$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a3838383a3a2f34382d3438203d3e20313336383431.roa File: 323430313a626534303a3838383a3a2f34382d3438203d3e20313336383431.roa (raw, json) Hash identifier: eCcjsEvFJImaEokWvZN6tjThYT7Ao5ZfbDlrEDWVz0M= Subject key identifier: 97:29:1E:2E:DA:0E:AC:55:43:9B:2E:DC:FC:EF:A3:5A:F5:47:24:31 Certificate issuer: /CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Certificate serial: 140533ED226555BAD14C4BF77B773B54ECAE000C Authority key identifier: 4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a3838383a3a2f34382d3438203d3e20313336383431.roa Signing time: Tue 06 Oct 2026 00:15:12 +0000 ROA not before: Tue 06 Oct 2026 00:10:12 +0000 ROA not after: Tue 05 Oct 2027 00:15:12 +0000 asID: 136841 IP address blocks: 2401:be40:888::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 05:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:05:33:ed:22:65:55:ba:d1:4c:4b:f7:7b:77:3b:54:ec:ae:00:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Validity Not Before: Oct 6 00:10:12 2026 GMT Not After : Oct 5 00:15:12 2027 GMT Subject: CN=97291E2EDA0EAC55439B2EDCFCEFA35AF5472431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6f:35:08:b2:7a:ea:08:47:e3:c4:10:c6:7b: c1:56:0d:fe:34:a5:8b:8d:1d:cc:5a:56:22:92:13: 1e:e0:f2:bc:1b:af:4d:8f:b5:0e:c4:8b:65:34:33: fb:44:72:98:b4:48:3f:4f:c2:f2:37:02:95:b2:8c: 91:fa:51:9e:dc:8a:37:9f:c1:bb:98:5e:b8:85:e5: 0e:8c:69:d0:a1:a3:af:ae:54:cd:bc:4b:ac:f3:48: a3:d5:73:25:3b:45:e2:8d:e8:b4:5a:4c:fe:7c:ff: 53:13:ca:4a:0f:44:45:b6:56:14:16:5c:f2:33:77: 3d:29:9b:46:c4:82:95:7c:a1:82:9a:0c:2b:61:03: 7a:22:8f:24:f9:ea:ac:c3:99:f6:cb:52:d0:b4:93: 41:4b:da:d2:0e:00:47:22:c5:05:6a:3c:f7:b9:00: 5d:a8:22:68:f6:c2:20:68:1a:27:9f:2f:85:ee:39: 3f:92:ad:a8:41:82:12:34:c5:6a:d5:0b:d4:d2:e7: 7c:8a:2e:59:0d:3b:ef:32:0a:16:6f:90:c2:d7:64: 71:68:7b:4e:92:8f:6e:c2:34:70:05:91:7a:05:0e: 03:2e:00:0a:4a:36:a7:be:d1:ea:d2:91:13:5c:83: db:d0:1e:80:fd:66:c2:ff:b7:2c:67:d9:a4:f6:b3: 35:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:29:1E:2E:DA:0E:AC:55:43:9B:2E:DC:FC:EF:A3:5A:F5:47:24:31 X509v3 Authority Key Identifier: keyid:4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a3838383a3a2f34382d3438203d3e20313336383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:be40:888::/48 Signature Algorithm: sha256WithRSAEncryption ab:96:19:39:1f:20:bf:a3:fc:7c:27:f8:a2:33:d1:5f:62:19: 5d:11:66:84:34:eb:46:27:5b:f3:e2:57:dc:88:7b:c0:b2:11: fe:3f:19:e3:aa:5a:b0:c6:53:3e:b6:50:b9:88:74:ca:67:b9: 60:d2:e1:67:78:9d:79:de:80:fc:d1:ff:90:cf:ec:ee:f5:b4: 14:b5:6f:99:e5:a7:44:c2:17:46:52:2b:69:0a:7e:74:25:c4: 02:18:82:6e:b2:a5:38:46:2d:9e:42:3c:af:7a:6f:bf:98:d5: bf:37:c0:db:de:93:2c:7a:4d:dc:c6:e6:cd:b9:d6:58:a5:fe: 71:37:f8:6e:4b:d5:23:05:da:a8:f4:9e:a9:9e:7c:b7:8f:2e: d0:9a:a8:1d:30:1e:38:37:6f:7c:8f:b4:15:eb:ba:67:c9:e7: 49:68:19:29:52:43:36:41:31:dd:d8:ab:a1:1e:47:94:0e:0f: bf:15:1e:e5:d0:5f:9c:0c:91:6d:a2:1a:2d:52:4a:bf:3c:a1: ac:cd:fb:bf:a7:8c:c0:07:02:96:5f:8e:1b:93:48:30:65:26: 1f:b7:1a:27:d8:b5:7c:67:3b:af:b2:ba:f9:9e:94:a0:81:8e: 54:2f:ac:a5:31:c3:cf:a4:ba:e6:7d:22:21:26:0f:8c:a2:e5: 72:d8:28:cb -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUFAUz7SJlVbrRTEv3e3c7VOyuAAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERBMTFENUFGNUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVF NTdENTI0NDAeFw0yNjEwMDYwMDEwMTJaFw0yNzEwMDUwMDE1MTJaMDMxMTAvBgNV BAMTKDk3MjkxRTJFREEwRUFDNTU0MzlCMkVEQ0ZDRUZBMzVBRjU0NzI0MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPbzUIsnrqCEfjxBDGe8FWDf40 pYuNHcxaViKSEx7g8rwbr02PtQ7Ei2U0M/tEcpi0SD9PwvI3ApWyjJH6UZ7cijef wbuYXriF5Q6MadCho6+uVM28S6zzSKPVcyU7ReKN6LRaTP58/1MTykoPREW2VhQW XPIzdz0pm0bEgpV8oYKaDCthA3oijyT56qzDmfbLUtC0k0FL2tIOAEcixQVqPPe5 AF2oImj2wiBoGiefL4XuOT+SrahBghI0xWrVC9TS53yKLlkNO+8yChZvkMLXZHFo e06Sj27CNHAFkXoFDgMuAApKNqe+0erSkRNcg9vQHoD9ZsL/tyxn2aT2szXzAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUlykeLtoOrFVDmy7c/O+jWvVHJDEwHwYDVR0j BBgwFoAUTaEdWvXxeucWUZ+EomPhpeV9UkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDczMDRiODMtMzBhYS00YmJmLTlmZDctMmZjZWFkYmYwMDMwLzAvNERBMTFENUFG NUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVFNTdENTI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REExMUQ1QUY1RjE3QUU3MTY1MTlGODRBMjYzRTFBNUU1N0Q1 MjQ0LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA3MzA0YjgzLTMwYWEtNGJiZi05 ZmQ3LTJmY2VhZGJmMDAzMC8wLzMyMzQzMDMxM2E2MjY1MzQzMDNhMzgzODM4M2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzgzNDMxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAG+ QAiIMA0GCSqGSIb3DQEBCwUAA4IBAQCrlhk5HyC/o/x8J/iiM9FfYhldEWaENOtG J1vz4lfciHvAshH+PxnjqlqwxlM+tlC5iHTKZ7lg0uFneJ153oD80f+Qz+zu9bQU tW+Z5adEwhdGUitpCn50JcQCGIJusqU4Ri2eQjyvem+/mNW/N8Db3pMsek3cxubN udZYpf5xN/huS9UjBdqo9J6pnny3jy7QmqgdMB44N298j7QV67pnyedJaBkpUkM2 QTHd2KuhHkeUDg+/FR7l0F+cDJFtohotUkq/PKGszfu/p4zABwKWX44bk0gwZSYf txon2LV8Zzuvsrr5npSggY5UL6ylMcPPpLrmfSIhJg+MouVy2CjL -----END CERTIFICATE-----Generated at Mon Oct 26 21:16:38 2026 by rpki-client