$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/323430363a383434303a3a2f33322d3332203d3e20313431303837.roa File: 323430363a383434303a3a2f33322d3332203d3e20313431303837.roa (raw, json) Hash identifier: ab/HK68d875hQq74b61/hCy2EN7S6mcH+EybuMGUXCU= Subject key identifier: D0:3B:8C:26:BD:8F:E4:2F:95:C1:05:2C:A4:E3:01:3E:91:50:A2:B4 Certificate issuer: /CN=AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE Certificate serial: 4D5DA32592D07924D28F6885C5947229A5C589D6 Authority key identifier: AF:4C:B4:6F:A8:35:3C:B5:A3:B2:3E:F5:7F:23:18:D4:6C:27:E3:CE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/323430363a383434303a3a2f33322d3332203d3e20313431303837.roa Signing time: Mon 05 Oct 2026 03:28:56 +0000 ROA not before: Mon 05 Oct 2026 03:23:56 +0000 ROA not after: Mon 04 Oct 2027 03:28:56 +0000 asID: 141087 IP address blocks: 2406:8440::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.crl rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 06:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:5d:a3:25:92:d0:79:24:d2:8f:68:85:c5:94:72:29:a5:c5:89:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE Validity Not Before: Oct 5 03:23:56 2026 GMT Not After : Oct 4 03:28:56 2027 GMT Subject: CN=D03B8C26BD8FE42F95C1052CA4E3013E9150A2B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ee:ca:0c:be:69:4a:b8:0d:53:0f:ca:c6:72: e2:f2:a5:61:29:3c:22:c1:1e:b2:31:e1:66:e0:45: e0:38:44:eb:07:16:06:2f:25:fe:93:49:d5:4b:69: 5e:18:30:f7:30:c0:fe:c1:b2:2e:f4:f9:cd:57:b1: 48:fd:94:eb:e7:29:dc:64:17:6c:a3:d4:6a:c5:a7: d0:de:61:8b:4d:96:5c:59:c0:38:cc:d3:63:66:c1: 7c:1b:f9:bb:97:35:1d:4e:a0:1b:95:35:40:a6:d8: 3f:a3:4b:20:2b:f3:4b:28:99:16:10:24:4a:01:3e: 59:a2:bc:3e:c6:13:f0:64:4e:2a:29:83:34:0b:66: f2:3b:34:aa:21:50:c5:be:0d:8d:96:f8:ce:de:50: 1a:0e:19:62:fd:fc:a6:a0:16:30:7b:c2:fe:59:5c: 13:1a:26:86:4d:18:82:5e:be:62:e2:e4:61:7f:91: 53:d1:b9:30:73:b8:a6:06:cd:37:e4:03:b0:a2:39: 3c:f9:30:52:e9:53:fd:2b:86:7e:55:bd:4d:b7:5b: 0c:a7:62:27:87:19:91:b3:98:5a:91:b0:72:ba:1b: 3c:e0:66:8c:f4:6e:aa:87:cf:ed:47:77:c0:2d:14: e9:5a:6f:e6:70:02:a1:c0:b3:0d:84:69:3d:1a:5c: 38:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:3B:8C:26:BD:8F:E4:2F:95:C1:05:2C:A4:E3:01:3E:91:50:A2:B4 X509v3 Authority Key Identifier: keyid:AF:4C:B4:6F:A8:35:3C:B5:A3:B2:3E:F5:7F:23:18:D4:6C:27:E3:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/323430363a383434303a3a2f33322d3332203d3e20313431303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:8440::/32 Signature Algorithm: sha256WithRSAEncryption 3b:97:07:97:3b:f5:2a:79:98:43:1d:1d:2d:cb:ee:ca:85:52: f9:e2:bb:da:aa:da:43:6a:e1:29:51:e5:98:46:7a:91:cf:64: 99:20:19:8b:86:4d:c3:65:03:b5:58:c2:e9:39:bb:45:d5:59: d6:60:28:e3:a0:5c:f8:89:bc:8a:6b:9b:bb:e3:a8:ed:af:2b: b4:b5:b7:d7:68:d3:5d:8e:09:b4:ef:8b:c1:d7:98:d8:9e:15: 26:5a:3c:b6:de:b4:e1:58:ed:31:2b:9c:82:eb:0e:d0:22:98: 07:47:0b:01:41:f4:d1:b0:e5:e6:cd:3c:36:38:68:c9:21:47: 2b:ad:65:2b:d3:78:b6:26:d4:20:c5:56:6c:5f:74:69:a8:69: f7:c3:05:a5:61:c8:d9:43:99:80:a2:46:f8:df:33:91:f0:b2: b5:dc:02:61:b2:06:15:30:67:9f:a4:78:8d:e5:d9:26:14:f7: b8:22:a2:f4:91:9b:97:04:9f:02:1a:a5:ac:8d:c7:3d:b9:ec: 25:b6:28:82:65:cd:2f:d1:ba:d4:a6:5e:81:01:77:cd:ee:b3: ce:fe:3d:ab:8e:7e:11:2f:ca:77:48:28:fd:39:36:cc:71:04: 50:29:bb:0c:56:d5:c6:fa:77:ae:b2:36:2a:7c:fe:8b:e5:7e: 2b:53:36:f4 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUTV2jJZLQeSTSj2iFxZRyKaXFidYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0Q0I0NkZBODM1M0NCNUEzQjIzRUY1N0YyMzE4RDQ2 QzI3RTNDRTAeFw0yNjEwMDUwMzIzNTZaFw0yNzEwMDQwMzI4NTZaMDMxMTAvBgNV BAMTKEQwM0I4QzI2QkQ4RkU0MkY5NUMxMDUyQ0E0RTMwMTNFOTE1MEEyQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo7soMvmlKuA1TD8rGcuLypWEp PCLBHrIx4WbgReA4ROsHFgYvJf6TSdVLaV4YMPcwwP7Bsi70+c1XsUj9lOvnKdxk F2yj1GrFp9DeYYtNllxZwDjM02NmwXwb+buXNR1OoBuVNUCm2D+jSyAr80somRYQ JEoBPlmivD7GE/BkTiopgzQLZvI7NKohUMW+DY2W+M7eUBoOGWL9/KagFjB7wv5Z XBMaJoZNGIJevmLi5GF/kVPRuTBzuKYGzTfkA7CiOTz5MFLpU/0rhn5VvU23Wwyn YieHGZGzmFqRsHK6GzzgZoz0bqqHz+1Hd8AtFOlab+ZwAqHAsw2EaT0aXDjzAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQU0DuMJr2P5C+VwQUspOMBPpFQorQwHwYDVR0j BBgwFoAUr0y0b6g1PLWjsj71fyMY1Gwn484wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWM4OTdjNGEtZTBmZi00NjUyLWE1OTEtZmYyZDQ4ZTcyYzkxLzAvQUY0Q0I0NkZB ODM1M0NCNUEzQjIzRUY1N0YyMzE4RDQ2QzI3RTNDRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjRDQjQ2RkE4MzUzQ0I1QTNCMjNFRjU3RjIzMThENDZDMjdF M0NFLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVjODk3YzRhLWUwZmYtNDY1Mi1h NTkxLWZmMmQ0OGU3MmM5MS8wLzMyMzQzMDM2M2EzODM0MzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzQzMTMwMzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQGhEAwDQYJKoZI hvcNAQELBQADggEBADuXB5c79Sp5mEMdHS3L7sqFUvniu9qq2kNq4SlR5ZhGepHP ZJkgGYuGTcNlA7VYwuk5u0XVWdZgKOOgXPiJvIprm7vjqO2vK7S1t9do012OCbTv i8HXmNieFSZaPLbetOFY7TErnILrDtAimAdHCwFB9NGw5ebNPDY4aMkhRyutZSvT eLYm1CDFVmxfdGmoaffDBaVhyNlDmYCiRvjfM5HwsrXcAmGyBhUwZ5+keI3l2SYU 97giovSRm5cEnwIapayNxz257CW2KIJlzS/RutSmXoEBd83us87+PauOfhEvyndI KP05NsxxBFApuwxW1cb6d66yNip8/ovlfitTNvQ= -----END CERTIFICATE-----Generated at Tue Oct 27 09:23:50 2026 by rpki-client