$ rpki-client -vvf rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/323030313a6466323a663130303a3a2f34382d3438203d3e20313336383632.roa File: 323030313a6466323a663130303a3a2f34382d3438203d3e20313336383632.roa (raw, json) Hash identifier: aC5Jcybn/WcmcwFTZT+cimtZCI1Cj8w+b53oH5W6Fw4= Subject key identifier: DE:E6:95:B6:F3:C6:F1:D4:09:D0:02:EC:56:E8:58:35:13:90:A6:D5 Certificate issuer: /CN=AEBADFA06D76BE480430EDC8D27F4BE636880149 Certificate serial: 255E7B2CD3E1AD0B87D354C152EC11431C236330 Authority key identifier: AE:BA:DF:A0:6D:76:BE:48:04:30:ED:C8:D2:7F:4B:E6:36:88:01:49 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEBADFA06D76BE480430EDC8D27F4BE636880149.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/323030313a6466323a663130303a3a2f34382d3438203d3e20313336383632.roa Signing time: Sun 03 May 2026 02:56:43 +0000 ROA not before: Sun 03 May 2026 02:51:43 +0000 ROA not after: Sun 02 May 2027 02:56:43 +0000 asID: 136862 IP address blocks: 2001:df2:f100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.crl rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEBADFA06D76BE480430EDC8D27F4BE636880149.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:5e:7b:2c:d3:e1:ad:0b:87:d3:54:c1:52:ec:11:43:1c:23:63:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEBADFA06D76BE480430EDC8D27F4BE636880149 Validity Not Before: May 3 02:51:43 2026 GMT Not After : May 2 02:56:43 2027 GMT Subject: CN=DEE695B6F3C6F1D409D002EC56E858351390A6D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b9:2f:2e:f2:d5:73:89:d0:31:62:00:63:ee: 31:d6:3c:83:78:01:1d:1a:e4:f1:51:ad:06:5f:59: 36:49:b5:39:11:b5:c1:b6:92:26:6b:57:3d:87:dc: 7f:cf:0d:44:fe:51:76:20:f5:e1:f2:55:26:5f:d0: cb:e1:1f:c4:34:81:06:44:66:20:52:63:c7:7d:d8: 4d:e1:75:75:e1:95:ec:33:34:62:32:dc:37:fc:dd: ca:92:78:2b:bb:4b:d4:88:86:d5:bf:c3:86:9c:df: 82:b5:6d:70:67:31:4b:2d:09:52:31:04:0e:70:35: 78:4d:75:12:78:1b:67:6f:f9:6f:8f:83:a7:be:73: 5e:8f:3d:bf:e2:e8:b0:b3:b2:31:07:0a:5c:03:ba: 91:5d:d5:a6:ee:8a:8a:0c:ab:b5:31:ba:84:a4:49: ba:ae:ca:57:42:4c:02:47:a7:10:49:58:05:f1:af: 64:bc:02:6c:8d:09:45:3d:16:02:c8:3d:6c:af:3d: fd:4a:26:c1:67:11:62:a7:04:88:a5:e6:e2:a6:71: c2:35:93:34:6f:63:e6:8e:07:cb:8c:3d:1d:72:c7: ce:bc:b0:38:d9:68:ee:3a:52:d2:7b:2b:6f:0c:27: 80:c4:ec:6a:9b:68:0b:0e:22:e7:e1:12:03:85:53: 13:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E6:95:B6:F3:C6:F1:D4:09:D0:02:EC:56:E8:58:35:13:90:A6:D5 X509v3 Authority Key Identifier: keyid:AE:BA:DF:A0:6D:76:BE:48:04:30:ED:C8:D2:7F:4B:E6:36:88:01:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEBADFA06D76BE480430EDC8D27F4BE636880149.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/323030313a6466323a663130303a3a2f34382d3438203d3e20313336383632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:f100::/48 Signature Algorithm: sha256WithRSAEncryption b6:b1:8a:eb:52:b5:1c:f1:50:f4:95:49:e1:2b:19:73:98:81: 8e:87:4e:48:b3:2e:d7:a2:10:7c:dd:08:3a:d5:2b:43:37:af: 96:06:ab:76:f7:b9:fe:8f:ac:a1:cc:b9:e1:71:39:ec:8a:d5: 4f:70:71:3c:a1:2d:2d:63:06:9b:68:7b:ad:cd:ce:a3:23:48: bc:ef:c0:13:25:b7:30:b9:b1:96:14:14:89:65:6c:56:e9:b5: 4b:ac:6c:d5:cd:34:83:34:1d:e5:e6:8f:65:45:b0:5c:b6:7e: 0f:2f:4b:1f:d1:90:7d:1c:69:82:ff:28:4e:63:81:c6:c0:6c: 4c:6e:5e:ef:c2:40:85:aa:ee:cd:bc:e8:fd:e5:7a:e6:ac:2b: bb:c9:34:f0:94:b6:07:58:7e:b0:80:3b:16:86:67:73:a4:cc: c2:32:e5:c7:fd:29:fe:1d:8c:24:5e:73:97:65:ef:6f:3e:22: f1:36:f7:b1:c8:ff:b8:0e:01:21:59:b0:e1:01:51:37:de:bf: 85:77:89:c4:df:95:16:80:ca:36:cf:46:2f:89:7b:b1:31:67: db:c9:c3:61:d1:f6:59:b7:1a:c0:10:b5:0a:12:71:ae:42:50: be:dc:d7:60:1b:7f:a3:59:ca:b4:d1:3f:4b:67:8c:81:6c:57: ee:98:99:d7 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUJV57LNPhrQuH01TBUuwRQxwjYzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVCQURGQTA2RDc2QkU0ODA0MzBFREM4RDI3RjRCRTYz Njg4MDE0OTAeFw0yNjA1MDMwMjUxNDNaFw0yNzA1MDIwMjU2NDNaMDMxMTAvBgNV BAMTKERFRTY5NUI2RjNDNkYxRDQwOUQwMDJFQzU2RTg1ODM1MTM5MEE2RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfuS8u8tVzidAxYgBj7jHWPIN4 AR0a5PFRrQZfWTZJtTkRtcG2kiZrVz2H3H/PDUT+UXYg9eHyVSZf0MvhH8Q0gQZE ZiBSY8d92E3hdXXhlewzNGIy3Df83cqSeCu7S9SIhtW/w4ac34K1bXBnMUstCVIx BA5wNXhNdRJ4G2dv+W+Pg6e+c16PPb/i6LCzsjEHClwDupFd1abuiooMq7UxuoSk SbquyldCTAJHpxBJWAXxr2S8AmyNCUU9FgLIPWyvPf1KJsFnEWKnBIil5uKmccI1 kzRvY+aOB8uMPR1yx868sDjZaO46UtJ7K28MJ4DE7GqbaAsOIufhEgOFUxNLAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU3uaVtvPG8dQJ0ALsVuhYNROQptUwHwYDVR0j BBgwFoAUrrrfoG12vkgEMO3I0n9L5jaIAUkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTViOGU3NzQtMTY4My00NTZkLWJiYzAtMzQzMjI1ZjE3ZjRjLzAvQUVCQURGQTA2 RDc2QkU0ODA0MzBFREM4RDI3RjRCRTYzNjg4MDE0OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRUJBREZBMDZENzZCRTQ4MDQzMEVEQzhEMjdGNEJFNjM2ODgw MTQ5LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E1YjhlNzc0LTE2ODMtNDU2ZC1i YmMwLTM0MzIyNWYxN2Y0Yy8wLzMyMzAzMDMxM2E2NDY2MzIzYTY2MzEzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzgzNjMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8vEAMA0GCSqGSIb3DQEBCwUAA4IBAQC2sYrrUrUc8VD0lUnhKxlzmIGOh05Isy7X ohB83Qg61StDN6+WBqt297n+j6yhzLnhcTnsitVPcHE8oS0tYwabaHutzc6jI0i8 78ATJbcwubGWFBSJZWxW6bVLrGzVzTSDNB3l5o9lRbBctn4PL0sf0ZB9HGmC/yhO Y4HGwGxMbl7vwkCFqu7NvOj95XrmrCu7yTTwlLYHWH6wgDsWhmdzpMzCMuXH/Sn+ HYwkXnOXZe9vPiLxNvexyP+4DgEhWbDhAVE33r+Fd4nE35UWgMo2z0YviXuxMWfb ycNh0fZZtxrAELUKEnGuQlC+3NdgG3+jWcq00T9LZ4yBbFfumJnX -----END CERTIFICATE-----Generated at Wed May 13 13:03:08 2026 by rpki-client