$ rpki-client -vvvf rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/323430303a363234303a3a2f33322d3332203d3e203633383237.roa File: 323430303a363234303a3a2f33322d3332203d3e203633383237.roa (raw, json) Hash identifier: l6710S8jmxJGmeAS8FHaradQgxTchTloDHPECvYc8nE= Subject key identifier: 1A:A9:A3:38:45:6A:93:A2:BC:15:0B:F6:30:C6:06:50:91:63:FE:CB Certificate issuer: /CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4 Certificate serial: 402C0FFD5A8FCBDA29E05B5F4C81AD10F133A1ED Authority key identifier: 08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/323430303a363234303a3a2f33322d3332203d3e203633383237.roa Signing time: Sat 10 Oct 2026 06:55:22 +0000 ROA not before: Sat 10 Oct 2026 06:50:22 +0000 ROA not after: Sat 09 Oct 2027 06:55:22 +0000 asID: 63827 IP address blocks: 2400:6240::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 22:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:2c:0f:fd:5a:8f:cb:da:29:e0:5b:5f:4c:81:ad:10:f1:33:a1:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4 Validity Not Before: Oct 10 06:50:22 2026 GMT Not After : Oct 9 06:55:22 2027 GMT Subject: CN=1AA9A338456A93A2BC150BF630C606509163FECB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:73:d9:3e:4d:7c:51:89:b6:b3:50:3f:30:c5: d4:e1:be:60:ed:a9:02:71:dc:f7:39:77:2f:b6:96: 42:5b:33:83:cd:c5:fd:fa:69:4f:91:90:aa:8d:2d: 21:62:43:59:88:91:17:8c:fb:04:1e:01:ae:53:42: 4a:e8:82:59:af:fd:a6:eb:f5:6d:e0:e6:25:12:b6: 63:70:1d:f8:94:26:b4:e2:2c:98:1c:48:b4:7e:57: e1:7a:9d:f5:a4:83:3b:f6:42:46:50:39:38:cc:ff: da:10:b9:f6:90:38:f4:81:3b:46:c7:42:59:b8:e3: 6f:8c:f4:3a:e5:90:36:db:cc:26:6c:d7:2b:8a:7c: ce:2e:0e:fa:8a:6f:31:29:0a:4d:33:b8:12:38:8f: 8c:03:dd:e1:3d:ab:a3:e4:31:60:fc:8a:34:c8:39: f1:52:35:89:a5:e9:d7:a2:e3:31:84:45:e6:60:dc: 18:8f:9c:21:dc:6b:1e:9f:9c:35:c1:58:d7:e5:e0: 20:61:65:35:c7:90:dc:f7:d0:86:80:36:fe:26:80: f5:96:10:44:2e:eb:88:fd:05:4b:c0:b2:97:2f:c4: 0e:c1:df:41:31:e1:f5:c2:fa:22:e5:75:a5:a1:18: 07:ea:81:fe:16:c1:a9:1d:87:ca:54:68:7f:e0:49: eb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A9:A3:38:45:6A:93:A2:BC:15:0B:F6:30:C6:06:50:91:63:FE:CB X509v3 Authority Key Identifier: keyid:08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/323430303a363234303a3a2f33322d3332203d3e203633383237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:6240::/32 Signature Algorithm: sha256WithRSAEncryption 13:98:eb:d5:50:c4:5a:6d:ec:43:6b:98:18:45:79:f7:c5:af: ea:e7:ff:ef:b3:41:ea:7d:b8:e6:08:56:8d:ef:10:00:7e:30: 39:b9:15:79:e2:ba:e6:6e:d0:b6:ca:56:89:7f:21:5e:d0:d6: aa:80:7c:48:45:a2:78:04:ae:31:ab:46:c7:a1:4a:7a:1f:a7: 72:f7:3c:db:be:45:93:83:d5:e2:a2:0b:87:c1:c8:7b:79:b0: b9:a4:62:4b:fd:77:c7:ea:92:14:db:87:7c:16:09:14:52:e3: 0e:ff:4c:b5:31:00:61:d3:45:d0:83:37:21:d2:d5:dc:6d:5d: ca:4e:85:17:01:19:d5:d0:73:7f:8b:a6:17:ca:41:fd:e8:18: 0a:b6:ac:3b:2b:fb:df:2f:ae:cd:45:bd:26:c0:87:07:85:1e: 4b:3b:b2:e1:1f:9f:7f:4d:5f:4c:52:d0:f0:26:22:47:97:70: fb:22:cd:75:48:c3:f0:e2:15:22:b8:80:c8:02:c4:79:42:aa: c0:15:cb:f6:e6:13:18:3e:1a:45:81:fc:e2:72:73:5c:67:c4: bc:a9:48:a5:64:ff:da:76:9d:66:e1:9b:3a:06:e9:54:37:9e: bb:84:40:83:1a:e8:b9:c4:e6:e7:22:d3:65:68:fa:91:34:f2: fc:12:77:0d -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUQCwP/VqPy9op4FtfTIGtEPEzoe0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEM0Q1NTZBOTg5RTBFNDc3RUZFQjgyNDI4NTREN0E0 MDI5RTZDNDAeFw0yNjEwMTAwNjUwMjJaFw0yNzEwMDkwNjU1MjJaMDMxMTAvBgNV BAMTKDFBQTlBMzM4NDU2QTkzQTJCQzE1MEJGNjMwQzYwNjUwOTE2M0ZFQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+c9k+TXxRibazUD8wxdThvmDt qQJx3Pc5dy+2lkJbM4PNxf36aU+RkKqNLSFiQ1mIkReM+wQeAa5TQkroglmv/abr 9W3g5iUStmNwHfiUJrTiLJgcSLR+V+F6nfWkgzv2QkZQOTjM/9oQufaQOPSBO0bH Qlm442+M9DrlkDbbzCZs1yuKfM4uDvqKbzEpCk0zuBI4j4wD3eE9q6PkMWD8ijTI OfFSNYml6dei4zGEReZg3BiPnCHcax6fnDXBWNfl4CBhZTXHkNz30IaANv4mgPWW EEQu64j9BUvAspcvxA7B30Ex4fXC+iLldaWhGAfqgf4Wwakdh8pUaH/gSesRAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUGqmjOEVqk6K8FQv2MMYGUJFj/sswHwYDVR0j BBgwFoAUCNPVVqmJ4OR37+uCQoVNekAp5sQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFhNjg3MTItMWQ5YS00MTQzLTgyZjEtMWM4MmMzMzE2NWVhLzAvMDhEM0Q1NTZB OTg5RTBFNDc3RUZFQjgyNDI4NTREN0E0MDI5RTZDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOEQzRDU1NkE5ODlFMEU0NzdFRkVCODI0Mjg1NEQ3QTQwMjlF NkM0LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkxYTY4NzEyLTFkOWEtNDE0My04 MmYxLTFjODJjMzMxNjVlYS8wLzMyMzQzMDMwM2EzNjMyMzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDM2MzMzODMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAGJAMA0GCSqGSIb3 DQEBCwUAA4IBAQATmOvVUMRabexDa5gYRXn3xa/q5//vs0HqfbjmCFaN7xAAfjA5 uRV54rrmbtC2ylaJfyFe0NaqgHxIRaJ4BK4xq0bHoUp6H6dy9zzbvkWTg9XioguH wch7ebC5pGJL/XfH6pIU24d8FgkUUuMO/0y1MQBh00XQgzch0tXcbV3KToUXARnV 0HN/i6YXykH96BgKtqw7K/vfL67NRb0mwIcHhR5LO7LhH59/TV9MUtDwJiJHl3D7 Is11SMPw4hUiuIDIAsR5QqrAFcv25hMYPhpFgfzicnNcZ8S8qUilZP/adp1m4Zs6 BulUN567hECDGui5xObnItNlaPqRNPL8EncN -----END CERTIFICATE-----Generated at Wed Nov 4 16:00:55 2026 by rpki-client