$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/323030313a6466313a396634303a3a2f34382d3438203d3e20313439373034.roa File: 323030313a6466313a396634303a3a2f34382d3438203d3e20313439373034.roa (raw, json) Hash identifier: +7gxgZA4R6XZfqKIvJi9Q/LxoHJw6/TCBpYF4xmvuqk= Subject key identifier: BA:C1:52:C3:F7:10:09:44:43:C5:C0:BB:24:86:15:C7:9D:7A:EF:05 Certificate issuer: /CN=1EA610CFADD727ADAA74FA9BFE8DDFAF27302467 Certificate serial: 7BCF177442ACEC12E16A8751421880139B78AA68 Authority key identifier: 1E:A6:10:CF:AD:D7:27:AD:AA:74:FA:9B:FE:8D:DF:AF:27:30:24:67 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/323030313a6466313a396634303a3a2f34382d3438203d3e20313439373034.roa Signing time: Thu 30 Jul 2026 06:32:57 +0000 ROA not before: Thu 30 Jul 2026 06:27:57 +0000 ROA not after: Thu 29 Jul 2027 06:32:57 +0000 asID: 149704 IP address blocks: 2001:df1:9f40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.crl rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 01:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:cf:17:74:42:ac:ec:12:e1:6a:87:51:42:18:80:13:9b:78:aa:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EA610CFADD727ADAA74FA9BFE8DDFAF27302467 Validity Not Before: Jul 30 06:27:57 2026 GMT Not After : Jul 29 06:32:57 2027 GMT Subject: CN=BAC152C3F710094443C5C0BB248615C79D7AEF05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4e:92:82:a5:ca:01:c5:20:f8:c5:bd:26:e7: 06:d1:42:0f:9c:89:50:66:80:b3:60:90:b2:fc:b1: a3:b4:5d:fe:a4:72:3c:07:07:39:c3:ca:c9:8b:87: 42:4a:99:96:a7:56:fc:91:af:01:58:0d:6e:78:0f: 7f:ae:bb:47:52:05:52:a2:5e:a2:1a:d7:e8:d9:c3: af:0c:2e:c1:84:66:1e:1e:f8:b4:d1:43:b6:8d:48: 14:79:5f:11:1b:bc:87:a6:a2:34:4d:66:c3:64:12: fc:72:f7:43:5e:3b:3c:b3:41:b1:db:9a:87:ad:be: a8:2c:50:15:23:9c:1b:36:c1:2d:2d:a4:f4:cb:6d: e6:30:dd:27:74:0a:41:5f:9c:c4:ba:65:7c:d1:39: 98:40:80:05:ff:3a:f3:fb:42:89:74:91:53:36:4f: 4e:9f:56:3f:b9:cc:e8:d6:36:16:1e:e2:4a:a0:ae: a2:b3:d8:86:61:c6:a7:d3:74:d6:83:6d:ac:49:a0: c3:c4:5a:e1:2d:8b:b8:04:61:4b:79:07:b1:b0:bf: e3:90:0e:32:49:2d:cc:bf:49:7c:98:9e:2f:e5:8f: 5c:cc:f8:ba:82:b6:44:b1:fb:fa:a8:91:a3:22:bd: 14:d1:c5:64:8c:b1:94:9a:24:ed:bb:57:88:84:47: 78:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C1:52:C3:F7:10:09:44:43:C5:C0:BB:24:86:15:C7:9D:7A:EF:05 X509v3 Authority Key Identifier: keyid:1E:A6:10:CF:AD:D7:27:AD:AA:74:FA:9B:FE:8D:DF:AF:27:30:24:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/323030313a6466313a396634303a3a2f34382d3438203d3e20313439373034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:9f40::/48 Signature Algorithm: sha256WithRSAEncryption 38:42:fe:79:a7:75:e0:94:db:90:b2:fb:6e:9d:bd:80:1c:bf: 14:4f:48:a6:05:fb:59:c2:e8:18:27:6c:49:cd:38:bf:96:f6: 05:bc:42:15:2c:f0:98:e7:1a:be:fa:42:a5:a2:b2:c3:1f:32: 56:43:c8:7c:19:7a:b4:6b:a5:a8:33:a5:03:c4:d4:d9:53:5b: f6:4f:2e:6d:9b:f5:ae:06:00:bb:ea:25:9d:60:07:c0:7d:05: 5a:b6:ab:26:fb:0a:70:67:c6:5c:5b:6a:4d:27:56:b4:91:a0: 6a:07:ae:ef:18:8c:3d:78:f3:19:8a:45:20:af:93:1c:40:57: d3:00:4a:17:3d:12:d4:a3:64:d0:78:5d:8c:a5:5a:10:79:53: 1d:0b:61:34:1d:08:d8:93:0c:ea:eb:fb:14:2c:7c:52:2a:ff: 11:de:81:4b:42:e8:59:a4:d8:9f:69:63:75:4f:7d:8f:8a:fd: 36:c1:1b:85:70:b5:87:ac:15:77:fc:95:3a:9d:51:3f:14:60: c7:97:c2:1f:18:b6:72:77:7e:53:ec:69:39:06:88:68:2b:93: 3c:e0:dc:18:50:5c:4e:82:21:0d:46:00:1c:6e:d4:37:44:5b: 59:67:b7:9d:64:11:4c:86:be:ad:fa:a4:07:4f:0c:11:55:5b: ee:b3:d8:54 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUe88XdEKs7BLhaodRQhiAE5t4qmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVBNjEwQ0ZBREQ3MjdBREFBNzRGQTlCRkU4RERGQUYy NzMwMjQ2NzAeFw0yNjA3MzAwNjI3NTdaFw0yNzA3MjkwNjMyNTdaMDMxMTAvBgNV BAMTKEJBQzE1MkMzRjcxMDA5NDQ0M0M1QzBCQjI0ODYxNUM3OUQ3QUVGMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2TpKCpcoBxSD4xb0m5wbRQg+c iVBmgLNgkLL8saO0Xf6kcjwHBznDysmLh0JKmZanVvyRrwFYDW54D3+uu0dSBVKi XqIa1+jZw68MLsGEZh4e+LTRQ7aNSBR5XxEbvIemojRNZsNkEvxy90NeOzyzQbHb moetvqgsUBUjnBs2wS0tpPTLbeYw3Sd0CkFfnMS6ZXzROZhAgAX/OvP7Qol0kVM2 T06fVj+5zOjWNhYe4kqgrqKz2IZhxqfTdNaDbaxJoMPEWuEti7gEYUt5B7Gwv+OQ DjJJLcy/SXyYni/lj1zM+LqCtkSx+/qokaMivRTRxWSMsZSaJO27V4iER3gDAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUusFSw/cQCURDxcC7JIYVx5167wUwHwYDVR0j BBgwFoAUHqYQz63XJ62qdPqb/o3frycwJGcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDEwZWRkY2QtN2QzOC00NzY1LWFhMjYtN2U0NTc2NzA0MjNjLzAvMUVBNjEwQ0ZB REQ3MjdBREFBNzRGQTlCRkU4RERGQUYyNzMwMjQ2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUE2MTBDRkFERDcyN0FEQUE3NEZBOUJGRThEREZBRjI3MzAy NDY3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QxMGVkZGNkLTdkMzgtNDc2NS1h YTI2LTdlNDU3NjcwNDIzYy8wLzMyMzAzMDMxM2E2NDY2MzEzYTM5NjYzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDM5MzczMDM0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8Z9AMA0GCSqGSIb3DQEBCwUAA4IBAQA4Qv55p3XglNuQsvtunb2AHL8UT0imBftZ wugYJ2xJzTi/lvYFvEIVLPCY5xq++kKlorLDHzJWQ8h8GXq0a6WoM6UDxNTZU1v2 Ty5tm/WuBgC76iWdYAfAfQVatqsm+wpwZ8ZcW2pNJ1a0kaBqB67vGIw9ePMZikUg r5McQFfTAEoXPRLUo2TQeF2MpVoQeVMdC2E0HQjYkwzq6/sULHxSKv8R3oFLQuhZ pNifaWN1T32Piv02wRuFcLWHrBV3/JU6nVE/FGDHl8IfGLZyd35T7Gk5BohoK5M8 4NwYUFxOgiENRgAcbtQ3RFtZZ7edZBFMhr6t+qQHTwwRVVvus9hU -----END CERTIFICATE-----Generated at Thu Sep 3 09:44:50 2026 by rpki-client