$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/323030313a6466343a326638303a3a2f34382d3438203d3e20313430343434.roa File: 323030313a6466343a326638303a3a2f34382d3438203d3e20313430343434.roa (raw, json) Hash identifier: 8hOpociGJtqDE34L3JSdw+Pc3sQMSXPBrrMZuOG+ZxI= Subject key identifier: 98:56:17:B3:AA:76:4D:5D:BB:89:A7:3D:99:E7:B2:3A:CB:3A:69:5C Certificate issuer: /CN=7CB53701F9A5E6CBB24596105D30044B647BBC84 Certificate serial: 71B5E001280F80F62DC8F6756560308B17F059A6 Authority key identifier: 7C:B5:37:01:F9:A5:E6:CB:B2:45:96:10:5D:30:04:4B:64:7B:BC:84 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/323030313a6466343a326638303a3a2f34382d3438203d3e20313430343434.roa Signing time: Tue 20 Oct 2026 15:03:19 +0000 ROA not before: Tue 20 Oct 2026 14:58:19 +0000 ROA not after: Tue 19 Oct 2027 15:03:19 +0000 asID: 140444 IP address blocks: 2001:df4:2f80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.crl rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 23:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:b5:e0:01:28:0f:80:f6:2d:c8:f6:75:65:60:30:8b:17:f0:59:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CB53701F9A5E6CBB24596105D30044B647BBC84 Validity Not Before: Oct 20 14:58:19 2026 GMT Not After : Oct 19 15:03:19 2027 GMT Subject: CN=985617B3AA764D5DBB89A73D99E7B23ACB3A695C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:75:bd:96:39:d6:c2:aa:a4:d8:44:f6:90:89: 95:82:2e:3c:bb:2c:8f:89:82:25:79:7c:eb:7d:ce: 82:ab:78:40:f5:05:39:49:e9:56:18:c8:aa:32:03: 12:57:8e:9b:58:94:14:7c:d6:2c:51:d5:50:6b:ce: 32:9d:9d:a8:15:5f:97:48:74:cf:5f:0f:73:88:a6: 7a:ed:a8:3b:bf:49:57:d8:a4:a6:e6:89:31:04:3f: a2:0a:7b:02:13:17:6d:b3:91:88:a5:50:fd:70:62: b1:78:41:f3:92:d9:96:54:42:9e:ae:30:7b:f5:85: a0:47:32:1a:4f:0a:13:30:66:4d:41:89:4c:cb:cb: 60:2e:92:fb:d1:09:e7:a2:fb:0d:b3:e4:2f:83:88: 98:41:e1:18:69:60:b5:e8:8d:25:a4:d2:4d:d0:e0: bd:6a:b3:59:c2:aa:80:75:e7:05:fe:c3:a1:3d:6e: d6:ab:c7:f3:9f:fe:bd:96:6b:ef:9a:93:8b:92:01: 31:13:29:1f:32:3f:ab:8a:a6:58:fa:07:34:3e:0a: c8:d0:cc:74:4f:b6:cf:19:9b:99:4d:8c:c1:66:f0: b8:d3:c1:0c:bc:e7:f1:96:cf:7b:8e:ea:b2:c3:ec: ae:80:18:76:67:5e:61:ef:75:08:54:be:cc:b4:b4: 84:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:56:17:B3:AA:76:4D:5D:BB:89:A7:3D:99:E7:B2:3A:CB:3A:69:5C X509v3 Authority Key Identifier: keyid:7C:B5:37:01:F9:A5:E6:CB:B2:45:96:10:5D:30:04:4B:64:7B:BC:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/323030313a6466343a326638303a3a2f34382d3438203d3e20313430343434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:2f80::/48 Signature Algorithm: sha256WithRSAEncryption 08:80:13:14:4b:f5:b4:1f:37:48:9f:2f:0e:eb:07:71:18:94: 1d:74:c0:84:58:7f:43:3f:86:e0:7b:6b:6a:8a:96:23:c7:77: db:9a:34:b6:a3:35:a4:89:9b:2a:90:b7:9b:0a:e1:1b:d2:4c: a8:ab:8c:1c:bd:df:ba:ac:a0:b5:3f:b1:42:54:01:27:ae:d0: 4d:4b:9a:9e:9c:a7:ec:59:0e:0b:94:20:10:52:c9:6e:c5:3f: c3:f6:b1:de:e4:32:07:17:5d:3d:e0:e6:c1:85:ad:2c:ce:58: 6f:34:5d:5c:31:19:4f:3c:5f:74:7a:c7:38:0f:04:cf:14:6a: 30:f8:0d:2d:84:fb:59:48:39:9e:96:84:79:0f:6f:14:9c:35: e8:7f:a5:db:ec:61:b3:07:31:c7:a6:ab:ae:e3:19:3d:f0:14: 28:c5:2e:ca:2e:60:4c:5c:8f:91:c6:bb:84:9e:75:ce:60:ae: fe:03:e4:4b:8b:a7:e9:7f:9b:6b:80:bc:f5:19:58:82:45:40: 18:70:40:7f:2e:91:80:7e:cf:e1:4d:1e:d9:37:ac:62:66:69: c6:7e:24:55:65:c2:77:28:21:d3:bd:81:03:d3:2e:0a:65:2e: 87:ca:94:4c:80:92:66:b5:82:5a:02:fc:59:72:d5:88:f7:36: db:68:1b:5c -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUcbXgASgPgPYtyPZ1ZWAwixfwWaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NCNTM3MDFGOUE1RTZDQkIyNDU5NjEwNUQzMDA0NEI2 NDdCQkM4NDAeFw0yNjEwMjAxNDU4MTlaFw0yNzEwMTkxNTAzMTlaMDMxMTAvBgNV BAMTKDk4NTYxN0IzQUE3NjRENURCQjg5QTczRDk5RTdCMjNBQ0IzQTY5NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsdb2WOdbCqqTYRPaQiZWCLjy7 LI+JgiV5fOt9zoKreED1BTlJ6VYYyKoyAxJXjptYlBR81ixR1VBrzjKdnagVX5dI dM9fD3OIpnrtqDu/SVfYpKbmiTEEP6IKewITF22zkYilUP1wYrF4QfOS2ZZUQp6u MHv1haBHMhpPChMwZk1BiUzLy2AukvvRCeei+w2z5C+DiJhB4RhpYLXojSWk0k3Q 4L1qs1nCqoB15wX+w6E9btarx/Of/r2Wa++ak4uSATETKR8yP6uKplj6BzQ+CsjQ zHRPts8Zm5lNjMFm8LjTwQy85/GWz3uO6rLD7K6AGHZnXmHvdQhUvsy0tISTAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUmFYXs6p2TV27iac9meeyOss6aVwwHwYDVR0j BBgwFoAUfLU3Afml5suyRZYQXTAES2R7vIQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzcxMTU1OWUtZDVlYy00YzE5LWIzMzUtZWUyOWRkZmJiOWQ1LzAvN0NCNTM3MDFG OUE1RTZDQkIyNDU5NjEwNUQzMDA0NEI2NDdCQkM4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Q0I1MzcwMUY5QTVFNkNCQjI0NTk2MTA1RDMwMDQ0QjY0N0JC Qzg0LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M3MTE1NTllLWQ1ZWMtNGMxOS1i MzM1LWVlMjlkZGZiYjlkNS8wLzMyMzAzMDMxM2E2NDY2MzQzYTMyNjYzODMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMwMzQzNDM0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 9C+AMA0GCSqGSIb3DQEBCwUAA4IBAQAIgBMUS/W0HzdIny8O6wdxGJQddMCEWH9D P4bge2tqipYjx3fbmjS2ozWkiZsqkLebCuEb0kyoq4wcvd+6rKC1P7FCVAEnrtBN S5qenKfsWQ4LlCAQUsluxT/D9rHe5DIHF1094ObBha0szlhvNF1cMRlPPF90esc4 DwTPFGow+A0thPtZSDmeloR5D28UnDXof6Xb7GGzBzHHpquu4xk98BQoxS7KLmBM XI+RxruEnnXOYK7+A+RLi6fpf5trgLz1GViCRUAYcEB/LpGAfs/hTR7ZN6xiZmnG fiRVZcJ3KCHTvYED0y4KZS6HypRMgJJmtYJaAvxZctWI9zbbaBtc -----END CERTIFICATE-----Generated at Sun Nov 1 13:07:41 2026 by rpki-client