$ rpki-client -vvf rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/323030313a6466333a663738303a3a2f34382d3438203d3e20313431303532.roa File: 323030313a6466333a663738303a3a2f34382d3438203d3e20313431303532.roa (raw, json) Hash identifier: W26Vx4nLZMqxpvpr3m/RYSVAUYlrlFX1e6tV2N6J5ys= Subject key identifier: 56:DE:A0:B5:06:5B:A6:A8:87:1F:23:18:BA:F6:9B:0E:2C:1C:EB:80 Certificate issuer: /CN=C0DF2950676479309D2FBC873ADFE7F5B6058640 Certificate serial: 429BF014761191DFEC8E491D8BF727DC8F0E5527 Authority key identifier: C0:DF:29:50:67:64:79:30:9D:2F:BC:87:3A:DF:E7:F5:B6:05:86:40 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0DF2950676479309D2FBC873ADFE7F5B6058640.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/323030313a6466333a663738303a3a2f34382d3438203d3e20313431303532.roa Signing time: Sun 03 May 2026 02:57:45 +0000 ROA not before: Sun 03 May 2026 02:52:45 +0000 ROA not after: Sun 02 May 2027 02:57:45 +0000 asID: 141052 IP address blocks: 2001:df3:f780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.crl rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0DF2950676479309D2FBC873ADFE7F5B6058640.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:04:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:9b:f0:14:76:11:91:df:ec:8e:49:1d:8b:f7:27:dc:8f:0e:55:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0DF2950676479309D2FBC873ADFE7F5B6058640 Validity Not Before: May 3 02:52:45 2026 GMT Not After : May 2 02:57:45 2027 GMT Subject: CN=56DEA0B5065BA6A8871F2318BAF69B0E2C1CEB80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e9:13:56:ab:7f:50:d7:2c:12:1d:55:bf:68: ee:ba:8e:53:de:3d:b1:4b:9f:f9:ee:ef:73:e2:c4: 9e:60:23:89:d0:c9:a6:75:29:7a:04:fd:81:25:de: bf:ef:0a:91:7d:24:61:6a:a5:e2:7d:d3:ae:0d:a1: 5e:60:28:7c:e2:29:70:af:51:65:39:8b:f5:42:ed: af:7c:9c:4c:7f:10:b7:64:58:63:c4:1d:c9:84:37: 7a:21:72:fa:fc:55:63:91:5c:fc:28:2d:9b:cc:74: e8:37:e5:cd:ab:fd:de:6d:c9:cf:43:31:e2:31:eb: 60:5e:a7:0e:ef:6e:de:59:41:ee:d1:ee:78:30:5e: 3f:51:d7:01:38:14:c4:d7:a9:72:56:89:93:ad:20: f0:67:95:8e:d3:41:0e:9d:b5:75:92:04:3c:01:f6: a0:2a:e5:94:2e:0f:4c:ae:43:e9:c6:f0:ab:c3:49: c7:f9:a6:72:d3:d1:13:a3:54:4e:a3:15:2e:91:3c: 31:81:cb:b2:9d:ac:9c:ad:25:e2:76:56:dc:43:74: e6:f7:7a:78:3e:79:a7:ae:6f:8f:89:d1:13:5c:16: 32:89:6e:82:7e:56:8f:f3:bc:00:76:3b:94:1e:28: 4f:83:77:5d:46:56:c9:06:d9:99:4a:33:7b:d9:04: ae:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:DE:A0:B5:06:5B:A6:A8:87:1F:23:18:BA:F6:9B:0E:2C:1C:EB:80 X509v3 Authority Key Identifier: keyid:C0:DF:29:50:67:64:79:30:9D:2F:BC:87:3A:DF:E7:F5:B6:05:86:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0DF2950676479309D2FBC873ADFE7F5B6058640.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/323030313a6466333a663738303a3a2f34382d3438203d3e20313431303532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:f780::/48 Signature Algorithm: sha256WithRSAEncryption 6e:71:a0:fb:b0:1d:b5:1c:e5:aa:0d:c3:f0:07:0e:1b:9c:5f: 2a:4f:3b:54:48:f2:79:35:03:b6:dd:4d:7c:b3:e0:5c:af:5b: 94:97:5c:2e:06:f8:cc:c6:b8:80:c8:49:dc:3d:f2:3c:4a:4a: 7c:78:18:5f:c8:65:c0:69:37:fa:51:13:a0:8d:72:f9:2c:f5: 00:fd:2a:d9:54:91:b7:60:b1:9e:65:0a:87:cd:d9:8a:d0:93: ac:8e:8f:27:fb:a1:3e:68:26:55:31:0a:a2:ac:a9:da:88:15: 02:46:2f:f7:f9:81:af:ee:f1:a4:2c:6e:e0:20:c6:a4:ac:2a: 4d:d5:35:a6:1f:b3:bc:34:02:41:dd:1d:9f:91:b8:c7:55:4f: d1:54:b2:ca:4a:e6:1b:00:55:c8:55:88:c7:c6:38:c0:f0:ec: 75:e1:98:75:5d:36:04:ea:b8:4b:2d:f3:30:ba:e2:81:80:19: c5:bf:e1:7a:ec:5e:52:94:f0:41:8e:f6:be:64:fc:a4:29:08: c4:f9:37:27:2c:d5:fa:d4:af:dd:9c:1b:40:37:bf:0e:67:45: 66:9c:ab:e4:f9:58:4c:ef:77:8f:9a:c0:87:38:e3:e1:f5:c0: 6e:ae:25:b9:13:62:e2:a1:2f:be:59:c5:64:67:01:e6:30:24: 55:3f:8b:e1 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUQpvwFHYRkd/sjkkdi/cn3I8OVScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBERjI5NTA2NzY0NzkzMDlEMkZCQzg3M0FERkU3RjVC NjA1ODY0MDAeFw0yNjA1MDMwMjUyNDVaFw0yNzA1MDIwMjU3NDVaMDMxMTAvBgNV BAMTKDU2REVBMEI1MDY1QkE2QTg4NzFGMjMxOEJBRjY5QjBFMkMxQ0VCODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ6RNWq39Q1ywSHVW/aO66jlPe PbFLn/nu73PixJ5gI4nQyaZ1KXoE/YEl3r/vCpF9JGFqpeJ9064NoV5gKHziKXCv UWU5i/VC7a98nEx/ELdkWGPEHcmEN3ohcvr8VWORXPwoLZvMdOg35c2r/d5tyc9D MeIx62Bepw7vbt5ZQe7R7ngwXj9R1wE4FMTXqXJWiZOtIPBnlY7TQQ6dtXWSBDwB 9qAq5ZQuD0yuQ+nG8KvDScf5pnLT0ROjVE6jFS6RPDGBy7KdrJytJeJ2VtxDdOb3 eng+eaeub4+J0RNcFjKJboJ+Vo/zvAB2O5QeKE+Dd11GVskG2ZlKM3vZBK4fAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUVt6gtQZbpqiHHyMYuvabDiwc64AwHwYDVR0j BBgwFoAUwN8pUGdkeTCdL7yHOt/n9bYFhkAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg0NGUxYjItOTNjNi00OGFlLTk2Y2MtZWQ4MzgyOWY1YTIwLzAvQzBERjI5NTA2 NzY0NzkzMDlEMkZCQzg3M0FERkU3RjVCNjA1ODY0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMERGMjk1MDY3NjQ3OTMwOUQyRkJDODczQURGRTdGNUI2MDU4 NjQwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E4NDRlMWIyLTkzYzYtNDhhZS05 NmNjLWVkODM4MjlmNWEyMC8wLzMyMzAzMDMxM2E2NDY2MzMzYTY2MzczODMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMxMzAzNTMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8/eAMA0GCSqGSIb3DQEBCwUAA4IBAQBucaD7sB21HOWqDcPwBw4bnF8qTztUSPJ5 NQO23U18s+Bcr1uUl1wuBvjMxriAyEncPfI8Skp8eBhfyGXAaTf6UROgjXL5LPUA /SrZVJG3YLGeZQqHzdmK0JOsjo8n+6E+aCZVMQqirKnaiBUCRi/3+YGv7vGkLG7g IMakrCpN1TWmH7O8NAJB3R2fkbjHVU/RVLLKSuYbAFXIVYjHxjjA8Ox14Zh1XTYE 6rhLLfMwuuKBgBnFv+F67F5SlPBBjva+ZPykKQjE+TcnLNX61K/dnBtAN78OZ0Vm nKvk+VhM73ePmsCHOOPh9cBuriW5E2LioS++WcVkZwHmMCRVP4vh -----END CERTIFICATE-----Generated at Wed May 13 11:35:41 2026 by rpki-client