$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/323030313a6431303a383431303a3a2f34382d3438203d3e20313331313139.roa File: 323030313a6431303a383431303a3a2f34382d3438203d3e20313331313139.roa (raw, json) Hash identifier: G3pU6symkaZdSMicPc79FGi+dBVSw2ehAYC4dr25SgE= Subject key identifier: 9C:0C:C7:31:87:02:CE:56:F1:DE:22:B8:44:FD:A8:CC:6E:D1:3C:50 Certificate issuer: /CN=488A458129866D0E7DBFF7668D82664F584F8541 Certificate serial: 702FE690F5350838C8361D06BC7742F63D9F89AA Authority key identifier: 48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/323030313a6431303a383431303a3a2f34382d3438203d3e20313331313139.roa Signing time: Sun 03 May 2026 03:15:06 +0000 ROA not before: Sun 03 May 2026 03:10:06 +0000 ROA not after: Sun 02 May 2027 03:15:06 +0000 asID: 131119 IP address blocks: 2001:d10:8410::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:2f:e6:90:f5:35:08:38:c8:36:1d:06:bc:77:42:f6:3d:9f:89:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488A458129866D0E7DBFF7668D82664F584F8541 Validity Not Before: May 3 03:10:06 2026 GMT Not After : May 2 03:15:06 2027 GMT Subject: CN=9C0CC7318702CE56F1DE22B844FDA8CC6ED13C50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0a:ec:52:6e:41:7e:b2:c6:f6:82:0e:7d:99: b1:e3:88:fc:fb:a8:47:08:c4:79:8a:32:22:19:ad: 35:14:07:cd:d6:2d:68:55:ed:ae:ff:d0:88:60:10: 7b:2d:91:15:50:e8:98:e3:8a:ab:43:38:15:5d:00: 67:73:12:36:4d:ef:80:08:1e:99:48:8e:85:fd:8c: 5c:3c:6b:a9:4b:0d:7b:38:69:5d:c4:ab:cc:ef:b6: cd:ac:e5:48:9c:ca:fd:2d:73:14:d6:c6:48:f4:fe: ce:b5:50:58:c1:15:d8:49:73:30:12:47:5f:80:ba: 9b:cd:a8:8e:47:f9:f8:db:e5:dc:55:ab:d2:c8:35: de:e7:a8:79:e8:e8:6d:10:48:b9:14:bc:a3:98:18: 37:a9:94:5b:95:d9:7d:39:23:84:ed:3c:e9:76:b0: 1c:c8:41:ed:f8:77:5f:22:51:88:86:a2:da:60:ef: 6a:65:f2:2e:d6:57:05:cb:ba:3d:78:a6:89:e9:77: ae:b4:40:e7:76:dc:30:7f:35:d8:f2:6b:d2:8e:f6: 78:2a:7c:eb:53:03:0e:60:08:6a:3c:de:78:cd:8f: ac:21:f5:84:05:33:a9:fa:06:3f:0b:b7:a2:c6:fc: 1f:6e:fa:a6:96:1b:72:5c:03:a6:82:d7:95:b7:78: c2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:0C:C7:31:87:02:CE:56:F1:DE:22:B8:44:FD:A8:CC:6E:D1:3C:50 X509v3 Authority Key Identifier: keyid:48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/323030313a6431303a383431303a3a2f34382d3438203d3e20313331313139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:d10:8410::/48 Signature Algorithm: sha256WithRSAEncryption d9:d8:3a:c6:ff:77:ed:bb:1d:fe:da:52:a6:c9:39:f3:f3:8c: db:2d:3a:5a:9b:f7:94:c4:d3:7a:f0:11:ff:ee:e0:b2:46:6c: a6:a9:3b:71:a8:f8:8a:d1:54:92:b4:79:ef:c1:a8:69:2f:58: fa:b2:5d:df:16:a2:e2:9c:05:c8:c1:65:dd:ca:0f:f6:fe:ed: f6:f2:5b:01:18:75:55:c5:52:20:78:ef:6c:4b:4e:1f:ee:4b: da:25:cb:b2:f8:a6:b6:7c:62:be:a2:89:16:fc:04:1c:c4:69: 8f:d2:0c:75:ca:a6:7c:bb:64:51:4e:36:32:59:ec:0b:fa:3f: 30:d2:df:bb:7d:a4:8d:55:e7:2a:44:42:63:f2:5e:95:9c:78: da:87:71:0c:6b:91:fd:b9:e6:83:0f:55:da:0f:80:63:9f:0a: 30:fd:dc:99:7f:cf:e0:d0:42:9d:41:42:4c:85:ff:90:6b:55: 6d:2d:12:71:10:92:2f:1a:14:63:0f:68:d6:0f:d9:fa:d5:ac: b8:25:df:c0:59:1c:d5:46:a6:9c:f2:d5:5b:86:75:c4:18:04: 44:00:a3:ad:e6:cd:36:c8:65:c4:c2:84:3a:5e:09:6d:aa:21: d6:bb:0b:c2:02:fe:4a:30:c3:5a:82:a1:27:38:95:91:3b:3f: 51:97:93:6d -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUcC/mkPU1CDjINh0GvHdC9j2fiaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4QTQ1ODEyOTg2NkQwRTdEQkZGNzY2OEQ4MjY2NEY1 ODRGODU0MTAeFw0yNjA1MDMwMzEwMDZaFw0yNzA1MDIwMzE1MDZaMDMxMTAvBgNV BAMTKDlDMENDNzMxODcwMkNFNTZGMURFMjJCODQ0RkRBOENDNkVEMTNDNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpCuxSbkF+ssb2gg59mbHjiPz7 qEcIxHmKMiIZrTUUB83WLWhV7a7/0IhgEHstkRVQ6JjjiqtDOBVdAGdzEjZN74AI HplIjoX9jFw8a6lLDXs4aV3Eq8zvts2s5Uicyv0tcxTWxkj0/s61UFjBFdhJczAS R1+AupvNqI5H+fjb5dxVq9LINd7nqHno6G0QSLkUvKOYGDeplFuV2X05I4TtPOl2 sBzIQe34d18iUYiGotpg72pl8i7WVwXLuj14ponpd660QOd23DB/Ndjya9KO9ngq fOtTAw5gCGo83njNj6wh9YQFM6n6Bj8Lt6LG/B9u+qaWG3JcA6aC15W3eMI9AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUnAzHMYcCzlbx3iK4RP2ozG7RPFAwHwYDVR0j BBgwFoAUSIpFgSmGbQ59v/dmjYJmT1hPhUEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE3MDI3MjYtYjJjNi00NmZjLTgyOTctMmRiZGVjNmQ2ZDVkLzAvNDg4QTQ1ODEy OTg2NkQwRTdEQkZGNzY2OEQ4MjY2NEY1ODRGODU0MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODhBNDU4MTI5ODY2RDBFN0RCRkY3NjY4RDgyNjY0RjU4NEY4 NTQxLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2VhNzAyNzI2LWIyYzYtNDZmYy04 Mjk3LTJkYmRlYzZkNmQ1ZC8wLzMyMzAzMDMxM2E2NDMxMzAzYTM4MzQzMTMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzMxMzEzMTM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN EIQQMA0GCSqGSIb3DQEBCwUAA4IBAQDZ2DrG/3ftux3+2lKmyTnz84zbLTpam/eU xNN68BH/7uCyRmymqTtxqPiK0VSStHnvwahpL1j6sl3fFqLinAXIwWXdyg/2/u32 8lsBGHVVxVIgeO9sS04f7kvaJcuy+Ka2fGK+ookW/AQcxGmP0gx1yqZ8u2RRTjYy WewL+j8w0t+7faSNVecqREJj8l6VnHjah3EMa5H9ueaDD1XaD4Bjnwow/dyZf8/g 0EKdQUJMhf+Qa1VtLRJxEJIvGhRjD2jWD9n61ay4Jd/AWRzVRqac8tVbhnXEGARE AKOt5s02yGXEwoQ6XgltqiHWuwvCAv5KMMNagqEnOJWROz9Rl5Nt -----END CERTIFICATE-----Generated at Wed May 13 11:35:00 2026 by rpki-client