$ rpki-client -vvf rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/323030313a6466333a623938303a3a2f34382d3438203d3e203137353338.roa File: 323030313a6466333a623938303a3a2f34382d3438203d3e203137353338.roa (raw, json) Hash identifier: Bl/k50LueSgJjg8VDKjdeOLA5vAz35PavygXYOL9fXU= Subject key identifier: 6E:79:93:02:04:ED:D4:57:CF:33:2C:F7:D6:0C:68:08:73:EA:D3:D8 Certificate issuer: /CN=DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425 Certificate serial: 5E076A24335FDFE3F87C6A60CDBB148A28AA7E90 Authority key identifier: DF:34:17:50:0C:E0:95:64:B4:A4:CE:AF:ED:E4:A7:6C:DF:A5:A4:25 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/323030313a6466333a623938303a3a2f34382d3438203d3e203137353338.roa Signing time: Sun 03 May 2026 03:00:49 +0000 ROA not before: Sun 03 May 2026 02:55:49 +0000 ROA not after: Sun 02 May 2027 03:00:49 +0000 asID: 17538 IP address blocks: 2001:df3:b980::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.crl rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:10:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:07:6a:24:33:5f:df:e3:f8:7c:6a:60:cd:bb:14:8a:28:aa:7e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425 Validity Not Before: May 3 02:55:49 2026 GMT Not After : May 2 03:00:49 2027 GMT Subject: CN=6E79930204EDD457CF332CF7D60C680873EAD3D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:db:13:ec:bb:b9:c7:78:ee:41:f5:b9:5f:21: 22:9f:c7:e3:fd:93:e0:4a:06:ac:98:db:26:45:34: 60:d2:31:54:11:a9:4a:0f:ce:39:2d:d5:79:04:5b: 8d:a1:82:d9:86:a2:96:2b:16:d5:f9:49:7a:1c:64: bd:ed:3e:05:6c:87:ab:2c:65:c7:56:26:1b:fa:38: 0b:18:a5:82:ce:ea:7e:c6:b6:24:7a:ad:b9:71:0f: f8:00:59:b0:99:c0:12:80:b2:d7:56:c5:67:5f:01: f9:09:20:92:52:5e:8c:9e:f9:1a:df:d5:35:b2:8d: 38:55:5b:a5:ee:ef:0e:15:a4:b5:d0:7d:b4:e9:89: 67:df:a9:9b:78:6a:d3:b1:ea:68:18:63:36:59:60: 3b:aa:ef:6f:bc:32:77:fc:88:e8:ed:de:97:f4:ee: fc:bb:f6:34:f9:77:1c:5e:25:e8:cd:dc:aa:fd:c0: 54:7c:82:32:9c:0b:6c:27:dc:d0:4d:ad:34:38:6c: 1c:61:c1:11:d0:8d:00:84:ec:a4:fd:8f:26:9d:b2: be:b5:f1:82:44:fb:65:d1:90:a5:55:7e:2d:9b:0e: bc:df:fe:d8:24:91:d2:76:7e:e1:fe:88:10:8e:a2: e5:90:6f:67:4c:0b:8a:04:dd:d8:c1:f8:2d:ea:48: df:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:79:93:02:04:ED:D4:57:CF:33:2C:F7:D6:0C:68:08:73:EA:D3:D8 X509v3 Authority Key Identifier: keyid:DF:34:17:50:0C:E0:95:64:B4:A4:CE:AF:ED:E4:A7:6C:DF:A5:A4:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/323030313a6466333a623938303a3a2f34382d3438203d3e203137353338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:b980::/48 Signature Algorithm: sha256WithRSAEncryption 2a:63:d7:67:a9:21:8f:12:ba:27:ef:99:f6:d2:2f:94:6e:9c: c8:6e:d5:d0:e1:5f:a6:be:20:2d:76:a2:36:73:41:5a:f0:14: 82:3c:60:50:51:fa:00:85:98:4f:e8:aa:09:0c:0c:d7:cc:ed: c0:07:e5:e9:76:15:f4:5e:e5:75:98:a5:fd:a4:92:90:66:5a: ac:b7:9c:f6:32:90:65:db:f7:fc:53:c3:5d:ce:69:3f:3d:d5: 90:cb:ab:4d:3e:0f:9f:75:fe:97:10:a1:ff:3b:18:75:34:55: e7:f3:d1:6e:ec:00:28:1b:fd:ee:fa:0d:ae:93:84:a4:fd:21: 76:5a:de:30:9a:e0:08:b5:a4:14:fb:d4:20:f1:f2:53:92:76: 52:25:6e:b3:0b:cf:a9:5f:80:c9:7b:b9:4d:0c:04:87:0e:6d: f9:4a:23:bb:52:9e:8b:ea:97:5d:41:b7:99:bb:5e:6f:9f:5c: d2:0d:33:14:19:1b:ab:08:50:bb:95:07:df:4f:d8:ba:c9:f9: fa:2b:4b:be:27:e3:6c:ea:df:fe:2b:97:9b:e0:86:b7:6c:d7: c2:a3:f2:b3:62:39:ed:ef:52:ac:c3:23:11:fd:2b:46:a7:d1: 40:02:52:59:70:e3:a6:22:20:ea:a4:16:4e:b0:b8:30:79:6b: 39:c5:65:cd -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUXgdqJDNf3+P4fGpgzbsUiiiqfpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNDE3NTAwQ0UwOTU2NEI0QTRDRUFGRURFNEE3NkNE RkE1QTQyNTAeFw0yNjA1MDMwMjU1NDlaFw0yNzA1MDIwMzAwNDlaMDMxMTAvBgNV BAMTKDZFNzk5MzAyMDRFREQ0NTdDRjMzMkNGN0Q2MEM2ODA4NzNFQUQzRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM2xPsu7nHeO5B9blfISKfx+P9 k+BKBqyY2yZFNGDSMVQRqUoPzjkt1XkEW42hgtmGopYrFtX5SXocZL3tPgVsh6ss ZcdWJhv6OAsYpYLO6n7GtiR6rblxD/gAWbCZwBKAstdWxWdfAfkJIJJSXoye+Rrf 1TWyjThVW6Xu7w4VpLXQfbTpiWffqZt4atOx6mgYYzZZYDuq72+8Mnf8iOjt3pf0 7vy79jT5dxxeJejN3Kr9wFR8gjKcC2wn3NBNrTQ4bBxhwRHQjQCE7KT9jyadsr61 8YJE+2XRkKVVfi2bDrzf/tgkkdJ2fuH+iBCOouWQb2dMC4oE3djB+C3qSN8jAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUbnmTAgTt1FfPMyz31gxoCHPq09gwHwYDVR0j BBgwFoAU3zQXUAzglWS0pM6v7eSnbN+lpCUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjM3ODVlNjUtNTFlMi00YjFiLTgyZjktZTc1M2FkNGIyNDBmLzAvREYzNDE3NTAw Q0UwOTU2NEI0QTRDRUFGRURFNEE3NkNERkE1QTQyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjM0MTc1MDBDRTA5NTY0QjRBNENFQUZFREU0QTc2Q0RGQTVB NDI1LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2IzNzg1ZTY1LTUxZTItNGIxYi04 MmY5LWU3NTNhZDRiMjQwZi8wLzMyMzAzMDMxM2E2NDY2MzMzYTYyMzkzODMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNzM1MzMzOC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDfO5 gDANBgkqhkiG9w0BAQsFAAOCAQEAKmPXZ6khjxK6J++Z9tIvlG6cyG7V0OFfpr4g LXaiNnNBWvAUgjxgUFH6AIWYT+iqCQwM18ztwAfl6XYV9F7ldZil/aSSkGZarLec 9jKQZdv3/FPDXc5pPz3VkMurTT4Pn3X+lxCh/zsYdTRV5/PRbuwAKBv97voNrpOE pP0hdlreMJrgCLWkFPvUIPHyU5J2UiVuswvPqV+AyXu5TQwEhw5t+Uoju1Kei+qX XUG3mbteb59c0g0zFBkbqwhQu5UH30/Yusn5+itLvifjbOrf/iuXm+CGt2zXwqPy s2I57e9SrMMjEf0rRqfRQAJSWXDjpiIg6qQWTrC4MHlrOcVlzQ== -----END CERTIFICATE-----Generated at Wed May 13 08:10:23 2026 by rpki-client