$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a316632613a3a2f34382d3438203d3e20313336383431.roa File: 323430313a626534303a316632613a3a2f34382d3438203d3e20313336383431.roa (raw, json) Hash identifier: KVIx9MqRz+qX3+vcH5zJGXq2ddLKxWGGE2TzgtXK/JQ= Subject key identifier: E2:20:7A:5F:34:4A:F2:6C:9C:65:D8:E3:79:4E:E6:1A:39:D1:82:D7 Certificate issuer: /CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Certificate serial: 2B44FAAD27BA42188ED52FA6D787087666D2DB62 Authority key identifier: 4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a316632613a3a2f34382d3438203d3e20313336383431.roa Signing time: Tue 06 Oct 2026 00:15:36 +0000 ROA not before: Tue 06 Oct 2026 00:10:36 +0000 ROA not after: Tue 05 Oct 2027 00:15:36 +0000 asID: 136841 IP address blocks: 2401:be40:1f2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:44:fa:ad:27:ba:42:18:8e:d5:2f:a6:d7:87:08:76:66:d2:db:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Validity Not Before: Oct 6 00:10:36 2026 GMT Not After : Oct 5 00:15:36 2027 GMT Subject: CN=E2207A5F344AF26C9C65D8E3794EE61A39D182D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e4:cb:32:b2:6e:90:fc:cd:eb:6c:82:af:49: 5e:7a:b5:a6:f5:e0:66:2c:a1:71:4a:de:d9:dc:b4: 4b:3f:14:f5:da:fc:25:56:bf:08:b8:c7:2b:0f:bb: ef:38:81:bf:83:09:d9:e5:12:78:83:1e:0f:44:80: 4b:3b:ed:ba:25:f8:30:4c:8d:9a:c0:26:85:dd:7c: 67:eb:d6:37:2d:9b:51:31:a5:48:f4:0e:41:1a:e0: ab:55:4b:99:6c:4f:79:fe:24:3c:e4:d5:19:c7:78: 69:33:27:38:54:cf:d0:74:d2:57:80:f9:22:6a:7b: 58:e3:4f:60:c4:42:0c:12:d9:d0:ab:99:ee:29:3a: 21:ae:87:aa:1d:bf:ec:df:d3:4b:fd:42:8a:41:04: d6:2a:8f:a7:f0:90:e0:2d:4c:80:b0:b9:32:8a:55: e6:96:a3:53:25:02:c4:09:74:b7:43:a7:a6:93:67: e5:ae:5e:98:e5:87:c8:6c:6a:33:3b:6d:7b:e3:14: 80:77:77:c8:f7:89:b9:67:3a:83:79:57:8d:b7:5b: 56:2b:e3:5b:c6:78:4c:82:66:b4:08:84:3a:39:ee: 05:dc:71:fc:e9:09:08:f9:37:86:5e:06:de:d5:ca: 5c:57:51:a0:c7:84:41:e9:96:7d:50:46:b1:c0:ee: 11:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:20:7A:5F:34:4A:F2:6C:9C:65:D8:E3:79:4E:E6:1A:39:D1:82:D7 X509v3 Authority Key Identifier: keyid:4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a316632613a3a2f34382d3438203d3e20313336383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:be40:1f2a::/48 Signature Algorithm: sha256WithRSAEncryption 95:e9:9b:ed:5e:ff:7e:fb:8e:b0:90:83:34:92:58:98:b8:45: 8d:ab:2c:b6:32:6a:78:a3:2e:48:50:70:5b:e9:2b:14:38:73: aa:7e:91:a8:e3:95:3e:f9:e8:20:57:6f:5b:ca:c5:b1:33:23: b5:51:00:3b:8e:7d:ea:79:c4:c3:60:c4:98:e9:17:77:ad:c8: 80:6f:5a:9c:ac:a4:f6:fc:dd:24:75:c9:4e:fb:b1:67:c6:26: d9:ab:c1:b1:06:1f:12:9b:d8:19:fe:66:bd:e2:2d:83:8f:9b: 81:3d:d3:bb:c1:f4:83:a7:79:62:ba:38:4f:e0:e7:f6:c2:5d: 20:f0:f7:5d:b0:a0:54:83:8b:a8:37:2a:30:42:23:61:2a:13: 64:9e:c4:a1:5d:61:c4:4c:32:41:d7:3e:73:e4:d3:84:ab:2d: 1d:3a:50:fd:00:c8:fa:a4:4c:a3:fb:87:5f:8c:1d:76:7e:b0: dc:34:f4:2a:3f:c1:09:c6:c0:98:39:27:62:4c:57:3f:17:6d: a6:e2:2d:a1:c9:db:6d:60:83:01:d9:98:5b:7f:e8:58:c2:68: 7b:a1:c6:79:33:b8:0d:fa:ac:76:0f:38:e4:c4:75:50:a0:1f: 78:da:f0:00:3f:47:f4:de:7f:da:2a:87:39:bc:f0:f8:92:26: 3b:1b:1e:fb -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUK0T6rSe6QhiO1S+m14cIdmbS22IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERBMTFENUFGNUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVF NTdENTI0NDAeFw0yNjEwMDYwMDEwMzZaFw0yNzEwMDUwMDE1MzZaMDMxMTAvBgNV BAMTKEUyMjA3QTVGMzQ0QUYyNkM5QzY1RDhFMzc5NEVFNjFBMzlEMTgyRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk5Msysm6Q/M3rbIKvSV56tab1 4GYsoXFK3tnctEs/FPXa/CVWvwi4xysPu+84gb+DCdnlEniDHg9EgEs77bol+DBM jZrAJoXdfGfr1jctm1ExpUj0DkEa4KtVS5lsT3n+JDzk1RnHeGkzJzhUz9B00leA +SJqe1jjT2DEQgwS2dCrme4pOiGuh6odv+zf00v9QopBBNYqj6fwkOAtTICwuTKK VeaWo1MlAsQJdLdDp6aTZ+WuXpjlh8hsajM7bXvjFIB3d8j3iblnOoN5V423W1Yr 41vGeEyCZrQIhDo57gXccfzpCQj5N4ZeBt7VylxXUaDHhEHpln1QRrHA7hHbAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU4iB6XzRK8mycZdjjeU7mGjnRgtcwHwYDVR0j BBgwFoAUTaEdWvXxeucWUZ+EomPhpeV9UkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDczMDRiODMtMzBhYS00YmJmLTlmZDctMmZjZWFkYmYwMDMwLzAvNERBMTFENUFG NUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVFNTdENTI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REExMUQ1QUY1RjE3QUU3MTY1MTlGODRBMjYzRTFBNUU1N0Q1 MjQ0LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA3MzA0YjgzLTMwYWEtNGJiZi05 ZmQ3LTJmY2VhZGJmMDAzMC8wLzMyMzQzMDMxM2E2MjY1MzQzMDNhMzE2NjMyNjEz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzYzODM0MzEucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk Ab5AHyowDQYJKoZIhvcNAQELBQADggEBAJXpm+1e/377jrCQgzSSWJi4RY2rLLYy anijLkhQcFvpKxQ4c6p+kajjlT756CBXb1vKxbEzI7VRADuOfep5xMNgxJjpF3et yIBvWpyspPb83SR1yU77sWfGJtmrwbEGHxKb2Bn+Zr3iLYOPm4E907vB9IOneWK6 OE/g5/bCXSDw912woFSDi6g3KjBCI2EqE2SexKFdYcRMMkHXPnPk04SrLR06UP0A yPqkTKP7h1+MHXZ+sNw09Co/wQnGwJg5J2JMVz8XbabiLaHJ221ggwHZmFt/6FjC aHuhxnkzuA36rHYPOOTEdVCgH3ja8AA/R/Tef9oqhzm88PiSJjsbHvs= -----END CERTIFICATE-----Generated at Mon Oct 26 06:23:06 2026 by rpki-client