$ rpki-client -vvvf rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/323030313a6466313a316334303a3a2f34382d3438203d3e20313339323035.roa File: 323030313a6466313a316334303a3a2f34382d3438203d3e20313339323035.roa (raw, json) Hash identifier: YbOI5aFhnLmVxr4CRLkG88zjm2Rznib1BrI9wVME05k= Subject key identifier: 1D:A0:38:71:70:D7:70:3F:D0:C4:E7:2B:2E:73:06:FE:51:21:32:D2 Certificate issuer: /CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2 Certificate serial: 0F30456ACE8056CD3844CC42A6762A434EAE7B8A Authority key identifier: 59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/323030313a6466313a316334303a3a2f34382d3438203d3e20313339323035.roa Signing time: Fri 21 Aug 2026 09:41:27 +0000 ROA not before: Fri 21 Aug 2026 09:36:27 +0000 ROA not after: Fri 20 Aug 2027 09:41:27 +0000 asID: 139205 IP address blocks: 2001:df1:1c40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:30:45:6a:ce:80:56:cd:38:44:cc:42:a6:76:2a:43:4e:ae:7b:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2 Validity Not Before: Aug 21 09:36:27 2026 GMT Not After : Aug 20 09:41:27 2027 GMT Subject: CN=1DA0387170D7703FD0C4E72B2E7306FE512132D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:bf:b5:8e:36:82:74:bd:db:fa:2b:66:10:c7: 4d:5c:59:30:c1:19:91:b1:7c:e4:93:3e:ef:2c:ed: 31:e2:c1:22:03:33:96:d6:26:af:44:e6:ee:04:99: 1f:a8:5b:43:cd:be:66:0a:b0:ad:a8:c2:18:f8:6f: 25:d0:99:00:ae:d5:cf:ec:c6:2d:c2:14:5f:3c:25: 83:3f:9e:d6:ad:5a:23:b3:69:4e:44:e3:3f:a7:e2: 63:16:1f:ef:6e:81:08:e8:2f:44:fd:18:72:b0:4c: 49:65:b9:19:10:26:c9:44:8e:f6:55:6e:17:9b:0a: e2:43:82:e3:7b:94:04:8f:f9:ba:d3:b9:78:8a:30: f5:90:9c:87:d2:84:d7:d4:23:20:50:f2:ec:73:aa: e3:44:b1:32:ec:9e:f1:a5:01:b8:c8:92:ee:df:c3: d3:db:d9:55:7f:3c:68:e8:48:9f:5d:40:c4:8d:c3: 2b:60:16:df:e1:91:23:b1:40:c2:b0:c7:b9:2c:c9: a9:66:2e:29:cf:94:6b:a2:c7:d5:9c:f5:4a:25:c8: ac:d7:65:ae:91:f7:24:44:bc:4d:40:6f:bc:a4:78: e4:43:b0:fd:03:d7:7c:d2:8a:f1:10:2b:95:cd:5a: 9d:a3:9d:1f:5a:51:b4:8f:cd:03:e1:6c:da:c0:90: 57:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A0:38:71:70:D7:70:3F:D0:C4:E7:2B:2E:73:06:FE:51:21:32:D2 X509v3 Authority Key Identifier: keyid:59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/323030313a6466313a316334303a3a2f34382d3438203d3e20313339323035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:1c40::/48 Signature Algorithm: sha256WithRSAEncryption 51:6b:63:ce:69:4a:5d:0b:92:ed:5e:91:ba:22:d5:c2:62:a5: fb:a6:ee:11:16:67:d1:d1:e4:17:2a:67:5c:75:36:48:b6:96: bc:fa:9f:ec:29:79:d3:89:32:bd:1d:59:9f:f6:5a:61:6d:9a: 99:86:bf:84:01:81:24:73:84:d5:4d:1f:3c:9b:75:7e:00:21: 0c:f3:8c:59:18:ab:50:e4:be:d9:85:c5:b5:94:33:3a:9a:09: 14:3c:e7:6f:29:80:0d:9b:b7:b5:98:fa:ed:f4:a6:7c:c9:98: 08:46:61:43:7e:dd:73:9e:a5:19:fd:69:63:ca:36:e1:3d:91: 0b:62:94:e3:6b:be:69:5d:94:96:14:9a:7a:19:80:5e:ed:90: 03:6b:a2:80:ed:61:91:e7:6f:64:ca:3b:dc:86:c2:1d:6d:29: 95:8d:56:bf:32:e7:b8:27:1e:04:85:44:0c:a3:ac:f1:46:4d: 49:34:da:fe:31:a8:6e:7f:85:94:aa:a8:a5:86:ca:16:b2:b5: 23:cc:c4:80:e4:8a:fb:cf:01:ed:71:d6:8c:55:5e:0a:66:80: 63:d9:73:6b:35:b6:0a:ca:d8:6e:59:4a:75:4b:6a:14:8e:ab: da:67:6a:3e:43:cb:cf:64:bf:4b:f4:4d:e6:e9:a2:20:6a:0b: 5f:db:0c:4f -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUDzBFas6AVs04RMxCpnYqQ06ue4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTk1QURFOTVDRDM5NzEyNjQ1Mzc5MzRDN0E0MDYxRTJG Q0E2Q0NDMjAeFw0yNjA4MjEwOTM2MjdaFw0yNzA4MjAwOTQxMjdaMDMxMTAvBgNV BAMTKDFEQTAzODcxNzBENzcwM0ZEMEM0RTcyQjJFNzMwNkZFNTEyMTMyRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrv7WONoJ0vdv6K2YQx01cWTDB GZGxfOSTPu8s7THiwSIDM5bWJq9E5u4EmR+oW0PNvmYKsK2owhj4byXQmQCu1c/s xi3CFF88JYM/ntatWiOzaU5E4z+n4mMWH+9ugQjoL0T9GHKwTElluRkQJslEjvZV bhebCuJDguN7lASP+brTuXiKMPWQnIfShNfUIyBQ8uxzquNEsTLsnvGlAbjIku7f w9Pb2VV/PGjoSJ9dQMSNwytgFt/hkSOxQMKwx7ksyalmLinPlGuix9Wc9UolyKzX Za6R9yREvE1Ab7ykeORDsP0D13zSivEQK5XNWp2jnR9aUbSPzQPhbNrAkFfxAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUHaA4cXDXcD/QxOcrLnMG/lEhMtIwHwYDVR0j BBgwFoAUWVrelc05cSZFN5NMekBh4vymzMIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjdkOWQ3Y2ItNmNmYi00ZGUwLTlkYWEtZDIyMmI3YTg5MDcyLzAvNTk1QURFOTVD RDM5NzEyNjQ1Mzc5MzRDN0E0MDYxRTJGQ0E2Q0NDMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OTVBREU5NUNEMzk3MTI2NDUzNzkzNEM3QTQwNjFFMkZDQTZD Q0MyLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzI3ZDlkN2NiLTZjZmItNGRlMC05 ZGFhLWQyMjJiN2E4OTA3Mi8wLzMyMzAzMDMxM2E2NDY2MzEzYTMxNjMzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM5MzIzMDM1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8RxAMA0GCSqGSIb3DQEBCwUAA4IBAQBRa2POaUpdC5LtXpG6ItXCYqX7pu4RFmfR 0eQXKmdcdTZItpa8+p/sKXnTiTK9HVmf9lphbZqZhr+EAYEkc4TVTR88m3V+ACEM 84xZGKtQ5L7ZhcW1lDM6mgkUPOdvKYANm7e1mPrt9KZ8yZgIRmFDft1znqUZ/Wlj yjbhPZELYpTja75pXZSWFJp6GYBe7ZADa6KA7WGR529kyjvchsIdbSmVjVa/Mue4 Jx4EhUQMo6zxRk1JNNr+Mahuf4WUqqilhsoWsrUjzMSA5Ir7zwHtcdaMVV4KZoBj 2XNrNbYKythuWUp1S2oUjqvaZ2o+Q8vPZL9L9E3m6aIgagtf2wxP -----END CERTIFICATE-----Generated at Thu Sep 3 05:56:10 2026 by rpki-client