$ rpki-client -vvf rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/323030313a6436383a383a3a2f34382d3438203d3e203338373539.roa File: 323030313a6436383a383a3a2f34382d3438203d3e203338373539.roa (raw, json) Hash identifier: ln19Xj+B4lsZrLeIto8uT3WlM8vH3iN38/4gFqnVtU0= Subject key identifier: AC:2C:4B:E4:4A:08:1D:8D:73:E6:EB:66:EE:1E:CF:81:A7:8E:81:E3 Certificate issuer: /CN=02062A0A8A708F654606A252EFBD31F81D738315 Certificate serial: 6D7D3D55D2E808C65F5F4DE99D59D037122980DC Authority key identifier: 02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/323030313a6436383a383a3a2f34382d3438203d3e203338373539.roa Signing time: Sun 03 May 2026 02:55:45 +0000 ROA not before: Sun 03 May 2026 02:50:45 +0000 ROA not after: Sun 02 May 2027 02:55:45 +0000 asID: 38759 IP address blocks: 2001:d68:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:7d:3d:55:d2:e8:08:c6:5f:5f:4d:e9:9d:59:d0:37:12:29:80:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02062A0A8A708F654606A252EFBD31F81D738315 Validity Not Before: May 3 02:50:45 2026 GMT Not After : May 2 02:55:45 2027 GMT Subject: CN=AC2C4BE44A081D8D73E6EB66EE1ECF81A78E81E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1b:ce:41:d3:1e:b5:7f:00:91:b0:79:d4:a9: 4b:8c:4d:7a:2a:8e:02:5b:ce:70:fa:7f:90:60:25: 7c:b9:bd:86:78:1e:84:f9:0b:5b:9e:1c:c1:cd:2e: 78:fd:1f:9e:e0:7c:64:f1:c0:8b:05:f2:3d:39:03: ad:79:83:2f:f4:cd:c4:94:88:78:e5:e4:34:c8:16: cf:c5:9a:62:3f:55:68:b0:f8:c7:53:77:fe:96:e0: bb:0a:84:bb:2a:bc:e1:87:f6:8c:c3:dc:bb:c5:49: ee:1d:bd:c4:71:45:3a:37:e2:b2:70:4a:b3:b7:8b: b8:87:12:56:55:b8:24:4f:8e:f2:48:e0:9b:fa:68: a4:37:19:9b:fb:6b:50:24:41:17:2f:dd:29:12:f5: c3:66:e7:dd:5d:4c:6b:7c:96:45:10:11:1e:b4:3e: 3e:3b:35:f1:1e:b8:b3:2b:14:48:e0:22:21:c9:53: 48:fa:c1:23:1e:5f:a2:cb:2d:13:c5:fe:23:8e:a7: 44:51:a4:4b:64:55:cb:8e:06:20:ca:8b:77:28:31: db:f0:0d:80:38:84:1d:3c:b3:78:83:f9:c0:c2:a5: 99:54:62:b9:a3:54:d1:c9:91:75:31:6c:ce:f0:85: 5c:8e:64:18:d0:2b:a1:c8:67:66:ad:9b:8e:e4:0d: e7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:2C:4B:E4:4A:08:1D:8D:73:E6:EB:66:EE:1E:CF:81:A7:8E:81:E3 X509v3 Authority Key Identifier: keyid:02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/323030313a6436383a383a3a2f34382d3438203d3e203338373539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:d68:8::/48 Signature Algorithm: sha256WithRSAEncryption 6f:4f:a8:92:46:7e:a9:de:e3:e1:68:0f:fe:2b:5f:32:4f:4d: 0e:79:38:55:8c:bd:66:7c:20:c1:1e:91:da:35:55:64:bd:f6: af:b3:d3:76:e1:6b:a4:9f:16:e6:74:87:20:27:5c:08:81:b3: e2:03:d9:b7:8a:71:5c:f3:cf:09:42:45:86:4e:5e:45:01:ac: 50:c8:2c:12:72:b0:f5:27:09:54:ae:88:d9:14:d2:bd:27:1d: 45:6f:ea:bb:35:a4:c1:78:14:a0:0b:ac:80:8a:68:1b:e5:d9: cc:26:d6:72:96:bf:ca:82:2f:52:b0:86:cc:00:33:8a:e7:68: 0a:63:0b:ce:89:dc:29:3a:15:a8:d6:fd:b3:d5:05:e2:99:85: cc:63:a3:da:eb:2c:21:f6:72:b2:31:c0:e4:ab:ab:46:60:02: dc:8c:56:f7:ad:78:d8:41:d9:9c:0b:b8:7f:15:73:57:35:4c: aa:40:75:53:d5:46:0d:bf:c0:41:ef:9f:23:72:37:d1:bb:a7: 30:a4:cd:79:ac:c0:f7:89:54:17:89:0e:b6:49:b4:ad:6c:87: b1:67:ed:69:9d:4c:c7:3e:32:d6:47:bd:ae:01:8e:9d:32:e1: cc:12:84:82:ea:c8:eb:b7:43:f0:45:91:d7:63:34:45:86:dc: e4:cb:e9:86 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUbX09VdLoCMZfX03pnVnQNxIpgNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwNjJBMEE4QTcwOEY2NTQ2MDZBMjUyRUZCRDMxRjgx RDczODMxNTAeFw0yNjA1MDMwMjUwNDVaFw0yNzA1MDIwMjU1NDVaMDMxMTAvBgNV BAMTKEFDMkM0QkU0NEEwODFEOEQ3M0U2RUI2NkVFMUVDRjgxQTc4RTgxRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjG85B0x61fwCRsHnUqUuMTXoq jgJbznD6f5BgJXy5vYZ4HoT5C1ueHMHNLnj9H57gfGTxwIsF8j05A615gy/0zcSU iHjl5DTIFs/FmmI/VWiw+MdTd/6W4LsKhLsqvOGH9ozD3LvFSe4dvcRxRTo34rJw SrO3i7iHElZVuCRPjvJI4Jv6aKQ3GZv7a1AkQRcv3SkS9cNm591dTGt8lkUQER60 Pj47NfEeuLMrFEjgIiHJU0j6wSMeX6LLLRPF/iOOp0RRpEtkVcuOBiDKi3coMdvw DYA4hB08s3iD+cDCpZlUYrmjVNHJkXUxbM7whVyOZBjQK6HIZ2atm47kDefdAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUrCxL5EoIHY1z5utm7h7PgaeOgeMwHwYDVR0j BBgwFoAUAgYqCopwj2VGBqJS770x+B1zgxUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTEyZjIyOGMtZGYyMC00NzI4LTlmOTYtOGZhYTEzNDAwMTdhLzAvMDIwNjJBMEE4 QTcwOEY2NTQ2MDZBMjUyRUZCRDMxRjgxRDczODMxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjA2MkEwQThBNzA4RjY1NDYwNkEyNTJFRkJEMzFGODFENzM4 MzE1LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ExMmYyMjhjLWRmMjAtNDcyOC05 Zjk2LThmYWExMzQwMDE3YS8wLzMyMzAzMDMxM2E2NDM2MzgzYTM4M2EzYTJmMzQz ODJkMzQzODIwM2QzZTIwMzMzODM3MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDWgACDANBgkq hkiG9w0BAQsFAAOCAQEAb0+okkZ+qd7j4WgP/itfMk9NDnk4VYy9ZnwgwR6R2jVV ZL32r7PTduFrpJ8W5nSHICdcCIGz4gPZt4pxXPPPCUJFhk5eRQGsUMgsEnKw9ScJ VK6I2RTSvScdRW/quzWkwXgUoAusgIpoG+XZzCbWcpa/yoIvUrCGzAAziudoCmML zoncKToVqNb9s9UF4pmFzGOj2ussIfZysjHA5KurRmAC3IxW96142EHZnAu4fxVz VzVMqkB1U9VGDb/AQe+fI3I30bunMKTNeazA94lUF4kOtkm0rWyHsWftaZ1Mxz4y 1ke9rgGOnTLhzBKEgurI67dD8EWR12M0RYbc5Mvphg== -----END CERTIFICATE-----Generated at Wed May 13 12:40:08 2026 by rpki-client