$ rpki-client -vvf rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/323030313a6466333a373130303a3a2f34382d3438203d3e20313336383638.roa File: 323030313a6466333a373130303a3a2f34382d3438203d3e20313336383638.roa (raw, json) Hash identifier: gn2qTVHIkC7GBmvI9sm3mViU/5rk6Ham6sDiRDMn4HI= Subject key identifier: 76:8B:B1:20:C3:D0:82:56:D8:A4:EE:C8:5D:86:F5:F0:3A:84:82:09 Certificate issuer: /CN=45F4EB37AA178A242B8D8DD723B5E9B5502B327B Certificate serial: 243B9B547F1096D994E829C7E4116A596BB676A9 Authority key identifier: 45:F4:EB:37:AA:17:8A:24:2B:8D:8D:D7:23:B5:E9:B5:50:2B:32:7B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/323030313a6466333a373130303a3a2f34382d3438203d3e20313336383638.roa Signing time: Sun 03 May 2026 02:55:39 +0000 ROA not before: Sun 03 May 2026 02:50:39 +0000 ROA not after: Sun 02 May 2027 02:55:39 +0000 asID: 136868 IP address blocks: 2001:df3:7100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.crl rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:3b:9b:54:7f:10:96:d9:94:e8:29:c7:e4:11:6a:59:6b:b6:76:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45F4EB37AA178A242B8D8DD723B5E9B5502B327B Validity Not Before: May 3 02:50:39 2026 GMT Not After : May 2 02:55:39 2027 GMT Subject: CN=768BB120C3D08256D8A4EEC85D86F5F03A848209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:68:b2:c8:25:b7:2e:c0:30:66:ee:4f:81:a0: 4c:89:6f:8e:68:5f:9a:03:2a:19:8c:ca:66:e0:74: 85:4f:3c:68:ed:f7:9a:5c:6e:49:7e:e9:5f:8d:9f: a7:63:e4:de:ca:93:34:3b:75:90:0e:ea:3c:2a:0b: 2d:a6:70:5f:7b:31:43:a2:07:85:9b:6e:af:73:d1: e4:39:16:96:bc:16:55:ce:54:60:1f:49:59:a6:cb: ba:b3:14:b4:86:71:f1:d1:79:a3:cf:29:90:28:83: bc:bc:61:31:e9:39:4d:b2:d3:ab:91:8d:09:9c:a1: 1f:d2:1d:f1:d1:88:a0:74:00:78:1a:eb:97:7b:ff: 4a:b4:f0:13:92:4c:27:05:64:f3:40:e3:ac:40:44: d6:28:02:4e:9e:a6:ea:73:de:b9:dd:6b:76:27:b2: 67:b4:33:c0:a8:ce:47:b4:11:ae:a7:2c:3c:05:15: 19:66:59:74:81:9b:ee:90:73:01:e7:3b:30:a4:f7: de:2b:11:18:67:bc:3f:dc:c4:ce:f1:5c:4c:c9:9b: 12:8b:aa:3c:8e:c9:07:d0:8c:75:b8:10:fd:36:ad: 27:bb:fe:59:e5:12:02:97:11:11:f7:2b:d8:27:b3: af:07:16:d1:96:f9:d2:7d:8c:0f:95:ab:b8:4b:10: 5c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:8B:B1:20:C3:D0:82:56:D8:A4:EE:C8:5D:86:F5:F0:3A:84:82:09 X509v3 Authority Key Identifier: keyid:45:F4:EB:37:AA:17:8A:24:2B:8D:8D:D7:23:B5:E9:B5:50:2B:32:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/323030313a6466333a373130303a3a2f34382d3438203d3e20313336383638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:7100::/48 Signature Algorithm: sha256WithRSAEncryption 46:99:77:50:07:2e:c8:5c:0f:4e:78:35:4f:dd:91:c7:ad:1c: ae:93:fd:ef:09:53:18:1d:e9:f3:6f:bd:c1:93:fa:d1:02:cf: 13:3a:33:4b:b4:2d:9f:2e:c3:14:b7:7b:7e:30:47:97:8b:4a: e3:d9:b4:45:47:ab:6e:e2:de:08:a1:0d:68:2f:ce:0c:b1:d3: de:49:7b:2f:b9:3d:d0:d7:8a:c1:3b:32:a1:b0:b2:e4:94:df: 9c:f6:52:29:46:3c:db:7e:07:2a:65:03:10:7d:13:28:bb:10: a3:2a:64:af:05:9a:c0:04:d4:b2:36:d3:f1:19:84:e4:10:53: 93:c4:8a:8f:15:ec:0d:62:1c:19:77:82:17:3e:cf:45:1a:45: 4b:ab:ed:2c:b5:84:c7:f8:c4:59:96:8e:f5:ed:0e:cf:fe:6f: f1:3e:89:d8:53:3a:5b:f1:a6:4b:0f:1e:63:b7:e5:f5:72:e4: 4c:66:78:a2:c3:da:70:f2:8c:a0:66:a0:ee:20:1f:34:99:46: 69:f0:26:f1:29:ee:b4:22:15:b6:ce:91:bb:b4:57:7c:29:da: af:bb:e6:a9:42:da:79:a9:a9:80:e1:5b:d2:a1:54:98:65:34: f5:b4:04:01:0b:5a:3e:c6:3d:a8:ca:e4:9f:30:30:87:b4:75: fd:5c:fc:d2 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUJDubVH8QltmU6CnH5BFqWWu2dqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVGNEVCMzdBQTE3OEEyNDJCOEQ4REQ3MjNCNUU5QjU1 MDJCMzI3QjAeFw0yNjA1MDMwMjUwMzlaFw0yNzA1MDIwMjU1MzlaMDMxMTAvBgNV BAMTKDc2OEJCMTIwQzNEMDgyNTZEOEE0RUVDODVEODZGNUYwM0E4NDgyMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaaLLIJbcuwDBm7k+BoEyJb45o X5oDKhmMymbgdIVPPGjt95pcbkl+6V+Nn6dj5N7KkzQ7dZAO6jwqCy2mcF97MUOi B4Wbbq9z0eQ5Fpa8FlXOVGAfSVmmy7qzFLSGcfHReaPPKZAog7y8YTHpOU2y06uR jQmcoR/SHfHRiKB0AHga65d7/0q08BOSTCcFZPNA46xARNYoAk6epupz3rnda3Yn sme0M8Cozke0Ea6nLDwFFRlmWXSBm+6QcwHnOzCk994rERhnvD/cxM7xXEzJmxKL qjyOyQfQjHW4EP02rSe7/lnlEgKXERH3K9gns68HFtGW+dJ9jA+Vq7hLEFwpAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUdouxIMPQglbYpO7IXYb18DqEggkwHwYDVR0j BBgwFoAURfTrN6oXiiQrjY3XI7XptVArMnswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTEyNGFhOGMtZGVkYy00Mzc2LTkzODEtMGE4MWU2YmNjNTY0LzAvNDVGNEVCMzdB QTE3OEEyNDJCOEQ4REQ3MjNCNUU5QjU1MDJCMzI3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NUY0RUIzN0FBMTc4QTI0MkI4RDhERDcyM0I1RTlCNTUwMkIz MjdCLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ExMjRhYThjLWRlZGMtNDM3Ni05 MzgxLTBhODFlNmJjYzU2NC8wLzMyMzAzMDMxM2E2NDY2MzMzYTM3MzEzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzgzNjM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 83EAMA0GCSqGSIb3DQEBCwUAA4IBAQBGmXdQBy7IXA9OeDVP3ZHHrRyuk/3vCVMY Henzb73Bk/rRAs8TOjNLtC2fLsMUt3t+MEeXi0rj2bRFR6tu4t4IoQ1oL84MsdPe SXsvuT3Q14rBOzKhsLLklN+c9lIpRjzbfgcqZQMQfRMouxCjKmSvBZrABNSyNtPx GYTkEFOTxIqPFewNYhwZd4IXPs9FGkVLq+0stYTH+MRZlo717Q7P/m/xPonYUzpb 8aZLDx5jt+X1cuRMZniiw9pw8oygZqDuIB80mUZp8CbxKe60IhW2zpG7tFd8Kdqv u+apQtp5qamA4VvSoVSYZTT1tAQBC1o+xj2oyuSfMDCHtHX9XPzS -----END CERTIFICATE-----Generated at Wed May 13 14:03:40 2026 by rpki-client