$ rpki-client -vvf rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa File: 323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa (raw, json) Hash identifier: mers2OvT3I+Z4Z4fI4HUEEp864DNR7CMd7NeZgpck8o= Subject key identifier: 61:A6:FD:69:02:57:4B:48:CC:25:11:81:5B:6E:16:2E:18:68:3B:EC Certificate issuer: /CN=C97B9AA5127BAC47DAF01727DFF25E26F638643C Certificate serial: 4573924BD411009C77AD3C44F82FC312BD6FD21F Authority key identifier: C9:7B:9A:A5:12:7B:AC:47:DA:F0:17:27:DF:F2:5E:26:F6:38:64:3C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C97B9AA5127BAC47DAF01727DFF25E26F638643C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa Signing time: Sun 03 May 2026 02:29:27 +0000 ROA not before: Sun 03 May 2026 02:24:27 +0000 ROA not after: Sun 02 May 2027 02:29:27 +0000 asID: 131704 IP address blocks: 2001:df6:6f00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.crl rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C97B9AA5127BAC47DAF01727DFF25E26F638643C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 09:15:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:73:92:4b:d4:11:00:9c:77:ad:3c:44:f8:2f:c3:12:bd:6f:d2:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C97B9AA5127BAC47DAF01727DFF25E26F638643C Validity Not Before: May 3 02:24:27 2026 GMT Not After : May 2 02:29:27 2027 GMT Subject: CN=61A6FD6902574B48CC2511815B6E162E18683BEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2a:62:b6:c4:63:e6:32:d1:3a:1f:53:e6:18: 17:74:75:99:12:31:15:69:6b:b1:4b:a4:65:90:22: 28:5b:0a:ff:42:0f:33:d2:6b:2c:ba:bf:87:52:4d: e9:13:0f:99:df:55:db:7f:b7:8e:39:c4:2a:fc:32: 2a:16:f2:ec:0d:ce:6a:9a:10:ce:d3:f8:0a:3c:ed: e9:74:2f:a2:36:53:f4:38:9f:43:88:e9:b5:5a:90: 45:35:39:12:87:0a:92:9f:6d:6d:81:2a:b6:21:1f: ab:8e:e4:41:16:6a:a0:5d:e2:72:30:2c:e3:ba:c1: c7:31:63:0f:4d:9a:7c:95:b4:ba:3a:d1:b3:0b:47: 8b:76:34:6c:5a:7d:14:19:15:93:32:89:bd:a7:cc: 65:37:38:23:0d:55:d2:ff:8f:e7:07:53:54:c3:c2: 5a:6c:be:ca:d6:f9:71:db:6f:a9:ca:5a:d3:2b:1a: dc:4c:45:03:5b:2f:2f:3b:33:52:69:a3:62:4d:54: e9:1e:cd:dd:9f:94:81:18:3a:f1:f5:03:b3:a1:c7: 48:53:6a:7e:fb:dc:be:60:e4:b0:5a:ab:4f:e4:19: 6b:95:2e:37:eb:47:b1:7f:ca:b1:fe:b6:c0:4f:c0: ba:9b:b2:16:2e:59:df:b7:69:a0:60:f6:48:9f:93: 83:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A6:FD:69:02:57:4B:48:CC:25:11:81:5B:6E:16:2E:18:68:3B:EC X509v3 Authority Key Identifier: keyid:C9:7B:9A:A5:12:7B:AC:47:DA:F0:17:27:DF:F2:5E:26:F6:38:64:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C97B9AA5127BAC47DAF01727DFF25E26F638643C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:6f00::/48 Signature Algorithm: sha256WithRSAEncryption 25:b0:10:a1:eb:c6:82:46:e7:8e:a7:dc:a4:83:5e:05:9b:36: e8:26:ee:ef:3d:da:58:a4:b9:e4:d4:b2:76:c4:e3:0e:5c:3e: a1:26:de:41:01:9f:07:c9:33:64:4c:96:5e:4c:63:dd:04:cb: ee:54:dc:b5:1e:93:04:ad:a5:47:e1:11:77:dc:36:65:e3:45: 94:ba:77:36:24:fb:40:71:53:4e:9f:b6:27:2f:2d:b3:b6:26: 78:39:02:fe:2b:10:28:5a:f7:2a:27:dd:36:6f:2a:80:f8:aa: cd:f9:74:e9:ee:88:dc:07:66:49:55:be:b4:1d:52:9b:af:3a: f2:f1:0e:99:4e:b1:bb:84:59:4d:ad:71:3d:da:4a:b9:fb:e2: f5:4a:05:e0:c9:72:c0:6b:ad:99:1e:f2:0b:c4:3f:8a:02:94: 2b:66:30:61:1e:20:9f:3f:10:38:59:87:e8:e6:6b:80:12:5b: 49:47:7c:89:05:a0:b7:b0:e7:68:88:a4:b0:9e:f8:95:52:cc: 1e:e8:b4:ad:5b:08:39:e8:d8:45:82:e3:65:91:64:a2:98:91: 73:a6:ee:8a:00:23:e8:e8:1c:8f:8b:9f:96:4b:d0:51:13:48: ac:30:8e:f5:e8:06:aa:db:4a:46:97:af:4c:bb:8e:9a:3f:e9: 70:ad:b8:30 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIURXOSS9QRAJx3rTxE+C/DEr1v0h8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3QjlBQTUxMjdCQUM0N0RBRjAxNzI3REZGMjVFMjZG NjM4NjQzQzAeFw0yNjA1MDMwMjI0MjdaFw0yNzA1MDIwMjI5MjdaMDMxMTAvBgNV BAMTKDYxQTZGRDY5MDI1NzRCNDhDQzI1MTE4MTVCNkUxNjJFMTg2ODNCRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjKmK2xGPmMtE6H1PmGBd0dZkS MRVpa7FLpGWQIihbCv9CDzPSayy6v4dSTekTD5nfVdt/t445xCr8MioW8uwNzmqa EM7T+Ao87el0L6I2U/Q4n0OI6bVakEU1ORKHCpKfbW2BKrYhH6uO5EEWaqBd4nIw LOO6wccxYw9NmnyVtLo60bMLR4t2NGxafRQZFZMyib2nzGU3OCMNVdL/j+cHU1TD wlpsvsrW+XHbb6nKWtMrGtxMRQNbLy87M1Jpo2JNVOkezd2flIEYOvH1A7Ohx0hT an773L5g5LBaq0/kGWuVLjfrR7F/yrH+tsBPwLqbshYuWd+3aaBg9kifk4ONAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUYab9aQJXS0jMJRGBW24WLhhoO+wwHwYDVR0j BBgwFoAUyXuapRJ7rEfa8Bcn3/JeJvY4ZDwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDM4MDYxZjEtZmEzMC00YmQ2LTgxYTAtMmVjNjcwODM2YzQyLzAvQzk3QjlBQTUx MjdCQUM0N0RBRjAxNzI3REZGMjVFMjZGNjM4NjQzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOTdCOUFBNTEyN0JBQzQ3REFGMDE3MjdERkYyNUUyNkY2Mzg2 NDNDLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQzODA2MWYxLWZhMzAtNGJkNi04 MWEwLTJlYzY3MDgzNmM0Mi8wLzMyMzAzMDMxM2E2NDY2MzYzYTM2NjYzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzMxMzczMDM0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 9m8AMA0GCSqGSIb3DQEBCwUAA4IBAQAlsBCh68aCRueOp9ykg14FmzboJu7vPdpY pLnk1LJ2xOMOXD6hJt5BAZ8HyTNkTJZeTGPdBMvuVNy1HpMEraVH4RF33DZl40WU unc2JPtAcVNOn7YnLy2ztiZ4OQL+KxAoWvcqJ902byqA+KrN+XTp7ojcB2ZJVb60 HVKbrzry8Q6ZTrG7hFlNrXE92kq5++L1SgXgyXLAa62ZHvILxD+KApQrZjBhHiCf PxA4WYfo5muAEltJR3yJBaC3sOdoiKSwnviVUswe6LStWwg56NhFguNlkWSimJFz pu6KACPo6ByPi5+WS9BRE0isMI716Aaq20pGl69Mu46aP+lwrbgw -----END CERTIFICATE-----Generated at Tue May 5 11:40:01 2026 by rpki-client