$ rpki-client -vvf rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323134343a3a2f34382d3438203d3e20313533303837.roa File: 323430343a393763303a323134343a3a2f34382d3438203d3e20313533303837.roa (raw, json) Hash identifier: qIC4yy2BuKPNTzd6BHx7RuHxEAJzJSYOQ4YKywJZhjM= Subject key identifier: B3:78:D3:F8:C5:7B:4A:3B:04:99:8F:55:CB:B6:A1:B8:6C:0E:27:9F Certificate issuer: /CN=B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B Certificate serial: 7E242458CA50EDF186C388A546023E7CA9E3BF9A Authority key identifier: B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323134343a3a2f34382d3438203d3e20313533303837.roa Signing time: Sun 03 May 2026 02:11:50 +0000 ROA not before: Sun 03 May 2026 02:06:50 +0000 ROA not after: Sun 02 May 2027 02:11:50 +0000 asID: 153087 IP address blocks: 2404:97c0:2144::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.crl rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:24:24:58:ca:50:ed:f1:86:c3:88:a5:46:02:3e:7c:a9:e3:bf:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B Validity Not Before: May 3 02:06:50 2026 GMT Not After : May 2 02:11:50 2027 GMT Subject: CN=B378D3F8C57B4A3B04998F55CBB6A1B86C0E279F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:99:c1:e5:d6:7d:a3:66:30:fa:1d:97:b4:04: ec:6c:95:e0:a8:2f:8b:6e:dc:da:ff:ac:d1:1c:43: 4a:32:da:cc:17:be:b1:5c:d6:b4:50:a3:46:80:96: 05:df:42:cd:78:b6:f0:d6:75:f3:40:e9:d7:18:63: 8f:21:26:04:ed:ca:2a:a3:aa:17:c6:99:2d:e7:aa: b0:ae:25:15:85:99:66:87:3e:7c:7f:fe:18:fa:cb: fd:15:3a:8b:dd:3d:ac:ce:45:d9:c5:7a:3a:3c:bf: 37:2b:b2:c8:4b:48:91:8b:5f:5f:1d:04:c9:69:82: ab:c3:96:0b:55:0d:59:92:f5:fe:78:53:02:75:f8: e6:d8:af:99:57:88:4b:ea:49:49:07:a6:ea:42:df: df:78:c4:05:be:c0:bd:83:ae:7b:3d:e7:5a:de:aa: c2:ab:93:78:ab:19:0e:91:f9:c4:37:19:0e:25:e9: 99:1e:66:dc:6e:b3:1f:f8:e8:45:06:8b:28:f1:6b: 74:97:df:15:e3:d3:56:da:98:54:9b:26:d3:ea:cd: 1c:c3:fa:64:d0:08:e9:5f:dd:d3:6d:14:88:c8:43: fb:db:79:8b:e9:fc:e0:de:0f:62:08:8e:f1:c8:d1: cf:a4:3e:b2:e9:7b:a4:1f:28:c6:c5:16:cc:eb:11: 8c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:78:D3:F8:C5:7B:4A:3B:04:99:8F:55:CB:B6:A1:B8:6C:0E:27:9F X509v3 Authority Key Identifier: keyid:B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323134343a3a2f34382d3438203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:2144::/48 Signature Algorithm: sha256WithRSAEncryption 86:66:a4:8a:e7:17:e6:73:d8:ef:2c:08:95:0f:de:7b:75:9a: f6:13:d1:77:b8:a9:b6:39:15:fc:1e:e9:72:17:fb:48:63:06: 81:04:57:0e:14:12:61:e2:9f:cc:e2:5c:9a:d8:82:ad:a0:4a: 8f:14:d4:59:69:4c:08:71:4f:6f:1c:41:0b:bd:c4:34:4e:ac: 40:60:8f:10:50:6a:b7:5e:a2:0d:37:f2:46:de:a7:23:51:14: 81:96:85:c1:03:e2:5b:06:2f:d7:b6:43:2e:39:9b:52:70:0d: f6:04:a2:cf:9a:d3:39:02:53:4a:d0:02:b8:3c:ca:89:ca:50: 81:98:45:99:8d:00:c0:f5:0e:d6:46:66:18:1d:0e:20:32:94: a8:df:9a:af:08:0e:65:37:6b:2e:a8:8f:2a:86:7b:66:ed:6d: c0:e1:0e:2c:20:09:69:1d:55:d5:17:ac:c6:ea:95:14:af:09: fd:90:c0:22:9b:50:93:a8:6b:33:0f:9e:34:16:70:cf:bf:03: 64:8c:3a:ca:af:cb:20:05:64:27:9f:19:4a:65:ea:4b:75:53: ee:d7:05:f5:3d:8e:12:76:40:f6:1a:10:55:36:9c:42:b0:8f: cd:e3:fc:7c:07:a8:74:38:92:cf:00:a8:a9:5b:a0:66:5d:a3: 2c:b3:a4:e9 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUfiQkWMpQ7fGGw4ilRgI+fKnjv5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk4MEVGRDY5REE0QzhBQjNGQzcxMzhGNTdCRTNDREFG ODAyMjM4QjAeFw0yNjA1MDMwMjA2NTBaFw0yNzA1MDIwMjExNTBaMDMxMTAvBgNV BAMTKEIzNzhEM0Y4QzU3QjRBM0IwNDk5OEY1NUNCQjZBMUI4NkMwRTI3OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSmcHl1n2jZjD6HZe0BOxsleCo L4tu3Nr/rNEcQ0oy2swXvrFc1rRQo0aAlgXfQs14tvDWdfNA6dcYY48hJgTtyiqj qhfGmS3nqrCuJRWFmWaHPnx//hj6y/0VOovdPazORdnFejo8vzcrsshLSJGLX18d BMlpgqvDlgtVDVmS9f54UwJ1+ObYr5lXiEvqSUkHpupC3994xAW+wL2Drns951re qsKrk3irGQ6R+cQ3GQ4l6ZkeZtxusx/46EUGiyjxa3SX3xXj01bamFSbJtPqzRzD +mTQCOlf3dNtFIjIQ/vbeYvp/ODeD2IIjvHI0c+kPrLpe6QfKMbFFszrEYylAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUs3jT+MV7SjsEmY9Vy7ahuGwOJ58wHwYDVR0j BBgwFoAUuYDv1p2kyKs/xxOPV7482vgCI4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDY1NGE4YzMtMzBjOC00OTU3LTgyOTEtYTBjMWY5YjE4MzllLzAvQjk4MEVGRDY5 REE0QzhBQjNGQzcxMzhGNTdCRTNDREFGODAyMjM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTgwRUZENjlEQTRDOEFCM0ZDNzEzOEY1N0JFM0NEQUY4MDIy MzhCLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA2NTRhOGMzLTMwYzgtNDk1Ny04 MjkxLWEwYzFmOWIxODM5ZS8wLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzIzMTM0MzQz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BJfAIUQwDQYJKoZIhvcNAQELBQADggEBAIZmpIrnF+Zz2O8sCJUP3nt1mvYT0Xe4 qbY5Ffwe6XIX+0hjBoEEVw4UEmHin8ziXJrYgq2gSo8U1FlpTAhxT28cQQu9xDRO rEBgjxBQardeog038kbepyNRFIGWhcED4lsGL9e2Qy45m1JwDfYEos+a0zkCU0rQ Arg8yonKUIGYRZmNAMD1DtZGZhgdDiAylKjfmq8IDmU3ay6ojyqGe2btbcDhDiwg CWkdVdUXrMbqlRSvCf2QwCKbUJOoazMPnjQWcM+/A2SMOsqvyyAFZCefGUpl6kt1 U+7XBfU9jhJ2QPYaEFU2nEKwj83j/HwHqHQ4ks8AqKlboGZdoyyzpOk= -----END CERTIFICATE-----Generated at Wed May 13 15:07:33 2026 by rpki-client