$ rpki-client -vvf rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/323030313a6466323a356130303a3a2f34382d3438203d3e20313335343434.roa File: 323030313a6466323a356130303a3a2f34382d3438203d3e20313335343434.roa (raw, json) Hash identifier: LT7RL4AshZZWaOQ5M4cXziGumEcUQNnqOVToVNyckMU= Subject key identifier: CD:07:36:94:DB:FD:17:FA:8C:46:19:CB:56:85:43:A0:EB:D9:2E:D4 Certificate issuer: /CN=5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10 Certificate serial: 56A77B65E36A0B3D97EDD1953A5BD95B5EE75B8E Authority key identifier: 5D:13:BF:84:B8:D9:1A:8A:1A:C8:08:62:27:D5:9F:1D:C1:EA:3F:10 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/323030313a6466323a356130303a3a2f34382d3438203d3e20313335343434.roa Signing time: Sun 03 May 2026 03:00:23 +0000 ROA not before: Sun 03 May 2026 02:55:23 +0000 ROA not after: Sun 02 May 2027 03:00:23 +0000 asID: 135444 IP address blocks: 2001:df2:5a00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:a7:7b:65:e3:6a:0b:3d:97:ed:d1:95:3a:5b:d9:5b:5e:e7:5b:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10 Validity Not Before: May 3 02:55:23 2026 GMT Not After : May 2 03:00:23 2027 GMT Subject: CN=CD073694DBFD17FA8C4619CB568543A0EBD92ED4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d9:b8:ca:a4:8b:0c:b2:cb:4c:f2:b2:ad:46: f6:26:88:52:5b:90:39:be:7d:4a:e1:71:76:98:75: 10:73:2b:00:e9:e4:83:4f:1f:b3:a9:15:30:de:c7: 2e:ee:ce:e1:d1:77:ec:d3:88:d2:db:3b:ec:8f:58: 3f:5a:c4:fd:cc:f6:9b:24:02:06:53:3c:85:7b:5f: b9:4f:b0:84:c1:b3:ff:4d:eb:65:a0:85:0b:f9:a0: 16:c3:6c:1b:3c:de:35:2f:b8:8f:09:33:bc:df:ef: 28:27:8e:38:92:23:1b:2a:e7:1f:e4:bb:a6:a1:2f: 6d:d6:af:fd:f5:bf:c9:c0:ff:f5:b1:17:16:40:38: 1f:17:fd:ad:30:e9:45:9f:6d:f1:b7:d0:c9:d0:ea: c1:ae:58:6d:72:53:d6:b2:7c:48:94:88:d7:8f:a5: a7:d2:64:47:bb:26:1c:8e:85:4d:ee:09:81:3f:c9: c8:b3:03:e4:a2:ec:50:fd:e5:48:b4:7f:e4:45:ce: 69:ee:68:ae:40:cc:98:ad:c8:ee:0c:06:5a:07:ed: 5c:e6:df:e2:52:3a:e6:32:12:a3:a6:55:26:e3:8c: 83:53:02:48:3b:67:31:6c:a4:49:45:d1:24:8b:04: 9b:28:ac:12:2e:39:94:c4:57:3d:9c:45:8b:3d:88: 36:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:07:36:94:DB:FD:17:FA:8C:46:19:CB:56:85:43:A0:EB:D9:2E:D4 X509v3 Authority Key Identifier: keyid:5D:13:BF:84:B8:D9:1A:8A:1A:C8:08:62:27:D5:9F:1D:C1:EA:3F:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/323030313a6466323a356130303a3a2f34382d3438203d3e20313335343434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:5a00::/48 Signature Algorithm: sha256WithRSAEncryption c1:ab:90:0a:8c:b1:a1:84:0a:2f:9b:ed:da:8e:fc:e0:fd:90: 53:52:f4:66:12:35:2a:6c:cc:cc:71:d3:5f:5c:ad:2c:bc:a8: c5:bf:3e:7e:89:32:6b:ac:84:6f:42:47:36:27:5e:d4:4e:b9: 52:e7:d0:dd:25:9d:7b:c1:63:b1:a7:61:5c:f6:5d:81:05:22: 65:0b:2e:f7:fc:c2:46:1c:3e:02:d2:6d:b9:2d:17:f8:b9:d8: 30:14:60:87:11:87:b4:88:1e:aa:e5:1b:91:03:6c:75:63:8b: e7:dc:0e:c6:ce:6a:a5:c8:c8:9f:c6:82:cc:ed:a2:ed:40:77: a4:97:b1:db:f3:a5:2d:e3:0f:ce:92:7d:e8:2d:cb:ae:e5:f9: e5:b7:8a:67:ef:ff:c7:11:a7:d2:3e:2c:5a:14:85:96:7e:5b: 5c:55:f8:77:3f:28:1f:0b:a2:13:15:44:ea:97:1d:4d:92:76: 8e:45:dc:8e:25:d0:82:2a:8c:4d:4c:b8:bd:44:5d:b0:f5:0a: b7:33:6a:f7:c1:ad:86:2f:e4:69:10:e0:ae:5a:b6:23:5d:b2: ee:58:36:6f:db:1a:26:3e:2a:c9:18:5e:bd:e4:4a:2b:23:27: f9:4d:6b:90:31:5e:8a:2e:3b:46:7d:8a:3d:39:9e:2b:54:01: 88:9c:ed:fc -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUVqd7ZeNqCz2X7dGVOlvZW17nW44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQxM0JGODRCOEQ5MUE4QTFBQzgwODYyMjdENTlGMURD MUVBM0YxMDAeFw0yNjA1MDMwMjU1MjNaFw0yNzA1MDIwMzAwMjNaMDMxMTAvBgNV BAMTKENEMDczNjk0REJGRDE3RkE4QzQ2MTlDQjU2ODU0M0EwRUJEOTJFRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC12bjKpIsMsstM8rKtRvYmiFJb kDm+fUrhcXaYdRBzKwDp5INPH7OpFTDexy7uzuHRd+zTiNLbO+yPWD9axP3M9psk AgZTPIV7X7lPsITBs/9N62WghQv5oBbDbBs83jUvuI8JM7zf7ygnjjiSIxsq5x/k u6ahL23Wr/31v8nA//WxFxZAOB8X/a0w6UWfbfG30MnQ6sGuWG1yU9ayfEiUiNeP pafSZEe7JhyOhU3uCYE/ycizA+Si7FD95Ui0f+RFzmnuaK5AzJityO4MBloH7Vzm 3+JSOuYyEqOmVSbjjINTAkg7ZzFspElF0SSLBJsorBIuOZTEVz2cRYs9iDZjAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUzQc2lNv9F/qMRhnLVoVDoOvZLtQwHwYDVR0j BBgwFoAUXRO/hLjZGooayAhiJ9WfHcHqPxAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjFhNzdhZGQtYTQ5YS00YzhmLWE3MzUtZWY5NmMzM2FiMjlmLzAvNUQxM0JGODRC OEQ5MUE4QTFBQzgwODYyMjdENTlGMURDMUVBM0YxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDEzQkY4NEI4RDkxQThBMUFDODA4NjIyN0Q1OUYxREMxRUEz RjEwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2IxYTc3YWRkLWE0OWEtNGM4Zi1h NzM1LWVmOTZjMzNhYjI5Zi8wLzMyMzAzMDMxM2E2NDY2MzIzYTM1NjEzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM1MzQzNDM0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8loAMA0GCSqGSIb3DQEBCwUAA4IBAQDBq5AKjLGhhAovm+3ajvzg/ZBTUvRmEjUq bMzMcdNfXK0svKjFvz5+iTJrrIRvQkc2J17UTrlS59DdJZ17wWOxp2Fc9l2BBSJl Cy73/MJGHD4C0m25LRf4udgwFGCHEYe0iB6q5RuRA2x1Y4vn3A7GzmqlyMifxoLM 7aLtQHekl7Hb86Ut4w/Okn3oLcuu5fnlt4pn7//HEafSPixaFIWWfltcVfh3Pygf C6ITFUTqlx1NknaORdyOJdCCKoxNTLi9RF2w9Qq3M2r3wa2GL+RpEOCuWrYjXbLu WDZv2xomPirJGF695EorIyf5TWuQMV6KLjtGfYo9OZ4rVAGInO38 -----END CERTIFICATE-----Generated at Wed May 13 07:35:45 2026 by rpki-client