$ rpki-client -vvf rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa File: 323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa (raw, json) Hash identifier: I+Fd63f55V3ik8xx1b7rLHKd/go+/DygZiRv3uP0tjM= Subject key identifier: 2F:AD:38:81:0B:BF:8C:78:76:90:6C:CB:AF:31:32:6D:4F:E4:3B:C1 Certificate issuer: /CN=72B692DB78B9A0070ADC5D2760764B22DC477644 Certificate serial: 23CE07EF456B1F33EF90E6F6C77DFF7AD73A401E Authority key identifier: 72:B6:92:DB:78:B9:A0:07:0A:DC:5D:27:60:76:4B:22:DC:47:76:44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B692DB78B9A0070ADC5D2760764B22DC477644.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa Signing time: Sun 03 May 2026 03:07:37 +0000 ROA not before: Sun 03 May 2026 03:02:37 +0000 ROA not after: Sun 02 May 2027 03:07:37 +0000 asID: 152841 IP address blocks: 2001:df4:cc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.crl rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B692DB78B9A0070ADC5D2760764B22DC477644.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 12:19:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ce:07:ef:45:6b:1f:33:ef:90:e6:f6:c7:7d:ff:7a:d7:3a:40:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72B692DB78B9A0070ADC5D2760764B22DC477644 Validity Not Before: May 3 03:02:37 2026 GMT Not After : May 2 03:07:37 2027 GMT Subject: CN=2FAD38810BBF8C7876906CCBAF31326D4FE43BC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:af:6c:fd:93:0a:95:ab:d3:0f:bf:cd:fa:b4: 7a:01:17:63:dd:f7:45:a5:d2:7a:3a:a6:26:0d:87: fc:ee:b0:82:d1:45:e1:c0:94:bb:7b:66:ad:a2:81: 91:ab:bd:1a:8b:f5:22:c4:23:63:3f:ed:7e:3d:b1: fe:21:76:82:8e:fe:4b:8e:e0:2a:d3:c4:4c:36:fa: 65:fc:97:25:63:c6:78:f9:48:b3:a6:e6:0e:6e:6d: 60:de:8f:b9:35:47:3c:bb:24:ad:f0:65:7d:0a:88: 43:82:31:d0:fe:70:62:3b:87:04:74:30:06:d7:85: 52:33:e8:e2:97:93:15:97:ab:b3:91:68:b4:86:e5: 59:1a:04:0b:93:0f:5e:72:58:27:bf:07:88:d2:c5: 93:e0:f8:7b:b7:58:05:51:84:89:ee:b3:d2:88:fa: 59:c0:fc:5b:be:53:49:9a:ac:55:fd:1d:de:fd:29: e9:9c:78:08:9a:f7:64:90:dd:62:45:3b:78:c5:70: 40:1f:0b:e4:a4:bb:fe:b6:52:74:0d:0c:95:bf:81: 35:52:67:82:f0:c6:e2:9a:a4:7a:99:c2:37:4a:c6: c2:86:52:4a:45:e8:8e:cb:64:a6:14:15:35:32:15: 69:76:88:15:2b:ca:52:81:d8:11:c2:05:b9:10:40: 1e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:AD:38:81:0B:BF:8C:78:76:90:6C:CB:AF:31:32:6D:4F:E4:3B:C1 X509v3 Authority Key Identifier: keyid:72:B6:92:DB:78:B9:A0:07:0A:DC:5D:27:60:76:4B:22:DC:47:76:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B692DB78B9A0070ADC5D2760764B22DC477644.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:cc0::/48 Signature Algorithm: sha256WithRSAEncryption aa:f1:5b:58:56:77:fc:65:23:0c:d8:4b:89:9b:f4:89:bd:16: 4a:5f:c1:b8:92:42:6b:65:6f:d7:90:88:df:90:b6:0a:8e:3b: 92:cf:ea:07:0a:b4:22:26:97:6d:e8:79:81:8a:0c:7c:93:18: 0c:8d:01:44:2a:17:7a:9b:91:a6:57:3e:d0:63:60:08:72:68: 4a:e2:0b:83:21:ce:13:c3:58:b2:fc:ef:11:c1:65:1b:76:17: f5:40:bc:85:3e:47:58:c7:7b:f5:6e:10:11:d1:29:5b:30:a8: a3:93:e3:6a:4a:10:e2:ce:70:b7:c9:8d:92:32:a8:14:26:70: 7f:54:fc:07:c0:d3:86:b6:51:9c:5c:45:5e:ac:f6:87:2b:33: cc:85:0c:9a:81:1f:c9:6e:dd:c5:02:13:e4:a8:ea:2d:a2:bc: b3:83:48:38:73:44:fa:42:6f:f5:c7:6a:89:af:17:8f:ac:89: d7:8c:d7:81:3e:4b:dc:08:61:1a:04:ad:0e:56:91:06:45:1c: 2d:30:87:e8:63:c8:f3:e9:91:8a:f2:59:e6:4f:e3:cc:d1:fc: 0a:8d:3b:66:a3:a0:e3:83:1c:a2:c0:97:4b:3b:27:bd:54:f8: 37:4c:69:4c:73:4b:1f:2a:40:31:a1:97:e5:bb:8e:7c:3c:ab: e3:90:31:67 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUI84H70VrHzPvkOb2x33/etc6QB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJCNjkyREI3OEI5QTAwNzBBREM1RDI3NjA3NjRCMjJE QzQ3NzY0NDAeFw0yNjA1MDMwMzAyMzdaFw0yNzA1MDIwMzA3MzdaMDMxMTAvBgNV BAMTKDJGQUQzODgxMEJCRjhDNzg3NjkwNkNDQkFGMzEzMjZENEZFNDNCQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcr2z9kwqVq9MPv836tHoBF2Pd 90Wl0no6piYNh/zusILRReHAlLt7Zq2igZGrvRqL9SLEI2M/7X49sf4hdoKO/kuO 4CrTxEw2+mX8lyVjxnj5SLOm5g5ubWDej7k1Rzy7JK3wZX0KiEOCMdD+cGI7hwR0 MAbXhVIz6OKXkxWXq7ORaLSG5VkaBAuTD15yWCe/B4jSxZPg+Hu3WAVRhInus9KI +lnA/Fu+U0marFX9Hd79KemceAia92SQ3WJFO3jFcEAfC+Sku/62UnQNDJW/gTVS Z4LwxuKapHqZwjdKxsKGUkpF6I7LZKYUFTUyFWl2iBUrylKB2BHCBbkQQB4TAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUL604gQu/jHh2kGzLrzEybU/kO8EwHwYDVR0j BBgwFoAUcraS23i5oAcK3F0nYHZLItxHdkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2U3ZDczOGUtMmNjNy00YmQyLWJiMjgtOTE0MmUxYmFhMGJhLzEvNzJCNjkyREI3 OEI5QTAwNzBBREM1RDI3NjA3NjRCMjJEQzQ3NzY0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MkI2OTJEQjc4QjlBMDA3MEFEQzVEMjc2MDc2NEIyMkRDNDc3 NjQ0LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2NlN2Q3MzhlLTJjYzctNGJkMi1i YjI4LTkxNDJlMWJhYTBiYS8xLzMyMzAzMDMxM2E2NDY2MzQzYTYzNjMzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzUzMjM4MzQzMS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDfQM wDANBgkqhkiG9w0BAQsFAAOCAQEAqvFbWFZ3/GUjDNhLiZv0ib0WSl/BuJJCa2Vv 15CI35C2Co47ks/qBwq0IiaXbeh5gYoMfJMYDI0BRCoXepuRplc+0GNgCHJoSuIL gyHOE8NYsvzvEcFlG3YX9UC8hT5HWMd79W4QEdEpWzCoo5PjakoQ4s5wt8mNkjKo FCZwf1T8B8DThrZRnFxFXqz2hyszzIUMmoEfyW7dxQIT5KjqLaK8s4NIOHNE+kJv 9cdqia8Xj6yJ14zXgT5L3AhhGgStDlaRBkUcLTCH6GPI8+mRivJZ5k/jzNH8Co07 ZqOg44McosCXSzsnvVT4N0xpTHNLHypAMaGX5buOfDyr45AxZw== -----END CERTIFICATE-----Generated at Wed May 13 04:03:48 2026 by rpki-client