$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a3a2f33322d3332203d3e20313336383431.roa File: 323430313a626534303a3a2f33322d3332203d3e20313336383431.roa (raw, json) Hash identifier: Ves5jRMi/5EDvNVgjq2NV5Rewvezf6fsTEyfpVhJ6T4= Subject key identifier: 32:2A:C1:EF:D9:19:BA:38:B9:A2:1D:C0:A0:3F:2E:ED:3B:EB:DF:E4 Certificate issuer: /CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Certificate serial: 1161139C112F0AB13D84936E0882648ADFED4C72 Authority key identifier: 4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a3a2f33322d3332203d3e20313336383431.roa Signing time: Mon 05 Oct 2026 04:45:20 +0000 ROA not before: Mon 05 Oct 2026 04:40:20 +0000 ROA not after: Mon 04 Oct 2027 04:45:20 +0000 asID: 136841 IP address blocks: 2401:be40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 01:44:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:61:13:9c:11:2f:0a:b1:3d:84:93:6e:08:82:64:8a:df:ed:4c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Validity Not Before: Oct 5 04:40:20 2026 GMT Not After : Oct 4 04:45:20 2027 GMT Subject: CN=322AC1EFD919BA38B9A21DC0A03F2EED3BEBDFE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:41:5c:9d:4e:3e:0d:6c:93:de:38:2a:88:da: bf:70:a2:24:5a:70:40:1a:45:b0:7e:48:18:92:c6: 27:dd:f3:a3:46:99:bc:ef:ff:45:29:00:59:de:03: e6:22:7d:a4:db:7a:fc:e2:3b:33:e9:87:a3:9e:8d: a3:15:b2:f1:47:26:2e:ed:25:53:f2:95:45:a0:38: b5:9a:1c:ef:17:8d:43:99:a3:10:ee:49:ee:ac:7e: 68:ad:21:95:0b:77:2a:c0:81:6f:08:b7:f1:17:64: 3b:dd:a9:a6:8c:ce:b7:1a:39:ed:28:c4:16:cb:5f: 17:10:01:46:d1:3f:6b:a8:85:56:28:67:52:59:f0: 10:ce:59:de:76:04:2f:3d:f2:6b:ff:e4:94:f2:5e: cf:76:94:a6:09:90:44:ae:82:b2:d9:0d:97:a0:b1: bb:05:d0:d8:fe:a1:f4:fb:b9:37:e9:4a:78:f7:b7: ca:6f:e2:6d:3f:26:1f:d7:0d:50:43:da:81:e6:74: b6:7b:71:b2:77:bb:69:5a:b9:76:8a:6f:f3:d9:17: ca:87:87:b0:a8:4e:39:87:b7:d0:bb:40:69:99:c0: 84:54:87:0d:c8:b8:55:8a:81:29:99:9d:47:c8:24: 8c:c4:21:79:42:0e:7b:e1:ab:2b:4f:9d:48:3d:d0: 6e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2A:C1:EF:D9:19:BA:38:B9:A2:1D:C0:A0:3F:2E:ED:3B:EB:DF:E4 X509v3 Authority Key Identifier: keyid:4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a3a2f33322d3332203d3e20313336383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:be40::/32 Signature Algorithm: sha256WithRSAEncryption 43:ff:c1:ad:c8:c4:fc:c3:8a:ac:67:09:83:6f:aa:f4:52:de: 53:f1:54:5e:f3:29:d3:2e:c4:45:da:31:b9:33:14:ae:4e:93: a6:48:ff:38:46:90:7f:f2:8b:dd:9a:dd:2a:ab:e8:2e:27:cd: df:1d:2d:be:12:42:33:9c:dd:2c:33:6e:64:2d:23:d7:53:c7: cd:9b:74:53:43:2c:cf:50:77:7d:d8:c2:86:73:0b:22:27:93: f8:8f:a0:b1:71:a2:a9:0d:57:48:30:09:85:0d:ae:f2:c0:b6: 3e:10:f6:f6:39:96:22:cf:bb:be:5c:86:e3:56:40:e9:f2:41: a7:de:b3:11:64:5c:f2:b1:0d:6f:5e:57:30:2b:ef:63:0c:ec: 96:75:b0:cc:35:01:f2:22:e6:23:39:73:53:d2:27:33:94:66: 6d:54:e4:e4:c9:cb:05:f9:ee:30:68:37:ca:ce:89:2b:0a:de: 0b:cf:5c:50:d8:cb:5d:3f:56:c0:55:dc:57:5c:60:b8:f1:6c: 1a:fd:23:34:4e:ac:a0:eb:91:a8:2a:73:78:13:6c:88:70:ce: 9b:ad:bb:d3:fb:b1:c6:7d:ab:e9:09:ce:d9:dd:d8:a9:26:7d: b6:a2:94:8e:aa:61:fe:8d:e4:9d:51:bc:54:47:43:e5:64:f6: 57:64:2e:0f -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUEWETnBEvCrE9hJNuCIJkit/tTHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERBMTFENUFGNUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVF NTdENTI0NDAeFw0yNjEwMDUwNDQwMjBaFw0yNzEwMDQwNDQ1MjBaMDMxMTAvBgNV BAMTKDMyMkFDMUVGRDkxOUJBMzhCOUEyMURDMEEwM0YyRUVEM0JFQkRGRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyQVydTj4NbJPeOCqI2r9woiRa cEAaRbB+SBiSxifd86NGmbzv/0UpAFneA+YifaTbevziOzPph6OejaMVsvFHJi7t JVPylUWgOLWaHO8XjUOZoxDuSe6sfmitIZULdyrAgW8It/EXZDvdqaaMzrcaOe0o xBbLXxcQAUbRP2uohVYoZ1JZ8BDOWd52BC898mv/5JTyXs92lKYJkESugrLZDZeg sbsF0Nj+ofT7uTfpSnj3t8pv4m0/Jh/XDVBD2oHmdLZ7cbJ3u2lauXaKb/PZF8qH h7CoTjmHt9C7QGmZwIRUhw3IuFWKgSmZnUfIJIzEIXlCDnvhqytPnUg90G7NAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUMirB79kZuji5oh3AoD8u7Tvr3+QwHwYDVR0j BBgwFoAUTaEdWvXxeucWUZ+EomPhpeV9UkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDczMDRiODMtMzBhYS00YmJmLTlmZDctMmZjZWFkYmYwMDMwLzAvNERBMTFENUFG NUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVFNTdENTI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REExMUQ1QUY1RjE3QUU3MTY1MTlGODRBMjYzRTFBNUU1N0Q1 MjQ0LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA3MzA0YjgzLTMwYWEtNGJiZi05 ZmQ3LTJmY2VhZGJmMDAzMC8wLzMyMzQzMDMxM2E2MjY1MzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzNjM4MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQBvkAwDQYJKoZI hvcNAQELBQADggEBAEP/wa3IxPzDiqxnCYNvqvRS3lPxVF7zKdMuxEXaMbkzFK5O k6ZI/zhGkH/yi92a3Sqr6C4nzd8dLb4SQjOc3SwzbmQtI9dTx82bdFNDLM9Qd33Y woZzCyInk/iPoLFxoqkNV0gwCYUNrvLAtj4Q9vY5liLPu75chuNWQOnyQafesxFk XPKxDW9eVzAr72MM7JZ1sMw1AfIi5iM5c1PSJzOUZm1U5OTJywX57jBoN8rOiSsK 3gvPXFDYy10/VsBV3FdcYLjxbBr9IzROrKDrkagqc3gTbIhwzputu9P7scZ9q+kJ ztnd2KkmfbailI6qYf6N5J1RvFRHQ+Vk9ldkLg8= -----END CERTIFICATE-----Generated at Tue Oct 6 15:59:39 2026 by rpki-client