$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/323030313a6466333a313834303a3a2f34382d3438203d3e20313531343034.roa File: 323030313a6466333a313834303a3a2f34382d3438203d3e20313531343034.roa (raw, json) Hash identifier: Vx6ld1JtPTgoHi+TIJ7XQ/J/UliTwzZZOU68XOwrY5w= Subject key identifier: C1:22:45:85:65:80:8B:98:21:E1:DC:D7:73:A2:60:C3:1A:2B:02:08 Certificate issuer: /CN=67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00 Certificate serial: 519244348512F24D307DA90501D4A00A6E329C32 Authority key identifier: 67:AD:5E:A3:AE:9E:CB:1B:B4:4A:A1:00:8D:70:40:BE:02:61:3E:00 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/323030313a6466333a313834303a3a2f34382d3438203d3e20313531343034.roa Signing time: Sun 03 May 2026 03:10:15 +0000 ROA not before: Sun 03 May 2026 03:05:15 +0000 ROA not after: Sun 02 May 2027 03:10:15 +0000 asID: 151404 IP address blocks: 2001:df3:1840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:92:44:34:85:12:f2:4d:30:7d:a9:05:01:d4:a0:0a:6e:32:9c:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00 Validity Not Before: May 3 03:05:15 2026 GMT Not After : May 2 03:10:15 2027 GMT Subject: CN=C122458565808B9821E1DCD773A260C31A2B0208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f2:60:d3:30:bd:4f:f0:d4:28:bb:f8:53:f9: ec:f0:74:d0:ef:b5:b3:fe:5a:4a:e0:b0:77:92:b5: 5e:89:2c:d6:c6:25:45:f4:2b:f4:63:13:ef:96:4f: fc:c7:4b:c4:90:16:ba:7f:df:29:72:b3:f6:35:d5: 04:65:77:e6:3c:66:31:b4:a0:bd:9a:b1:80:2e:5d: 9d:c5:d6:4c:64:52:c4:2e:19:71:da:1a:7f:b6:af: 03:1d:ed:ac:29:38:63:74:73:cb:e7:7d:07:02:14: 4f:ea:12:fe:b6:10:dc:08:4d:d4:b8:dc:ef:bd:b0: 4a:a5:9c:f9:50:7b:ee:98:a1:24:0d:78:76:d4:ff: 73:5c:c6:50:5a:b0:e2:c4:68:36:9f:05:d9:67:4f: ad:01:7c:4f:c7:19:53:8b:9d:a5:30:87:ca:10:d9: 76:64:ad:5f:60:2f:cb:50:c0:0d:02:04:26:ff:b6: 1b:34:91:60:81:01:a9:33:88:88:90:87:10:2f:93: a1:29:5b:07:eb:da:b9:dc:8e:00:d3:fe:c5:88:7a: 3d:f1:ee:60:51:98:83:eb:d7:67:b1:a2:d3:4d:22: 43:a8:38:d1:e0:26:c6:14:24:97:32:eb:8f:c0:d9: a5:66:72:08:66:e6:9a:6b:e8:15:9e:0a:5c:0c:aa: 13:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:22:45:85:65:80:8B:98:21:E1:DC:D7:73:A2:60:C3:1A:2B:02:08 X509v3 Authority Key Identifier: keyid:67:AD:5E:A3:AE:9E:CB:1B:B4:4A:A1:00:8D:70:40:BE:02:61:3E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/323030313a6466333a313834303a3a2f34382d3438203d3e20313531343034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:1840::/48 Signature Algorithm: sha256WithRSAEncryption 9e:5d:8c:06:25:09:e1:11:be:cb:67:df:4c:f7:2f:ad:62:10: 11:37:54:88:0e:4f:48:04:e8:3e:1f:03:6d:6c:1d:52:18:a9: ad:e9:55:98:63:ad:04:f5:4d:de:da:03:be:7f:7a:b1:27:1e: f7:fc:9e:0c:c8:17:db:6e:83:ae:14:0a:5c:e5:26:cf:53:40: 7a:8c:80:35:a5:a3:56:56:27:0a:67:38:7e:31:25:75:bc:67: b8:b4:43:66:62:fb:85:73:5b:e9:dd:e1:b7:24:ab:79:98:3f: 63:3d:4c:af:53:4a:27:ca:e1:69:71:1f:ac:0e:da:f3:38:0d: 0b:f6:3c:27:29:8a:0f:f0:11:02:2d:b9:3e:8c:0a:e2:4d:bb: cd:48:f6:81:ac:09:d6:b7:82:15:4c:64:75:a3:6f:14:f4:a9: b4:1c:5d:30:21:7c:97:56:a6:e8:3f:3b:6f:4d:41:3d:18:aa: 2f:ce:8f:c0:66:38:27:a7:db:94:38:7f:38:54:bd:db:29:75: 1e:b9:fa:8d:a3:4b:41:0c:2f:68:1f:fe:c7:ba:a3:e8:ca:b4: 1c:1d:91:b1:99:8b:03:65:af:6b:cc:ef:5d:7d:b6:82:1a:53: e6:63:30:fa:5a:fe:a1:a0:90:2c:2f:99:7b:6d:9d:1f:6d:4e: c2:f1:96:22 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUUZJENIUS8k0wfakFAdSgCm4ynDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdBRDVFQTNBRTlFQ0IxQkI0NEFBMTAwOEQ3MDQwQkUw MjYxM0UwMDAeFw0yNjA1MDMwMzA1MTVaFw0yNzA1MDIwMzEwMTVaMDMxMTAvBgNV BAMTKEMxMjI0NTg1NjU4MDhCOTgyMUUxRENENzczQTI2MEMzMUEyQjAyMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT8mDTML1P8NQou/hT+ezwdNDv tbP+WkrgsHeStV6JLNbGJUX0K/RjE++WT/zHS8SQFrp/3ylys/Y11QRld+Y8ZjG0 oL2asYAuXZ3F1kxkUsQuGXHaGn+2rwMd7awpOGN0c8vnfQcCFE/qEv62ENwITdS4 3O+9sEqlnPlQe+6YoSQNeHbU/3NcxlBasOLEaDafBdlnT60BfE/HGVOLnaUwh8oQ 2XZkrV9gL8tQwA0CBCb/ths0kWCBAakziIiQhxAvk6EpWwfr2rncjgDT/sWIej3x 7mBRmIPr12exotNNIkOoONHgJsYUJJcy64/A2aVmcghm5ppr6BWeClwMqhNnAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUwSJFhWWAi5gh4dzXc6JgwxorAggwHwYDVR0j BBgwFoAUZ61eo66eyxu0SqEAjXBAvgJhPgAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdkMTVkNTMtYTRiNC00NDM1LWExZGEtNTJkMDIxMmVmMzNkLzAvNjdBRDVFQTNB RTlFQ0IxQkI0NEFBMTAwOEQ3MDQwQkUwMjYxM0UwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82N0FENUVBM0FFOUVDQjFCQjQ0QUExMDA4RDcwNDBCRTAyNjEz RTAwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q3ZDE1ZDUzLWE0YjQtNDQzNS1h MWRhLTUyZDAyMTJlZjMzZC8wLzMyMzAzMDMxM2E2NDY2MzMzYTMxMzgzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMxMzQzMDM0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8xhAMA0GCSqGSIb3DQEBCwUAA4IBAQCeXYwGJQnhEb7LZ99M9y+tYhARN1SIDk9I BOg+HwNtbB1SGKmt6VWYY60E9U3e2gO+f3qxJx73/J4MyBfbboOuFApc5SbPU0B6 jIA1paNWVicKZzh+MSV1vGe4tENmYvuFc1vp3eG3JKt5mD9jPUyvU0onyuFpcR+s DtrzOA0L9jwnKYoP8BECLbk+jAriTbvNSPaBrAnWt4IVTGR1o28U9Km0HF0wIXyX VqboPztvTUE9GKovzo/AZjgnp9uUOH84VL3bKXUeufqNo0tBDC9oH/7HuqPoyrQc HZGxmYsDZa9rzO9dfbaCGlPmYzD6Wv6hoJAsL5l7bZ0fbU7C8ZYi -----END CERTIFICATE-----Generated at Wed May 13 11:35:52 2026 by rpki-client