$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323030313a6466353a343030303a3a2f34382d3438203d3e20313332363437.roa File: 323030313a6466353a343030303a3a2f34382d3438203d3e20313332363437.roa (raw, json) Hash identifier: W4Y/Jl2Uo2TA6PRaW+Lr7qZLcsDrqBIfU1uczmpPuG4= Subject key identifier: 32:6D:E6:58:7B:8A:6B:97:80:C8:BB:F3:8C:86:92:FE:1D:35:9A:91 Certificate issuer: /CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6 Certificate serial: 30A581C0D3359C818C85B4EB64F2395BA966D700 Authority key identifier: BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323030313a6466353a343030303a3a2f34382d3438203d3e20313332363437.roa Signing time: Sun 03 May 2026 02:57:04 +0000 ROA not before: Sun 03 May 2026 02:52:04 +0000 ROA not after: Sun 02 May 2027 02:57:04 +0000 asID: 132647 IP address blocks: 2001:df5:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:a5:81:c0:d3:35:9c:81:8c:85:b4:eb:64:f2:39:5b:a9:66:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6 Validity Not Before: May 3 02:52:04 2026 GMT Not After : May 2 02:57:04 2027 GMT Subject: CN=326DE6587B8A6B9780C8BBF38C8692FE1D359A91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c5:2d:3f:e4:5a:ea:7b:63:5a:7e:cb:d2:9c: fc:62:06:31:b1:84:42:ec:57:95:b2:2b:c6:bf:28: c1:bd:df:ec:a7:81:e8:2b:b2:60:1e:ec:91:af:f1: 84:f9:71:c1:ac:a3:8c:e5:00:1e:db:94:bc:98:3b: ec:02:69:7a:fe:cc:e4:54:6f:cc:e9:93:84:03:2e: 79:63:ad:7d:55:d8:32:49:18:b9:2a:4b:fd:52:7e: 89:4d:1f:f3:25:c4:55:6d:7c:df:fa:ce:da:df:c4: 68:9b:5d:a1:3a:c1:af:bf:ac:bf:b2:a7:1f:e3:5d: 02:df:62:80:dd:c1:55:0a:6e:f6:56:3a:92:4a:9f: 0e:02:02:99:79:60:36:8a:18:c2:67:3b:4e:6d:76: a7:e8:17:78:93:84:54:b0:4a:a0:a0:ab:bc:80:7f: 59:79:82:54:fd:f5:3e:33:ed:b4:40:08:02:5a:b6: e2:ca:52:a5:0e:37:d0:24:b7:5c:4a:89:10:b7:b8: 7d:35:03:eb:f2:b7:11:01:84:45:6b:d6:ea:2e:95: 9a:94:0d:0e:fb:a5:b7:93:3d:09:35:ce:af:2d:ca: 55:9f:9d:c8:f0:34:4e:99:d5:8e:c8:2a:1e:5a:48: b8:7c:9a:29:ad:75:79:67:07:13:9d:e2:d1:67:3e: d6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6D:E6:58:7B:8A:6B:97:80:C8:BB:F3:8C:86:92:FE:1D:35:9A:91 X509v3 Authority Key Identifier: keyid:BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323030313a6466353a343030303a3a2f34382d3438203d3e20313332363437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:4000::/48 Signature Algorithm: sha256WithRSAEncryption 70:5d:81:54:8f:ee:60:0d:45:2e:f9:a0:f4:da:7e:ae:10:c4: 35:4b:b7:f3:28:97:90:b8:5f:e9:67:96:2c:56:47:b5:fc:a3: f4:b4:b5:2b:ad:35:27:a5:4f:55:14:52:6b:e0:47:c6:db:4b: 43:3b:b7:d5:2e:55:b3:c4:c9:06:3b:82:14:1b:d0:26:60:0b: 48:7d:24:09:fc:c0:4f:ce:68:94:b6:79:4f:ab:97:1f:02:d7: f2:b4:0d:fa:bd:ff:82:42:8b:b5:91:86:cf:2d:42:76:dd:f6: 4c:f7:5b:62:9c:f8:d7:03:c2:78:f0:d1:69:ec:be:94:f4:70: 8f:50:61:4b:82:de:b2:af:c9:da:b6:11:14:c8:6d:93:c0:c6: 26:fa:a9:1b:71:b0:eb:52:b3:35:aa:8c:50:77:e9:a4:26:19: ac:eb:b1:2f:88:0f:75:1a:23:45:ec:97:dd:1e:8f:50:75:50: 3d:ff:4f:76:65:08:f0:d8:ba:e0:18:4f:41:ce:ec:19:2e:da: e0:65:00:b5:28:b0:78:f6:40:2d:0d:3a:f0:80:54:43:62:cc: 1b:a2:8e:fe:23:c3:59:01:0c:98:ef:10:c2:c3:a3:71:8b:73: 94:19:1a:bd:7a:a8:08:54:5d:23:0b:cc:32:3d:09:f7:35:e0: 21:90:e7:ab -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUMKWBwNM1nIGMhbTrZPI5W6lm1wAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI1NzY4MzVFRDhBNDZFMzBGQjhEREY1NjZBQkM0Nzc2 NTUzN0VCNjAeFw0yNjA1MDMwMjUyMDRaFw0yNzA1MDIwMjU3MDRaMDMxMTAvBgNV BAMTKDMyNkRFNjU4N0I4QTZCOTc4MEM4QkJGMzhDODY5MkZFMUQzNTlBOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBxS0/5Frqe2NafsvSnPxiBjGx hELsV5WyK8a/KMG93+yngegrsmAe7JGv8YT5ccGso4zlAB7blLyYO+wCaXr+zORU b8zpk4QDLnljrX1V2DJJGLkqS/1SfolNH/MlxFVtfN/6ztrfxGibXaE6wa+/rL+y px/jXQLfYoDdwVUKbvZWOpJKnw4CApl5YDaKGMJnO05tdqfoF3iThFSwSqCgq7yA f1l5glT99T4z7bRACAJatuLKUqUON9Akt1xKiRC3uH01A+vytxEBhEVr1uoulZqU DQ77pbeTPQk1zq8tylWfncjwNE6Z1Y7IKh5aSLh8mimtdXlnBxOd4tFnPtY/AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUMm3mWHuKa5eAyLvzjIaS/h01mpEwHwYDVR0j BBgwFoAUu1doNe2KRuMPuN31ZqvEd2VTfrYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY2MTdkOGMtZDE1NC00NjFlLWJjY2EtYjY2ZDI2N2NmZmM3LzAvQkI1NzY4MzVF RDhBNDZFMzBGQjhEREY1NjZBQkM0Nzc2NTUzN0VCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjU3NjgzNUVEOEE0NkUzMEZCOERERjU2NkFCQzQ3NzY1NTM3 RUI2LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E2NjE3ZDhjLWQxNTQtNDYxZS1i Y2NhLWI2NmQyNjdjZmZjNy8wLzMyMzAzMDMxM2E2NDY2MzUzYTM0MzAzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzMyMzYzNDM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 9UAAMA0GCSqGSIb3DQEBCwUAA4IBAQBwXYFUj+5gDUUu+aD02n6uEMQ1S7fzKJeQ uF/pZ5YsVke1/KP0tLUrrTUnpU9VFFJr4EfG20tDO7fVLlWzxMkGO4IUG9AmYAtI fSQJ/MBPzmiUtnlPq5cfAtfytA36vf+CQou1kYbPLUJ23fZM91tinPjXA8J48NFp 7L6U9HCPUGFLgt6yr8nathEUyG2TwMYm+qkbcbDrUrM1qoxQd+mkJhms67EviA91 GiNF7JfdHo9QdVA9/092ZQjw2LrgGE9BzuwZLtrgZQC1KLB49kAtDTrwgFRDYswb oo7+I8NZAQyY7xDCw6Nxi3OUGRq9eqgIVF0jC8wyPQn3NeAhkOer -----END CERTIFICATE-----Generated at Wed May 13 07:35:10 2026 by rpki-client