$ rpki-client -vvf rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/323030313a6466303a396530303a3a2f34382d3438203d3e20313332313634.roa File: 323030313a6466303a396530303a3a2f34382d3438203d3e20313332313634.roa (raw, json) Hash identifier: nG1oS5kPYmQFB9gUVJnLfk54lZwsWyYkdNpEIO9gT/M= Subject key identifier: E6:1E:C0:A7:DA:29:D7:86:EF:90:D2:C3:F1:12:01:39:80:8F:D9:FE Certificate issuer: /CN=3B7FE3B2042531E0B36242D947F82DF031754FD3 Certificate serial: 5742332D74F4F9BA60930D1ABAA036A3DBA21CEC Authority key identifier: 3B:7F:E3:B2:04:25:31:E0:B3:62:42:D9:47:F8:2D:F0:31:75:4F:D3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B7FE3B2042531E0B36242D947F82DF031754FD3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/323030313a6466303a396530303a3a2f34382d3438203d3e20313332313634.roa Signing time: Sun 03 May 2026 02:51:49 +0000 ROA not before: Sun 03 May 2026 02:46:49 +0000 ROA not after: Sun 02 May 2027 02:51:49 +0000 asID: 132164 IP address blocks: 2001:df0:9e00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.crl rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B7FE3B2042531E0B36242D947F82DF031754FD3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:42:33:2d:74:f4:f9:ba:60:93:0d:1a:ba:a0:36:a3:db:a2:1c:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B7FE3B2042531E0B36242D947F82DF031754FD3 Validity Not Before: May 3 02:46:49 2026 GMT Not After : May 2 02:51:49 2027 GMT Subject: CN=E61EC0A7DA29D786EF90D2C3F1120139808FD9FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d2:65:59:05:25:02:e3:94:3b:e1:92:1c:cb: 2f:c8:f7:b6:28:35:c5:fc:63:c4:aa:c6:c8:85:73: d6:72:59:bf:1c:5e:95:34:38:5b:a9:aa:26:8b:d6: 07:3b:7e:02:1c:4c:1a:63:2b:87:f9:4c:b0:31:a5: ac:81:f8:24:22:6f:5b:bc:53:87:7d:6e:0a:c4:c6: e8:20:38:79:b5:a6:43:50:93:cf:03:cb:a7:2b:62: 7c:0c:b8:15:11:a5:7f:73:b4:f2:e2:05:4d:69:8f: 35:ad:a3:f4:fe:33:9a:23:2e:25:24:e0:8a:c1:93: a7:fa:da:b0:ca:20:ea:45:d4:f4:a3:62:ff:f3:c0: a7:8b:20:3c:06:4e:18:9c:3a:81:df:3e:2f:99:55: 0c:60:81:0f:35:19:b7:95:ca:ab:a4:fb:29:70:d4: 0f:b0:62:34:57:b1:c0:ab:c2:26:95:b0:bf:c0:4a: 4e:74:93:f5:28:e3:2e:af:c6:40:ae:ef:77:47:d7: 75:62:fe:42:f5:ac:3c:56:77:13:2d:5a:72:3d:ec: 02:27:28:28:ca:c6:3a:03:b2:9e:5e:42:0e:6f:76: 11:62:5b:51:78:05:9f:c2:45:ba:84:f9:b7:f2:85: 35:3d:3e:77:64:a5:35:bd:54:00:ea:90:ae:e2:c8: bf:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:1E:C0:A7:DA:29:D7:86:EF:90:D2:C3:F1:12:01:39:80:8F:D9:FE X509v3 Authority Key Identifier: keyid:3B:7F:E3:B2:04:25:31:E0:B3:62:42:D9:47:F8:2D:F0:31:75:4F:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B7FE3B2042531E0B36242D947F82DF031754FD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/323030313a6466303a396530303a3a2f34382d3438203d3e20313332313634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:9e00::/48 Signature Algorithm: sha256WithRSAEncryption 02:5b:04:9c:d7:00:99:1a:5d:2d:01:d7:89:ed:86:f4:c3:12: 99:5b:2b:b4:bc:d5:77:bd:8b:15:ab:bc:c4:d4:e6:90:7c:56: 14:8b:8c:00:91:1b:a8:95:e1:90:26:2e:f0:90:09:da:e2:6e: 9d:b9:60:9f:ae:80:a6:2f:25:02:f4:73:19:b6:f0:52:fe:3d: 38:89:a2:cd:6f:0e:c4:60:9f:35:f7:a4:5c:59:0b:c3:e6:5e: 00:98:4f:1e:d2:3d:c2:b4:66:f5:d1:c8:90:7c:73:80:0a:46: 89:43:15:c0:22:b0:2e:06:4c:ee:4f:0e:10:b3:00:b8:34:e4: 65:a9:78:4d:16:5b:39:17:ba:cb:c5:0e:82:9c:34:87:ab:64: f8:77:9b:bf:76:4f:cc:0b:6d:34:5b:4b:60:c2:07:46:56:58: bf:fe:56:ed:67:3d:55:97:cb:9f:fd:4e:f7:13:c1:8a:bd:48: 7e:29:39:58:6e:d6:18:9f:21:09:ea:7f:cd:63:30:12:0c:95: 21:41:ad:a5:89:e9:50:db:09:35:00:ab:3d:5c:8e:31:19:c9: ba:18:09:0a:5c:72:85:7e:6c:e2:2d:23:40:bd:57:1f:74:9f: 24:1b:89:8a:f5:3c:90:80:4a:62:be:22:6a:03:4c:9d:a0:f3: 31:e1:ea:13 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUV0IzLXT0+bpgkw0auqA2o9uiHOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3RkUzQjIwNDI1MzFFMEIzNjI0MkQ5NDdGODJERjAz MTc1NEZEMzAeFw0yNjA1MDMwMjQ2NDlaFw0yNzA1MDIwMjUxNDlaMDMxMTAvBgNV BAMTKEU2MUVDMEE3REEyOUQ3ODZFRjkwRDJDM0YxMTIwMTM5ODA4RkQ5RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU0mVZBSUC45Q74ZIcyy/I97Yo NcX8Y8SqxsiFc9ZyWb8cXpU0OFupqiaL1gc7fgIcTBpjK4f5TLAxpayB+CQib1u8 U4d9bgrExuggOHm1pkNQk88Dy6crYnwMuBURpX9ztPLiBU1pjzWto/T+M5ojLiUk 4IrBk6f62rDKIOpF1PSjYv/zwKeLIDwGThicOoHfPi+ZVQxggQ81GbeVyquk+ylw 1A+wYjRXscCrwiaVsL/ASk50k/Uo4y6vxkCu73dH13Vi/kL1rDxWdxMtWnI97AIn KCjKxjoDsp5eQg5vdhFiW1F4BZ/CRbqE+bfyhTU9PndkpTW9VADqkK7iyL9ZAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU5h7Ap9op14bvkNLD8RIBOYCP2f4wHwYDVR0j BBgwFoAUO3/jsgQlMeCzYkLZR/gt8DF1T9MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTE0MWY4ODQtZDVjOS00MzM2LTlhNWMtNzc3NDE5ZTU2ZGNlLzAvM0I3RkUzQjIw NDI1MzFFMEIzNjI0MkQ5NDdGODJERjAzMTc1NEZEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjdGRTNCMjA0MjUzMUUwQjM2MjQyRDk0N0Y4MkRGMDMxNzU0 RkQzLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkxNDFmODg0LWQ1YzktNDMzNi05 YTVjLTc3NzQxOWU1NmRjZS8wLzMyMzAzMDMxM2E2NDY2MzAzYTM5NjUzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzMyMzEzNjM0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8J4AMA0GCSqGSIb3DQEBCwUAA4IBAQACWwSc1wCZGl0tAdeJ7Yb0wxKZWyu0vNV3 vYsVq7zE1OaQfFYUi4wAkRuoleGQJi7wkAna4m6duWCfroCmLyUC9HMZtvBS/j04 iaLNbw7EYJ8196RcWQvD5l4AmE8e0j3CtGb10ciQfHOACkaJQxXAIrAuBkzuTw4Q swC4NORlqXhNFls5F7rLxQ6CnDSHq2T4d5u/dk/MC200W0tgwgdGVli//lbtZz1V l8uf/U73E8GKvUh+KTlYbtYYnyEJ6n/NYzASDJUhQa2lielQ2wk1AKs9XI4xGcm6 GAkKXHKFfmziLSNAvVcfdJ8kG4mK9TyQgEpiviJqA0ydoPMx4eoT -----END CERTIFICATE-----Generated at Wed May 13 14:56:35 2026 by rpki-client