0XUBKWsA4FMUTh6i3IXBAD25fSinoAmuRdk/WRuwwELpP6tgmbxCGlCkf03pvl fcfKcu2/huBeIpyqk5hSnMphJh41NnqFBt3eFTWWEzFjkcFzspPoVErPaQ0i1izV Hym9IEM1/mk2D8TzcJBjAmEzvLA8Z1uOFGtDu6Fb4+oiM5DwW9IS8ye+y6XjAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUrhEs5HEdprXlktXCdnv67PeemhcwHwYDVR0j BBgwFoAUECndU16jT/tXs4fzCG1sVfZoUicwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzI0ZGExNTItMDAyNC00MzZkLTk5MGQtMzIzODA2ZTAxNjk5LzAvMTAyOURENTM1 RUEzNEZGQjU3QjM4N0YzMDg2RDZDNTVGNjY4NTIyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDI5REQ1MzVFQTM0RkZCNTdCMzg3RjMwODZENkM1NUY2Njg1 MjI3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzcyNGRhMTUyLTAwMjQtNDM2ZC05 OTBkLTMyMzgwNmUwMTY5OS8wLzMyMzAzMDMxM2E2NDY2MzQzYTYxNjEzODMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMxMzAzNTM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 9KqAMA0GCSqGSIb3DQEBCwUAA4IBAQBlW5OumyffLYa/BtTJIZKOVmTnNUjHQAia Yb7dILqhzVwCG+bibjxVM9/L+jcOutt3sWiyGCTWM+9uSES7QXi+mDSw4YDMxjFl lPkpyzzNOm7H9BEaKWILc3uD2vohXcVqit6TUnobkTWkn6BswgKGw4U35hLQlHv8 jsb87PmYBQ/fcPhiT40w2EyR75C19hdMuHpk8R6wJbRfPXat58yPTjDWtuwPqn/l IuQl6w/aQ034IvPLIKKTOXQDUMkq5CY+DRkZArUfryv2FHEHFn5qzorx3bpCnjN2 BacjeD5q4nTiFOVfkikSGW/7Zk6SiKOilmMfpqLIovTVI3zj7uvM -----END CERTIFICATE-----Generated at Wed May 13 15:23:49 2026 by rpki-client