$ rpki-client -vvf rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/323030313a6466313a393030303a3a2f34382d3438203d3e203538383230.roa File: 323030313a6466313a393030303a3a2f34382d3438203d3e203538383230.roa (raw, json) Hash identifier: xFJ6YkI92aDNdIdb2cb47Lr1FqvCvQqQCoyTJtEq2Co= Subject key identifier: 05:88:6C:22:E2:F8:4E:28:C7:CB:09:58:56:BC:85:CA:FF:A7:CC:1C Certificate issuer: /CN=4AC5DC4172AAF4319622F4E1C03FFE431F27E584 Certificate serial: 1BD3CFAC1A9E193FA12DC3C53B3A430411E80E9F Authority key identifier: 4A:C5:DC:41:72:AA:F4:31:96:22:F4:E1:C0:3F:FE:43:1F:27:E5:84 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/323030313a6466313a393030303a3a2f34382d3438203d3e203538383230.roa Signing time: Sun 03 May 2026 02:56:24 +0000 ROA not before: Sun 03 May 2026 02:51:24 +0000 ROA not after: Sun 02 May 2027 02:56:24 +0000 asID: 58820 IP address blocks: 2001:df1:9000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:d3:cf:ac:1a:9e:19:3f:a1:2d:c3:c5:3b:3a:43:04:11:e8:0e:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AC5DC4172AAF4319622F4E1C03FFE431F27E584 Validity Not Before: May 3 02:51:24 2026 GMT Not After : May 2 02:56:24 2027 GMT Subject: CN=05886C22E2F84E28C7CB095856BC85CAFFA7CC1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8a:1d:ea:d5:7b:60:f0:2a:c3:79:2a:ad:15: 39:4f:23:a2:85:65:c4:68:58:5e:a1:9a:49:44:df: a4:75:8c:6a:26:fa:b7:d8:86:d5:54:a2:19:d1:bb: d2:7b:77:24:6b:aa:23:3a:e5:c8:82:34:42:43:8e: 3a:ac:4f:06:e4:f3:7b:7b:52:46:fd:1a:9f:39:5e: cc:8a:67:88:79:6a:69:30:25:90:49:a5:9c:55:87: 5a:b8:65:fb:b5:f0:01:bf:c1:1d:8b:60:71:ec:88: e1:47:c8:5f:7d:9a:0d:b6:ac:45:31:f8:14:c7:79: e8:08:72:0c:fe:12:a4:09:82:db:37:14:5c:c2:8b: 8a:66:32:33:b7:c2:6e:e2:c4:00:a6:cd:29:38:32: dd:d2:ff:2c:6d:ca:b2:bf:a3:bc:e6:e3:09:ff:6e: 85:2e:24:ac:3d:c5:64:bb:09:e9:e2:39:5b:f1:2e: 4a:3d:12:90:b3:d8:34:93:8d:41:03:d4:a2:b1:3b: 19:43:8c:31:c7:93:58:60:54:cd:49:6d:2c:80:e1: df:9a:4a:f4:fc:30:3b:8c:23:17:3a:db:34:e7:98: d2:8e:e4:23:89:77:5a:a9:e6:70:05:fa:55:9b:59: e1:9e:6e:43:d5:6a:82:7e:87:97:19:27:25:aa:82: d9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:88:6C:22:E2:F8:4E:28:C7:CB:09:58:56:BC:85:CA:FF:A7:CC:1C X509v3 Authority Key Identifier: keyid:4A:C5:DC:41:72:AA:F4:31:96:22:F4:E1:C0:3F:FE:43:1F:27:E5:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/323030313a6466313a393030303a3a2f34382d3438203d3e203538383230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:9000::/48 Signature Algorithm: sha256WithRSAEncryption 89:16:95:32:ae:2f:3f:4f:c9:e9:68:a0:19:d2:a1:5b:1e:93: ef:21:42:34:9a:c0:76:bc:1d:d4:c1:c0:d4:d6:74:09:e6:57: c9:78:15:c6:38:ba:fd:39:84:ed:eb:fa:74:e8:5d:88:a9:a0: 8a:be:c2:55:40:b0:e6:29:d9:b4:6f:6e:a9:04:93:b9:3f:33: a1:ad:fe:79:f1:3a:a0:99:db:32:cc:05:06:bd:88:41:7a:99: ed:92:b1:ad:15:63:67:ae:2c:ba:b6:f1:bd:db:47:12:55:91: 7b:f5:54:eb:45:65:f6:91:f2:b7:86:9f:3c:ab:b1:2f:97:e5: 55:f8:f3:78:f2:25:cd:9b:17:77:be:88:60:b2:a5:14:ac:1e: 36:ef:34:b4:43:a8:a8:b2:b1:49:3b:b2:3e:60:ab:d7:99:0d: e6:b8:f3:47:da:36:77:ca:3f:d6:0a:37:93:f4:cd:50:76:f4: cc:6d:01:38:8f:b9:8f:ab:4e:3d:49:35:12:ce:44:70:a6:89: 56:bf:92:cb:52:cf:a3:0b:bb:07:ee:12:cb:3f:55:5a:fe:96: 20:bd:12:ad:83:d8:b4:40:c9:44:13:34:53:39:6f:1d:dd:96: 0a:cf:e1:2f:f3:53:ba:a8:58:32:02:f4:16:d8:6f:6b:cb:94: 9f:f8:fc:d1 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUG9PPrBqeGT+hLcPFOzpDBBHoDp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDNURDNDE3MkFBRjQzMTk2MjJGNEUxQzAzRkZFNDMx RjI3RTU4NDAeFw0yNjA1MDMwMjUxMjRaFw0yNzA1MDIwMjU2MjRaMDMxMTAvBgNV BAMTKDA1ODg2QzIyRTJGODRFMjhDN0NCMDk1ODU2QkM4NUNBRkZBN0NDMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdih3q1Xtg8CrDeSqtFTlPI6KF ZcRoWF6hmklE36R1jGom+rfYhtVUohnRu9J7dyRrqiM65ciCNEJDjjqsTwbk83t7 Ukb9Gp85XsyKZ4h5amkwJZBJpZxVh1q4Zfu18AG/wR2LYHHsiOFHyF99mg22rEUx +BTHeegIcgz+EqQJgts3FFzCi4pmMjO3wm7ixACmzSk4Mt3S/yxtyrK/o7zm4wn/ boUuJKw9xWS7CeniOVvxLko9EpCz2DSTjUED1KKxOxlDjDHHk1hgVM1JbSyA4d+a SvT8MDuMIxc62zTnmNKO5COJd1qp5nAF+lWbWeGebkPVaoJ+h5cZJyWqgtmDAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUBYhsIuL4TijHywlYVryFyv+nzBwwHwYDVR0j BBgwFoAUSsXcQXKq9DGWIvThwD/+Qx8n5YQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQwMTQzNmItMDI2Ny00NjZiLWEzNDAtZTI4OGQyZTkzNGE4LzAvNEFDNURDNDE3 MkFBRjQzMTk2MjJGNEUxQzAzRkZFNDMxRjI3RTU4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QUM1REM0MTcyQUFGNDMxOTYyMkY0RTFDMDNGRkU0MzFGMjdF NTg0LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E0MDE0MzZiLTAyNjctNDY2Yi1h MzQwLWUyODhkMmU5MzRhOC8wLzMyMzAzMDMxM2E2NDY2MzEzYTM5MzAzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzODM4MzIzMC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDfGQ ADANBgkqhkiG9w0BAQsFAAOCAQEAiRaVMq4vP0/J6WigGdKhWx6T7yFCNJrAdrwd 1MHA1NZ0CeZXyXgVxji6/TmE7ev6dOhdiKmgir7CVUCw5inZtG9uqQSTuT8zoa3+ efE6oJnbMswFBr2IQXqZ7ZKxrRVjZ64surbxvdtHElWRe/VU60Vl9pHyt4afPKux L5flVfjzePIlzZsXd76IYLKlFKweNu80tEOoqLKxSTuyPmCr15kN5rjzR9o2d8o/ 1go3k/TNUHb0zG0BOI+5j6tOPUk1Es5EcKaJVr+Sy1LPowu7B+4Syz9VWv6WIL0S rYPYtEDJRBM0UzlvHd2WCs/hL/NTuqhYMgL0Fthva8uUn/j80Q== -----END CERTIFICATE-----Generated at Wed May 13 08:35:04 2026 by rpki-client