$ rpki-client -vvf rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a313338383a3a2f34382d3438203d3e20313533303837.roa File: 323430343a393763303a313338383a3a2f34382d3438203d3e20313533303837.roa (raw, json) Hash identifier: gl5KcGN4oW/h0UGCrQ+QHz4cXA0h6qYoXXfOCkZHnYI= Subject key identifier: 8D:E3:76:8B:1B:B7:DA:20:46:97:C5:DC:29:CF:36:43:13:57:11:EC Certificate issuer: /CN=B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B Certificate serial: 4BD030F8FC832509A4A59C55AE535629D57E6938 Authority key identifier: B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a313338383a3a2f34382d3438203d3e20313533303837.roa Signing time: Sun 03 May 2026 02:11:53 +0000 ROA not before: Sun 03 May 2026 02:06:53 +0000 ROA not after: Sun 02 May 2027 02:11:53 +0000 asID: 153087 IP address blocks: 2404:97c0:1388::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.crl rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d0:30:f8:fc:83:25:09:a4:a5:9c:55:ae:53:56:29:d5:7e:69:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B Validity Not Before: May 3 02:06:53 2026 GMT Not After : May 2 02:11:53 2027 GMT Subject: CN=8DE3768B1BB7DA204697C5DC29CF3643135711EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ad:53:db:b4:71:6c:6f:ab:17:8c:52:a3:a7: f8:c7:1d:1e:5a:2b:11:66:94:1e:7d:ce:ad:70:e8: b1:1b:fc:cc:10:21:65:7b:4c:ee:d8:5c:ef:71:a7: ee:d1:1c:96:72:6a:c1:96:cb:f3:8b:2d:8c:0e:86: ee:00:64:c6:14:4b:e7:d0:d9:56:2e:f6:cf:e7:da: 8a:d2:87:66:20:b1:e2:00:45:a9:1f:3d:be:cb:94: b7:6a:a2:58:68:5f:b0:d1:1f:64:62:f1:2a:05:b0: 49:ed:18:f9:d4:ef:40:cd:34:d0:cc:b3:e6:4e:11: 90:6a:37:f5:da:ec:07:01:7e:cc:34:04:c1:5b:f5: 45:50:af:a2:74:ea:ab:3b:cf:dc:4e:28:6b:56:c8: cb:2c:b7:b7:e6:bf:f8:95:f6:bd:74:35:c7:f3:b1: 89:66:ad:29:9b:59:11:d5:a6:a3:8b:61:b2:1a:07: 28:e4:6e:d4:80:9a:84:ef:51:0e:1b:82:b9:57:79: 53:2b:04:96:d0:df:80:ef:d9:6f:47:c8:61:ed:39: c2:06:b6:d2:c1:7c:93:ec:94:21:0f:4d:80:77:00: 30:77:13:54:c0:e6:e8:47:62:17:df:b3:1f:e0:ef: 92:cc:de:9c:9f:50:ce:25:6c:2b:fd:1f:bf:36:5b: 92:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E3:76:8B:1B:B7:DA:20:46:97:C5:DC:29:CF:36:43:13:57:11:EC X509v3 Authority Key Identifier: keyid:B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a313338383a3a2f34382d3438203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:1388::/48 Signature Algorithm: sha256WithRSAEncryption 5b:4b:76:95:42:91:bb:56:77:97:fd:69:bb:3c:6c:3e:2e:bb: c6:94:cb:dc:d1:d8:5b:03:a0:0d:dd:9c:05:0a:ee:6c:9f:90: 55:f9:4e:7a:98:0f:85:fd:f9:53:4c:56:9b:e5:63:2f:df:4d: 41:2e:a1:9f:cc:36:6d:15:1e:b2:66:a5:c7:4e:17:c1:72:39: 31:b1:6f:02:66:56:96:f9:af:1d:7d:1c:4b:f3:b3:b6:58:df: 85:df:e1:cf:74:d0:b3:fc:26:6e:2e:18:6a:f4:08:bd:48:71: 06:b6:c8:1b:9b:2a:3c:f5:a3:93:20:17:e3:8f:0a:ba:7a:8e: 96:f9:01:02:53:8c:24:53:80:35:cf:e8:8f:c5:f9:f8:ca:c8: 39:8f:23:31:27:45:68:46:af:38:cb:1c:7f:09:6c:31:93:3d: d0:41:a1:31:9f:ce:76:46:98:04:3b:62:9b:e7:f9:f0:32:fa: 36:97:5e:66:97:c0:5a:18:e2:32:5f:56:1d:6d:cc:7b:3d:14: c7:61:35:af:75:72:cc:87:ec:38:8c:5c:04:93:d7:9a:8c:4f: 2b:3e:43:78:3a:c1:11:f1:b4:e8:04:11:db:e3:eb:c3:d3:80: 6c:95:b3:7e:7d:b2:6e:0f:70:c2:83:17:b8:03:3c:b0:7f:ce: 90:f7:2a:0a -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUS9Aw+PyDJQmkpZxVrlNWKdV+aTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk4MEVGRDY5REE0QzhBQjNGQzcxMzhGNTdCRTNDREFG ODAyMjM4QjAeFw0yNjA1MDMwMjA2NTNaFw0yNzA1MDIwMjExNTNaMDMxMTAvBgNV BAMTKDhERTM3NjhCMUJCN0RBMjA0Njk3QzVEQzI5Q0YzNjQzMTM1NzExRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDarVPbtHFsb6sXjFKjp/jHHR5a KxFmlB59zq1w6LEb/MwQIWV7TO7YXO9xp+7RHJZyasGWy/OLLYwOhu4AZMYUS+fQ 2VYu9s/n2orSh2YgseIARakfPb7LlLdqolhoX7DRH2Ri8SoFsEntGPnU70DNNNDM s+ZOEZBqN/Xa7AcBfsw0BMFb9UVQr6J06qs7z9xOKGtWyMsst7fmv/iV9r10Ncfz sYlmrSmbWRHVpqOLYbIaByjkbtSAmoTvUQ4bgrlXeVMrBJbQ34Dv2W9HyGHtOcIG ttLBfJPslCEPTYB3ADB3E1TA5uhHYhffsx/g75LM3pyfUM4lbCv9H782W5IjAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUjeN2ixu32iBGl8XcKc82QxNXEewwHwYDVR0j BBgwFoAUuYDv1p2kyKs/xxOPV7482vgCI4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDY1NGE4YzMtMzBjOC00OTU3LTgyOTEtYTBjMWY5YjE4MzllLzAvQjk4MEVGRDY5 REE0QzhBQjNGQzcxMzhGNTdCRTNDREFGODAyMjM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTgwRUZENjlEQTRDOEFCM0ZDNzEzOEY1N0JFM0NEQUY4MDIy MzhCLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA2NTRhOGMzLTMwYzgtNDk1Ny04 MjkxLWEwYzFmOWIxODM5ZS8wLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzEzMzM4Mzgz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BJfAE4gwDQYJKoZIhvcNAQELBQADggEBAFtLdpVCkbtWd5f9abs8bD4uu8aUy9zR 2FsDoA3dnAUK7myfkFX5TnqYD4X9+VNMVpvlYy/fTUEuoZ/MNm0VHrJmpcdOF8Fy OTGxbwJmVpb5rx19HEvzs7ZY34Xf4c900LP8Jm4uGGr0CL1IcQa2yBubKjz1o5Mg F+OPCrp6jpb5AQJTjCRTgDXP6I/F+fjKyDmPIzEnRWhGrzjLHH8JbDGTPdBBoTGf znZGmAQ7Ypvn+fAy+jaXXmaXwFoY4jJfVh1tzHs9FMdhNa91csyH7DiMXAST15qM Tys+Q3g6wRHxtOgEEdvj68PTgGyVs359sm4PcMKDF7gDPLB/zpD3Kgo= -----END CERTIFICATE-----Generated at Wed May 13 13:41:45 2026 by rpki-client