$ rpki-client -vvf rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/323030313a6466303a663534303a3a2f34382d3438203d3e20313431363231.roa File: 323030313a6466303a663534303a3a2f34382d3438203d3e20313431363231.roa (raw, json) Hash identifier: NPRzpEohzPWTI4fs5HCPZgCAeOv/KJaZwx4NYYDYA/U= Subject key identifier: EA:70:7B:AC:EC:49:7C:2A:21:2D:56:50:96:2F:CA:A0:59:54:AB:03 Certificate issuer: /CN=A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4 Certificate serial: 5F6C0C247AAC6810D7808370FCC67009A02A5473 Authority key identifier: A4:A6:D0:55:E5:68:DD:9D:FF:4F:A7:B8:A9:8E:26:E5:47:D2:E9:C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/323030313a6466303a663534303a3a2f34382d3438203d3e20313431363231.roa Signing time: Sun 03 May 2026 03:13:28 +0000 ROA not before: Sun 03 May 2026 03:08:28 +0000 ROA not after: Sun 02 May 2027 03:13:28 +0000 asID: 141621 IP address blocks: 2001:df0:f540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.crl rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:6c:0c:24:7a:ac:68:10:d7:80:83:70:fc:c6:70:09:a0:2a:54:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4 Validity Not Before: May 3 03:08:28 2026 GMT Not After : May 2 03:13:28 2027 GMT Subject: CN=EA707BACEC497C2A212D5650962FCAA05954AB03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:be:dd:d3:4f:76:ec:50:c2:ba:93:51:bc:2c: 53:4b:25:e8:f1:e2:f2:5c:f2:5d:a1:98:50:85:11: 4b:1e:95:f6:51:d5:39:63:9f:25:2b:5b:59:9a:72: 83:d1:02:b0:81:33:2b:7b:aa:e7:87:1f:db:68:60: 7b:2f:dc:c2:19:b9:84:19:19:0d:d5:38:3a:b5:d5: 0f:90:48:69:48:9d:2a:e8:31:50:22:7e:8b:10:01: c3:e9:79:06:94:e1:55:56:86:5e:23:6e:ce:88:d6: 63:4d:9b:c6:67:44:01:bb:39:d9:e4:59:34:24:7d: 7d:11:d3:b9:4c:42:9f:b8:32:c3:9c:d5:70:43:ba: f2:54:14:f9:0a:24:bd:06:81:85:25:da:35:82:9c: e5:e1:46:24:03:ea:3a:4a:ee:23:00:bd:39:ce:76: ee:c0:73:a6:3d:14:17:8c:3c:63:5e:15:a3:a1:e0: 52:62:00:61:67:4c:95:a2:f6:44:bc:91:12:1a:c9: 8d:14:47:ca:64:e1:7c:fe:b1:d1:e2:84:e6:8f:06: a4:87:b6:78:4e:91:57:cd:c9:13:6c:c2:2b:83:5f: 08:7e:76:c8:c8:86:5e:38:75:4b:f0:56:83:78:63: 86:45:43:e2:40:34:43:14:b4:92:9e:94:8e:16:12: 08:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:70:7B:AC:EC:49:7C:2A:21:2D:56:50:96:2F:CA:A0:59:54:AB:03 X509v3 Authority Key Identifier: keyid:A4:A6:D0:55:E5:68:DD:9D:FF:4F:A7:B8:A9:8E:26:E5:47:D2:E9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/323030313a6466303a663534303a3a2f34382d3438203d3e20313431363231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:f540::/48 Signature Algorithm: sha256WithRSAEncryption 1c:02:d6:cc:4e:cf:79:31:7d:4c:26:a3:47:d8:06:21:a3:df: be:d9:7f:63:e9:83:6b:d8:81:a6:c7:be:d1:03:19:0e:f1:9c: ef:bb:64:5a:81:d8:ae:cb:a9:56:67:34:db:02:f9:73:dc:98: 33:b9:90:f4:1e:10:de:b4:00:2e:31:04:f5:70:a6:0c:08:f2: 09:a6:80:a8:1e:1e:8e:87:f0:0c:dd:8f:3b:01:eb:d6:22:5a: 79:75:d6:49:c1:68:da:f5:49:c5:43:03:43:be:56:d8:40:e6: 69:e6:a8:d3:85:11:03:fe:e4:74:64:ac:ec:c7:ee:d2:97:4e: a5:e6:ba:18:39:bf:18:c3:1e:e8:e3:ef:cc:fe:86:df:59:f4: a4:a5:a5:d2:d3:ef:54:5a:c3:76:24:7b:02:8f:41:60:c0:3a: 3a:8f:ee:9e:9c:3c:ac:09:6a:21:15:06:ff:40:d4:db:a8:bc: c0:ef:37:3a:bd:92:9d:01:93:11:cc:67:ac:48:c3:d9:d9:62: 20:53:b8:cf:ff:ec:c8:51:82:76:38:25:68:5b:9a:3a:6d:a8: 18:db:51:a8:7b:ea:d4:50:56:f2:f9:4b:a5:d8:e5:57:c2:34: 27:53:72:f5:cc:74:4e:5d:c8:38:0f:79:72:d8:14:d0:cb:19: 05:e8:46:6b -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUX2wMJHqsaBDXgINw/MZwCaAqVHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBNkQwNTVFNTY4REQ5REZGNEZBN0I4QTk4RTI2RTU0 N0QyRTlDNDAeFw0yNjA1MDMwMzA4MjhaFw0yNzA1MDIwMzEzMjhaMDMxMTAvBgNV BAMTKEVBNzA3QkFDRUM0OTdDMkEyMTJENTY1MDk2MkZDQUEwNTk1NEFCMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4vt3TT3bsUMK6k1G8LFNLJejx 4vJc8l2hmFCFEUselfZR1TljnyUrW1macoPRArCBMyt7queHH9toYHsv3MIZuYQZ GQ3VODq11Q+QSGlInSroMVAifosQAcPpeQaU4VVWhl4jbs6I1mNNm8ZnRAG7Odnk WTQkfX0R07lMQp+4MsOc1XBDuvJUFPkKJL0GgYUl2jWCnOXhRiQD6jpK7iMAvTnO du7Ac6Y9FBeMPGNeFaOh4FJiAGFnTJWi9kS8kRIayY0UR8pk4Xz+sdHihOaPBqSH tnhOkVfNyRNswiuDXwh+dsjIhl44dUvwVoN4Y4ZFQ+JANEMUtJKelI4WEginAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU6nB7rOxJfCohLVZQli/KoFlUqwMwHwYDVR0j BBgwFoAUpKbQVeVo3Z3/T6e4qY4m5UfS6cQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTUxN2ZlOTgtOGY1OC00OTdmLWJlNTctODY2NWE3YTA0YmIwLzAvQTRBNkQwNTVF NTY4REQ5REZGNEZBN0I4QTk4RTI2RTU0N0QyRTlDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNEE2RDA1NUU1NjhERDlERkY0RkE3QjhBOThFMjZFNTQ3RDJF OUM0LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U1MTdmZTk4LThmNTgtNDk3Zi1i ZTU3LTg2NjVhN2EwNGJiMC8wLzMyMzAzMDMxM2E2NDY2MzAzYTY2MzUzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMxMzYzMjMxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8PVAMA0GCSqGSIb3DQEBCwUAA4IBAQAcAtbMTs95MX1MJqNH2AYho9++2X9j6YNr 2IGmx77RAxkO8Zzvu2Ragdiuy6lWZzTbAvlz3JgzuZD0HhDetAAuMQT1cKYMCPIJ poCoHh6Oh/AM3Y87AevWIlp5ddZJwWja9UnFQwNDvlbYQOZp5qjThRED/uR0ZKzs x+7Sl06l5roYOb8Ywx7o4+/M/obfWfSkpaXS0+9UWsN2JHsCj0FgwDo6j+6enDys CWohFQb/QNTbqLzA7zc6vZKdAZMRzGesSMPZ2WIgU7jP/+zIUYJ2OCVoW5o6bagY 21Goe+rUUFby+Uul2OVXwjQnU3L1zHROXcg4D3ly2BTQyxkF6EZr -----END CERTIFICATE-----Generated at Wed May 13 14:47:35 2026 by rpki-client