$ rpki-client -vvf rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/323030313a6466303a363063303a3a2f34382d3438203d3e20313439333639.roa File: 323030313a6466303a363063303a3a2f34382d3438203d3e20313439333639.roa (raw, json) Hash identifier: 4KthRL11gBmJfq1X/84ocL39dco9wY9VllXbFEY9aPQ= Subject key identifier: 1E:28:B5:9E:03:36:B3:FF:92:AA:24:7C:CF:07:DF:19:52:22:91:40 Certificate issuer: /CN=D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625 Certificate serial: 388F799899BD32FE90CCD858F1D8F732C09F863D Authority key identifier: D0:F0:C8:D1:50:FE:AE:B3:B2:62:AE:26:0E:ED:6E:FA:46:C4:C6:25 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/323030313a6466303a363063303a3a2f34382d3438203d3e20313439333639.roa Signing time: Sun 03 May 2026 03:17:46 +0000 ROA not before: Sun 03 May 2026 03:12:46 +0000 ROA not after: Sun 02 May 2027 03:17:46 +0000 asID: 149369 IP address blocks: 2001:df0:60c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.crl rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:8f:79:98:99:bd:32:fe:90:cc:d8:58:f1:d8:f7:32:c0:9f:86:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625 Validity Not Before: May 3 03:12:46 2026 GMT Not After : May 2 03:17:46 2027 GMT Subject: CN=1E28B59E0336B3FF92AA247CCF07DF1952229140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4c:ed:31:24:6e:52:6d:00:87:c4:83:5b:65: 0c:45:ca:27:ef:c3:b5:f0:23:d7:6a:65:46:51:94: a9:29:c5:54:c5:10:9e:81:bb:b6:55:b9:4b:b0:49: 0c:f9:44:2e:67:79:37:37:58:24:26:3b:07:0a:3b: d4:36:dd:26:a3:45:0f:1f:72:5a:a8:6d:33:ba:e1: 72:5f:b8:c3:87:11:81:e9:9c:d7:fa:d8:8d:3f:2f: 93:4f:85:2e:23:d7:8d:cc:63:e8:2b:d1:98:7d:b4: de:ef:38:82:9d:b0:9c:f1:7a:e4:9d:d0:73:e9:df: 1a:d7:f3:18:54:c0:9e:b5:96:0f:2d:d4:df:f3:47: 78:89:01:48:73:54:58:52:49:e2:d7:ca:e4:63:d9: d7:9b:8c:e3:90:79:72:2d:26:86:db:6d:05:02:a2: 87:07:b8:97:e9:6d:46:81:0b:61:1c:84:d9:22:43: 19:b3:7f:cb:26:f2:fa:44:88:0a:96:9b:5f:40:dc: fe:06:db:5f:cb:e1:fa:b9:60:b2:0a:cf:ea:a2:71: a3:63:d0:78:73:87:53:a3:68:29:d6:01:2b:72:e2: 49:45:d4:5d:d3:a6:cd:87:fa:23:1a:de:3f:74:dd: d7:c6:01:0e:d9:6d:69:e0:d7:d6:64:c1:a7:f6:0b: 43:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:28:B5:9E:03:36:B3:FF:92:AA:24:7C:CF:07:DF:19:52:22:91:40 X509v3 Authority Key Identifier: keyid:D0:F0:C8:D1:50:FE:AE:B3:B2:62:AE:26:0E:ED:6E:FA:46:C4:C6:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/323030313a6466303a363063303a3a2f34382d3438203d3e20313439333639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:60c0::/48 Signature Algorithm: sha256WithRSAEncryption 23:05:36:6d:87:e8:d2:29:cd:dd:8c:3f:fe:18:7b:ee:c1:72: ca:63:17:a3:d4:94:78:fe:8c:3a:a2:ae:e3:2b:e2:34:9e:8e: 19:0f:ce:84:30:86:27:6b:f3:d9:e7:6c:e5:27:20:d8:51:30: c6:e7:2e:fa:9f:03:f6:27:d0:50:57:08:aa:79:83:6e:ec:9d: 98:c1:3b:cf:63:76:2f:5b:78:4e:bd:01:a2:ae:dc:fe:54:5e: 51:b6:2c:77:a4:94:0e:a8:d5:b2:49:63:c5:39:6c:54:d2:93: f9:c4:8b:dc:4e:19:a3:e9:19:4c:94:0e:b4:a7:a7:15:1b:74: 8d:23:12:29:d2:cb:47:8c:e6:aa:84:a8:22:9a:1f:81:07:1b: 97:d6:47:64:83:34:59:6d:cf:3d:47:c9:c6:ed:bb:e6:38:b7: bb:da:ce:bd:dc:75:ae:64:07:44:96:c8:14:44:42:5e:9c:50: e8:9a:a9:a5:c8:c6:df:38:75:1d:02:02:05:c1:32:26:b9:dc: f6:53:69:79:b2:5d:dd:55:26:2c:3b:c0:0e:70:b5:ef:e1:e7: 2c:d2:3a:85:1b:42:54:b0:3c:5a:16:8d:77:55:e0:42:a5:89: ba:44:62:2f:50:93:10:c8:73:db:81:36:72:33:19:98:de:68: 72:6d:14:0d -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUOI95mJm9Mv6QzNhY8dj3MsCfhj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGMEM4RDE1MEZFQUVCM0IyNjJBRTI2MEVFRDZFRkE0 NkM0QzYyNTAeFw0yNjA1MDMwMzEyNDZaFw0yNzA1MDIwMzE3NDZaMDMxMTAvBgNV BAMTKDFFMjhCNTlFMDMzNkIzRkY5MkFBMjQ3Q0NGMDdERjE5NTIyMjkxNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6TO0xJG5SbQCHxINbZQxFyifv w7XwI9dqZUZRlKkpxVTFEJ6Bu7ZVuUuwSQz5RC5neTc3WCQmOwcKO9Q23SajRQ8f clqobTO64XJfuMOHEYHpnNf62I0/L5NPhS4j143MY+gr0Zh9tN7vOIKdsJzxeuSd 0HPp3xrX8xhUwJ61lg8t1N/zR3iJAUhzVFhSSeLXyuRj2debjOOQeXItJobbbQUC oocHuJfpbUaBC2EchNkiQxmzf8sm8vpEiAqWm19A3P4G21/L4fq5YLIKz+qicaNj 0Hhzh1OjaCnWASty4klF1F3Tps2H+iMa3j903dfGAQ7ZbWng19Zkwaf2C0NFAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUHii1ngM2s/+SqiR8zwffGVIikUAwHwYDVR0j BBgwFoAU0PDI0VD+rrOyYq4mDu1u+kbExiUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjUxZDZjOWMtZWFkNy00NWZlLWExOWEtNDIyMzVmYzUzNzgwLzAvRDBGMEM4RDE1 MEZFQUVCM0IyNjJBRTI2MEVFRDZFRkE0NkM0QzYyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMEYwQzhEMTUwRkVBRUIzQjI2MkFFMjYwRUVENkVGQTQ2QzRD NjI1LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Y1MWQ2YzljLWVhZDctNDVmZS1h MTlhLTQyMjM1ZmM1Mzc4MC8wLzMyMzAzMDMxM2E2NDY2MzAzYTM2MzA2MzMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDM5MzMzNjM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8GDAMA0GCSqGSIb3DQEBCwUAA4IBAQAjBTZth+jSKc3djD/+GHvuwXLKYxej1JR4 /ow6oq7jK+I0no4ZD86EMIYna/PZ52zlJyDYUTDG5y76nwP2J9BQVwiqeYNu7J2Y wTvPY3YvW3hOvQGirtz+VF5Rtix3pJQOqNWySWPFOWxU0pP5xIvcThmj6RlMlA60 p6cVG3SNIxIp0stHjOaqhKgimh+BBxuX1kdkgzRZbc89R8nG7bvmOLe72s693HWu ZAdElsgUREJenFDomqmlyMbfOHUdAgIFwTImudz2U2l5sl3dVSYsO8AOcLXv4ecs 0jqFG0JUsDxaFo13VeBCpYm6RGIvUJMQyHPbgTZyMxmY3mhybRQN -----END CERTIFICATE-----Generated at Wed May 13 13:50:54 2026 by rpki-client