$ rpki-client -vvvf rpki-rsync.idnic.net/repo/47860d9f-cee5-4a0a-a7fd-28a0c9452d2d/0/323030313a6466363a6463303a3a2f34382d3438203d3e20313534323137.roa File: 323030313a6466363a6463303a3a2f34382d3438203d3e20313534323137.roa (raw, json) Hash identifier: bNrqQ+7sHUJulcN+AUwCG18cOEiawSNI4KJGBxMwx/M= Subject key identifier: 39:74:D4:88:FF:6F:AB:65:78:D0:2A:9A:10:4F:83:0C:A5:F2:CF:03 Certificate issuer: /CN=B26D15D4D8EDCFD8BE4731E14A01C05B69478B9C Certificate serial: 23B2773F73B03414BEA5D92EE641C85DF2C83258 Authority key identifier: B2:6D:15:D4:D8:ED:CF:D8:BE:47:31:E1:4A:01:C0:5B:69:47:8B:9C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B26D15D4D8EDCFD8BE4731E14A01C05B69478B9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/47860d9f-cee5-4a0a-a7fd-28a0c9452d2d/0/323030313a6466363a6463303a3a2f34382d3438203d3e20313534323137.roa Signing time: Fri 25 Sep 2026 03:28:34 +0000 ROA not before: Fri 25 Sep 2026 03:23:34 +0000 ROA not after: Fri 24 Sep 2027 03:28:34 +0000 asID: 154217 IP address blocks: 2001:df6:dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/47860d9f-cee5-4a0a-a7fd-28a0c9452d2d/0/B26D15D4D8EDCFD8BE4731E14A01C05B69478B9C.crl rsync://rpki-rsync.idnic.net/repo/47860d9f-cee5-4a0a-a7fd-28a0c9452d2d/0/B26D15D4D8EDCFD8BE4731E14A01C05B69478B9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B26D15D4D8EDCFD8BE4731E14A01C05B69478B9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 11:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b2:77:3f:73:b0:34:14:be:a5:d9:2e:e6:41:c8:5d:f2:c8:32:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B26D15D4D8EDCFD8BE4731E14A01C05B69478B9C Validity Not Before: Sep 25 03:23:34 2026 GMT Not After : Sep 24 03:28:34 2027 GMT Subject: CN=3974D488FF6FAB6578D02A9A104F830CA5F2CF03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1a:59:d7:ee:ea:77:72:66:37:18:5f:15:31: d5:89:25:36:1c:63:52:c8:fb:30:14:ab:0d:8c:3d: d1:d6:1f:29:43:f2:73:78:09:38:7f:77:a9:e9:3b: 37:ea:ad:82:21:e8:42:35:41:7b:77:0c:66:20:8e: c9:6e:7c:82:0d:32:af:93:2b:05:46:71:96:b0:98: 12:83:e6:b4:aa:70:64:30:66:5c:1f:f1:62:2d:76: 56:9b:60:82:4b:3e:7f:87:80:08:f3:07:58:0c:fd: 8a:b4:b1:cb:bf:d8:b9:01:19:c4:5b:e1:87:8f:ec: ab:8e:cc:15:33:6d:97:fb:5c:b2:7a:4a:47:8e:e1: b8:3f:8b:29:15:ed:5f:13:67:b3:2e:b7:71:c0:3f: b5:db:e8:03:35:74:19:e3:6a:26:35:22:bc:75:8c: 04:ec:b5:77:c4:4f:09:27:7b:5d:17:19:0e:34:77: 65:30:f7:9d:33:b1:4e:67:83:f5:3d:93:66:2a:38: 07:0c:c9:be:d9:07:39:e2:22:c0:83:87:2a:ca:f1: dd:84:18:0b:51:f6:40:3c:13:ed:5f:30:89:52:9e: 10:87:92:00:b6:69:02:3b:65:9b:81:61:0a:6c:30: 6c:93:7b:44:0a:a1:58:21:34:d6:13:94:a5:37:0d: fe:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:74:D4:88:FF:6F:AB:65:78:D0:2A:9A:10:4F:83:0C:A5:F2:CF:03 X509v3 Authority Key Identifier: keyid:B2:6D:15:D4:D8:ED:CF:D8:BE:47:31:E1:4A:01:C0:5B:69:47:8B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/47860d9f-cee5-4a0a-a7fd-28a0c9452d2d/0/B26D15D4D8EDCFD8BE4731E14A01C05B69478B9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B26D15D4D8EDCFD8BE4731E14A01C05B69478B9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/47860d9f-cee5-4a0a-a7fd-28a0c9452d2d/0/323030313a6466363a6463303a3a2f34382d3438203d3e20313534323137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:dc0::/48 Signature Algorithm: sha256WithRSAEncryption 7f:5d:84:58:6e:ad:48:eb:0a:b5:d5:09:d5:1c:c1:dd:f2:3c: c5:74:0a:00:77:7f:5e:d0:47:76:7d:40:23:db:03:3f:43:27: 7d:54:4f:0c:59:7a:d6:72:36:dd:9c:13:41:4f:bf:a2:da:33: 90:14:72:24:27:e2:03:69:8d:d0:27:22:da:65:27:44:78:65: 34:91:db:cf:c1:b4:da:73:eb:59:da:70:74:a4:5c:0d:a7:18: 6e:bb:50:a2:97:1b:68:fe:02:a1:39:e9:b4:32:45:3b:13:47: 98:09:8f:88:9e:61:c6:56:f7:ff:d4:b0:ae:2e:29:6a:f2:9a: 7c:fd:50:77:de:a8:53:61:77:21:07:77:12:df:be:dd:d0:0b: 10:ca:b3:e9:67:f5:69:66:83:07:37:60:91:c4:00:e8:b6:63: 8a:cd:97:50:e6:43:9c:45:7d:87:cc:f2:c4:a5:ac:79:84:e6: 44:e2:2f:bb:bf:ca:79:b8:85:bf:d1:f7:fd:d9:79:70:89:ee: bc:b6:2a:eb:cb:0e:c4:3f:f8:27:63:12:cf:b1:9c:37:30:b2: 60:13:1d:73:46:85:79:f0:6f:9c:83:ee:0f:2f:1d:c4:6a:26: af:14:8f:93:11:7e:f2:0c:28:04:af:30:22:f5:2a:7b:1c:78: a7:cf:50:e3 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUI7J3P3OwNBS+pdku5kHIXfLIMlgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI2RDE1RDREOEVEQ0ZEOEJFNDczMUUxNEEwMUMwNUI2 OTQ3OEI5QzAeFw0yNjA5MjUwMzIzMzRaFw0yNzA5MjQwMzI4MzRaMDMxMTAvBgNV BAMTKDM5NzRENDg4RkY2RkFCNjU3OEQwMkE5QTEwNEY4MzBDQTVGMkNGMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmGlnX7up3cmY3GF8VMdWJJTYc Y1LI+zAUqw2MPdHWHylD8nN4CTh/d6npOzfqrYIh6EI1QXt3DGYgjslufIINMq+T KwVGcZawmBKD5rSqcGQwZlwf8WItdlabYIJLPn+HgAjzB1gM/Yq0scu/2LkBGcRb 4YeP7KuOzBUzbZf7XLJ6SkeO4bg/iykV7V8TZ7Mut3HAP7Xb6AM1dBnjaiY1Irx1 jATstXfETwkne10XGQ40d2Uw950zsU5ng/U9k2YqOAcMyb7ZBzniIsCDhyrK8d2E GAtR9kA8E+1fMIlSnhCHkgC2aQI7ZZuBYQpsMGyTe0QKoVghNNYTlKU3Df55AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUOXTUiP9vq2V40CqaEE+DDKXyzwMwHwYDVR0j BBgwFoAUsm0V1Njtz9i+RzHhSgHAW2lHi5wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDc4NjBkOWYtY2VlNS00YTBhLWE3ZmQtMjhhMGM5NDUyZDJkLzAvQjI2RDE1RDRE OEVEQ0ZEOEJFNDczMUUxNEEwMUMwNUI2OTQ3OEI5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMjZEMTVENEQ4RURDRkQ4QkU0NzMxRTE0QTAxQzA1QjY5NDc4 QjlDLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ3ODYwZDlmLWNlZTUtNGEwYS1h N2ZkLTI4YTBjOTQ1MmQyZC8wLzMyMzAzMDMxM2E2NDY2MzYzYTY0NjMzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzUzNDMyMzEzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDfYN wDANBgkqhkiG9w0BAQsFAAOCAQEAf12EWG6tSOsKtdUJ1RzB3fI8xXQKAHd/XtBH dn1AI9sDP0MnfVRPDFl61nI23ZwTQU+/otozkBRyJCfiA2mN0Cci2mUnRHhlNJHb z8G02nPrWdpwdKRcDacYbrtQopcbaP4CoTnptDJFOxNHmAmPiJ5hxlb3/9Swri4p avKafP1Qd96oU2F3IQd3Et++3dALEMqz6Wf1aWaDBzdgkcQA6LZjis2XUOZDnEV9 h8zyxKWseYTmROIvu7/KebiFv9H3/dl5cInuvLYq68sOxD/4J2MSz7GcNzCyYBMd c0aFefBvnIPuDy8dxGomrxSPkxF+8gwoBK8wIvUqexx4p89Q4w== -----END CERTIFICATE-----Generated at Sun Oct 25 03:21:44 2026 by rpki-client