$ rpki-client -vvf rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/323030313a6466323a633238303a3a2f34382d3438203d3e20313339393839.roa File: 323030313a6466323a633238303a3a2f34382d3438203d3e20313339393839.roa (raw, json) Hash identifier: O7Qsfv9shx16yrQW2Xe4frvAZ94BOmPstpdbztVAHcM= Subject key identifier: 20:4B:9B:4F:8D:96:4E:17:AC:85:DC:04:38:71:03:22:9A:CF:77:BF Certificate issuer: /CN=37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657 Certificate serial: 4C13AA496E5B218CBE8EAF515B13DED8A66C0F74 Authority key identifier: 37:60:6E:99:C5:9E:71:07:D5:AC:FA:7E:8D:E3:FC:DF:E0:FF:A6:57 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/323030313a6466323a633238303a3a2f34382d3438203d3e20313339393839.roa Signing time: Sun 03 May 2026 02:28:50 +0000 ROA not before: Sun 03 May 2026 02:23:50 +0000 ROA not after: Sun 02 May 2027 02:28:50 +0000 asID: 139989 IP address blocks: 2001:df2:c280::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.crl rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 May 2026 20:32:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:13:aa:49:6e:5b:21:8c:be:8e:af:51:5b:13:de:d8:a6:6c:0f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657 Validity Not Before: May 3 02:23:50 2026 GMT Not After : May 2 02:28:50 2027 GMT Subject: CN=204B9B4F8D964E17AC85DC04387103229ACF77BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f0:9c:a7:ef:79:4c:3c:de:1c:59:b1:4e:08: 8d:7e:db:2b:32:63:ee:c8:ac:44:65:c6:cd:05:a1: 8e:4b:c4:64:8f:c6:da:18:98:84:b1:5c:f6:cf:0e: 16:dd:4e:18:1f:74:4f:db:f5:e9:60:86:92:0a:7d: 01:44:db:44:f4:29:1f:25:d3:21:8a:83:ac:87:69: d7:b9:4d:05:e8:10:8c:0d:d5:ac:8b:eb:f6:f1:9a: a0:ae:3e:74:9e:66:d4:d0:a3:cc:2a:2c:ce:61:5a: f0:ea:2a:20:af:fb:1d:af:6f:b1:f0:6e:77:32:9a: 48:0b:0d:48:4e:34:63:51:db:c6:f3:f4:07:e5:ee: 2e:46:af:ce:7f:3e:1f:d9:ef:c0:42:43:48:11:ba: 39:9f:0b:ba:82:79:cb:d2:94:83:5d:56:21:ee:6d: be:61:f7:29:6f:4d:16:1f:02:b5:fa:1e:b7:7a:6a: ed:a1:5e:8e:41:dc:98:4c:c8:ef:e8:76:fb:a6:ef: 10:84:b1:80:d6:d8:d2:53:28:40:0e:28:42:3a:c7: d3:5f:a5:5c:45:87:ad:a7:1d:69:f9:53:ec:08:ec: 03:e7:8f:c8:f5:85:1d:78:02:b8:da:b5:55:67:7a: 65:4b:32:00:09:af:64:e6:c0:b0:f0:9b:82:63:f9: ff:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4B:9B:4F:8D:96:4E:17:AC:85:DC:04:38:71:03:22:9A:CF:77:BF X509v3 Authority Key Identifier: keyid:37:60:6E:99:C5:9E:71:07:D5:AC:FA:7E:8D:E3:FC:DF:E0:FF:A6:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/323030313a6466323a633238303a3a2f34382d3438203d3e20313339393839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:c280::/48 Signature Algorithm: sha256WithRSAEncryption a5:ec:65:eb:5a:f9:4a:18:3e:aa:b5:8a:94:b0:55:ba:c3:72: 09:90:b4:57:a2:d9:6b:c4:76:17:5d:2b:a4:f2:58:85:28:80: 9c:5f:28:31:dd:ea:15:c4:5c:0b:5a:5a:00:39:bd:05:f4:03: bc:29:b9:f0:e1:83:2e:73:14:7f:8b:82:13:0e:de:17:c7:22: 01:70:79:3f:af:30:db:8f:27:e1:2b:d6:02:de:b0:ac:f0:f9: 69:04:11:19:f2:51:9e:94:5e:b4:89:db:1c:90:81:a1:1c:1d: b7:d2:43:20:98:b8:3e:d3:a9:b1:d6:4c:46:8e:65:34:46:10: 3d:b2:ca:73:c9:1d:90:a8:70:db:6f:e3:3d:4a:57:e9:aa:7b: e3:99:50:6b:1e:09:57:b0:d5:5d:b3:23:98:9d:18:48:8b:fb: c2:60:5f:0c:e7:c9:72:12:03:f9:c7:bf:04:1e:5b:3f:c4:73: 72:14:68:91:ba:69:ff:1a:04:69:e5:fe:24:53:c7:04:9d:15: 1c:ae:b9:d9:5e:93:7d:3e:66:38:41:5a:3d:6c:3f:9c:42:97: 19:b1:70:be:68:f6:d5:5b:aa:ed:59:93:a7:8c:e7:6b:26:da: 82:b6:5a:87:6a:c0:a3:87:ae:2b:09:9f:72:28:e9:00:35:11: f8:38:a0:8e -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUTBOqSW5bIYy+jq9RWxPe2KZsD3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc2MDZFOTlDNTlFNzEwN0Q1QUNGQTdFOERFM0ZDREZF MEZGQTY1NzAeFw0yNjA1MDMwMjIzNTBaFw0yNzA1MDIwMjI4NTBaMDMxMTAvBgNV BAMTKDIwNEI5QjRGOEQ5NjRFMTdBQzg1REMwNDM4NzEwMzIyOUFDRjc3QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCD8Jyn73lMPN4cWbFOCI1+2ysy Y+7IrERlxs0FoY5LxGSPxtoYmISxXPbPDhbdThgfdE/b9elghpIKfQFE20T0KR8l 0yGKg6yHade5TQXoEIwN1ayL6/bxmqCuPnSeZtTQo8wqLM5hWvDqKiCv+x2vb7Hw bncymkgLDUhONGNR28bz9Afl7i5Gr85/Ph/Z78BCQ0gRujmfC7qCecvSlINdViHu bb5h9ylvTRYfArX6Hrd6au2hXo5B3JhMyO/odvum7xCEsYDW2NJTKEAOKEI6x9Nf pVxFh62nHWn5U+wI7APnj8j1hR14ArjatVVnemVLMgAJr2TmwLDwm4Jj+f//AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUIEubT42WTheshdwEOHEDIprPd78wHwYDVR0j BBgwFoAUN2BumcWecQfVrPp+jeP83+D/plcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDAzMTc0NmUtYjBmNi00ODI3LThjNGUtYjgxOTJkZWNjMzlhLzAvMzc2MDZFOTlD NTlFNzEwN0Q1QUNGQTdFOERFM0ZDREZFMEZGQTY1Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNzYwNkU5OUM1OUU3MTA3RDVBQ0ZBN0U4REUzRkNERkUwRkZB NjU3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQwMzE3NDZlLWIwZjYtNDgyNy04 YzRlLWI4MTkyZGVjYzM5YS8wLzMyMzAzMDMxM2E2NDY2MzIzYTYzMzIzODMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM5MzkzODM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8sKAMA0GCSqGSIb3DQEBCwUAA4IBAQCl7GXrWvlKGD6qtYqUsFW6w3IJkLRXotlr xHYXXSuk8liFKICcXygx3eoVxFwLWloAOb0F9AO8Kbnw4YMucxR/i4ITDt4XxyIB cHk/rzDbjyfhK9YC3rCs8PlpBBEZ8lGelF60idsckIGhHB230kMgmLg+06mx1kxG jmU0RhA9sspzyR2QqHDbb+M9SlfpqnvjmVBrHglXsNVdsyOYnRhIi/vCYF8M58ly EgP5x78EHls/xHNyFGiRumn/GgRp5f4kU8cEnRUcrrnZXpN9PmY4QVo9bD+cQpcZ sXC+aPbVW6rtWZOnjOdrJtqCtlqHasCjh64rCZ9yKOkANRH4OKCO -----END CERTIFICATE-----Generated at Thu May 7 06:02:37 2026 by rpki-client