$ rpki-client -vvf rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a3136323a3a2f34382d3438203d3e20313533303837.roa File: 323430343a393763303a3136323a3a2f34382d3438203d3e20313533303837.roa (raw, json) Hash identifier: wvxhRZmNQr5Wh7cCqNMWOQlEvfBl+JimTndqina1k4g= Subject key identifier: AD:07:21:89:0B:72:33:F5:48:F3:A7:79:28:33:CC:2D:90:D3:7B:0C Certificate issuer: /CN=B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B Certificate serial: 18601129A47ACEB06DD6B3516956BAB1D5AED49F Authority key identifier: B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a3136323a3a2f34382d3438203d3e20313533303837.roa Signing time: Sun 03 May 2026 02:11:49 +0000 ROA not before: Sun 03 May 2026 02:06:49 +0000 ROA not after: Sun 02 May 2027 02:11:49 +0000 asID: 153087 IP address blocks: 2404:97c0:162::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.crl rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:60:11:29:a4:7a:ce:b0:6d:d6:b3:51:69:56:ba:b1:d5:ae:d4:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B Validity Not Before: May 3 02:06:49 2026 GMT Not After : May 2 02:11:49 2027 GMT Subject: CN=AD0721890B7233F548F3A7792833CC2D90D37B0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f9:71:f8:34:35:3d:f3:80:fb:32:33:9f:e9: b1:7f:85:b2:a3:40:88:ef:c3:ef:b4:b6:39:df:9c: 13:69:04:f3:18:80:65:db:01:a0:62:30:6f:bf:4a: ee:88:f5:f1:9e:76:1e:ff:88:8c:9a:86:bf:08:4f: d8:62:dc:49:65:0d:6f:01:51:79:52:51:2d:7d:eb: 5d:f0:38:af:93:71:e2:7a:1e:37:a9:8a:be:76:89: c6:54:05:04:b2:fd:b6:97:4f:92:d0:f5:ad:2a:42: 15:16:d6:98:86:e8:e8:1c:ac:fd:1b:58:c8:5a:ea: 17:96:8c:52:44:2d:48:3e:33:61:aa:30:a6:b0:8b: 81:8f:77:84:72:bb:74:2b:3c:93:79:03:e2:44:62: ae:87:1a:2b:0a:90:e1:28:ed:98:9a:00:a6:71:79: 74:ae:74:1d:64:b3:ab:87:a0:63:13:4d:6f:74:ee: b0:5a:cd:85:f9:87:8e:f9:56:e6:ad:fc:b5:fa:28: 06:23:4c:a3:1d:aa:b8:97:54:d9:2c:b4:bf:9a:f0: 0b:1c:83:90:ca:66:0a:3c:f7:7f:fd:65:22:7d:76: 2c:ae:02:82:93:99:bf:c0:a5:e0:53:ed:16:86:f5: a4:11:45:07:a6:e4:9e:7a:33:82:39:12:97:42:b7: ca:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:07:21:89:0B:72:33:F5:48:F3:A7:79:28:33:CC:2D:90:D3:7B:0C X509v3 Authority Key Identifier: keyid:B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a3136323a3a2f34382d3438203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:162::/48 Signature Algorithm: sha256WithRSAEncryption 9e:ab:ff:89:12:03:4a:7b:5d:13:6e:a9:eb:62:82:5f:3d:72: cf:7e:7e:d0:5b:97:1c:a9:bb:b5:4f:ac:5b:46:6d:9f:ea:e1: b7:24:b4:ce:97:15:20:f2:0b:b2:c1:23:39:ec:f1:98:88:b4: f1:bc:3d:9f:1a:01:c3:96:ad:27:cd:08:28:f4:48:f8:c1:e3: 75:5a:7c:ff:94:ea:cb:ea:79:90:61:3c:45:0e:c7:ea:cd:5d: 7c:ee:8a:54:b3:ef:e3:91:98:3f:31:b8:cb:96:83:fe:84:fc: 9d:85:a7:27:e2:74:78:0b:67:c9:01:33:2a:29:c1:73:24:3c: 72:6f:e9:65:e4:5a:2a:25:6d:02:9a:21:87:be:a5:89:a6:cd: 8a:ca:0e:23:52:ce:9c:a6:d3:d3:56:95:4d:6e:3b:6b:37:1f: 16:c7:fd:6d:2a:06:65:db:e6:0d:32:d0:7b:e7:36:b8:5d:43: 08:c2:88:52:89:89:6a:3d:76:c9:5e:d7:c6:ce:65:07:24:94: 91:f0:82:4a:c1:18:5b:e1:b8:a0:64:bf:a3:2c:d0:2c:23:0d: f0:7e:02:83:f0:71:9f:18:2f:be:2a:79:58:af:81:05:4d:2d: 23:42:04:0e:b8:d7:c1:74:18:6d:80:70:8e:8f:9d:36:2d:ec: a4:c2:82:33 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUGGARKaR6zrBt1rNRaVa6sdWu1J8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk4MEVGRDY5REE0QzhBQjNGQzcxMzhGNTdCRTNDREFG ODAyMjM4QjAeFw0yNjA1MDMwMjA2NDlaFw0yNzA1MDIwMjExNDlaMDMxMTAvBgNV BAMTKEFEMDcyMTg5MEI3MjMzRjU0OEYzQTc3OTI4MzNDQzJEOTBEMzdCMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa+XH4NDU984D7MjOf6bF/hbKj QIjvw++0tjnfnBNpBPMYgGXbAaBiMG+/Su6I9fGedh7/iIyahr8IT9hi3EllDW8B UXlSUS19613wOK+TceJ6Hjepir52icZUBQSy/baXT5LQ9a0qQhUW1piG6OgcrP0b WMha6heWjFJELUg+M2GqMKawi4GPd4Ryu3QrPJN5A+JEYq6HGisKkOEo7ZiaAKZx eXSudB1ks6uHoGMTTW907rBazYX5h475Vuat/LX6KAYjTKMdqriXVNkstL+a8Asc g5DKZgo893/9ZSJ9diyuAoKTmb/ApeBT7RaG9aQRRQem5J56M4I5EpdCt8qLAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUrQchiQtyM/VI86d5KDPMLZDTewwwHwYDVR0j BBgwFoAUuYDv1p2kyKs/xxOPV7482vgCI4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDY1NGE4YzMtMzBjOC00OTU3LTgyOTEtYTBjMWY5YjE4MzllLzAvQjk4MEVGRDY5 REE0QzhBQjNGQzcxMzhGNTdCRTNDREFGODAyMjM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTgwRUZENjlEQTRDOEFCM0ZDNzEzOEY1N0JFM0NEQUY4MDIy MzhCLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA2NTRhOGMzLTMwYzgtNDk1Ny04 MjkxLWEwYzFmOWIxODM5ZS8wLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzEzNjMyM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMzMzAzODM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJASX wAFiMA0GCSqGSIb3DQEBCwUAA4IBAQCeq/+JEgNKe10TbqnrYoJfPXLPfn7QW5cc qbu1T6xbRm2f6uG3JLTOlxUg8guywSM57PGYiLTxvD2fGgHDlq0nzQgo9Ej4weN1 Wnz/lOrL6nmQYTxFDsfqzV187opUs+/jkZg/MbjLloP+hPydhacn4nR4C2fJATMq KcFzJDxyb+ll5FoqJW0CmiGHvqWJps2Kyg4jUs6cptPTVpVNbjtrNx8Wx/1tKgZl 2+YNMtB75za4XUMIwohSiYlqPXbJXtfGzmUHJJSR8IJKwRhb4bigZL+jLNAsIw3w fgKD8HGfGC++KnlYr4EFTS0jQgQOuNfBdBhtgHCOj502LeykwoIz -----END CERTIFICATE-----Generated at Wed May 13 14:56:56 2026 by rpki-client