$ rpki-client -vvf rpki-rsync.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/323030313a6466333a346234303a3a2f34382d3438203d3e20313531393932.roa File: 323030313a6466333a346234303a3a2f34382d3438203d3e20313531393932.roa (raw, json) Hash identifier: /PcX6luK6vmk98qhiFYynRPuJ2KBptynddU1KiAJS6w= Subject key identifier: A2:70:1F:2B:40:B0:B9:C2:6E:02:9D:6F:AB:F9:AD:20:09:F8:33:5C Certificate issuer: /CN=51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1 Certificate serial: 0B6A6175E582A3F3E136C3110974D18E76744979 Authority key identifier: 51:A4:A4:22:44:B2:4B:46:5C:B9:F0:0D:B1:D2:F6:DE:8B:0D:0E:D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/323030313a6466333a346234303a3a2f34382d3438203d3e20313531393932.roa Signing time: Sun 03 May 2026 03:01:12 +0000 ROA not before: Sun 03 May 2026 02:56:12 +0000 ROA not after: Sun 02 May 2027 03:01:12 +0000 asID: 151992 IP address blocks: 2001:df3:4b40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.crl rsync://rpki-rsync.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:16:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:6a:61:75:e5:82:a3:f3:e1:36:c3:11:09:74:d1:8e:76:74:49:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1 Validity Not Before: May 3 02:56:12 2026 GMT Not After : May 2 03:01:12 2027 GMT Subject: CN=A2701F2B40B0B9C26E029D6FABF9AD2009F8335C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4c:1f:7a:35:c8:4a:bb:76:f3:22:63:83:78: c4:bd:71:1f:d6:4d:87:a7:03:8c:11:6e:c5:5a:df: b6:35:3a:55:eb:2f:42:6c:e0:4e:6b:47:39:4b:46: a6:26:db:14:3b:d5:de:2e:3f:6c:c7:c7:86:4b:41: 3a:09:5d:8f:dc:ab:85:59:34:d1:7a:c5:ba:bd:7c: 6c:f4:cb:99:11:16:be:b4:e2:2c:0c:ba:e0:44:18: dc:52:11:5c:b0:2e:c1:9c:ee:c4:b0:c4:03:ac:a8: c5:4b:5b:99:f1:da:3c:df:50:2e:67:6b:6b:d4:4e: 7e:2b:6c:0c:0a:ac:d3:e2:ef:ad:1e:a6:47:8c:4d: 8f:2f:e6:c5:2e:c1:b0:3c:05:f6:07:3a:4e:58:4b: 5a:fa:b0:7c:5a:40:66:50:95:48:00:c7:df:91:89: 52:98:f2:d3:e7:1a:0c:f9:38:68:ab:1f:e6:1a:3f: c2:c5:84:76:24:6b:2b:82:f6:22:3f:07:90:ca:1f: 7b:4b:c7:49:8a:00:71:a9:54:52:1d:1f:d6:f2:da: 95:67:3e:90:d1:72:b8:b8:22:be:5e:df:db:4b:c2: ec:db:0d:ef:19:73:64:b0:82:02:bf:ab:3c:59:6c: 00:98:72:1d:a6:09:26:99:e2:94:47:44:51:f4:60: 73:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:70:1F:2B:40:B0:B9:C2:6E:02:9D:6F:AB:F9:AD:20:09:F8:33:5C X509v3 Authority Key Identifier: keyid:51:A4:A4:22:44:B2:4B:46:5C:B9:F0:0D:B1:D2:F6:DE:8B:0D:0E:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51A4A42244B24B465CB9F00DB1D2F6DE8B0D0ED1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/323030313a6466333a346234303a3a2f34382d3438203d3e20313531393932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:4b40::/48 Signature Algorithm: sha256WithRSAEncryption 73:45:c4:9a:ba:a4:d5:f3:c0:81:43:5d:80:27:34:58:69:c8: a1:e3:a1:6f:50:a9:48:aa:4d:61:d1:f3:74:96:b8:47:fd:43: a0:0d:a6:c1:75:1d:83:5b:c8:87:38:a4:49:4b:fa:47:b9:3b: 5a:bc:c9:77:9c:5f:fa:d3:1a:c0:6c:5c:47:b0:21:0b:f8:18: b8:59:59:05:10:b1:da:92:39:59:1b:a0:85:a0:e6:d9:38:d1: e8:c6:af:e9:1b:3c:90:38:19:7f:d5:d9:d5:26:ec:06:bd:70: ed:d7:b3:20:93:81:f7:25:d8:a0:bc:cc:35:01:c7:11:af:75: 60:a9:a8:43:52:9e:ad:18:97:86:e1:3a:df:11:6e:f8:9e:0c: 00:7d:e9:e7:86:68:56:13:dd:ea:93:d2:2d:98:9f:4c:b3:a1: d4:58:dc:db:e1:88:26:82:4f:5c:98:a3:1f:f4:3b:c3:69:6a: 6d:68:6b:1f:bc:02:58:bd:e7:3e:08:a9:67:80:a3:19:3f:80: 0e:e7:d0:98:fc:e9:9b:c1:1f:38:63:94:9d:b3:1f:fb:80:dc: 61:a0:f5:b6:4e:b5:d7:14:f1:6d:40:bc:9e:d4:5b:6c:6b:a7: f8:f3:21:d7:99:60:cc:64:78:18:50:fa:67:23:eb:33:f0:bd: d2:55:3e:02 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUC2phdeWCo/PhNsMRCXTRjnZ0SXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTFBNEE0MjI0NEIyNEI0NjVDQjlGMDBEQjFEMkY2REU4 QjBEMEVEMTAeFw0yNjA1MDMwMjU2MTJaFw0yNzA1MDIwMzAxMTJaMDMxMTAvBgNV BAMTKEEyNzAxRjJCNDBCMEI5QzI2RTAyOUQ2RkFCRjlBRDIwMDlGODMzNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtTB96NchKu3bzImODeMS9cR/W TYenA4wRbsVa37Y1OlXrL0Js4E5rRzlLRqYm2xQ71d4uP2zHx4ZLQToJXY/cq4VZ NNF6xbq9fGz0y5kRFr604iwMuuBEGNxSEVywLsGc7sSwxAOsqMVLW5nx2jzfUC5n a2vUTn4rbAwKrNPi760epkeMTY8v5sUuwbA8BfYHOk5YS1r6sHxaQGZQlUgAx9+R iVKY8tPnGgz5OGirH+YaP8LFhHYkayuC9iI/B5DKH3tLx0mKAHGpVFIdH9by2pVn PpDRcri4Ir5e39tLwuzbDe8Zc2SwggK/qzxZbACYch2mCSaZ4pRHRFH0YHMlAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUonAfK0CwucJuAp1vq/mtIAn4M1wwHwYDVR0j BBgwFoAUUaSkIkSyS0ZcufANsdL23osNDtEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjU3ZjFmNDMtY2U3ZS00OTcwLWFhZDAtNzgyYjAxOWJkMDNlLzAvNTFBNEE0MjI0 NEIyNEI0NjVDQjlGMDBEQjFEMkY2REU4QjBEMEVEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MUE0QTQyMjQ0QjI0QjQ2NUNCOUYwMERCMUQyRjZERThCMEQw RUQxLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2I1N2YxZjQzLWNlN2UtNDk3MC1h YWQwLTc4MmIwMTliZDAzZS8wLzMyMzAzMDMxM2E2NDY2MzMzYTM0NjIzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMxMzkzOTMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 80tAMA0GCSqGSIb3DQEBCwUAA4IBAQBzRcSauqTV88CBQ12AJzRYacih46FvUKlI qk1h0fN0lrhH/UOgDabBdR2DW8iHOKRJS/pHuTtavMl3nF/60xrAbFxHsCEL+Bi4 WVkFELHakjlZG6CFoObZONHoxq/pGzyQOBl/1dnVJuwGvXDt17Mgk4H3JdigvMw1 AccRr3VgqahDUp6tGJeG4TrfEW74ngwAfennhmhWE93qk9ItmJ9Ms6HUWNzb4Ygm gk9cmKMf9DvDaWptaGsfvAJYvec+CKlngKMZP4AO59CY/OmbwR84Y5Sdsx/7gNxh oPW2TrXXFPFtQLye1Ftsa6f48yHXmWDMZHgYUPpnI+sz8L3SVT4C -----END CERTIFICATE-----Generated at Wed May 13 12:44:11 2026 by rpki-client