$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a343030303a3a2f34382d3438203d3e20313336383431.roa File: 323430313a626534303a343030303a3a2f34382d3438203d3e20313336383431.roa (raw, json) Hash identifier: rDva47R8c0GLS0PITsAoWHne7friMNaYf5+1QgY8skY= Subject key identifier: C1:F6:53:ED:70:89:65:57:8D:08:76:9B:81:38:26:60:E0:0A:0E:F0 Certificate issuer: /CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Certificate serial: 23D71B568C02321509CCB5C29FDCF9E30B8C88F1 Authority key identifier: 4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a343030303a3a2f34382d3438203d3e20313336383431.roa Signing time: Tue 06 Oct 2026 00:16:11 +0000 ROA not before: Tue 06 Oct 2026 00:11:11 +0000 ROA not after: Tue 05 Oct 2027 00:16:11 +0000 asID: 136841 IP address blocks: 2401:be40:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 12:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:d7:1b:56:8c:02:32:15:09:cc:b5:c2:9f:dc:f9:e3:0b:8c:88:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Validity Not Before: Oct 6 00:11:11 2026 GMT Not After : Oct 5 00:16:11 2027 GMT Subject: CN=C1F653ED708965578D08769B81382660E00A0EF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f3:c5:e3:f8:93:f3:fa:1f:99:6f:45:19:5d: 52:91:dc:53:1a:5c:cc:a6:c6:41:c5:f0:9e:3c:96: 22:ab:7b:1f:99:49:c6:29:cf:3d:8c:1b:fc:47:5a: ff:70:17:49:d6:b6:60:d6:20:a6:c5:5c:61:15:a6: bb:91:a2:84:b4:b8:25:8c:6e:5a:4b:fd:c3:e5:4e: f8:dd:49:d5:3b:b7:17:54:15:35:4f:1b:d4:ac:30: 45:02:6f:58:ac:c3:4a:2b:3f:2e:e2:89:6d:cd:47: b3:a8:04:c2:f4:50:9b:c2:3c:2b:45:41:2d:f5:7a: 5d:a9:39:36:1b:a2:2c:7e:66:bb:aa:e7:b5:82:bb: 92:4c:f1:54:2d:05:34:0c:1c:f8:7b:d3:09:67:e1: 1e:e0:fe:cb:71:e7:55:8a:74:08:52:0d:cc:f8:1a: 79:ac:eb:c3:ae:2d:be:4e:85:ed:82:0d:18:5c:a3: e7:e2:3e:6a:6a:42:69:8a:3a:f6:70:b2:33:c6:9c: e1:46:43:7a:a6:b1:53:15:55:22:7f:43:05:64:0d: bc:4e:8b:25:31:a3:62:ed:06:94:23:0e:bd:59:3a: b1:5a:bd:0f:e6:4e:73:af:5a:d1:18:55:6b:6c:5e: d0:91:43:a8:2f:06:86:41:06:b0:4d:b0:ad:6c:8d: fc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F6:53:ED:70:89:65:57:8D:08:76:9B:81:38:26:60:E0:0A:0E:F0 X509v3 Authority Key Identifier: keyid:4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a343030303a3a2f34382d3438203d3e20313336383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:be40:4000::/48 Signature Algorithm: sha256WithRSAEncryption 8c:43:f7:51:69:26:bd:74:bd:6b:7b:3a:9f:bb:4b:77:6a:d8: 62:d3:7b:c3:b6:a8:9d:75:cc:3c:9a:88:93:be:d8:8c:d1:13: 00:29:d1:d8:5e:9c:d5:2a:3c:fa:80:62:3d:b4:c5:32:70:1e: a8:e7:66:c2:18:a6:56:22:a7:fe:a1:63:11:5e:b0:cf:ad:a8: d0:99:95:3e:f9:c6:05:55:31:d2:c0:a7:2c:ab:a2:76:7c:9e: b9:56:dc:fc:3a:fa:bf:59:73:6b:29:8f:48:ca:36:7c:51:35: 77:2a:03:0f:38:99:14:65:8e:a5:05:49:50:8c:2e:d4:6e:5a: c6:a7:20:d6:15:fb:41:78:4a:1a:df:4c:60:b1:da:c5:1d:38: 47:11:d9:74:ae:ad:c9:37:c4:d6:8b:eb:0b:a7:bf:19:f9:e2: 09:9d:b1:39:8a:3b:55:8f:67:f9:00:51:36:ce:4e:c5:c7:b5: f5:1b:75:70:4e:25:28:7b:7f:b3:70:7d:ea:e6:d5:0f:a6:a7: 20:90:8c:13:ca:69:6e:fa:87:22:a1:fd:34:4e:38:3d:8e:9f: 25:c9:48:c0:76:08:c9:42:66:13:55:6d:2d:6a:77:39:b9:98: 36:6f:57:e4:fe:38:5f:91:a3:65:7f:7a:44:3b:94:7f:6c:60: 3d:20:8e:6d -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUI9cbVowCMhUJzLXCn9z54wuMiPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERBMTFENUFGNUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVF NTdENTI0NDAeFw0yNjEwMDYwMDExMTFaFw0yNzEwMDUwMDE2MTFaMDMxMTAvBgNV BAMTKEMxRjY1M0VENzA4OTY1NTc4RDA4NzY5QjgxMzgyNjYwRTAwQTBFRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF88Xj+JPz+h+Zb0UZXVKR3FMa XMymxkHF8J48liKrex+ZScYpzz2MG/xHWv9wF0nWtmDWIKbFXGEVpruRooS0uCWM blpL/cPlTvjdSdU7txdUFTVPG9SsMEUCb1isw0orPy7iiW3NR7OoBML0UJvCPCtF QS31el2pOTYboix+Zruq57WCu5JM8VQtBTQMHPh70wln4R7g/stx51WKdAhSDcz4 Gnms68OuLb5Ohe2CDRhco+fiPmpqQmmKOvZwsjPGnOFGQ3qmsVMVVSJ/QwVkDbxO iyUxo2LtBpQjDr1ZOrFavQ/mTnOvWtEYVWtsXtCRQ6gvBoZBBrBNsK1sjfyTAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUwfZT7XCJZVeNCHabgTgmYOAKDvAwHwYDVR0j BBgwFoAUTaEdWvXxeucWUZ+EomPhpeV9UkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDczMDRiODMtMzBhYS00YmJmLTlmZDctMmZjZWFkYmYwMDMwLzAvNERBMTFENUFG NUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVFNTdENTI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REExMUQ1QUY1RjE3QUU3MTY1MTlGODRBMjYzRTFBNUU1N0Q1 MjQ0LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA3MzA0YjgzLTMwYWEtNGJiZi05 ZmQ3LTJmY2VhZGJmMDAzMC8wLzMyMzQzMDMxM2E2MjY1MzQzMDNhMzQzMDMwMzAz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzYzODM0MzEucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk Ab5AQAAwDQYJKoZIhvcNAQELBQADggEBAIxD91FpJr10vWt7Op+7S3dq2GLTe8O2 qJ11zDyaiJO+2IzREwAp0dhenNUqPPqAYj20xTJwHqjnZsIYplYip/6hYxFesM+t qNCZlT75xgVVMdLApyyronZ8nrlW3Pw6+r9Zc2spj0jKNnxRNXcqAw84mRRljqUF SVCMLtRuWsanINYV+0F4ShrfTGCx2sUdOEcR2XSurck3xNaL6wunvxn54gmdsTmK O1WPZ/kAUTbOTsXHtfUbdXBOJSh7f7Nwferm1Q+mpyCQjBPKaW76hyKh/TROOD2O nyXJSMB2CMlCZhNVbS1qdzm5mDZvV+T+OF+Ro2V/ekQ7lH9sYD0gjm0= -----END CERTIFICATE-----Generated at Mon Oct 26 23:50:16 2026 by rpki-client