$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/323030313a6466303a61383a3a2f34382d3438203d3e203436303532.roa File: 323030313a6466303a61383a3a2f34382d3438203d3e203436303532.roa (raw, json) Hash identifier: nM1lR1t5YbRxvlzSB15Qj3P9xptJWT24EGOpflzojVc= Subject key identifier: 41:1D:58:63:3B:A2:6A:34:88:F6:D2:C9:87:C4:E8:0F:CA:CF:33:E8 Certificate issuer: /CN=59406D6B894D2596F895003DEE4D8D96CC43B39F Certificate serial: 289EC976923881359D4273896A72EC9DCC08F71D Authority key identifier: 59:40:6D:6B:89:4D:25:96:F8:95:00:3D:EE:4D:8D:96:CC:43:B3:9F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59406D6B894D2596F895003DEE4D8D96CC43B39F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/323030313a6466303a61383a3a2f34382d3438203d3e203436303532.roa Signing time: Sun 03 May 2026 03:02:29 +0000 ROA not before: Sun 03 May 2026 02:57:29 +0000 ROA not after: Sun 02 May 2027 03:02:29 +0000 asID: 46052 IP address blocks: 2001:df0:a8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.crl rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59406D6B894D2596F895003DEE4D8D96CC43B39F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:9e:c9:76:92:38:81:35:9d:42:73:89:6a:72:ec:9d:cc:08:f7:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59406D6B894D2596F895003DEE4D8D96CC43B39F Validity Not Before: May 3 02:57:29 2026 GMT Not After : May 2 03:02:29 2027 GMT Subject: CN=411D58633BA26A3488F6D2C987C4E80FCACF33E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:aa:89:d2:51:81:1c:01:af:d2:92:aa:6d:b4: 48:1a:f1:33:d8:63:a8:b8:cc:ca:68:3d:45:44:10: 9d:72:f3:2e:7e:03:6a:37:5a:ed:28:b8:11:9b:63: 0d:3d:89:42:b1:d1:ed:2f:ab:03:c9:80:d8:f8:61: 26:c8:85:94:a8:bb:e5:a6:1f:33:30:fa:d7:11:5e: 14:4d:af:ad:63:59:80:12:89:ce:7e:09:d4:d9:cb: 82:69:0f:f8:71:71:32:99:f0:2d:d7:6d:d2:6e:e0: 41:c6:68:e0:0a:16:02:dd:57:f9:be:6a:4e:2a:95: 09:b1:d5:ca:3e:58:63:fd:29:09:f7:d3:c6:da:a8: 14:0c:39:09:ba:63:a8:0a:d8:40:48:52:ce:ed:65: e8:7d:a1:42:c6:84:d1:64:e5:e4:15:e2:b3:05:78: c7:6d:b2:3c:c1:89:ed:f2:30:3e:2f:bc:9a:7b:8a: c5:3b:88:24:d3:4e:30:3d:dc:38:09:57:f8:1a:72: 1a:b5:2f:f5:16:c8:45:3a:79:c5:02:93:de:ce:f3: 50:e2:ff:0b:31:60:11:48:51:5f:76:4c:5b:0f:a3: c9:a6:43:85:8f:c1:30:10:2e:52:b3:c0:31:f0:78: 14:fe:84:45:a7:30:8a:18:cb:38:50:bd:27:d6:a0: 61:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:1D:58:63:3B:A2:6A:34:88:F6:D2:C9:87:C4:E8:0F:CA:CF:33:E8 X509v3 Authority Key Identifier: keyid:59:40:6D:6B:89:4D:25:96:F8:95:00:3D:EE:4D:8D:96:CC:43:B3:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59406D6B894D2596F895003DEE4D8D96CC43B39F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/323030313a6466303a61383a3a2f34382d3438203d3e203436303532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:a8::/48 Signature Algorithm: sha256WithRSAEncryption a2:8d:4b:5b:5c:af:3a:55:eb:c7:c1:78:ed:ce:91:90:a3:2e: de:38:cf:4c:64:27:9b:df:ac:da:fe:57:f3:f3:58:c8:92:0e: 00:43:cf:d6:27:4e:07:85:11:a0:bf:ae:45:6c:20:f7:f0:df: 3e:38:e9:44:12:ae:f0:ab:79:e4:a8:5a:53:b9:f7:92:c8:c4: 24:d0:82:87:89:28:98:8f:91:04:bd:3f:91:92:01:12:d1:44: ad:b5:b9:86:4e:f6:ff:77:cb:85:16:fd:91:bd:0b:5f:a4:03: ae:b5:e5:1a:2f:0b:17:c5:8f:6d:75:8d:b2:7f:53:5b:8a:ba: 3f:08:ad:0b:fa:81:c6:52:fe:78:a1:02:72:65:d0:b0:31:00: 8f:6c:1c:b9:c0:bf:c7:3f:39:1c:47:b8:4a:8d:0c:bd:e2:47: b0:7c:bb:ea:86:49:1e:3f:e5:d4:ef:9b:6f:b8:e4:0f:2b:47: c2:e9:84:5e:e0:cc:ce:d3:72:45:f4:df:47:2f:1f:28:f0:f1: f2:06:dd:fd:59:3c:30:d8:a4:73:da:36:83:15:83:22:5a:65: 56:75:8d:b5:6b:39:8e:a1:76:c1:d9:7c:16:28:40:7b:dc:39: 83:29:29:48:72:3d:09:3c:b6:5e:ff:a3:b6:ac:5a:ff:cf:3d: f5:20:5e:4a -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUKJ7JdpI4gTWdQnOJanLsncwI9x0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTk0MDZENkI4OTREMjU5NkY4OTUwMDNERUU0RDhEOTZD QzQzQjM5RjAeFw0yNjA1MDMwMjU3MjlaFw0yNzA1MDIwMzAyMjlaMDMxMTAvBgNV BAMTKDQxMUQ1ODYzM0JBMjZBMzQ4OEY2RDJDOTg3QzRFODBGQ0FDRjMzRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtqonSUYEcAa/SkqpttEga8TPY Y6i4zMpoPUVEEJ1y8y5+A2o3Wu0ouBGbYw09iUKx0e0vqwPJgNj4YSbIhZSou+Wm HzMw+tcRXhRNr61jWYASic5+CdTZy4JpD/hxcTKZ8C3XbdJu4EHGaOAKFgLdV/m+ ak4qlQmx1co+WGP9KQn308baqBQMOQm6Y6gK2EBIUs7tZeh9oULGhNFk5eQV4rMF eMdtsjzBie3yMD4vvJp7isU7iCTTTjA93DgJV/gachq1L/UWyEU6ecUCk97O81Di /wsxYBFIUV92TFsPo8mmQ4WPwTAQLlKzwDHweBT+hEWnMIoYyzhQvSfWoGGXAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUQR1YYzuiajSI9tLJh8ToD8rPM+gwHwYDVR0j BBgwFoAUWUBta4lNJZb4lQA97k2NlsxDs58wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQxZWU1ZTItMzM4Yy00ZDIwLTgwN2UtZTUwYjc1NTgzZGI4LzAvNTk0MDZENkI4 OTREMjU5NkY4OTUwMDNERUU0RDhEOTZDQzQzQjM5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OTQwNkQ2Qjg5NEQyNTk2Rjg5NTAwM0RFRTREOEQ5NkNDNDNC MzlGLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2JkMWVlNWUyLTMzOGMtNGQyMC04 MDdlLWU1MGI3NTU4M2RiOC8wLzMyMzAzMDMxM2E2NDY2MzAzYTYxMzgzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzNDM2MzAzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN8ACoMA0G CSqGSIb3DQEBCwUAA4IBAQCijUtbXK86VevHwXjtzpGQoy7eOM9MZCeb36za/lfz 81jIkg4AQ8/WJ04HhRGgv65FbCD38N8+OOlEEq7wq3nkqFpTufeSyMQk0IKHiSiY j5EEvT+RkgES0USttbmGTvb/d8uFFv2RvQtfpAOuteUaLwsXxY9tdY2yf1Nbiro/ CK0L+oHGUv54oQJyZdCwMQCPbBy5wL/HPzkcR7hKjQy94kewfLvqhkkeP+XU75tv uOQPK0fC6YRe4MzO03JF9N9HLx8o8PHyBt39WTww2KRz2jaDFYMiWmVWdY21azmO oXbB2XwWKEB73DmDKSlIcj0JPLZe/6O2rFr/zz31IF5K -----END CERTIFICATE-----Generated at Wed May 13 02:12:28 2026 by rpki-client