$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/323030313a6466333a643163303a3a2f34382d3438203d3e20313532373538.roa File: 323030313a6466333a643163303a3a2f34382d3438203d3e20313532373538.roa (raw, json) Hash identifier: KLJKltDFBgSRycUEiUgW7XKQBHKRYM0bmiK8DEJJdYA= Subject key identifier: 6E:D0:42:73:B7:40:10:12:31:BA:86:41:C0:1B:3F:4E:F3:18:77:4C Certificate issuer: /CN=D2861B66142D51B5DE4E39CDC5E1644159BC7BBC Certificate serial: 7317C74F4C43FA580E96BD927F641C5D98DF74A0 Authority key identifier: D2:86:1B:66:14:2D:51:B5:DE:4E:39:CD:C5:E1:64:41:59:BC:7B:BC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/323030313a6466333a643163303a3a2f34382d3438203d3e20313532373538.roa Signing time: Sun 03 May 2026 03:10:17 +0000 ROA not before: Sun 03 May 2026 03:05:17 +0000 ROA not after: Sun 02 May 2027 03:10:17 +0000 asID: 152758 IP address blocks: 2001:df3:d1c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.crl rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:17:c7:4f:4c:43:fa:58:0e:96:bd:92:7f:64:1c:5d:98:df:74:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2861B66142D51B5DE4E39CDC5E1644159BC7BBC Validity Not Before: May 3 03:05:17 2026 GMT Not After : May 2 03:10:17 2027 GMT Subject: CN=6ED04273B740101231BA8641C01B3F4EF318774C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:75:0f:f6:d1:77:60:23:9e:d7:b1:45:dc:14: a4:1a:02:31:e2:07:d3:27:8d:58:bf:af:b7:54:05: 75:a4:e1:94:84:d7:8a:34:89:0e:3f:0c:c2:76:97: cf:1e:3d:e6:c1:56:90:0e:97:e2:94:41:1e:0e:84: cb:09:7a:39:26:16:a7:68:09:25:4e:58:fa:ea:1f: 11:f0:5d:c8:70:91:cd:04:d9:d9:dc:df:dc:af:0d: 8e:d2:79:2e:1e:e0:76:a2:93:0b:1d:3c:06:8c:36: 71:6e:21:d5:94:b9:72:89:c0:fd:9b:a6:4c:e2:69: e1:1e:28:98:df:4f:1a:ab:b9:91:90:85:4b:86:59: c3:b6:7e:47:0e:56:21:9e:36:a0:9b:05:9b:43:9b: b9:58:01:e4:95:df:2a:d4:4e:a4:aa:d9:11:e7:38: 2f:e7:f8:68:fe:26:a3:eb:14:7c:ef:9b:c7:45:75: 78:25:1b:5d:44:51:ce:d2:2c:81:07:c2:ef:7d:ec: 35:e7:4f:82:bb:74:3f:4b:25:f7:85:f7:57:44:56: b6:25:17:aa:16:74:18:25:8a:1a:5b:0d:03:c8:c5: 46:73:aa:03:24:f1:ba:c3:1e:40:1c:b0:92:cc:f6: 9e:03:91:88:86:5a:8b:27:53:2a:37:78:13:8a:2e: c8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D0:42:73:B7:40:10:12:31:BA:86:41:C0:1B:3F:4E:F3:18:77:4C X509v3 Authority Key Identifier: keyid:D2:86:1B:66:14:2D:51:B5:DE:4E:39:CD:C5:E1:64:41:59:BC:7B:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/323030313a6466333a643163303a3a2f34382d3438203d3e20313532373538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:d1c0::/48 Signature Algorithm: sha256WithRSAEncryption 7b:85:04:2f:91:94:07:3b:da:69:43:64:dc:2a:64:f8:27:ba: 3d:c5:05:8f:86:f1:59:4d:d6:b0:73:12:f3:0f:f0:1a:d0:01: 89:11:68:ec:89:fa:51:d3:ef:98:24:27:c8:fc:c1:b0:80:d7: 45:6d:b9:f4:b4:87:e7:1e:62:9c:2c:c7:79:33:83:e8:2d:0e: 42:f7:a4:fd:45:fc:c4:c7:5a:80:7a:6b:44:63:99:df:b1:ab: 76:28:46:00:b3:7c:f8:bb:f1:fb:68:51:be:d2:af:6a:4c:79: 13:b9:53:6f:6a:bf:10:de:51:94:46:4f:07:53:ee:ad:32:95: 75:2d:44:8c:f9:61:92:26:14:2d:1d:12:72:bc:e5:26:8b:66: 03:d5:4a:53:72:30:c1:03:67:d0:5d:71:81:0b:10:6f:d2:85: 92:82:59:19:68:34:80:11:7d:5d:8c:0e:14:3a:0b:82:14:85: 63:7b:4e:d2:86:e1:38:0e:02:af:c0:67:f5:25:4c:f3:fe:f9: ad:87:57:08:e6:3c:d7:57:0b:b5:cb:d5:56:59:da:42:9c:a0: 5b:52:56:c4:7b:50:02:cb:15:e0:c1:e9:14:03:6d:7f:0d:ae: 25:57:8d:c2:0e:2a:76:79:c6:8f:9a:92:aa:a5:49:ae:8c:5a: 0e:b4:8c:8e -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUcxfHT0xD+lgOlr2Sf2QcXZjfdKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4NjFCNjYxNDJENTFCNURFNEUzOUNEQzVFMTY0NDE1 OUJDN0JCQzAeFw0yNjA1MDMwMzA1MTdaFw0yNzA1MDIwMzEwMTdaMDMxMTAvBgNV BAMTKDZFRDA0MjczQjc0MDEwMTIzMUJBODY0MUMwMUIzRjRFRjMxODc3NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsdQ/20XdgI57XsUXcFKQaAjHi B9MnjVi/r7dUBXWk4ZSE14o0iQ4/DMJ2l88ePebBVpAOl+KUQR4OhMsJejkmFqdo CSVOWPrqHxHwXchwkc0E2dnc39yvDY7SeS4e4HaikwsdPAaMNnFuIdWUuXKJwP2b pkziaeEeKJjfTxqruZGQhUuGWcO2fkcOViGeNqCbBZtDm7lYAeSV3yrUTqSq2RHn OC/n+Gj+JqPrFHzvm8dFdXglG11EUc7SLIEHwu997DXnT4K7dD9LJfeF91dEVrYl F6oWdBglihpbDQPIxUZzqgMk8brDHkAcsJLM9p4DkYiGWosnUyo3eBOKLsjdAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUbtBCc7dAEBIxuoZBwBs/TvMYd0wwHwYDVR0j BBgwFoAU0oYbZhQtUbXeTjnNxeFkQVm8e7wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdkZDI1MTktMzA3OC00N2QzLTllODYtNDhmZDNiZGU3NmM4LzEvRDI4NjFCNjYx NDJENTFCNURFNEUzOUNEQzVFMTY0NDE1OUJDN0JCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjg2MUI2NjE0MkQ1MUI1REU0RTM5Q0RDNUUxNjQ0MTU5QkM3 QkJDLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q3ZGQyNTE5LTMwNzgtNDdkMy05 ZTg2LTQ4ZmQzYmRlNzZjOC8xLzMyMzAzMDMxM2E2NDY2MzMzYTY0MzE2MzMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMyMzczNTM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 89HAMA0GCSqGSIb3DQEBCwUAA4IBAQB7hQQvkZQHO9ppQ2TcKmT4J7o9xQWPhvFZ TdawcxLzD/Aa0AGJEWjsifpR0++YJCfI/MGwgNdFbbn0tIfnHmKcLMd5M4PoLQ5C 96T9RfzEx1qAemtEY5nfsat2KEYAs3z4u/H7aFG+0q9qTHkTuVNvar8Q3lGURk8H U+6tMpV1LUSM+WGSJhQtHRJyvOUmi2YD1UpTcjDBA2fQXXGBCxBv0oWSglkZaDSA EX1djA4UOguCFIVje07ShuE4DgKvwGf1JUzz/vmth1cI5jzXVwu1y9VWWdpCnKBb UlbEe1ACyxXgwekUA21/Da4lV43CDip2ecaPmpKqpUmujFoOtIyO -----END CERTIFICATE-----Generated at Wed May 13 12:19:10 2026 by rpki-client