$ rpki-client -vvvf rpki-rsync.idnic.net/repo/02244416-0e80-4285-9e91-71758d89e1c0/0/323030313a6466363a663763303a3a2f34382d3438203d3e20313339323333.roa File: 323030313a6466363a663763303a3a2f34382d3438203d3e20313339323333.roa (raw, json) Hash identifier: jDympUfxfIgIE9EZlVRv7wuMBUZc38G2sqIa+jOJvx0= Subject key identifier: A5:36:F0:AF:EB:18:39:1D:00:DC:2B:09:A1:A8:9C:13:43:EB:EB:28 Certificate issuer: /CN=CEA0E14B525E5A73964E38F8B6F18E3CCCB1ADF5 Certificate serial: 61A1858FC4904E8FDAAC531566ABE736242A59FE Authority key identifier: CE:A0:E1:4B:52:5E:5A:73:96:4E:38:F8:B6:F1:8E:3C:CC:B1:AD:F5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEA0E14B525E5A73964E38F8B6F18E3CCCB1ADF5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/02244416-0e80-4285-9e91-71758d89e1c0/0/323030313a6466363a663763303a3a2f34382d3438203d3e20313339323333.roa Signing time: Mon 12 Oct 2026 02:40:31 +0000 ROA not before: Mon 12 Oct 2026 02:35:31 +0000 ROA not after: Mon 11 Oct 2027 02:40:31 +0000 asID: 139233 IP address blocks: 2001:df6:f7c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/02244416-0e80-4285-9e91-71758d89e1c0/0/CEA0E14B525E5A73964E38F8B6F18E3CCCB1ADF5.crl rsync://rpki-rsync.idnic.net/repo/02244416-0e80-4285-9e91-71758d89e1c0/0/CEA0E14B525E5A73964E38F8B6F18E3CCCB1ADF5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEA0E14B525E5A73964E38F8B6F18E3CCCB1ADF5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:a1:85:8f:c4:90:4e:8f:da:ac:53:15:66:ab:e7:36:24:2a:59:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEA0E14B525E5A73964E38F8B6F18E3CCCB1ADF5 Validity Not Before: Oct 12 02:35:31 2026 GMT Not After : Oct 11 02:40:31 2027 GMT Subject: CN=A536F0AFEB18391D00DC2B09A1A89C1343EBEB28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:19:b1:7a:3b:28:fb:77:65:fc:24:92:5d:a5: a4:6e:89:5b:a2:e5:e4:f5:e7:30:fe:dd:88:b1:36: 27:78:35:18:b6:2c:4f:37:e7:b2:dc:48:23:b0:3a: 6f:dd:ee:cd:88:97:6a:27:4a:34:97:15:ea:fa:1c: 8a:65:16:2b:6e:d3:bf:cc:a3:80:7d:7e:0c:e0:db: d5:87:49:69:ab:4f:83:9a:14:e5:05:95:2b:2c:54: d4:a3:e2:b2:76:30:0f:4a:e7:aa:f5:62:80:2b:ec: 44:19:03:c7:62:8d:84:6c:48:12:d8:3e:e6:79:85: 65:3b:d9:57:4d:19:e6:a8:ce:6f:42:46:aa:bc:30: ae:36:52:6c:ea:ac:70:41:6a:a5:16:be:04:32:43: be:b7:8b:e5:08:be:95:47:fa:a5:52:23:ed:fa:2d: de:a9:85:a1:f4:b2:3f:5d:91:38:e3:cd:50:a7:88: 60:16:14:fd:cc:ed:50:29:86:b9:96:9d:75:17:37: fe:95:7c:56:fc:c7:ff:96:92:19:eb:3f:cd:c1:fb: 6f:a7:7f:b1:b5:37:ab:fe:98:69:93:35:5e:f4:27: 74:68:65:44:ea:84:f2:1e:c5:d1:19:8f:ed:58:5e: 83:48:d4:c0:71:ab:06:20:eb:7c:6f:f1:2c:6b:1f: c9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:36:F0:AF:EB:18:39:1D:00:DC:2B:09:A1:A8:9C:13:43:EB:EB:28 X509v3 Authority Key Identifier: keyid:CE:A0:E1:4B:52:5E:5A:73:96:4E:38:F8:B6:F1:8E:3C:CC:B1:AD:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/02244416-0e80-4285-9e91-71758d89e1c0/0/CEA0E14B525E5A73964E38F8B6F18E3CCCB1ADF5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEA0E14B525E5A73964E38F8B6F18E3CCCB1ADF5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/02244416-0e80-4285-9e91-71758d89e1c0/0/323030313a6466363a663763303a3a2f34382d3438203d3e20313339323333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:f7c0::/48 Signature Algorithm: sha256WithRSAEncryption 52:0b:0c:b1:1c:c4:9b:11:e7:5c:d5:44:17:65:6c:02:4c:90: eb:01:e2:40:bc:20:1a:e6:8a:dd:25:92:81:77:42:5a:a0:f8: 22:16:71:ec:93:96:04:bb:3a:0f:75:4d:f2:e0:6b:51:81:aa: 6f:d7:54:d2:03:09:48:89:01:2d:30:d4:df:00:46:6a:41:e6: 5b:da:ea:aa:f5:9d:81:44:51:b6:eb:18:48:9f:7c:65:3f:ae: 6a:97:ce:e9:a3:8a:e8:e1:9a:e4:45:0b:a9:9d:86:5f:c0:0e: a0:40:d0:bc:22:b4:6e:43:6b:53:82:e7:11:11:22:47:fb:30: 47:ac:f5:c6:e4:c3:72:59:47:44:04:a5:05:c8:41:d0:88:56: cc:66:58:c8:77:b3:ce:f7:fb:79:7a:31:bc:63:f4:99:ee:91: 5f:d7:f2:c3:13:e0:31:36:57:70:dd:50:94:26:2d:41:4c:7d: 4a:c9:7d:9d:da:a3:18:f8:7b:61:50:cb:90:e7:88:14:39:58: 0b:fd:92:4d:5b:5c:f9:f7:15:09:af:a7:5f:d9:76:5d:ad:b6: d1:61:53:c5:18:fa:26:6c:93:79:f5:7d:eb:b1:23:ad:1d:9c: d6:c9:d8:f6:89:cb:6e:7c:ce:d6:64:91:10:20:64:b2:ff:4d: 0f:aa:e2:c9 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUYaGFj8SQTo/arFMVZqvnNiQqWf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBMEUxNEI1MjVFNUE3Mzk2NEUzOEY4QjZGMThFM0ND Q0IxQURGNTAeFw0yNjEwMTIwMjM1MzFaFw0yNzEwMTEwMjQwMzFaMDMxMTAvBgNV BAMTKEE1MzZGMEFGRUIxODM5MUQwMERDMkIwOUExQTg5QzEzNDNFQkVCMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmGbF6Oyj7d2X8JJJdpaRuiVui 5eT15zD+3YixNid4NRi2LE8357LcSCOwOm/d7s2Il2onSjSXFer6HIplFitu07/M o4B9fgzg29WHSWmrT4OaFOUFlSssVNSj4rJ2MA9K56r1YoAr7EQZA8dijYRsSBLY PuZ5hWU72VdNGeaozm9CRqq8MK42UmzqrHBBaqUWvgQyQ763i+UIvpVH+qVSI+36 Ld6phaH0sj9dkTjjzVCniGAWFP3M7VAphrmWnXUXN/6VfFb8x/+WkhnrP83B+2+n f7G1N6v+mGmTNV70J3RoZUTqhPIexdEZj+1YXoNI1MBxqwYg63xv8SxrH8n9AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUpTbwr+sYOR0A3CsJoaicE0Pr6ygwHwYDVR0j BBgwFoAUzqDhS1JeWnOWTjj4tvGOPMyxrfUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDIyNDQ0MTYtMGU4MC00Mjg1LTllOTEtNzE3NThkODllMWMwLzAvQ0VBMEUxNEI1 MjVFNUE3Mzk2NEUzOEY4QjZGMThFM0NDQ0IxQURGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUEwRTE0QjUyNUU1QTczOTY0RTM4RjhCNkYxOEUzQ0NDQjFB REY1LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzAyMjQ0NDE2LTBlODAtNDI4NS05 ZTkxLTcxNzU4ZDg5ZTFjMC8wLzMyMzAzMDMxM2E2NDY2MzYzYTY2Mzc2MzMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM5MzIzMzMzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 9vfAMA0GCSqGSIb3DQEBCwUAA4IBAQBSCwyxHMSbEedc1UQXZWwCTJDrAeJAvCAa 5ordJZKBd0JaoPgiFnHsk5YEuzoPdU3y4GtRgapv11TSAwlIiQEtMNTfAEZqQeZb 2uqq9Z2BRFG26xhIn3xlP65ql87po4ro4ZrkRQupnYZfwA6gQNC8IrRuQ2tTgucR ESJH+zBHrPXG5MNyWUdEBKUFyEHQiFbMZljId7PO9/t5ejG8Y/SZ7pFf1/LDE+Ax Nldw3VCUJi1BTH1KyX2d2qMY+HthUMuQ54gUOVgL/ZJNW1z59xUJr6df2XZdrbbR YVPFGPombJN59X3rsSOtHZzWydj2ictufM7WZJEQIGSy/00PquLJ -----END CERTIFICATE-----Generated at Mon Nov 2 22:08:52 2026 by rpki-client