$ rpki-client -vvf rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa File: 323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa (raw, json) Hash identifier: 2NisVTWE+HRD9wRpvxBcr4vnaVycZuCJLBHWrwbnEQ8= Subject key identifier: 25:83:D4:BA:48:AB:54:D1:FB:7D:C5:BB:7F:BE:D0:01:AD:AC:BA:12 Certificate issuer: /CN=96BE6D37D6231B24AFADC97CDC67C0606EC7734C Certificate serial: 588D182EBA05F85714E626F63E0EAAD99D037444 Authority key identifier: 96:BE:6D:37:D6:23:1B:24:AF:AD:C9:7C:DC:67:C0:60:6E:C7:73:4C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa Signing time: Sun 03 May 2026 02:52:54 +0000 ROA not before: Sun 03 May 2026 02:47:54 +0000 ROA not after: Sun 02 May 2027 02:52:54 +0000 asID: 137297 IP address blocks: 2001:df3:d700::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.crl rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:25:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:8d:18:2e:ba:05:f8:57:14:e6:26:f6:3e:0e:aa:d9:9d:03:74:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96BE6D37D6231B24AFADC97CDC67C0606EC7734C Validity Not Before: May 3 02:47:54 2026 GMT Not After : May 2 02:52:54 2027 GMT Subject: CN=2583D4BA48AB54D1FB7DC5BB7FBED001ADACBA12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1b:52:79:2a:45:7b:85:c2:9b:18:fd:6d:1c: 4f:ff:b4:b8:fa:0f:4e:ae:1c:ae:90:c1:3b:3f:28: b7:e8:b8:18:80:a4:a9:d2:bf:12:58:89:1c:64:5f: 52:fb:5d:aa:98:2f:db:60:36:47:1b:f2:d2:6b:9b: d8:2a:0f:46:b6:87:76:a2:80:8d:4f:25:45:47:09: ed:c1:6c:da:56:10:87:a1:26:9b:ed:ac:f6:b1:13: 77:76:cd:c2:a9:53:9f:9f:77:b4:26:53:e3:ee:ec: e4:49:77:29:e1:0c:51:f5:a4:93:ea:cf:f7:69:b0: eb:04:e4:54:ae:d2:63:c6:fb:ad:c0:18:89:d1:ff: f1:f9:9f:c4:da:54:4c:d1:bf:b0:55:6e:cc:ba:33: 03:51:56:a8:31:fd:8f:6f:fc:96:b8:53:b6:90:f9: ab:d3:c8:67:d5:38:bc:d5:91:3e:5b:40:11:57:9a: 48:3f:8b:6e:bf:16:59:a4:5a:0b:50:9d:1b:51:fb: 2f:ed:4f:59:b9:7e:ef:09:53:5c:67:22:18:9d:92: e2:aa:c6:80:21:5c:08:11:70:9c:20:9b:78:7d:3e: 5a:01:4d:84:c3:88:da:d6:96:e9:ec:fe:4e:4a:27: 08:04:79:3c:5a:a2:32:c5:52:f9:55:fb:6d:11:2f: 8f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:83:D4:BA:48:AB:54:D1:FB:7D:C5:BB:7F:BE:D0:01:AD:AC:BA:12 X509v3 Authority Key Identifier: keyid:96:BE:6D:37:D6:23:1B:24:AF:AD:C9:7C:DC:67:C0:60:6E:C7:73:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:d700::/48 Signature Algorithm: sha256WithRSAEncryption 2f:f5:77:fc:b6:6c:df:83:68:e5:ae:7c:dc:d6:84:d2:2b:86: 48:f7:eb:84:e7:bb:60:7f:f5:96:ba:b7:ee:8a:35:5e:e7:62: e0:0f:94:12:9c:87:19:81:4d:28:3c:92:1a:ca:38:27:43:40: 48:44:e4:89:0f:b4:5e:e9:fc:da:77:f3:07:b4:02:d0:6c:a3: 29:93:72:85:34:53:d0:17:ff:57:ab:05:48:e9:2e:28:8f:a7: 5b:80:9a:85:4b:f2:76:2b:46:25:3f:eb:a7:e8:9b:9d:e6:2b: 0e:49:f1:ce:89:1c:e6:ad:11:01:c6:68:6a:8a:92:f5:d6:4b: 99:6c:5e:fd:d1:63:f0:29:81:3c:62:c1:97:d4:ea:94:28:e8: 15:e6:f7:b1:8c:22:e7:5c:95:c3:c3:36:de:24:2f:0a:76:52: 3a:8c:86:05:bb:1e:f8:a4:42:e6:89:7f:2b:a0:55:ee:0e:8a: 4a:61:fe:88:21:ac:4f:80:93:04:b3:ce:ef:06:e3:05:10:5c: e8:52:f8:be:9f:68:30:02:99:ea:11:66:15:71:a4:b2:7c:09: 42:1e:c5:fe:08:6e:75:2b:c0:e9:8e:b5:38:0d:2a:6f:27:ed: 6c:b3:82:c5:46:91:8e:2c:50:6d:4e:06:0c:ab:e1:7f:ac:9a: b2:4e:1d:b5 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUWI0YLroF+FcU5ib2Pg6q2Z0DdEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZCRTZEMzdENjIzMUIyNEFGQURDOTdDREM2N0MwNjA2 RUM3NzM0QzAeFw0yNjA1MDMwMjQ3NTRaFw0yNzA1MDIwMjUyNTRaMDMxMTAvBgNV BAMTKDI1ODNENEJBNDhBQjU0RDFGQjdEQzVCQjdGQkVEMDAxQURBQ0JBMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+G1J5KkV7hcKbGP1tHE//tLj6 D06uHK6QwTs/KLfouBiApKnSvxJYiRxkX1L7XaqYL9tgNkcb8tJrm9gqD0a2h3ai gI1PJUVHCe3BbNpWEIehJpvtrPaxE3d2zcKpU5+fd7QmU+Pu7ORJdynhDFH1pJPq z/dpsOsE5FSu0mPG+63AGInR//H5n8TaVEzRv7BVbsy6MwNRVqgx/Y9v/Ja4U7aQ +avTyGfVOLzVkT5bQBFXmkg/i26/FlmkWgtQnRtR+y/tT1m5fu8JU1xnIhidkuKq xoAhXAgRcJwgm3h9PloBTYTDiNrWluns/k5KJwgEeTxaojLFUvlV+20RL49vAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUJYPUukirVNH7fcW7f77QAa2suhIwHwYDVR0j BBgwFoAUlr5tN9YjGySvrcl83GfAYG7Hc0wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTU3OTk2ZjUtYTkzNC00YjQ0LTg1NDctMTllYzM3Y2Y3YzE0LzAvOTZCRTZEMzdE NjIzMUIyNEFGQURDOTdDREM2N0MwNjA2RUM3NzM0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NkJFNkQzN0Q2MjMxQjI0QUZBREM5N0NEQzY3QzA2MDZFQzc3 MzRDLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzk1Nzk5NmY1LWE5MzQtNGI0NC04 NTQ3LTE5ZWMzN2NmN2MxNC8wLzMyMzAzMDMxM2E2NDY2MzMzYTY0MzczMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM3MzIzOTM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 89cAMA0GCSqGSIb3DQEBCwUAA4IBAQAv9Xf8tmzfg2jlrnzc1oTSK4ZI9+uE57tg f/WWurfuijVe52LgD5QSnIcZgU0oPJIayjgnQ0BIROSJD7Re6fzad/MHtALQbKMp k3KFNFPQF/9XqwVI6S4oj6dbgJqFS/J2K0YlP+un6Jud5isOSfHOiRzmrREBxmhq ipL11kuZbF790WPwKYE8YsGX1OqUKOgV5vexjCLnXJXDwzbeJC8KdlI6jIYFux74 pELmiX8roFXuDopKYf6IIaxPgJMEs87vBuMFEFzoUvi+n2gwApnqEWYVcaSyfAlC HsX+CG51K8DpjrU4DSpvJ+1ss4LFRpGOLFBtTgYMq+F/rJqyTh21 -----END CERTIFICATE-----Generated at Wed May 13 15:07:08 2026 by rpki-client