$ rpki-client -vvf rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa File: 323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa (raw, json) Hash identifier: wxFKBpn9qVN9lrWfCaIxYIWmbSnlJkTDNrnGXIX7Yog= Subject key identifier: CE:86:DD:DC:C6:78:54:06:DD:49:42:A0:C6:56:03:6A:D6:4D:2B:09 Certificate issuer: /CN=F22D335E58FE4480C630028AFDA089DDD4F51B2E Certificate serial: 5A3A3A31A7502C4320ABB1951E99C2C2BFE79B5E Authority key identifier: F2:2D:33:5E:58:FE:44:80:C6:30:02:8A:FD:A0:89:DD:D4:F5:1B:2E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F22D335E58FE4480C630028AFDA089DDD4F51B2E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa Signing time: Sun 03 May 2026 02:47:13 +0000 ROA not before: Sun 03 May 2026 02:42:13 +0000 ROA not after: Sun 02 May 2027 02:47:13 +0000 asID: 135457 IP address blocks: 2001:df2:be00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.crl rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F22D335E58FE4480C630028AFDA089DDD4F51B2E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:3a:3a:31:a7:50:2c:43:20:ab:b1:95:1e:99:c2:c2:bf:e7:9b:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F22D335E58FE4480C630028AFDA089DDD4F51B2E Validity Not Before: May 3 02:42:13 2026 GMT Not After : May 2 02:47:13 2027 GMT Subject: CN=CE86DDDCC6785406DD4942A0C656036AD64D2B09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:42:ec:75:2e:9d:5d:ef:6f:88:3c:76:92:28: f4:d2:cd:fa:ba:8f:ff:56:5b:8f:10:c6:66:ca:64: 6f:df:e9:ed:e8:4f:be:f2:a5:f0:98:fc:24:42:ee: 41:9d:51:cf:6a:0e:46:bb:fe:63:5f:64:b9:e7:f6: 7a:31:3b:53:e1:5a:9b:c9:d1:42:20:c0:aa:cb:16: 42:58:20:ea:85:d6:04:53:3b:65:f9:81:c8:0d:4e: 30:3c:b0:99:08:ed:80:0d:67:72:84:0c:db:cf:21: 6e:58:64:e8:72:00:9a:f6:bd:03:97:31:d9:7e:01: 99:a5:b5:4a:86:03:b7:b2:5e:37:fd:1c:25:97:91: e7:ab:a3:c9:78:08:69:f2:9f:35:4f:a8:53:de:b3: d0:4b:84:41:63:9a:d1:09:8f:33:a9:37:21:1b:3a: d4:2c:d7:9f:51:30:b0:4c:73:84:de:f0:dc:9f:70: f4:c2:10:ba:46:8f:b3:56:27:2c:3c:a0:6b:cb:64: 25:64:f0:d1:76:0a:55:65:6d:67:ef:f6:b9:4b:f7: d4:18:33:dd:4b:ca:6c:98:42:1c:48:ba:b2:21:67: fe:a1:b6:31:cd:6d:a5:b3:e8:38:aa:b9:c9:c7:55: 40:8c:19:ad:dd:6a:a5:86:be:cb:64:bd:3d:df:05: d4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:86:DD:DC:C6:78:54:06:DD:49:42:A0:C6:56:03:6A:D6:4D:2B:09 X509v3 Authority Key Identifier: keyid:F2:2D:33:5E:58:FE:44:80:C6:30:02:8A:FD:A0:89:DD:D4:F5:1B:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F22D335E58FE4480C630028AFDA089DDD4F51B2E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:be00::/48 Signature Algorithm: sha256WithRSAEncryption 91:8b:2f:90:af:78:f8:45:b7:21:64:51:63:da:c3:0c:26:b4: ab:dc:2a:e1:d0:f8:89:7e:94:bc:96:47:b1:70:18:8d:ee:1b: 20:86:3a:89:f2:ad:5d:40:08:23:f6:9e:6b:fe:64:e7:b6:cd: f5:b1:e9:6b:32:3b:94:72:f9:45:2f:b0:a8:f7:4a:27:3f:20: 1c:62:a2:73:9d:29:76:2c:67:b7:55:ee:6a:f9:e4:ae:8b:2a: 71:81:5c:27:c0:72:c3:2f:f8:10:23:5b:4c:f6:36:d0:cd:63: 4d:d7:13:72:39:e6:c2:4e:58:08:a9:b1:3b:72:56:fb:55:82: bd:a6:9c:f0:01:87:68:ad:fc:29:da:5d:3a:80:cd:ae:21:2e: a9:79:5c:aa:dc:c9:8d:94:e7:bc:6a:47:6f:3e:a4:93:f1:8f: 48:51:86:70:e3:a3:e6:b8:f9:7d:6d:5a:09:41:9e:28:b7:ee: dc:30:04:de:27:30:ae:70:5e:59:3c:20:c1:a9:4f:84:ec:8b: b5:86:a9:6e:6e:ff:7f:e2:8f:a9:a0:eb:d2:88:98:63:2d:7e: 02:74:20:5f:bf:e1:99:70:b4:16:5b:de:c4:92:da:57:8b:27: 8b:37:21:25:74:e0:52:24:69:ba:15:97:b6:03:53:8f:84:cb: b0:ab:90:63 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUWjo6MadQLEMgq7GVHpnCwr/nm14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIyRDMzNUU1OEZFNDQ4MEM2MzAwMjhBRkRBMDg5RERE NEY1MUIyRTAeFw0yNjA1MDMwMjQyMTNaFw0yNzA1MDIwMjQ3MTNaMDMxMTAvBgNV BAMTKENFODZERERDQzY3ODU0MDZERDQ5NDJBMEM2NTYwMzZBRDY0RDJCMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFQux1Lp1d72+IPHaSKPTSzfq6 j/9WW48QxmbKZG/f6e3oT77ypfCY/CRC7kGdUc9qDka7/mNfZLnn9noxO1PhWpvJ 0UIgwKrLFkJYIOqF1gRTO2X5gcgNTjA8sJkI7YANZ3KEDNvPIW5YZOhyAJr2vQOX Mdl+AZmltUqGA7eyXjf9HCWXkeero8l4CGnynzVPqFPes9BLhEFjmtEJjzOpNyEb OtQs159RMLBMc4Te8NyfcPTCELpGj7NWJyw8oGvLZCVk8NF2ClVlbWfv9rlL99QY M91LymyYQhxIurIhZ/6htjHNbaWz6DiqucnHVUCMGa3daqWGvstkvT3fBdRnAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUzobd3MZ4VAbdSUKgxlYDatZNKwkwHwYDVR0j BBgwFoAU8i0zXlj+RIDGMAKK/aCJ3dT1Gy4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODI3ODBmODUtZWYyZi00Y2Y4LWE0YjgtNTIyNWM0NWI5NmExLzAvRjIyRDMzNUU1 OEZFNDQ4MEM2MzAwMjhBRkRBMDg5RERENEY1MUIyRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjJEMzM1RTU4RkU0NDgwQzYzMDAyOEFGREEwODlEREQ0RjUx QjJFLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzgyNzgwZjg1LWVmMmYtNGNmOC1h NGI4LTUyMjVjNDViOTZhMS8wLzMyMzAzMDMxM2E2NDY2MzIzYTYyNjUzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM1MzQzNTM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8r4AMA0GCSqGSIb3DQEBCwUAA4IBAQCRiy+Qr3j4RbchZFFj2sMMJrSr3Crh0PiJ fpS8lkexcBiN7hsghjqJ8q1dQAgj9p5r/mTnts31selrMjuUcvlFL7Co90onPyAc YqJznSl2LGe3Ve5q+eSuiypxgVwnwHLDL/gQI1tM9jbQzWNN1xNyOebCTlgIqbE7 clb7VYK9ppzwAYdorfwp2l06gM2uIS6peVyq3MmNlOe8akdvPqST8Y9IUYZw46Pm uPl9bVoJQZ4ot+7cMATeJzCucF5ZPCDBqU+E7Iu1hqlubv9/4o+poOvSiJhjLX4C dCBfv+GZcLQWW97EktpXiyeLNyEldOBSJGm6FZe2A1OPhMuwq5Bj -----END CERTIFICATE-----Generated at Wed May 13 10:20:57 2026 by rpki-client