$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a3636363a3a2f34382d3438203d3e20313336383431.roa File: 323430313a626534303a3636363a3a2f34382d3438203d3e20313336383431.roa (raw, json) Hash identifier: lxs0QxceYfBfQBIsSiWBKsBI3ZvM+Jpb3ALFBdKG9KU= Subject key identifier: E0:D9:AB:34:9C:87:78:38:AD:A3:24:78:8A:87:92:80:2F:85:1B:AE Certificate issuer: /CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Certificate serial: 7784D35436891BDD14862F44A51BA59D0C6AC301 Authority key identifier: 4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a3636363a3a2f34382d3438203d3e20313336383431.roa Signing time: Tue 06 Oct 2026 00:14:49 +0000 ROA not before: Tue 06 Oct 2026 00:09:49 +0000 ROA not after: Tue 05 Oct 2027 00:14:49 +0000 asID: 136841 IP address blocks: 2401:be40:666::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:84:d3:54:36:89:1b:dd:14:86:2f:44:a5:1b:a5:9d:0c:6a:c3:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Validity Not Before: Oct 6 00:09:49 2026 GMT Not After : Oct 5 00:14:49 2027 GMT Subject: CN=E0D9AB349C877838ADA324788A8792802F851BAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c7:14:a7:b2:14:50:84:f9:6d:a4:2d:b3:e9: fe:92:03:35:9f:e9:bf:f2:e6:6a:77:70:19:7c:f9: 7d:fc:5c:5d:d8:0e:5a:21:9e:35:02:79:b5:5f:9e: 8f:ca:be:c9:42:df:7f:ba:be:62:4d:ed:39:14:9c: da:37:9f:f2:12:0b:7b:e0:bf:14:e8:2b:34:21:d6: b0:ea:b2:58:4c:c4:f6:57:1d:96:5b:55:23:b5:0e: 0f:4b:6c:33:55:3c:2d:7f:30:a0:5a:58:7a:e3:71: ce:f0:0d:cf:d5:d2:e4:cf:30:89:86:16:07:05:e5: 15:5c:f8:a6:7a:b0:ca:87:f7:24:ce:d9:84:00:9e: 25:43:c0:63:5f:d3:75:58:e7:98:c8:27:53:45:f3: 93:02:c6:36:dc:41:e2:d8:b7:24:4c:f4:29:76:65: 0e:66:f2:45:77:78:5c:25:3c:66:20:ce:c1:6c:10: de:5a:1b:88:51:6c:02:6c:6d:cb:f4:ff:46:b2:57: 77:24:89:e3:dd:3e:4f:b3:3c:67:51:ad:99:d6:d1: 90:b4:55:31:2b:2e:40:7c:f3:80:7d:26:41:53:27: fa:37:7f:83:c4:21:58:6c:b7:0c:b9:d2:40:63:91: b8:7f:49:ef:5d:90:67:ee:3c:50:74:04:c4:34:1b: 3e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D9:AB:34:9C:87:78:38:AD:A3:24:78:8A:87:92:80:2F:85:1B:AE X509v3 Authority Key Identifier: keyid:4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a3636363a3a2f34382d3438203d3e20313336383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:be40:666::/48 Signature Algorithm: sha256WithRSAEncryption 2c:f6:76:f4:ec:22:93:52:c2:b3:5c:36:ae:6f:9a:5b:8a:40: 74:45:29:db:dd:49:e2:38:0c:a6:25:ef:a7:96:bf:55:5f:a5: 5e:fe:a9:27:3b:38:f5:8e:f8:f3:61:a5:39:0a:81:dd:2e:f9: 32:2f:74:6d:fc:db:a1:67:e5:7d:9c:b8:6a:fc:ef:1d:8e:b7: fc:92:00:cd:13:6c:fb:51:d3:d4:6f:ce:81:18:ff:67:2f:0f: 91:8f:f5:84:cc:38:60:bb:09:c9:38:9b:af:bf:f4:05:10:d4: 55:de:26:93:64:e9:05:b0:f3:61:93:d1:6a:49:b8:2f:d0:c8: 70:14:5f:4a:2e:be:f2:eb:0f:5e:be:7c:5f:d3:fe:cb:19:cb: 77:e9:5c:6a:e1:5b:c3:04:8f:24:b3:2e:a4:c2:e3:1e:2f:db: 88:91:1f:71:9d:9f:b1:06:10:6e:a6:51:51:f4:cb:68:31:a6: a7:ed:cf:b5:c4:f3:7e:33:8f:76:4c:62:53:21:b5:c7:30:74: 03:13:da:8b:d3:bb:fc:c1:f4:76:6b:e1:ec:cb:93:ef:94:3c: 5a:bb:85:78:d5:ce:9c:9d:6c:6c:2e:54:2a:10:64:90:bd:36: 84:d8:e8:18:a1:87:a7:79:4c:ba:63:23:37:8f:0e:9a:be:17: f5:1e:99:fb -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUd4TTVDaJG90Uhi9EpRulnQxqwwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERBMTFENUFGNUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVF NTdENTI0NDAeFw0yNjEwMDYwMDA5NDlaFw0yNzEwMDUwMDE0NDlaMDMxMTAvBgNV BAMTKEUwRDlBQjM0OUM4Nzc4MzhBREEzMjQ3ODhBODc5MjgwMkY4NTFCQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6xxSnshRQhPltpC2z6f6SAzWf 6b/y5mp3cBl8+X38XF3YDlohnjUCebVfno/KvslC33+6vmJN7TkUnNo3n/ISC3vg vxToKzQh1rDqslhMxPZXHZZbVSO1Dg9LbDNVPC1/MKBaWHrjcc7wDc/V0uTPMImG FgcF5RVc+KZ6sMqH9yTO2YQAniVDwGNf03VY55jIJ1NF85MCxjbcQeLYtyRM9Cl2 ZQ5m8kV3eFwlPGYgzsFsEN5aG4hRbAJsbcv0/0ayV3ckiePdPk+zPGdRrZnW0ZC0 VTErLkB884B9JkFTJ/o3f4PEIVhstwy50kBjkbh/Se9dkGfuPFB0BMQ0Gz4RAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU4NmrNJyHeDitoyR4ioeSgC+FG64wHwYDVR0j BBgwFoAUTaEdWvXxeucWUZ+EomPhpeV9UkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDczMDRiODMtMzBhYS00YmJmLTlmZDctMmZjZWFkYmYwMDMwLzAvNERBMTFENUFG NUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVFNTdENTI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REExMUQ1QUY1RjE3QUU3MTY1MTlGODRBMjYzRTFBNUU1N0Q1 MjQ0LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA3MzA0YjgzLTMwYWEtNGJiZi05 ZmQ3LTJmY2VhZGJmMDAzMC8wLzMyMzQzMDMxM2E2MjY1MzQzMDNhMzYzNjM2M2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzgzNDMxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAG+ QAZmMA0GCSqGSIb3DQEBCwUAA4IBAQAs9nb07CKTUsKzXDaub5pbikB0RSnb3Uni OAymJe+nlr9VX6Ve/qknOzj1jvjzYaU5CoHdLvkyL3Rt/NuhZ+V9nLhq/O8djrf8 kgDNE2z7UdPUb86BGP9nLw+Rj/WEzDhguwnJOJuvv/QFENRV3iaTZOkFsPNhk9Fq Sbgv0MhwFF9KLr7y6w9evnxf0/7LGct36Vxq4VvDBI8ksy6kwuMeL9uIkR9xnZ+x BhBuplFR9MtoMaan7c+1xPN+M492TGJTIbXHMHQDE9qL07v8wfR2a+Hsy5PvlDxa u4V41c6cnWxsLlQqEGSQvTaE2OgYoYeneUy6YyM3jw6avhf1Hpn7 -----END CERTIFICATE-----Generated at Mon Oct 26 04:00:16 2026 by rpki-client