$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a626535373a3a2f34382d3438203d3e20313336383431.roa File: 323430313a626534303a626535373a3a2f34382d3438203d3e20313336383431.roa (raw, json) Hash identifier: EDOA776ZBXiqiY4eqigWvv/+QyZHm7LfEzPSamLmh/0= Subject key identifier: AC:64:F4:2F:CF:25:B1:DB:6B:9F:D2:A8:E7:1A:CA:F0:E1:0F:75:FC Certificate issuer: /CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Certificate serial: 0DEE27D9F7B1D47877438EB40414A4B6D485FD0A Authority key identifier: 4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a626535373a3a2f34382d3438203d3e20313336383431.roa Signing time: Tue 06 Oct 2026 00:17:34 +0000 ROA not before: Tue 06 Oct 2026 00:12:34 +0000 ROA not after: Tue 05 Oct 2027 00:17:34 +0000 asID: 136841 IP address blocks: 2401:be40:be57::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 12:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ee:27:d9:f7:b1:d4:78:77:43:8e:b4:04:14:a4:b6:d4:85:fd:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244 Validity Not Before: Oct 6 00:12:34 2026 GMT Not After : Oct 5 00:17:34 2027 GMT Subject: CN=AC64F42FCF25B1DB6B9FD2A8E71ACAF0E10F75FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:73:dc:9c:c4:fa:57:6e:01:24:e7:62:a9:0e: d0:9a:45:70:8a:2b:65:a4:37:d7:6e:fb:1e:96:8f: a7:5c:1a:17:72:a8:0f:fb:0e:f4:97:21:1c:16:0b: 35:61:c6:43:5f:c6:32:19:d0:4d:64:ab:c7:54:e9: a2:e0:c0:71:71:19:4c:87:09:5c:13:58:bc:e4:d2: fb:17:ab:8d:b8:b5:f8:1f:44:f0:5f:16:a1:f7:52: 17:bc:d2:bc:7b:62:57:0d:f1:d6:37:18:86:b9:42: 42:76:0f:5d:96:c3:af:f5:96:c0:4d:92:6f:12:be: 25:5f:07:7e:fe:bc:60:6f:0a:cd:87:ae:73:4c:bf: ab:f5:61:e3:78:87:ec:fc:41:4d:c8:bc:dc:2d:3a: d0:b2:a3:1e:1f:ff:9d:41:50:f6:85:0e:ad:3e:1f: 17:9e:46:ce:2d:f3:24:aa:76:b6:08:b9:30:c3:b0: a5:85:a1:a5:bb:b8:7e:cb:5a:d9:69:c0:64:e1:f6: 35:99:a1:94:bb:dc:60:96:c5:d2:c0:5c:0f:ec:28: 62:7f:32:93:e9:a1:b5:5d:c6:f0:d2:c5:5d:af:34: 0b:02:8f:b6:b1:aa:fb:fd:75:23:92:e4:65:9b:27: c7:b9:cb:c7:7a:2d:b0:e4:90:8e:14:0a:f4:fe:ff: 48:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:64:F4:2F:CF:25:B1:DB:6B:9F:D2:A8:E7:1A:CA:F0:E1:0F:75:FC X509v3 Authority Key Identifier: keyid:4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a626535373a3a2f34382d3438203d3e20313336383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:be40:be57::/48 Signature Algorithm: sha256WithRSAEncryption 16:a5:ed:29:4d:f6:0a:78:50:8e:9b:14:f0:28:b7:88:47:cd: d8:19:b2:78:ff:8d:02:6d:a2:c1:2a:33:7b:ce:ea:3b:54:bd: 54:62:23:fd:7c:47:5f:c4:16:f3:91:a7:cb:e5:6d:ef:04:51: 2b:99:b8:11:44:f6:57:9a:bf:ab:b0:72:c0:4c:34:0b:22:19: 16:de:30:8c:ab:d2:88:e8:bb:76:f1:8f:5f:8e:5e:3f:73:ce: 32:58:9b:d6:6a:75:d4:24:d5:45:9b:a9:0f:39:c5:28:5b:70: 06:07:bb:95:3f:b5:07:9b:63:5f:87:d9:d3:32:1e:ba:89:d4: c5:02:6d:de:b4:11:b5:49:fe:32:40:8d:31:c1:e6:ce:d6:57: 42:ed:99:73:72:dc:53:99:dd:74:59:64:c2:0e:b2:44:b5:9b: 24:07:3c:9a:b9:3a:16:f8:c6:eb:4c:7d:9d:18:e4:d8:aa:f2: c9:cb:cf:11:dd:fd:25:94:41:68:40:11:28:db:37:93:31:db: 75:2f:01:aa:1f:e3:d4:c9:d0:aa:89:62:d9:b6:bb:f3:bf:16: db:e4:e4:36:74:d5:a5:34:74:53:ff:d3:78:f8:dd:25:5b:b8: fa:4f:47:b4:bb:c8:af:ff:4e:94:51:8e:f3:7a:a7:49:76:91: 9b:1c:69:cd -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUDe4n2fex1Hh3Q460BBSkttSF/QowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERBMTFENUFGNUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVF NTdENTI0NDAeFw0yNjEwMDYwMDEyMzRaFw0yNzEwMDUwMDE3MzRaMDMxMTAvBgNV BAMTKEFDNjRGNDJGQ0YyNUIxREI2QjlGRDJBOEU3MUFDQUYwRTEwRjc1RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfc9ycxPpXbgEk52KpDtCaRXCK K2WkN9du+x6Wj6dcGhdyqA/7DvSXIRwWCzVhxkNfxjIZ0E1kq8dU6aLgwHFxGUyH CVwTWLzk0vsXq424tfgfRPBfFqH3Uhe80rx7YlcN8dY3GIa5QkJ2D12Ww6/1lsBN km8SviVfB37+vGBvCs2HrnNMv6v1YeN4h+z8QU3IvNwtOtCyox4f/51BUPaFDq0+ HxeeRs4t8ySqdrYIuTDDsKWFoaW7uH7LWtlpwGTh9jWZoZS73GCWxdLAXA/sKGJ/ MpPpobVdxvDSxV2vNAsCj7axqvv9dSOS5GWbJ8e5y8d6LbDkkI4UCvT+/0g1AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUrGT0L88lsdtrn9Ko5xrK8OEPdfwwHwYDVR0j BBgwFoAUTaEdWvXxeucWUZ+EomPhpeV9UkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDczMDRiODMtMzBhYS00YmJmLTlmZDctMmZjZWFkYmYwMDMwLzAvNERBMTFENUFG NUYxN0FFNzE2NTE5Rjg0QTI2M0UxQTVFNTdENTI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80REExMUQ1QUY1RjE3QUU3MTY1MTlGODRBMjYzRTFBNUU1N0Q1 MjQ0LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA3MzA0YjgzLTMwYWEtNGJiZi05 ZmQ3LTJmY2VhZGJmMDAzMC8wLzMyMzQzMDMxM2E2MjY1MzQzMDNhNjI2NTM1Mzcz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzYzODM0MzEucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk Ab5AvlcwDQYJKoZIhvcNAQELBQADggEBABal7SlN9gp4UI6bFPAot4hHzdgZsnj/ jQJtosEqM3vO6jtUvVRiI/18R1/EFvORp8vlbe8EUSuZuBFE9leav6uwcsBMNAsi GRbeMIyr0ojou3bxj1+OXj9zzjJYm9ZqddQk1UWbqQ85xShbcAYHu5U/tQebY1+H 2dMyHrqJ1MUCbd60EbVJ/jJAjTHB5s7WV0LtmXNy3FOZ3XRZZMIOskS1myQHPJq5 Ohb4xutMfZ0Y5Niq8snLzxHd/SWUQWhAESjbN5Mx23UvAaof49TJ0KqJYtm2u/O/ Ftvk5DZ01aU0dFP/03j43SVbuPpPR7S7yK//TpRRjvN6p0l2kZscac0= -----END CERTIFICATE-----Generated at Mon Oct 26 23:50:18 2026 by rpki-client