$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/323430323a623234303a3939633a3a2f34382d3438203d3e203234313938.roa File: 323430323a623234303a3939633a3a2f34382d3438203d3e203234313938.roa (raw, json) Hash identifier: uT4lvBmSLIUtnCU12k/FOcMrspb/keKRMEycDPB7i4M= Subject key identifier: 19:F9:77:7D:29:B6:A1:C9:3B:93:8B:98:3F:B3:AD:BD:FE:89:AE:F4 Certificate issuer: /CN=65DBBEC678177B7159AD901A4023BA57AA4096DC Certificate serial: 3743DB427C8EEEBC1B40DF719AA130D077E02BCC Authority key identifier: 65:DB:BE:C6:78:17:7B:71:59:AD:90:1A:40:23:BA:57:AA:40:96:DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/323430323a623234303a3939633a3a2f34382d3438203d3e203234313938.roa Signing time: Tue 27 Oct 2026 07:01:43 +0000 ROA not before: Tue 27 Oct 2026 06:56:43 +0000 ROA not after: Tue 26 Oct 2027 07:01:43 +0000 asID: 24198 IP address blocks: 2402:b240:99c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.crl rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 07:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:43:db:42:7c:8e:ee:bc:1b:40:df:71:9a:a1:30:d0:77:e0:2b:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65DBBEC678177B7159AD901A4023BA57AA4096DC Validity Not Before: Oct 27 06:56:43 2026 GMT Not After : Oct 26 07:01:43 2027 GMT Subject: CN=19F9777D29B6A1C93B938B983FB3ADBDFE89AEF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a5:5d:a2:70:c7:00:01:69:39:d3:8e:59:4a: 4d:69:19:29:04:f6:ba:49:0f:6e:5c:9f:c9:da:5d: d5:f2:ac:13:9b:b2:95:53:ca:b2:9d:9b:ab:21:35: 9b:96:f3:ed:ea:ac:88:ef:ef:1f:d4:63:81:7c:20: 92:d7:15:29:25:0f:35:8c:ee:c7:cd:dc:70:28:b2: c2:ed:ce:1b:d2:39:9c:ee:3d:4a:6f:57:c5:c2:84: 34:d5:aa:db:fc:56:47:73:80:aa:2d:2d:c8:04:fb: 6b:4e:c4:94:58:23:44:a5:a8:8d:1b:4e:23:6d:fc: e1:6a:cd:c9:ac:81:96:5d:47:67:a5:48:69:ee:ff: e2:cd:ef:d7:e7:14:9c:d5:fa:a4:3d:37:05:d7:d1: b5:a2:84:23:9a:ca:3b:78:61:3f:95:ee:0d:e3:a2: 49:94:8e:89:f1:c8:2f:bb:e5:1d:ef:ea:d3:be:e7: 78:e5:74:0d:2d:0e:57:f6:50:49:e7:8f:5b:90:af: b6:b2:e2:e8:a3:ba:da:ba:c5:e4:df:cb:c8:99:59: e5:1f:52:48:5d:2f:7e:fd:4f:66:6c:ea:cf:c6:53: 25:d7:c8:c7:02:49:cf:fa:14:ae:95:88:69:10:21: 32:d9:0d:fc:0c:b4:b8:d8:48:af:04:28:4c:d6:bb: 61:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F9:77:7D:29:B6:A1:C9:3B:93:8B:98:3F:B3:AD:BD:FE:89:AE:F4 X509v3 Authority Key Identifier: keyid:65:DB:BE:C6:78:17:7B:71:59:AD:90:1A:40:23:BA:57:AA:40:96:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/323430323a623234303a3939633a3a2f34382d3438203d3e203234313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:b240:99c::/48 Signature Algorithm: sha256WithRSAEncryption 7b:82:77:57:b3:83:81:cd:45:41:16:c4:85:fc:23:ba:c5:12: a2:cb:6e:b0:dd:7d:8c:a2:05:48:94:c0:3c:4b:7c:af:9f:38: 4b:d4:bd:8f:9e:9c:91:8e:65:70:fe:d9:9d:df:c7:10:da:0d: be:65:c0:14:64:4d:30:9e:c2:c7:95:69:d0:2e:71:de:b6:01: 5b:95:2a:76:91:64:43:01:4d:0b:63:b1:c4:b0:50:63:b8:67: 68:b9:ba:74:07:15:b2:72:99:6b:99:6b:ca:68:8e:69:ee:14: 8d:70:a0:29:b5:8e:c8:77:6f:29:11:92:19:02:1c:e1:5e:3b: 4e:55:d7:22:b5:79:88:0e:a2:d8:91:de:49:41:ae:9c:52:20: 16:5d:7c:ea:e2:29:41:77:4d:12:56:63:a7:48:79:06:6e:e3: 3b:d9:6a:1d:d6:70:99:c0:e1:18:29:11:32:3e:ca:5a:58:a0: d5:c0:f3:6e:1e:79:4a:08:08:11:9e:85:13:7c:e2:22:79:00: 7a:b6:22:8c:44:5f:1a:fe:12:e1:6a:1e:62:12:2d:6a:66:cb: cc:d3:3e:42:4c:33:e1:63:43:4d:f6:cd:05:dd:d7:51:98:40: ac:47:e9:a3:d7:ad:e4:c6:52:d1:a4:e5:22:0d:c8:f8:05:df: fd:af:86:33 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUN0PbQnyO7rwbQN9xmqEw0HfgK8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVEQkJFQzY3ODE3N0I3MTU5QUQ5MDFBNDAyM0JBNTdB QTQwOTZEQzAeFw0yNjEwMjcwNjU2NDNaFw0yNzEwMjYwNzAxNDNaMDMxMTAvBgNV BAMTKDE5Rjk3NzdEMjlCNkExQzkzQjkzOEI5ODNGQjNBREJERkU4OUFFRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFpV2icMcAAWk5045ZSk1pGSkE 9rpJD25cn8naXdXyrBObspVTyrKdm6shNZuW8+3qrIjv7x/UY4F8IJLXFSklDzWM 7sfN3HAossLtzhvSOZzuPUpvV8XChDTVqtv8VkdzgKotLcgE+2tOxJRYI0SlqI0b TiNt/OFqzcmsgZZdR2elSGnu/+LN79fnFJzV+qQ9NwXX0bWihCOayjt4YT+V7g3j okmUjonxyC+75R3v6tO+53jldA0tDlf2UEnnj1uQr7ay4uijutq6xeTfy8iZWeUf UkhdL379T2Zs6s/GUyXXyMcCSc/6FK6ViGkQITLZDfwMtLjYSK8EKEzWu2F9AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUGfl3fSm2ock7k4uYP7Otvf6JrvQwHwYDVR0j BBgwFoAUZdu+xngXe3FZrZAaQCO6V6pAltwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWFkNmRjYzktMTcwMC00OGViLTkwOTktNjY3OGY5MWJmNDRlLzAvNjVEQkJFQzY3 ODE3N0I3MTU5QUQ5MDFBNDAyM0JBNTdBQTQwOTZEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NURCQkVDNjc4MTc3QjcxNTlBRDkwMUE0MDIzQkE1N0FBNDA5 NkRDLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVhZDZkY2M5LTE3MDAtNDhlYi05 MDk5LTY2NzhmOTFiZjQ0ZS8wLzMyMzQzMDMyM2E2MjMyMzQzMDNhMzkzOTYzM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNDMxMzkzOC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQCskAJ nDANBgkqhkiG9w0BAQsFAAOCAQEAe4J3V7ODgc1FQRbEhfwjusUSostusN19jKIF SJTAPEt8r584S9S9j56ckY5lcP7Znd/HENoNvmXAFGRNMJ7Cx5Vp0C5x3rYBW5Uq dpFkQwFNC2OxxLBQY7hnaLm6dAcVsnKZa5lrymiOae4UjXCgKbWOyHdvKRGSGQIc 4V47TlXXIrV5iA6i2JHeSUGunFIgFl186uIpQXdNElZjp0h5Bm7jO9lqHdZwmcDh GCkRMj7KWlig1cDzbh55SggIEZ6FE3ziInkAerYijERfGv4S4WoeYhItambLzNM+ Qkwz4WNDTfbNBd3XUZhArEfpo9et5MZS0aTlIg3I+AXf/a+GMw== -----END CERTIFICATE-----Generated at Tue Oct 27 18:10:38 2026 by rpki-client