$ rpki-client -vvf rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/323030313a6466303a663963303a3a2f34382d3438203d3e20313439393037.roa File: 323030313a6466303a663963303a3a2f34382d3438203d3e20313439393037.roa (raw, json) Hash identifier: GJQ+AHj2o4V89RFkllxAeKJUIy+kRG6F/hsMS14nw+s= Subject key identifier: 76:47:41:9F:90:E2:C7:5A:0D:08:E6:73:B0:70:7A:ED:C8:71:16:1B Certificate issuer: /CN=AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392 Certificate serial: 1A16B92E9D6A58CC327F0D697FFEFD04CB5114D8 Authority key identifier: AC:2C:B9:F6:C8:CB:FD:54:9E:9E:FC:E2:2F:22:F1:BC:DB:CB:73:92 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/323030313a6466303a663963303a3a2f34382d3438203d3e20313439393037.roa Signing time: Sun 03 May 2026 03:00:11 +0000 ROA not before: Sun 03 May 2026 02:55:11 +0000 ROA not after: Sun 02 May 2027 03:00:11 +0000 asID: 149907 IP address blocks: 2001:df0:f9c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.crl rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:16:b9:2e:9d:6a:58:cc:32:7f:0d:69:7f:fe:fd:04:cb:51:14:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392 Validity Not Before: May 3 02:55:11 2026 GMT Not After : May 2 03:00:11 2027 GMT Subject: CN=7647419F90E2C75A0D08E673B0707AEDC871161B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c1:e3:80:b3:40:be:f4:9b:1d:fe:84:23:bd: 6c:52:6b:b8:36:03:c3:a1:90:b0:cb:54:d2:77:79: 11:29:21:9f:a3:73:f3:3b:ea:32:e7:ac:6c:c9:f9: 06:41:b2:d4:19:30:29:f3:b3:62:c3:8c:83:2a:2b: 23:28:4b:ba:ae:0f:75:e7:a2:ab:e8:e5:23:3a:7a: 5d:0d:e4:7a:4e:6f:c4:00:19:c2:b0:a5:24:cc:a2: 5f:5a:e7:67:04:f4:b4:c6:ba:d2:59:d8:cb:b7:ac: 3f:25:eb:b4:92:bf:20:0d:88:9b:27:f7:be:35:dc: 06:3c:69:19:c3:75:e1:fe:6a:2d:3f:ee:15:e9:34: a8:39:96:33:97:9a:72:09:a8:36:33:7b:b5:f5:29: bb:a1:f4:28:3c:84:ba:41:f3:9b:a1:7e:48:7f:a7: 70:b1:fb:ba:44:22:48:c7:d7:1b:e5:96:87:e4:f9: f7:de:ca:eb:2e:05:b6:5a:49:9b:b9:68:ae:2e:2d: df:7b:5d:1f:56:1c:f6:dc:0f:fd:f8:fa:74:77:40: 73:50:90:ed:f6:26:78:fc:be:20:e0:79:16:6b:05: 56:1a:e0:d0:1a:55:9d:af:8d:2f:4f:57:c3:e5:e7: e0:ec:eb:60:14:52:47:14:68:12:0a:b5:4b:ed:cb: 9b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:47:41:9F:90:E2:C7:5A:0D:08:E6:73:B0:70:7A:ED:C8:71:16:1B X509v3 Authority Key Identifier: keyid:AC:2C:B9:F6:C8:CB:FD:54:9E:9E:FC:E2:2F:22:F1:BC:DB:CB:73:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/323030313a6466303a663963303a3a2f34382d3438203d3e20313439393037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:f9c0::/48 Signature Algorithm: sha256WithRSAEncryption 47:b6:a8:0e:3b:7b:09:67:65:cc:57:24:2b:d8:fc:a3:55:1c: 90:09:43:85:95:e1:4d:61:2e:82:32:2f:f2:3b:29:cc:1c:5a: c6:3e:be:74:30:86:47:b8:71:fd:f2:0f:1e:86:7d:e4:96:12: b3:af:b4:8e:c3:e4:1a:57:ad:fd:80:17:54:22:2a:af:d7:8f: ce:de:2e:24:eb:64:7b:13:c4:fe:c7:21:bc:1e:03:49:4f:5f: e9:58:19:97:00:99:d3:7e:2c:5b:17:a3:09:4c:02:d1:4f:a5: 09:86:6e:3c:3a:12:97:5f:8c:a8:c4:ef:e5:96:2c:cd:d9:9e: 3e:b2:18:e1:12:0d:ac:72:d2:4e:62:4e:bb:50:8a:78:42:40: 9c:bd:7c:c7:7f:ea:48:b9:ac:0a:0d:05:72:c3:d0:a6:e7:50: 99:d7:d3:c6:81:50:a9:c8:3a:af:6d:ad:c9:68:79:b5:ec:38: 63:94:79:8e:b0:c6:f7:08:a6:b2:6b:11:cf:f7:9c:ed:2c:87: b5:15:88:6a:8b:1c:28:52:0b:45:43:bd:f7:f5:15:1f:86:78: 10:5d:b1:fa:3c:d8:23:4b:07:64:df:4e:40:e9:ef:ff:b3:d0: 74:21:3d:f0:ae:3b:a0:97:c8:0e:ea:03:9e:8d:20:65:29:0b: 59:76:96:d0 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUGha5Lp1qWMwyfw1pf/79BMtRFNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMyQ0I5RjZDOENCRkQ1NDlFOUVGQ0UyMkYyMkYxQkNE QkNCNzM5MjAeFw0yNjA1MDMwMjU1MTFaFw0yNzA1MDIwMzAwMTFaMDMxMTAvBgNV BAMTKDc2NDc0MTlGOTBFMkM3NUEwRDA4RTY3M0IwNzA3QUVEQzg3MTE2MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmweOAs0C+9Jsd/oQjvWxSa7g2 A8OhkLDLVNJ3eREpIZ+jc/M76jLnrGzJ+QZBstQZMCnzs2LDjIMqKyMoS7quD3Xn oqvo5SM6el0N5HpOb8QAGcKwpSTMol9a52cE9LTGutJZ2Mu3rD8l67SSvyANiJsn 97413AY8aRnDdeH+ai0/7hXpNKg5ljOXmnIJqDYze7X1Kbuh9Cg8hLpB85uhfkh/ p3Cx+7pEIkjH1xvllofk+ffeyusuBbZaSZu5aK4uLd97XR9WHPbcD/34+nR3QHNQ kO32Jnj8viDgeRZrBVYa4NAaVZ2vjS9PV8Pl5+Ds62AUUkcUaBIKtUvty5tNAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUdkdBn5Dix1oNCOZzsHB67chxFhswHwYDVR0j BBgwFoAUrCy59sjL/VSenvziLyLxvNvLc5IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjA1MTZhN2EtNDE5NS00NGIzLWEyNGUtY2Y4ZWQ1NzhkNzkxLzAvQUMyQ0I5RjZD OENCRkQ1NDlFOUVGQ0UyMkYyMkYxQkNEQkNCNzM5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzJDQjlGNkM4Q0JGRDU0OUU5RUZDRTIyRjIyRjFCQ0RCQ0I3 MzkyLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2IwNTE2YTdhLTQxOTUtNDRiMy1h MjRlLWNmOGVkNTc4ZDc5MS8wLzMyMzAzMDMxM2E2NDY2MzAzYTY2Mzk2MzMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDM5MzkzMDM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8PnAMA0GCSqGSIb3DQEBCwUAA4IBAQBHtqgOO3sJZ2XMVyQr2PyjVRyQCUOFleFN YS6CMi/yOynMHFrGPr50MIZHuHH98g8ehn3klhKzr7SOw+QaV639gBdUIiqv14/O 3i4k62R7E8T+xyG8HgNJT1/pWBmXAJnTfixbF6MJTALRT6UJhm48OhKXX4yoxO/l lizN2Z4+shjhEg2sctJOYk67UIp4QkCcvXzHf+pIuawKDQVyw9Cm51CZ19PGgVCp yDqvba3JaHm17DhjlHmOsMb3CKayaxHP95ztLIe1FYhqixwoUgtFQ7339RUfhngQ XbH6PNgjSwdk305A6e//s9B0IT3wrjugl8gO6gOejSBlKQtZdpbQ -----END CERTIFICATE-----Generated at Wed May 13 14:40:39 2026 by rpki-client