$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/323030313a6466333a356238303a3a2f34382d3438203d3e20313430333839.roa File: 323030313a6466333a356238303a3a2f34382d3438203d3e20313430333839.roa (raw, json) Hash identifier: GMEzbs3Ig2nQxKeMH+leqKXvdoQrLyt3lFNSHrwIV3w= Subject key identifier: A5:B5:87:8D:5E:CE:50:42:6D:DE:15:DD:63:D9:E5:F9:41:51:15:C6 Certificate issuer: /CN=D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524 Certificate serial: 0A504787D08EBC674D9616BD260E58EDF5A96A7A Authority key identifier: D8:B1:AA:A4:D2:2A:2E:22:59:E5:5E:7A:50:CB:15:FF:4D:D1:F5:24 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/323030313a6466333a356238303a3a2f34382d3438203d3e20313430333839.roa Signing time: Sun 03 May 2026 02:45:00 +0000 ROA not before: Sun 03 May 2026 02:40:00 +0000 ROA not after: Sun 02 May 2027 02:45:00 +0000 asID: 140389 IP address blocks: 2001:df3:5b80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.crl rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:50:47:87:d0:8e:bc:67:4d:96:16:bd:26:0e:58:ed:f5:a9:6a:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524 Validity Not Before: May 3 02:40:00 2026 GMT Not After : May 2 02:45:00 2027 GMT Subject: CN=A5B5878D5ECE50426DDE15DD63D9E5F9415115C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4d:14:0f:48:ea:af:9a:06:2c:4f:d6:e7:2b: 82:7e:94:2e:6e:18:41:a8:ad:a4:91:01:f3:4a:cb: 70:16:d3:19:b5:64:37:7b:83:21:ab:1d:c9:29:12: 63:45:39:35:fe:c7:1c:dd:9f:99:06:60:72:ed:df: 37:89:30:59:d1:9a:73:b3:1a:f5:77:1b:e5:bd:6c: 31:46:26:24:c0:54:0f:a7:00:c2:50:f5:38:f8:f2: 30:2f:7d:27:37:b3:c5:8b:b4:93:8f:c9:a1:bf:11: e0:24:53:50:72:e5:ad:e6:a3:16:0c:55:f8:38:c2: 31:0f:64:df:24:d2:4a:bc:a6:c4:dc:03:7a:4a:83: 54:d8:e1:86:a6:07:e7:de:23:e4:ab:22:89:ee:d7: de:53:71:63:ca:ef:a8:e2:ed:e1:28:aa:9d:c3:27: 7a:f8:1d:7b:60:8a:33:e8:ca:bb:e2:1c:c2:b6:ac: a0:78:85:a5:a7:43:44:ac:0a:14:d8:3a:1f:e2:5b: 2f:37:0e:c1:e5:2f:ea:09:2d:f2:47:c7:8e:70:a9: 8b:89:a5:38:7f:c0:e0:dd:c8:5d:1a:c1:f7:92:af: e3:63:8b:f2:1b:b2:97:27:c7:02:b0:15:02:59:c7: dc:a9:93:f5:58:80:a2:7c:6a:2c:81:3c:85:4c:df: 57:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B5:87:8D:5E:CE:50:42:6D:DE:15:DD:63:D9:E5:F9:41:51:15:C6 X509v3 Authority Key Identifier: keyid:D8:B1:AA:A4:D2:2A:2E:22:59:E5:5E:7A:50:CB:15:FF:4D:D1:F5:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/323030313a6466333a356238303a3a2f34382d3438203d3e20313430333839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:5b80::/48 Signature Algorithm: sha256WithRSAEncryption 79:bc:fd:9f:b4:61:61:8d:b9:31:bd:6b:1e:76:a5:06:96:d6: 5e:99:ec:c8:43:4a:6e:96:5b:5f:5b:2d:93:96:66:32:84:0f: 50:c8:d0:cc:8c:37:4d:af:e0:60:36:86:af:66:55:fd:ae:e0: ac:34:69:7c:dd:8c:15:81:58:60:da:b1:e6:73:70:c0:29:b1: ac:a9:22:2d:ec:b5:ed:bd:ef:ab:bc:8b:a6:08:3e:24:44:91: 3d:d7:d5:99:cf:df:67:da:f8:18:3a:f9:52:13:55:c3:91:86: 7b:98:02:03:79:d5:3b:a9:5a:10:2e:a2:8c:a5:5d:5a:32:98: e3:ca:31:1c:65:76:d6:8d:9a:bd:e6:c4:cd:32:62:1d:4d:e0: 67:99:55:88:7a:2b:c1:3f:da:ff:24:58:80:92:bf:ad:55:1a: 15:5c:e7:63:82:47:2a:57:5b:c3:e3:b1:0e:da:68:b2:29:3b: eb:a8:cf:2f:07:bb:ba:02:de:70:aa:77:84:44:e1:b9:cb:9f: 86:75:4e:e0:d2:69:8e:11:a4:cc:3b:fe:5e:4f:8e:89:1a:58: a1:0b:c1:35:02:d1:fd:d3:01:74:80:1d:fb:d4:92:33:b4:63: cd:15:18:9e:4a:ad:1c:8d:46:95:55:f3:dc:84:1a:07:f1:42: f6:b9:4e:a6 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUClBHh9COvGdNlha9Jg5Y7fWpanowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhCMUFBQTREMjJBMkUyMjU5RTU1RTdBNTBDQjE1RkY0 REQxRjUyNDAeFw0yNjA1MDMwMjQwMDBaFw0yNzA1MDIwMjQ1MDBaMDMxMTAvBgNV BAMTKEE1QjU4NzhENUVDRTUwNDI2RERFMTVERDYzRDlFNUY5NDE1MTE1QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxTRQPSOqvmgYsT9bnK4J+lC5u GEGoraSRAfNKy3AW0xm1ZDd7gyGrHckpEmNFOTX+xxzdn5kGYHLt3zeJMFnRmnOz GvV3G+W9bDFGJiTAVA+nAMJQ9Tj48jAvfSc3s8WLtJOPyaG/EeAkU1By5a3moxYM Vfg4wjEPZN8k0kq8psTcA3pKg1TY4YamB+feI+SrIonu195TcWPK76ji7eEoqp3D J3r4HXtgijPoyrviHMK2rKB4haWnQ0SsChTYOh/iWy83DsHlL+oJLfJHx45wqYuJ pTh/wODdyF0awfeSr+Nji/IbspcnxwKwFQJZx9ypk/VYgKJ8aiyBPIVM31fhAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUpbWHjV7OUEJt3hXdY9nl+UFRFcYwHwYDVR0j BBgwFoAU2LGqpNIqLiJZ5V56UMsV/03R9SQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2IzZWFiYjQtNGRiMy00MzczLWEzNDgtZmIxZWQ3MDU1NjUxLzAvRDhCMUFBQTRE MjJBMkUyMjU5RTU1RTdBNTBDQjE1RkY0REQxRjUyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOEIxQUFBNEQyMkEyRTIyNTlFNTVFN0E1MENCMTVGRjRERDFG NTI0LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdiM2VhYmI0LTRkYjMtNDM3My1h MzQ4LWZiMWVkNzA1NTY1MS8wLzMyMzAzMDMxM2E2NDY2MzMzYTM1NjIzODMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMwMzMzODM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 81uAMA0GCSqGSIb3DQEBCwUAA4IBAQB5vP2ftGFhjbkxvWsedqUGltZemezIQ0pu lltfWy2TlmYyhA9QyNDMjDdNr+BgNoavZlX9ruCsNGl83YwVgVhg2rHmc3DAKbGs qSIt7LXtve+rvIumCD4kRJE919WZz99n2vgYOvlSE1XDkYZ7mAIDedU7qVoQLqKM pV1aMpjjyjEcZXbWjZq95sTNMmIdTeBnmVWIeivBP9r/JFiAkr+tVRoVXOdjgkcq V1vD47EO2miyKTvrqM8vB7u6At5wqneEROG5y5+GdU7g0mmOEaTMO/5eT46JGlih C8E1AtH90wF0gB371JIztGPNFRieSq0cjUaVVfPchBoH8UL2uU6m -----END CERTIFICATE-----Generated at Wed May 13 12:51:01 2026 by rpki-client