$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a623630323a3a2f34382d3438203d3e20313336383431.roa File: 323430313a626534303a623630323a3a2f34382d3438203d3e20313336383431.roa (raw, json) Hash identifier: 78TydUmxf9GHgX1Agqkz3/BZHEMvi8Tt2ihO1Z/Fz48= Subject key identifier: 88:79:9C:1A:62:18:43:A3:4A:D0:61:F2:1F:CC:E1:00:73:54:06:66 Certificate issuer: /CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Certificate serial: 3494ADA99BCE0F5B5FF16E2037396D6A13EED603 Authority key identifier: 4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a623630323a3a2f34382d3438203d3e20313336383431.roa Signing time: Tue 06 Oct 2026 00:17:15 +0000 ROA not before: Tue 06 Oct 2026 00:12:15 +0000 ROA not after: Tue 05 Oct 2027 00:17:15 +0000 asID: 136841 IP address blocks: 2401:be40:b602::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 05:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:94:ad:a9:9b:ce:0f:5b:5f:f1:6e:20:37:39:6d:6a:13:ee:d6:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Validity Not Before: Oct 6 00:12:15 2026 GMT Not After : Oct 5 00:17:15 2027 GMT Subject: CN=88799C1A621843A34AD061F21FCCE10073540666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e1:31:97:7b:95:ec:b3:c8:14:5c:f1:56:f8: f9:e8:d9:98:12:dd:39:cc:71:d1:d9:92:bb:8b:b8: 30:c0:ae:d9:d2:54:fb:92:f4:aa:e1:2e:94:97:5f: e9:06:25:f8:93:0e:f0:d7:ee:be:11:c2:f7:17:b4: 6a:3d:78:f7:58:01:84:76:80:0e:4c:bc:ec:f9:cf: 32:b1:8e:5f:a6:9f:93:b2:1a:34:ec:81:49:b5:89: 2f:82:2e:e9:39:ab:ee:7b:03:39:63:f3:d9:d9:62: 4a:e8:83:0d:fc:d8:4c:4f:d0:c4:d4:1f:c4:67:95: 51:21:ae:b1:05:97:07:42:16:2b:a7:63:1b:69:4b: fc:40:68:39:f4:e9:f3:96:e1:c8:44:13:43:1b:40: 27:81:a8:17:88:24:db:7f:60:fb:b1:f2:b6:ce:29: b4:f4:3c:37:23:af:a8:dd:e2:22:98:bd:56:95:1d: a7:f1:1b:7a:9e:4d:fd:4e:7e:43:7b:87:46:6f:a7: 5d:d8:f4:fe:3f:7d:9b:66:0a:80:b9:77:9f:11:1d: 3b:60:27:39:30:99:72:69:45:7e:17:cd:73:ee:f2: 44:68:9d:0c:02:64:2b:08:02:a9:b9:7c:0d:e6:cf: 28:af:40:54:74:32:81:76:e6:2a:7b:4b:3f:e3:9b: 7f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:79:9C:1A:62:18:43:A3:4A:D0:61:F2:1F:CC:E1:00:73:54:06:66 X509v3 Authority Key Identifier: keyid:4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a623630323a3a2f34382d3438203d3e20313336383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:be40:b602::/48 Signature Algorithm: sha256WithRSAEncryption c4:48:48:d3:1d:57:95:65:a0:7d:88:68:ac:49:53:e7:e7:3a: dc:31:52:61:a6:85:3d:8c:92:ae:c9:c2:66:39:a7:2f:26:99: 75:e4:da:53:93:1c:cb:d4:6f:41:9f:a2:a1:50:01:39:c3:1a: 84:b0:13:0f:44:05:7c:b6:61:a0:1c:ca:13:34:a2:e6:dc:b4: 84:90:dc:07:fb:62:66:61:b0:ca:40:d9:26:15:77:98:ac:43: a6:21:f3:00:7d:cb:86:f9:f2:de:4e:4b:cf:59:87:c4:f5:a7: 1a:c4:41:d1:6f:bd:e6:b8:fd:33:4b:cf:63:fa:b0:fd:78:94: 2d:70:1e:4c:03:6f:91:93:b3:b1:06:82:11:7f:05:26:b3:9f: de:3e:59:9e:77:1b:4d:61:35:bb:3c:c3:1a:75:de:42:d1:46: b3:b0:50:5d:5f:a3:5f:d7:a5:10:d4:cb:27:10:31:95:88:ff: bd:7c:a7:1c:30:6d:e8:5c:4a:af:08:be:3e:6f:19:b9:ba:09: 1b:e6:40:04:04:08:ab:a6:59:f8:44:2b:60:fd:eb:1b:9f:6c: bf:73:89:60:54:a1:bb:f2:8f:9f:3c:07:4e:60:89:3d:b2:bd: 5b:96:da:ca:51:5c:77:06:6e:2f:60:00:6f:01:77:9a:a7:bd: 66:a8:72:75 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUNJStqZvOD1tf8W4gNzltahPu1gMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERBMTFENUFGNUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVF NTdENTI0NDAeFw0yNjEwMDYwMDEyMTVaFw0yNzEwMDUwMDE3MTVaMDMxMTAvBgNV BAMTKDg4Nzk5QzFBNjIxODQzQTM0QUQwNjFGMjFGQ0NFMTAwNzM1NDA2NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCK4TGXe5Xss8gUXPFW+Pno2ZgS 3TnMcdHZkruLuDDArtnSVPuS9KrhLpSXX+kGJfiTDvDX7r4RwvcXtGo9ePdYAYR2 gA5MvOz5zzKxjl+mn5OyGjTsgUm1iS+CLuk5q+57Azlj89nZYkrogw382ExP0MTU H8RnlVEhrrEFlwdCFiunYxtpS/xAaDn06fOW4chEE0MbQCeBqBeIJNt/YPux8rbO KbT0PDcjr6jd4iKYvVaVHafxG3qeTf1OfkN7h0Zvp13Y9P4/fZtmCoC5d58RHTtg JzkwmXJpRX4XzXPu8kRonQwCZCsIAqm5fA3mzyivQFR0MoF25ip7Sz/jm38bAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUiHmcGmIYQ6NK0GHyH8zhAHNUBmYwHwYDVR0j BBgwFoAUTaEdWvXxeucWUZ+EomPhpeV9UkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDczMDRiODMtMzBhYS00YmJmLTlmZDctMmZjZWFkYmYwMDMwLzAvNERBMTFENUFG NUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVFNTdENTI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REExMUQ1QUY1RjE3QUU3MTY1MTlGODRBMjYzRTFBNUU1N0Q1 MjQ0LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA3MzA0YjgzLTMwYWEtNGJiZi05 ZmQ3LTJmY2VhZGJmMDAzMC8wLzMyMzQzMDMxM2E2MjY1MzQzMDNhNjIzNjMwMzIz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzYzODM0MzEucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk Ab5AtgIwDQYJKoZIhvcNAQELBQADggEBAMRISNMdV5VloH2IaKxJU+fnOtwxUmGm hT2Mkq7JwmY5py8mmXXk2lOTHMvUb0GfoqFQATnDGoSwEw9EBXy2YaAcyhM0oubc tISQ3Af7YmZhsMpA2SYVd5isQ6Yh8wB9y4b58t5OS89Zh8T1pxrEQdFvvea4/TNL z2P6sP14lC1wHkwDb5GTs7EGghF/BSazn94+WZ53G01hNbs8wxp13kLRRrOwUF1f o1/XpRDUyycQMZWI/718pxwwbehcSq8Ivj5vGbm6CRvmQAQECKumWfhEK2D96xuf bL9ziWBUobvyj588B05giT2yvVuW2spRXHcGbi9gAG8Bd5qnvWaocnU= -----END CERTIFICATE-----Generated at Mon Oct 26 23:50:15 2026 by rpki-client