$ rpki-client -vvvf rpki-rsync.idnic.net/repo/af6f8cba-cd23-409a-8b49-7730cf2dd754/1/323030313a6466363a616334303a3a2f34382d3438203d3e20313432323634.roa File: 323030313a6466363a616334303a3a2f34382d3438203d3e20313432323634.roa (raw, json) Hash identifier: +3gV8b2rF3vOiGBL5wQvuRtyN84wash4iIEkJ8GUISk= Subject key identifier: 9D:4E:E4:C1:85:78:8B:50:36:8E:5D:87:AF:1E:45:62:A7:1D:FA:5A Certificate issuer: /CN=0A1141F27C8CF3FDA6181400452397AC7AFBFC6B Certificate serial: 023B97A1F1C0809851E02E5FEFD5E8F2407D34D8 Authority key identifier: 0A:11:41:F2:7C:8C:F3:FD:A6:18:14:00:45:23:97:AC:7A:FB:FC:6B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A1141F27C8CF3FDA6181400452397AC7AFBFC6B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/af6f8cba-cd23-409a-8b49-7730cf2dd754/1/323030313a6466363a616334303a3a2f34382d3438203d3e20313432323634.roa Signing time: Tue 29 Sep 2026 20:45:10 +0000 ROA not before: Tue 29 Sep 2026 20:40:10 +0000 ROA not after: Tue 28 Sep 2027 20:45:10 +0000 asID: 142264 IP address blocks: 2001:df6:ac40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/af6f8cba-cd23-409a-8b49-7730cf2dd754/1/0A1141F27C8CF3FDA6181400452397AC7AFBFC6B.crl rsync://rpki-rsync.idnic.net/repo/af6f8cba-cd23-409a-8b49-7730cf2dd754/1/0A1141F27C8CF3FDA6181400452397AC7AFBFC6B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A1141F27C8CF3FDA6181400452397AC7AFBFC6B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:3b:97:a1:f1:c0:80:98:51:e0:2e:5f:ef:d5:e8:f2:40:7d:34:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1141F27C8CF3FDA6181400452397AC7AFBFC6B Validity Not Before: Sep 29 20:40:10 2026 GMT Not After : Sep 28 20:45:10 2027 GMT Subject: CN=9D4EE4C185788B50368E5D87AF1E4562A71DFA5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:46:36:00:79:1c:f0:2e:f7:0e:80:8e:d7:28: c0:b8:f8:6e:77:aa:46:7b:d9:de:3b:54:ba:31:f4: d5:e4:f3:d0:3a:c1:1f:04:6b:8e:2f:b7:2b:66:2d: c9:8c:fa:5a:08:60:cf:7d:24:44:8b:64:31:a3:1d: 82:01:8e:9f:de:8c:ee:87:23:40:a8:a9:e7:34:a1: 3d:b0:f0:e4:ae:98:10:75:55:da:b9:23:21:96:5b: 55:d1:b4:47:26:2a:24:d8:e6:de:9e:7a:94:09:b7: bf:07:58:3b:71:07:09:86:ab:9e:14:3f:b7:75:e4: e3:e1:50:53:e6:cf:ab:cb:dc:79:93:99:37:d6:86: 96:d6:74:59:25:60:16:24:a6:c3:97:4f:16:f1:62: d6:c7:06:b5:5e:6a:02:d9:d1:70:18:f8:85:01:4e: b5:cd:48:b1:ff:f6:3f:f7:62:9a:cc:03:72:36:8a: 4a:35:b8:0a:17:8e:57:26:fe:49:b2:19:d0:26:a6: a5:a5:04:44:96:d6:cc:1b:1a:1b:04:f3:c2:a4:16: d5:c6:82:f5:5e:88:d2:75:75:5d:42:7c:c5:7c:d7: da:ea:a1:d3:58:bf:3f:8c:a0:00:57:22:cf:d1:c6: 1f:74:c7:47:cb:ae:2e:c2:64:33:ac:ef:dd:ec:3b: 50:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4E:E4:C1:85:78:8B:50:36:8E:5D:87:AF:1E:45:62:A7:1D:FA:5A X509v3 Authority Key Identifier: keyid:0A:11:41:F2:7C:8C:F3:FD:A6:18:14:00:45:23:97:AC:7A:FB:FC:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/af6f8cba-cd23-409a-8b49-7730cf2dd754/1/0A1141F27C8CF3FDA6181400452397AC7AFBFC6B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A1141F27C8CF3FDA6181400452397AC7AFBFC6B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af6f8cba-cd23-409a-8b49-7730cf2dd754/1/323030313a6466363a616334303a3a2f34382d3438203d3e20313432323634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:ac40::/48 Signature Algorithm: sha256WithRSAEncryption 70:63:fd:78:00:b8:08:36:53:c7:ec:9d:00:00:92:af:04:24: 16:c7:50:ae:3a:1d:3c:e9:eb:67:c2:70:11:3d:a8:a9:90:df: 4d:09:64:ef:83:95:8a:eb:9e:a1:8e:00:b5:fd:fc:57:d5:d2: 9a:e1:91:e1:35:af:f7:7f:6f:07:94:e1:6f:28:a0:92:e3:0e: bb:90:fb:34:2c:f0:62:f6:da:ef:2e:65:eb:23:03:98:39:85: bd:82:6b:d5:7b:4b:9a:93:d9:82:62:c6:62:f9:47:85:f1:ec: 9c:37:cc:35:fc:54:02:8d:34:2b:0d:6f:34:c0:eb:40:8f:7f: 8d:63:1d:60:64:45:90:26:e8:5b:a4:36:2c:d0:75:4b:d1:36: d9:cd:f2:28:a1:ec:b5:89:52:57:5e:cb:ba:00:7b:09:7e:52: 50:23:d5:03:57:15:32:15:4a:29:d0:2e:01:2e:26:f4:82:db: 67:e0:87:f4:bc:a5:44:61:67:c8:9d:65:55:a7:03:06:14:0f: 71:8b:8f:b0:7b:16:79:02:15:15:b6:76:c2:0e:81:38:0f:0a: c1:ed:e2:4f:b3:cb:e2:c8:5d:a1:0c:83:7d:68:24:7c:93:88: a7:b1:d7:17:12:db:fe:c6:b0:bb:b5:45:11:96:ab:7c:49:54: d5:16:d0:7a -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUAjuXofHAgJhR4C5f79Xo8kB9NNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExMTQxRjI3QzhDRjNGREE2MTgxNDAwNDUyMzk3QUM3 QUZCRkM2QjAeFw0yNjA5MjkyMDQwMTBaFw0yNzA5MjgyMDQ1MTBaMDMxMTAvBgNV BAMTKDlENEVFNEMxODU3ODhCNTAzNjhFNUQ4N0FGMUU0NTYyQTcxREZBNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLRjYAeRzwLvcOgI7XKMC4+G53 qkZ72d47VLox9NXk89A6wR8Ea44vtytmLcmM+loIYM99JESLZDGjHYIBjp/ejO6H I0Coqec0oT2w8OSumBB1Vdq5IyGWW1XRtEcmKiTY5t6eepQJt78HWDtxBwmGq54U P7d15OPhUFPmz6vL3HmTmTfWhpbWdFklYBYkpsOXTxbxYtbHBrVeagLZ0XAY+IUB TrXNSLH/9j/3YprMA3I2iko1uAoXjlcm/kmyGdAmpqWlBESW1swbGhsE88KkFtXG gvVeiNJ1dV1CfMV819rqodNYvz+MoABXIs/Rxh90x0fLri7CZDOs793sO1CRAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUnU7kwYV4i1A2jl2Hrx5FYqcd+lowHwYDVR0j BBgwFoAUChFB8nyM8/2mGBQARSOXrHr7/GswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWY2ZjhjYmEtY2QyMy00MDlhLThiNDktNzczMGNmMmRkNzU0LzEvMEExMTQxRjI3 QzhDRjNGREE2MTgxNDAwNDUyMzk3QUM3QUZCRkM2Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQTExNDFGMjdDOENGM0ZEQTYxODE0MDA0NTIzOTdBQzdBRkJG QzZCLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FmNmY4Y2JhLWNkMjMtNDA5YS04 YjQ5LTc3MzBjZjJkZDc1NC8xLzMyMzAzMDMxM2E2NDY2MzYzYTYxNjMzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMyMzIzNjM0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 9qxAMA0GCSqGSIb3DQEBCwUAA4IBAQBwY/14ALgINlPH7J0AAJKvBCQWx1CuOh08 6etnwnARPaipkN9NCWTvg5WK656hjgC1/fxX1dKa4ZHhNa/3f28HlOFvKKCS4w67 kPs0LPBi9trvLmXrIwOYOYW9gmvVe0uak9mCYsZi+UeF8eycN8w1/FQCjTQrDW80 wOtAj3+NYx1gZEWQJuhbpDYs0HVL0TbZzfIooey1iVJXXsu6AHsJflJQI9UDVxUy FUop0C4BLib0gttn4If0vKVEYWfInWVVpwMGFA9xi4+wexZ5AhUVtnbCDoE4DwrB 7eJPs8viyF2hDIN9aCR8k4insdcXEtv+xrC7tUURlqt8SVTVFtB6 -----END CERTIFICATE-----Generated at Sun Oct 25 14:21:10 2026 by rpki-client