$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa File: 323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa (raw, json) Hash identifier: FIEaDVHIseW71OoASUCYpCwzUw7yf/gVIj4IdH47VZ0= Subject key identifier: 96:D4:84:30:07:F0:6C:85:EC:A9:8C:CD:4B:AB:A9:C3:83:78:AA:91 Certificate issuer: /CN=CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784 Certificate serial: 2AAC4DF05C9B3A9D3D1DB12888ADEF39D27EE347 Authority key identifier: CA:C3:A4:F2:1B:C8:F4:DF:A7:4E:85:15:1F:8B:3E:91:67:DA:57:84 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa Signing time: Sun 03 May 2026 03:10:26 +0000 ROA not before: Sun 03 May 2026 03:05:26 +0000 ROA not after: Sun 02 May 2027 03:10:26 +0000 asID: 58397 IP address blocks: 2001:df0:f800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.crl rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:16:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:ac:4d:f0:5c:9b:3a:9d:3d:1d:b1:28:88:ad:ef:39:d2:7e:e3:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784 Validity Not Before: May 3 03:05:26 2026 GMT Not After : May 2 03:10:26 2027 GMT Subject: CN=96D4843007F06C85ECA98CCD4BABA9C38378AA91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:84:0f:61:7c:a8:c3:d1:c3:87:0a:a1:49:d4: 3e:8e:bc:04:35:d6:92:b8:ce:0a:5d:d9:e5:64:6c: 56:f8:e5:db:a4:f4:91:54:b4:56:a8:a2:a4:f3:02: 78:5b:47:d6:6f:52:63:4e:7f:fb:ba:97:b1:7d:44: 90:b7:8e:17:01:c4:bf:ea:63:98:32:50:57:44:d9: 8c:d0:00:e8:2c:38:32:4d:e0:b2:2f:92:2b:e2:36: b1:14:cb:da:89:26:c3:31:a1:26:24:2d:9c:62:c3: 66:64:29:9c:ef:7e:23:e6:8c:d6:06:16:9d:2e:a4: ea:8a:10:e9:e8:8e:b1:2d:6b:b5:6a:46:7f:a8:0b: 7e:25:bb:b0:5e:5b:8b:e6:26:10:94:11:19:5f:60: 20:6a:1c:8b:41:52:7b:6c:d2:9c:17:4a:bd:88:6e: 39:00:5f:bf:08:65:0d:b2:25:ee:a0:46:aa:3e:7d: 39:d6:cf:dd:c6:aa:19:fe:f6:ec:cc:45:9e:d0:6a: 3e:df:c4:ee:88:32:ff:7f:5f:23:c6:c5:54:fb:21: ac:0d:9e:1b:26:fd:0d:c0:fc:61:5a:90:49:c2:c5: 6b:f6:f1:20:c0:3a:94:2e:0c:34:e4:ef:5e:94:1c: ac:e9:78:2e:ce:7b:52:b3:fb:ff:ed:9c:d4:7a:f6: 2c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D4:84:30:07:F0:6C:85:EC:A9:8C:CD:4B:AB:A9:C3:83:78:AA:91 X509v3 Authority Key Identifier: keyid:CA:C3:A4:F2:1B:C8:F4:DF:A7:4E:85:15:1F:8B:3E:91:67:DA:57:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:f800::/48 Signature Algorithm: sha256WithRSAEncryption 32:d6:a4:2d:8f:2b:7c:01:4b:1a:b8:df:f6:10:ce:9f:0e:d6: dc:c4:e4:71:63:5c:f8:96:93:d1:04:0d:dc:62:2a:2c:a3:2c: 0a:53:68:2e:db:f4:9f:02:b3:e0:4a:96:0c:3e:45:0e:40:cf: e8:02:c5:0a:79:d8:59:5c:21:14:12:f7:4a:3c:9b:73:ec:69: 3c:2b:6a:d1:1b:9a:d5:b5:7f:4b:ac:f4:6d:34:fe:65:23:b7: 04:4d:84:0f:30:3b:ec:f9:04:fb:29:d0:d4:24:8e:81:ea:dc: b8:49:12:7c:3c:29:16:28:ac:27:29:cc:e4:5b:09:90:71:72: 85:fb:9e:15:bf:d4:39:89:b2:3e:34:20:7a:e4:4c:cc:d0:a4: 61:3a:f3:07:36:a5:e5:f6:8a:57:c4:c4:6c:43:05:84:06:0e: 1f:5a:72:8a:11:f9:3c:54:15:c5:36:0a:cd:2b:2b:8b:5d:c3: 15:27:c6:09:a2:f2:d4:ad:9d:04:13:ec:5c:02:21:26:e3:c6: 76:46:09:d4:4c:31:7d:b5:bd:7d:ce:12:2a:2a:c2:11:20:8c: e3:b8:27:bf:a6:61:e4:26:04:ef:c0:71:de:6f:e2:30:7a:21: cd:5d:12:3d:1b:55:dd:36:97:9c:77:b7:c4:d9:cd:c1:ba:4c: ba:ab:5d:75 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUKqxN8FybOp09HbEoiK3vOdJ+40cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FDM0E0RjIxQkM4RjRERkE3NEU4NTE1MUY4QjNFOTE2 N0RBNTc4NDAeFw0yNjA1MDMwMzA1MjZaFw0yNzA1MDIwMzEwMjZaMDMxMTAvBgNV BAMTKDk2RDQ4NDMwMDdGMDZDODVFQ0E5OENDRDRCQUJBOUMzODM3OEFBOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXhA9hfKjD0cOHCqFJ1D6OvAQ1 1pK4zgpd2eVkbFb45duk9JFUtFaooqTzAnhbR9ZvUmNOf/u6l7F9RJC3jhcBxL/q Y5gyUFdE2YzQAOgsODJN4LIvkiviNrEUy9qJJsMxoSYkLZxiw2ZkKZzvfiPmjNYG Fp0upOqKEOnojrEta7VqRn+oC34lu7BeW4vmJhCUERlfYCBqHItBUnts0pwXSr2I bjkAX78IZQ2yJe6gRqo+fTnWz93Gqhn+9uzMRZ7Qaj7fxO6IMv9/XyPGxVT7IawN nhsm/Q3A/GFakEnCxWv28SDAOpQuDDTk716UHKzpeC7Oe1Kz+//tnNR69iwjAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUltSEMAfwbIXsqYzNS6upw4N4qpEwHwYDVR0j BBgwFoAUysOk8hvI9N+nToUVH4s+kWfaV4QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDhiOTg3MjItMWNiNC00MGQ0LWFjOGItYzNiY2EyYmNhMjE3LzAvQ0FDM0E0RjIx QkM4RjRERkE3NEU4NTE1MUY4QjNFOTE2N0RBNTc4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUMzQTRGMjFCQzhGNERGQTc0RTg1MTUxRjhCM0U5MTY3REE1 Nzg0LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q4Yjk4NzIyLTFjYjQtNDBkNC1h YzhiLWMzYmNhMmJjYTIxNy8wLzMyMzAzMDMxM2E2NDY2MzAzYTY2MzgzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzODMzMzkzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDfD4 ADANBgkqhkiG9w0BAQsFAAOCAQEAMtakLY8rfAFLGrjf9hDOnw7W3MTkcWNc+JaT 0QQN3GIqLKMsClNoLtv0nwKz4EqWDD5FDkDP6ALFCnnYWVwhFBL3Sjybc+xpPCtq 0Rua1bV/S6z0bTT+ZSO3BE2EDzA77PkE+ynQ1CSOgercuEkSfDwpFiisJynM5FsJ kHFyhfueFb/UOYmyPjQgeuRMzNCkYTrzBzal5faKV8TEbEMFhAYOH1pyihH5PFQV xTYKzSsri13DFSfGCaLy1K2dBBPsXAIhJuPGdkYJ1EwxfbW9fc4SKirCESCM47gn v6Zh5CYE78Bx3m/iMHohzV0SPRtV3TaXnHe3xNnNwbpMuqtddQ== -----END CERTIFICATE-----Generated at Wed May 13 05:57:29 2026 by rpki-client