$ rpki-client -vvf rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/323030313a6466333a623838303a3a2f34382d3438203d3e203137353338.roa File: 323030313a6466333a623838303a3a2f34382d3438203d3e203137353338.roa (raw, json) Hash identifier: 8so5gt5H9uGwMpnvmuPmOphhipCyfITSegbgfqUMLB8= Subject key identifier: 85:D5:CA:6A:8F:16:AC:5D:AB:68:7C:00:8A:C3:4D:0F:07:94:7B:9D Certificate issuer: /CN=43F896EEB70F2F97883FF459CAE3ACB43742B3BC Certificate serial: 6A1743E03164B3B081E05C17F2AB14F3AAC8CE94 Authority key identifier: 43:F8:96:EE:B7:0F:2F:97:88:3F:F4:59:CA:E3:AC:B4:37:42:B3:BC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/323030313a6466333a623838303a3a2f34382d3438203d3e203137353338.roa Signing time: Sun 03 May 2026 02:58:14 +0000 ROA not before: Sun 03 May 2026 02:53:14 +0000 ROA not after: Sun 02 May 2027 02:58:14 +0000 asID: 17538 IP address blocks: 2001:df3:b880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.crl rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:17:43:e0:31:64:b3:b0:81:e0:5c:17:f2:ab:14:f3:aa:c8:ce:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43F896EEB70F2F97883FF459CAE3ACB43742B3BC Validity Not Before: May 3 02:53:14 2026 GMT Not After : May 2 02:58:14 2027 GMT Subject: CN=85D5CA6A8F16AC5DAB687C008AC34D0F07947B9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:82:14:af:f5:93:5f:a5:39:6f:ae:1a:d1:9f: 84:85:4f:c4:68:f7:aa:58:83:04:39:27:f6:72:cc: f4:0d:2c:71:a1:59:46:97:7d:78:28:cc:45:74:33: dc:1a:7a:9d:02:1a:81:a7:ce:9b:9c:e5:ea:16:34: 7a:27:af:76:79:ff:60:15:9c:b7:bb:cc:ef:cd:f8: fc:a3:0a:44:5e:c7:81:24:ba:55:9d:48:36:de:c3: 19:41:df:a8:d9:af:08:15:9b:ab:30:73:cd:ad:30: 54:71:f1:a5:d1:0a:72:a0:80:1f:37:e3:0b:ea:9b: 65:45:08:2c:dd:ff:45:f4:65:f7:e5:49:15:88:e3: 21:45:e1:81:4b:c3:d7:b9:fc:be:2b:f7:0c:59:86: 48:e8:81:31:40:01:98:68:19:69:05:e4:84:db:3a: 53:4a:30:2a:38:d8:53:4b:97:1b:fe:72:cc:c9:d9: c1:6b:61:6f:da:08:2a:4e:ef:72:86:cc:c4:15:95: 7a:e6:c5:28:6b:02:46:73:d0:ad:59:49:b7:42:90: ae:a6:85:c1:d6:da:0b:0f:c9:7d:ef:8d:22:d0:10: 10:3c:8d:fa:9b:ec:82:9e:04:fa:57:58:b2:c4:5c: 40:84:e6:21:ce:a0:e8:59:de:b8:b6:fd:ff:fb:e9: 6f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D5:CA:6A:8F:16:AC:5D:AB:68:7C:00:8A:C3:4D:0F:07:94:7B:9D X509v3 Authority Key Identifier: keyid:43:F8:96:EE:B7:0F:2F:97:88:3F:F4:59:CA:E3:AC:B4:37:42:B3:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43F896EEB70F2F97883FF459CAE3ACB43742B3BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/323030313a6466333a623838303a3a2f34382d3438203d3e203137353338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:b880::/48 Signature Algorithm: sha256WithRSAEncryption 7f:59:a5:99:a5:e3:12:5f:c7:e2:33:7c:97:b8:1e:ff:60:e6: 53:4e:8b:3c:32:6e:b2:36:df:86:25:fb:28:5e:2d:1d:15:c6: 7e:22:03:49:70:fe:14:41:7b:62:f4:86:73:cf:4f:2d:d5:32: 22:8b:57:a5:af:ce:0e:b8:53:55:c6:39:f6:14:2e:0e:e0:99: 5b:90:c4:a9:6b:ad:eb:c6:5a:b6:8f:21:54:00:69:58:cc:5e: 9e:bc:e0:40:1f:b7:0d:95:0b:28:38:f9:21:23:fc:7c:42:2e: 18:e3:78:07:3e:f2:97:29:ea:51:e9:8f:13:e9:7c:a8:97:09: 6f:cd:57:e2:7b:f6:d8:4d:a3:15:f8:c1:14:10:fa:97:1c:ca: e0:df:3e:eb:e7:e7:f9:0d:a0:82:a6:5d:9c:42:76:42:77:7c: 06:d1:d2:41:73:e5:c3:b1:e9:24:4d:c8:62:87:7d:58:c6:16: b8:cf:10:79:6b:f0:45:df:e1:2d:64:f0:66:85:a0:1f:b1:5b: 54:47:fb:9f:e1:6a:52:eb:c8:6c:0c:a5:b5:e1:3d:e9:b6:d9: ba:b5:a5:32:2f:e4:b1:83:a0:b9:f1:54:97:af:70:b4:63:93: 03:b7:4f:05:78:95:bd:90:e1:2c:af:99:9b:31:98:c3:2f:3e: fb:38:57:78 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUahdD4DFks7CB4FwX8qsU86rIzpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNGODk2RUVCNzBGMkY5Nzg4M0ZGNDU5Q0FFM0FDQjQz NzQyQjNCQzAeFw0yNjA1MDMwMjUzMTRaFw0yNzA1MDIwMjU4MTRaMDMxMTAvBgNV BAMTKDg1RDVDQTZBOEYxNkFDNURBQjY4N0MwMDhBQzM0RDBGMDc5NDdCOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoghSv9ZNfpTlvrhrRn4SFT8Ro 96pYgwQ5J/ZyzPQNLHGhWUaXfXgozEV0M9waep0CGoGnzpuc5eoWNHonr3Z5/2AV nLe7zO/N+PyjCkRex4EkulWdSDbewxlB36jZrwgVm6swc82tMFRx8aXRCnKggB83 4wvqm2VFCCzd/0X0ZfflSRWI4yFF4YFLw9e5/L4r9wxZhkjogTFAAZhoGWkF5ITb OlNKMCo42FNLlxv+cszJ2cFrYW/aCCpO73KGzMQVlXrmxShrAkZz0K1ZSbdCkK6m hcHW2gsPyX3vjSLQEBA8jfqb7IKeBPpXWLLEXECE5iHOoOhZ3ri2/f/76W+LAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUhdXKao8WrF2raHwAisNNDweUe50wHwYDVR0j BBgwFoAUQ/iW7rcPL5eIP/RZyuOstDdCs7wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWE0MzM5MzQtMzg0NC00NjUzLThmYWMtMTg1OGIyODIzZDFjLzAvNDNGODk2RUVC NzBGMkY5Nzg4M0ZGNDU5Q0FFM0FDQjQzNzQyQjNCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80M0Y4OTZFRUI3MEYyRjk3ODgzRkY0NTlDQUUzQUNCNDM3NDJC M0JDLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FhNDMzOTM0LTM4NDQtNDY1My04 ZmFjLTE4NThiMjgyM2QxYy8wLzMyMzAzMDMxM2E2NDY2MzMzYTYyMzgzODMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNzM1MzMzOC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDfO4 gDANBgkqhkiG9w0BAQsFAAOCAQEAf1mlmaXjEl/H4jN8l7ge/2DmU06LPDJusjbf hiX7KF4tHRXGfiIDSXD+FEF7YvSGc89PLdUyIotXpa/ODrhTVcY59hQuDuCZW5DE qWut68Zato8hVABpWMxenrzgQB+3DZULKDj5ISP8fEIuGON4Bz7ylynqUemPE+l8 qJcJb81X4nv22E2jFfjBFBD6lxzK4N8+6+fn+Q2ggqZdnEJ2Qnd8BtHSQXPlw7Hp JE3IYod9WMYWuM8QeWvwRd/hLWTwZoWgH7FbVEf7n+FqUuvIbAylteE96bbZurWl Mi/ksYOgufFUl69wtGOTA7dPBXiVvZDhLK+ZmzGYwy8++zhXeA== -----END CERTIFICATE-----Generated at Wed May 13 17:13:52 2026 by rpki-client