$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/323030313a6466343a356634303a3a2f34382d3438203d3e20313533313234.roa File: 323030313a6466343a356634303a3a2f34382d3438203d3e20313533313234.roa (raw, json) Hash identifier: Oqwg2SllRM16jiV0QSe8iODq6VCyQSyz5tKM1UbnhTo= Subject key identifier: 4B:E5:50:71:C4:84:11:A3:72:9D:DE:1D:72:0F:C6:56:12:9C:23:E2 Certificate issuer: /CN=EB05D5BB4356C8737A9AA4994302BCA8B46691CD Certificate serial: 0331F3EB3CA2DD1E113226A4934AF75C4D959F47 Authority key identifier: EB:05:D5:BB:43:56:C8:73:7A:9A:A4:99:43:02:BC:A8:B4:66:91:CD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/323030313a6466343a356634303a3a2f34382d3438203d3e20313533313234.roa Signing time: Tue 22 Sep 2026 11:58:01 +0000 ROA not before: Tue 22 Sep 2026 11:53:01 +0000 ROA not after: Tue 21 Sep 2027 11:58:01 +0000 asID: 153124 IP address blocks: 2001:df4:5f40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.crl rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 21:35:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:31:f3:eb:3c:a2:dd:1e:11:32:26:a4:93:4a:f7:5c:4d:95:9f:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB05D5BB4356C8737A9AA4994302BCA8B46691CD Validity Not Before: Sep 22 11:53:01 2026 GMT Not After : Sep 21 11:58:01 2027 GMT Subject: CN=4BE55071C48411A3729DDE1D720FC656129C23E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:99:a6:9f:8f:71:a6:6b:62:45:9a:a2:19:90: 55:e3:6f:1a:ed:27:b9:aa:21:ae:d8:6b:58:49:70: ba:a3:ea:66:ab:36:9e:0b:dd:3f:29:a0:24:a8:ce: 43:09:83:3e:99:dd:7c:b7:c3:22:58:9f:7d:06:46: 68:48:ac:c7:15:65:d0:7b:08:66:08:4e:42:96:58: ef:d9:3e:5c:70:20:d2:ba:f4:56:0e:0e:87:41:67: 5b:27:2a:31:b1:c5:38:02:bb:c1:a9:9f:3c:ba:01: 0e:7b:45:04:cd:15:05:01:61:b5:f6:e8:80:ac:6d: ec:75:67:9a:ec:88:17:e6:8c:f3:45:dd:b3:5c:02: b7:e5:51:01:59:54:aa:f1:02:22:08:f2:bd:92:9f: 3b:1b:9e:b4:b6:51:aa:0e:af:77:b6:b0:62:19:89: 07:d0:7e:e6:9f:a7:3e:ff:0c:2a:fa:2a:7a:83:d5: 22:57:28:06:36:60:00:2c:e8:d3:79:45:cc:e7:34: 93:49:61:24:56:aa:9c:6e:c6:2b:19:af:f4:27:9e: e6:2e:ee:bd:68:1d:19:69:6a:bd:04:11:cd:07:36: a1:76:59:12:57:85:f2:3b:d2:2b:20:ae:a1:10:c9: e5:d2:0b:16:6f:b6:53:0d:30:54:3d:f1:de:f3:4a: 50:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E5:50:71:C4:84:11:A3:72:9D:DE:1D:72:0F:C6:56:12:9C:23:E2 X509v3 Authority Key Identifier: keyid:EB:05:D5:BB:43:56:C8:73:7A:9A:A4:99:43:02:BC:A8:B4:66:91:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/323030313a6466343a356634303a3a2f34382d3438203d3e20313533313234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:5f40::/48 Signature Algorithm: sha256WithRSAEncryption 05:49:39:5d:b3:58:93:00:64:80:09:ce:9d:d9:a2:3a:46:8e: fc:11:a3:21:64:c6:3f:7b:ea:30:d2:91:3e:93:c3:23:68:ee: ab:86:77:c3:fe:5e:55:4e:7d:a0:32:f3:4e:c6:08:54:9f:25: 70:39:35:eb:30:9a:78:a2:a3:cc:5f:ea:82:d0:61:80:6a:12: c7:30:9a:05:25:c7:fb:5b:9e:85:a1:50:dc:6c:7b:0f:be:3d: 0e:c7:b6:21:ae:16:48:94:2e:a7:e0:91:be:a2:a7:04:e6:71: b2:bd:e1:23:3a:12:90:74:d8:fa:2c:d6:ec:2c:82:64:74:da: 75:9c:e3:b9:74:6e:93:30:c6:46:4a:c5:51:37:11:77:79:10: f7:ff:ff:1c:8c:b0:e0:b3:ba:1a:d6:3c:9e:a5:71:2b:2f:0a: 1e:d5:c3:d5:c3:7d:1e:15:b1:7b:74:70:bc:ee:11:42:a2:ef: 0c:26:51:47:74:60:c3:c2:a1:92:fa:01:49:24:64:c0:d7:35: 50:5a:6b:6c:61:2c:bb:37:95:c9:be:21:f4:ac:c2:4d:61:83: 3a:4e:b3:ba:39:76:6a:1f:80:c7:9f:f7:41:d3:5d:81:aa:4b: fe:f8:84:f2:8f:aa:67:77:fb:27:47:31:7d:91:30:94:8a:ca: 12:6a:34:6e -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUAzHz6zyi3R4RMiakk0r3XE2Vn0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIwNUQ1QkI0MzU2Qzg3MzdBOUFBNDk5NDMwMkJDQThC NDY2OTFDRDAeFw0yNjA5MjIxMTUzMDFaFw0yNzA5MjExMTU4MDFaMDMxMTAvBgNV BAMTKDRCRTU1MDcxQzQ4NDExQTM3MjlEREUxRDcyMEZDNjU2MTI5QzIzRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6maafj3Gma2JFmqIZkFXjbxrt J7mqIa7Ya1hJcLqj6marNp4L3T8poCSozkMJgz6Z3Xy3wyJYn30GRmhIrMcVZdB7 CGYITkKWWO/ZPlxwINK69FYODodBZ1snKjGxxTgCu8Gpnzy6AQ57RQTNFQUBYbX2 6ICsbex1Z5rsiBfmjPNF3bNcArflUQFZVKrxAiII8r2SnzsbnrS2UaoOr3e2sGIZ iQfQfuafpz7/DCr6KnqD1SJXKAY2YAAs6NN5RcznNJNJYSRWqpxuxisZr/QnnuYu 7r1oHRlpar0EEc0HNqF2WRJXhfI70isgrqEQyeXSCxZvtlMNMFQ98d7zSlCpAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUS+VQccSEEaNynd4dcg/GVhKcI+IwHwYDVR0j BBgwFoAU6wXVu0NWyHN6mqSZQwK8qLRmkc0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM1OGZiN2MtNjdiOC00YmNlLTk2ZDktYmU5MTJlM2Y3M2RkLzEvRUIwNUQ1QkI0 MzU2Qzg3MzdBOUFBNDk5NDMwMkJDQThCNDY2OTFDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjA1RDVCQjQzNTZDODczN0E5QUE0OTk0MzAyQkNBOEI0NjY5 MUNELmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzRjNThmYjdjLTY3YjgtNGJjZS05 NmQ5LWJlOTEyZTNmNzNkZC8xLzMyMzAzMDMxM2E2NDY2MzQzYTM1NjYzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMzMzEzMjM0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 9F9AMA0GCSqGSIb3DQEBCwUAA4IBAQAFSTlds1iTAGSACc6d2aI6Ro78EaMhZMY/ e+ow0pE+k8MjaO6rhnfD/l5VTn2gMvNOxghUnyVwOTXrMJp4oqPMX+qC0GGAahLH MJoFJcf7W56FoVDcbHsPvj0Ox7YhrhZIlC6n4JG+oqcE5nGyveEjOhKQdNj6LNbs LIJkdNp1nOO5dG6TMMZGSsVRNxF3eRD3//8cjLDgs7oa1jyepXErLwoe1cPVw30e FbF7dHC87hFCou8MJlFHdGDDwqGS+gFJJGTA1zVQWmtsYSy7N5XJviH0rMJNYYM6 TrO6OXZqH4DHn/dB012Bqkv++ITyj6pnd/snRzF9kTCUisoSajRu -----END CERTIFICATE-----Generated at Sat Oct 3 10:50:53 2026 by rpki-client