$ rpki-client -vvvf rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/323430343a656230303a3a2f33322d3332203d3e203536323334.roa File: 323430343a656230303a3a2f33322d3332203d3e203536323334.roa (raw, json) Hash identifier: 895Uo16ftOb/73p0tOoIbBJFLnnJ8rCgVdUqpv0uemA= Subject key identifier: 90:E5:9C:DF:7A:F3:ED:A3:22:57:CC:7F:85:63:F3:D6:E3:FB:0C:7B Certificate issuer: /CN=924279908A47C1011B4B6A54AA05C7BD9D4B6ADA Certificate serial: 442F006A2E21117D0409983D7EA68F3920493356 Authority key identifier: 92:42:79:90:8A:47:C1:01:1B:4B:6A:54:AA:05:C7:BD:9D:4B:6A:DA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/323430343a656230303a3a2f33322d3332203d3e203536323334.roa Signing time: Mon 05 Oct 2026 07:55:03 +0000 ROA not before: Mon 05 Oct 2026 07:50:03 +0000 ROA not after: Mon 04 Oct 2027 07:55:03 +0000 asID: 56234 IP address blocks: 2404:eb00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.crl rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 23:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:2f:00:6a:2e:21:11:7d:04:09:98:3d:7e:a6:8f:39:20:49:33:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=924279908A47C1011B4B6A54AA05C7BD9D4B6ADA Validity Not Before: Oct 5 07:50:03 2026 GMT Not After : Oct 4 07:55:03 2027 GMT Subject: CN=90E59CDF7AF3EDA32257CC7F8563F3D6E3FB0C7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:61:f5:87:2a:3e:80:9a:ea:d3:41:6a:61:9f: 13:ea:a1:1d:ef:dc:98:f9:52:11:6d:79:12:69:09: 1f:78:b8:98:42:94:5f:ec:3c:5d:18:4e:8d:43:fd: 7d:50:f3:54:62:99:78:7a:da:d4:82:8d:d3:24:46: 0a:f2:1c:04:71:59:ed:ba:36:26:00:b9:81:c0:42: ca:b0:d7:db:4b:18:08:31:85:63:02:f0:3d:5c:5b: 15:d1:d2:b1:d1:a4:d4:3d:f3:ff:32:dd:a5:f9:ca: 03:63:f2:a5:e1:fa:92:62:bb:23:55:1c:2e:33:bb: 4d:87:01:13:97:23:4f:87:69:e0:ec:ae:97:5b:f3: f9:7e:a3:45:00:87:d7:e9:e9:1b:ff:1a:96:ee:01: fc:21:5e:c3:0d:0b:1c:db:9e:eb:3f:00:04:44:91: 41:1b:28:38:b0:71:7a:4f:84:fb:88:f1:53:b7:8a: b7:b2:e2:bb:b4:11:13:d2:e4:44:96:3f:1b:50:70: 3c:a8:59:2a:c3:b0:62:dd:49:8a:ef:90:20:8e:74: 72:1a:73:bc:a8:7b:68:91:75:36:bf:ce:4a:de:e3: 1b:f1:2e:39:de:2d:c6:d3:9b:dc:62:df:06:33:7e: 42:72:3d:44:d4:4c:b6:1a:53:d9:0d:98:88:ee:c1: ed:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E5:9C:DF:7A:F3:ED:A3:22:57:CC:7F:85:63:F3:D6:E3:FB:0C:7B X509v3 Authority Key Identifier: keyid:92:42:79:90:8A:47:C1:01:1B:4B:6A:54:AA:05:C7:BD:9D:4B:6A:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/323430343a656230303a3a2f33322d3332203d3e203536323334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:eb00::/32 Signature Algorithm: sha256WithRSAEncryption c7:0f:14:dc:f6:aa:90:49:ab:65:d9:d5:cf:e4:01:9f:e0:07: dc:02:1c:b2:89:f4:6e:00:b4:b6:b7:1f:2d:50:02:af:db:4a: a2:27:f5:04:2b:b4:2a:40:de:cd:96:ea:a5:c2:d5:0f:f1:eb: 64:16:7c:ae:56:d7:7b:95:d8:f3:d2:64:31:5a:2d:4d:88:29: ee:1a:52:e9:f5:ac:f0:6d:1d:25:cc:77:5c:26:eb:a9:e1:1c: c3:b9:32:2e:e9:2d:39:c9:af:79:87:19:b5:be:d7:aa:86:40: 70:b3:05:43:74:dd:cd:17:2e:5a:43:0e:02:59:d4:d2:f2:1f: b3:be:67:2c:bc:c8:89:e0:58:17:75:fd:f7:d9:bd:8f:c0:29: 5b:5c:97:09:85:df:5a:9d:51:74:89:c6:22:fb:54:14:e1:4a: 3f:ed:3c:66:3d:a8:55:cb:7b:7c:d0:50:89:20:bd:e3:a0:ee: 30:a9:10:37:3c:06:b1:c2:37:82:98:83:b6:d9:27:15:67:85: 3f:70:fd:cc:e4:6f:be:fa:9a:24:9d:53:91:a9:0b:ab:72:1c: f4:10:fb:61:02:25:17:b1:ba:52:5e:3a:65:35:c6:b7:5d:59: 95:6f:15:80:f0:34:dd:dd:46:97:1b:ee:4f:ab:a2:ef:d6:66: 6f:5f:59:9b -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIURC8Aai4hEX0ECZg9fqaPOSBJM1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI0Mjc5OTA4QTQ3QzEwMTFCNEI2QTU0QUEwNUM3QkQ5 RDRCNkFEQTAeFw0yNjEwMDUwNzUwMDNaFw0yNzEwMDQwNzU1MDNaMDMxMTAvBgNV BAMTKDkwRTU5Q0RGN0FGM0VEQTMyMjU3Q0M3Rjg1NjNGM0Q2RTNGQjBDN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkYfWHKj6AmurTQWphnxPqoR3v 3Jj5UhFteRJpCR94uJhClF/sPF0YTo1D/X1Q81RimXh62tSCjdMkRgryHARxWe26 NiYAuYHAQsqw19tLGAgxhWMC8D1cWxXR0rHRpNQ98/8y3aX5ygNj8qXh+pJiuyNV HC4zu02HAROXI0+HaeDsrpdb8/l+o0UAh9fp6Rv/GpbuAfwhXsMNCxzbnus/AARE kUEbKDiwcXpPhPuI8VO3irey4ru0ERPS5ESWPxtQcDyoWSrDsGLdSYrvkCCOdHIa c7yoe2iRdTa/zkre4xvxLjneLcbTm9xi3wYzfkJyPUTUTLYaU9kNmIjuwe3bAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUkOWc33rz7aMiV8x/hWPz1uP7DHswHwYDVR0j BBgwFoAUkkJ5kIpHwQEbS2pUqgXHvZ1LatowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDJjN2RmZDQtZTUxMC00NzA3LTk4MTgtYTJiMWUyYzZiMjE2LzAvOTI0Mjc5OTA4 QTQ3QzEwMTFCNEI2QTU0QUEwNUM3QkQ5RDRCNkFEQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MjQyNzk5MDhBNDdDMTAxMUI0QjZBNTRBQTA1QzdCRDlENEI2 QURBLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQyYzdkZmQ0LWU1MTAtNDcwNy05 ODE4LWEyYjFlMmM2YjIxNi8wLzMyMzQzMDM0M2E2NTYyMzAzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDM1MzYzMjMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBOsAMA0GCSqGSIb3 DQEBCwUAA4IBAQDHDxTc9qqQSatl2dXP5AGf4AfcAhyyifRuALS2tx8tUAKv20qi J/UEK7QqQN7NluqlwtUP8etkFnyuVtd7ldjz0mQxWi1NiCnuGlLp9azwbR0lzHdc Juup4RzDuTIu6S05ya95hxm1vteqhkBwswVDdN3NFy5aQw4CWdTS8h+zvmcsvMiJ 4FgXdf332b2PwClbXJcJhd9anVF0icYi+1QU4Uo/7TxmPahVy3t80FCJIL3joO4w qRA3PAaxwjeCmIO22ScVZ4U/cP3M5G+++poknVORqQurchz0EPthAiUXsbpSXjpl Nca3XVmVbxWA8DTd3UaXG+5Pq6Lv1mZvX1mb -----END CERTIFICATE-----Generated at Sun Nov 1 12:59:14 2026 by rpki-client