$ rpki-client -vvf rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/323030313a6466313a653034303a3a2f34382d3438203d3e20313530323435.roa File: 323030313a6466313a653034303a3a2f34382d3438203d3e20313530323435.roa (raw, json) Hash identifier: OPLg91e3QDUz0oxlHDtfye2YYgsL8tJKKqHtqB32VO0= Subject key identifier: 2B:F9:7F:5A:DB:0D:A0:17:AE:34:20:20:CB:66:1E:3B:F3:C1:F7:BB Certificate issuer: /CN=9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C Certificate serial: 21AE68679A62B7907CFD9BE31263FC5E1AF8CF4B Authority key identifier: 9D:FC:7A:51:49:D3:FC:C0:AC:D9:BB:ED:55:C4:CE:8E:A8:2A:03:8C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/323030313a6466313a653034303a3a2f34382d3438203d3e20313530323435.roa Signing time: Sun 03 May 2026 03:06:03 +0000 ROA not before: Sun 03 May 2026 03:01:03 +0000 ROA not after: Sun 02 May 2027 03:06:03 +0000 asID: 150245 IP address blocks: 2001:df1:e040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:39:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ae:68:67:9a:62:b7:90:7c:fd:9b:e3:12:63:fc:5e:1a:f8:cf:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C Validity Not Before: May 3 03:01:03 2026 GMT Not After : May 2 03:06:03 2027 GMT Subject: CN=2BF97F5ADB0DA017AE342020CB661E3BF3C1F7BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ff:93:8f:4c:18:85:02:13:e5:3c:99:20:d8: e0:ea:c5:63:a7:ec:97:77:ec:81:6a:47:af:7d:13: 9e:71:95:b6:d3:91:e0:66:ca:d3:f8:91:b1:c1:f7: df:f1:9d:f3:62:91:6e:0f:76:38:59:4b:2d:13:c3: 42:af:13:78:05:1b:c1:c8:07:9c:d4:ce:f0:2b:82: 2a:ec:3c:a5:15:b9:b0:bc:78:2f:80:38:64:57:fd: 54:dd:c9:8f:40:d6:57:91:b3:d4:64:27:b1:8f:78: 7f:19:dc:91:06:73:82:26:4d:27:23:11:2a:70:24: df:7b:62:95:6f:0c:79:5e:f6:82:36:b8:7a:52:bc: 26:28:e1:63:01:c7:43:be:0a:8d:30:c6:92:d6:18: 0c:da:b5:5d:b7:ca:c2:94:14:33:b6:d0:49:98:37: 68:8d:06:84:ae:b6:73:89:bd:64:32:28:0f:b6:56: c0:53:2e:66:37:f4:06:83:95:0b:bf:a8:d5:7b:48: a1:01:2f:62:95:be:2e:2c:21:3a:df:86:51:28:a6: d7:a7:28:f5:92:80:b5:65:b3:75:01:77:a1:44:df: 59:f5:c9:96:83:ac:1a:2f:9e:c0:f7:a4:9f:38:58: 49:3b:9e:8b:07:ba:fc:1a:77:dd:b9:e3:dc:e7:a1: 1b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F9:7F:5A:DB:0D:A0:17:AE:34:20:20:CB:66:1E:3B:F3:C1:F7:BB X509v3 Authority Key Identifier: keyid:9D:FC:7A:51:49:D3:FC:C0:AC:D9:BB:ED:55:C4:CE:8E:A8:2A:03:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/323030313a6466313a653034303a3a2f34382d3438203d3e20313530323435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:e040::/48 Signature Algorithm: sha256WithRSAEncryption 87:89:0b:a4:06:8f:bc:dc:d0:83:68:40:e0:1f:4e:82:b1:4f: 43:45:17:a3:57:ca:6a:2b:23:b1:23:12:5e:11:07:8a:56:94: c3:10:df:45:c9:14:ac:07:e1:92:b7:64:cd:71:fd:2c:d3:5d: ba:16:89:5b:d7:de:8a:4b:95:9f:aa:be:a4:6a:69:97:d7:27: 2f:db:e1:cc:f9:77:39:39:a7:8f:10:f9:ba:ef:2a:2c:9c:28: 08:b5:fd:92:6e:c5:e3:7e:57:2a:d4:bd:5d:e2:d5:b6:9a:2e: 6e:54:d8:8b:02:f8:e3:5e:b4:b8:42:2b:bf:8b:67:7c:50:cc: 29:50:09:ec:20:7d:eb:4e:08:04:cc:94:50:b7:1d:79:e3:7f: 74:7a:2d:69:03:46:23:e6:5d:50:5a:3f:03:79:74:e4:78:be: 68:78:93:6d:3f:ef:fa:8a:84:85:48:ec:cc:8f:c2:0d:d7:28: ae:f4:5e:a9:77:1d:8e:86:11:b4:9e:95:c6:5f:0e:f9:fc:7f: bf:c5:92:c9:71:62:43:b4:66:aa:74:1e:d0:53:43:9a:65:2c: b8:cc:57:d8:e1:de:8c:f3:da:5e:d8:18:3b:dc:41:5a:3b:6e: b4:1c:18:71:96:e0:0a:fd:ca:90:bc:fa:14:ed:52:2a:f8:f2: df:f1:7d:a0 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUIa5oZ5pit5B8/ZvjEmP8Xhr4z0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURGQzdBNTE0OUQzRkNDMEFDRDlCQkVENTVDNENFOEVB ODJBMDM4QzAeFw0yNjA1MDMwMzAxMDNaFw0yNzA1MDIwMzA2MDNaMDMxMTAvBgNV BAMTKDJCRjk3RjVBREIwREEwMTdBRTM0MjAyMENCNjYxRTNCRjNDMUY3QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr/5OPTBiFAhPlPJkg2ODqxWOn 7Jd37IFqR699E55xlbbTkeBmytP4kbHB99/xnfNikW4PdjhZSy0Tw0KvE3gFG8HI B5zUzvArgirsPKUVubC8eC+AOGRX/VTdyY9A1leRs9RkJ7GPeH8Z3JEGc4ImTScj ESpwJN97YpVvDHle9oI2uHpSvCYo4WMBx0O+Co0wxpLWGAzatV23ysKUFDO20EmY N2iNBoSutnOJvWQyKA+2VsBTLmY39AaDlQu/qNV7SKEBL2KVvi4sITrfhlEopten KPWSgLVls3UBd6FE31n1yZaDrBovnsD3pJ84WEk7nosHuvwad92549znoRsfAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUK/l/WtsNoBeuNCAgy2YeO/PB97swHwYDVR0j BBgwFoAUnfx6UUnT/MCs2bvtVcTOjqgqA4wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzg0NmY0MjItYzMwMi00NDYyLWI1ODQtNzAwZTkzNDZjYTA5LzAvOURGQzdBNTE0 OUQzRkNDMEFDRDlCQkVENTVDNENFOEVBODJBMDM4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REZDN0E1MTQ5RDNGQ0MwQUNEOUJCRUQ1NUM0Q0U4RUE4MkEw MzhDLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M4NDZmNDIyLWMzMDItNDQ2Mi1i NTg0LTcwMGU5MzQ2Y2EwOS8wLzMyMzAzMDMxM2E2NDY2MzEzYTY1MzAzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMwMzIzNDM1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8eBAMA0GCSqGSIb3DQEBCwUAA4IBAQCHiQukBo+83NCDaEDgH06CsU9DRRejV8pq KyOxIxJeEQeKVpTDEN9FyRSsB+GSt2TNcf0s0126Folb196KS5Wfqr6kammX1ycv 2+HM+Xc5OaePEPm67yosnCgItf2SbsXjflcq1L1d4tW2mi5uVNiLAvjjXrS4Qiu/ i2d8UMwpUAnsIH3rTggEzJRQtx154390ei1pA0Yj5l1QWj8DeXTkeL5oeJNtP+/6 ioSFSOzMj8IN1yiu9F6pdx2OhhG0npXGXw75/H+/xZLJcWJDtGaqdB7QU0OaZSy4 zFfY4d6M89pe2Bg73EFaO260HBhxluAK/cqQvPoU7VIq+PLf8X2g -----END CERTIFICATE-----Generated at Wed May 13 14:24:56 2026 by rpki-client