$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a323031333a3a2f34382d3438203d3e20313336383431.roa File: 323430313a626534303a323031333a3a2f34382d3438203d3e20313336383431.roa (raw, json) Hash identifier: 0dVO2U/e4KocHPPJF0rYgdh1j1cflMspgiMZuuPT6P0= Subject key identifier: 67:FD:ED:64:45:AE:42:3D:E1:81:31:E7:CD:61:3F:40:A8:56:E9:62 Certificate issuer: /CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Certificate serial: 6B277B12A83566261EF96C52B1107F3C7D334551 Authority key identifier: 4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a323031333a3a2f34382d3438203d3e20313336383431.roa Signing time: Tue 06 Oct 2026 00:15:53 +0000 ROA not before: Tue 06 Oct 2026 00:10:53 +0000 ROA not after: Tue 05 Oct 2027 00:15:53 +0000 asID: 136841 IP address blocks: 2401:be40:2013::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 05:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:27:7b:12:a8:35:66:26:1e:f9:6c:52:b1:10:7f:3c:7d:33:45:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Validity Not Before: Oct 6 00:10:53 2026 GMT Not After : Oct 5 00:15:53 2027 GMT Subject: CN=67FDED6445AE423DE18131E7CD613F40A856E962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1a:70:85:0b:cb:7b:15:d4:d4:00:ef:4f:9d: 27:09:3d:22:44:14:4e:5a:a9:c0:c7:b3:99:91:a0: b0:fd:1a:ab:9f:d3:d0:90:51:3f:3c:bc:ff:78:b2: a5:6f:62:ab:08:6b:16:8b:53:8d:8c:84:6f:6a:2b: 70:78:2d:39:05:c8:2f:c1:1e:4e:65:f7:d7:f8:51: 8e:29:b7:61:d6:4a:5d:29:bc:c8:91:90:98:c0:35: a3:68:ba:fa:18:48:19:c4:ee:48:46:f4:dd:84:30: 26:91:aa:68:35:cd:50:8e:4f:70:e3:7a:f7:ac:e9: ec:b2:ca:19:23:78:40:ee:a4:38:99:3b:9f:bb:02: 02:0b:7d:a2:8f:30:e0:9d:4e:3d:67:57:91:f6:c8: 6c:65:fa:9f:33:95:59:e0:16:cd:c2:7b:dc:49:98: 51:a0:25:32:4e:c7:58:36:ad:1a:59:cb:2c:4a:98: ef:03:af:81:42:53:dc:21:c1:29:d5:01:6a:95:b5: 70:59:47:36:df:cf:7e:ad:f0:33:f1:b5:56:55:a9: 9e:30:7f:4e:d1:2a:25:a1:ba:8b:16:b3:fa:50:50: 66:f8:2a:32:b2:8a:6e:39:6a:d3:a8:1d:50:5d:7b: d8:5b:d8:5d:3b:a7:bc:e4:fd:d5:55:18:23:9c:fa: 5d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FD:ED:64:45:AE:42:3D:E1:81:31:E7:CD:61:3F:40:A8:56:E9:62 X509v3 Authority Key Identifier: keyid:4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a323031333a3a2f34382d3438203d3e20313336383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:be40:2013::/48 Signature Algorithm: sha256WithRSAEncryption 9a:60:f2:f2:77:96:0c:8c:ae:5d:42:79:cb:b4:3b:e8:4d:f7: e3:a0:80:19:43:b8:ff:ac:db:3f:47:32:a1:41:e3:77:1a:b7: 37:12:db:72:7d:31:85:e9:19:5b:dc:bb:33:9b:b3:6f:ea:64: a8:8c:d7:04:bb:76:17:0c:e3:5b:f9:fc:ce:14:fd:76:b6:1b: ca:7b:50:53:42:ea:b1:a3:2d:7a:fb:77:3b:49:e1:dc:e1:51: b0:2b:a2:4d:44:d3:19:bf:a6:60:b2:e4:89:ad:5e:bf:f1:51: 01:b3:da:a7:61:fd:38:85:04:ca:6f:32:29:93:6c:54:53:67: 5d:b8:cb:60:b2:2f:78:55:0c:4b:bc:56:3b:4a:c0:24:a2:dd: 10:b8:8a:6b:50:32:75:37:61:4c:09:78:cf:38:e2:c8:8d:ee: dc:bb:72:23:18:de:0a:c0:0f:d5:20:0d:6a:c6:9e:9f:bd:52: e5:e2:d3:5d:7c:da:91:1d:97:d2:dd:28:a2:9d:1d:c6:cc:db: 6b:57:26:28:1f:ff:85:cb:72:c2:7a:ce:90:77:47:16:f2:56: 77:8f:52:13:45:27:b7:a4:49:04:c4:06:fd:d5:24:42:0c:f5: 7d:0f:e9:36:d7:c2:fb:c7:0a:b0:45:ad:63:b4:1a:66:5e:bc: fb:9b:2a:d0 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUayd7Eqg1ZiYe+WxSsRB/PH0zRVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERBMTFENUFGNUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVF NTdENTI0NDAeFw0yNjEwMDYwMDEwNTNaFw0yNzEwMDUwMDE1NTNaMDMxMTAvBgNV BAMTKDY3RkRFRDY0NDVBRTQyM0RFMTgxMzFFN0NENjEzRjQwQTg1NkU5NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBGnCFC8t7FdTUAO9PnScJPSJE FE5aqcDHs5mRoLD9Gquf09CQUT88vP94sqVvYqsIaxaLU42MhG9qK3B4LTkFyC/B Hk5l99f4UY4pt2HWSl0pvMiRkJjANaNouvoYSBnE7khG9N2EMCaRqmg1zVCOT3Dj eves6eyyyhkjeEDupDiZO5+7AgILfaKPMOCdTj1nV5H2yGxl+p8zlVngFs3Ce9xJ mFGgJTJOx1g2rRpZyyxKmO8Dr4FCU9whwSnVAWqVtXBZRzbfz36t8DPxtVZVqZ4w f07RKiWhuosWs/pQUGb4KjKyim45atOoHVBde9hb2F07p7zk/dVVGCOc+l0xAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUZ/3tZEWuQj3hgTHnzWE/QKhW6WIwHwYDVR0j BBgwFoAUTaEdWvXxeucWUZ+EomPhpeV9UkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDczMDRiODMtMzBhYS00YmJmLTlmZDctMmZjZWFkYmYwMDMwLzAvNERBMTFENUFG NUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVFNTdENTI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REExMUQ1QUY1RjE3QUU3MTY1MTlGODRBMjYzRTFBNUU1N0Q1 MjQ0LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA3MzA0YjgzLTMwYWEtNGJiZi05 ZmQ3LTJmY2VhZGJmMDAzMC8wLzMyMzQzMDMxM2E2MjY1MzQzMDNhMzIzMDMxMzMz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzYzODM0MzEucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk Ab5AIBMwDQYJKoZIhvcNAQELBQADggEBAJpg8vJ3lgyMrl1Cecu0O+hN9+OggBlD uP+s2z9HMqFB43catzcS23J9MYXpGVvcuzObs2/qZKiM1wS7dhcM41v5/M4U/Xa2 G8p7UFNC6rGjLXr7dztJ4dzhUbArok1E0xm/pmCy5ImtXr/xUQGz2qdh/TiFBMpv MimTbFRTZ124y2CyL3hVDEu8VjtKwCSi3RC4imtQMnU3YUwJeM844siN7ty7ciMY 3grAD9UgDWrGnp+9UuXi01182pEdl9LdKKKdHcbM22tXJigf/4XLcsJ6zpB3Rxby VnePUhNFJ7ekSQTEBv3VJEIM9X0P6TbXwvvHCrBFrWO0GmZevPubKtA= -----END CERTIFICATE-----Generated at Mon Oct 26 22:58:32 2026 by rpki-client