$ rpki-client -vvf rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323136373a3a2f34382d3438203d3e20313533303837.roa File: 323430343a393763303a323136373a3a2f34382d3438203d3e20313533303837.roa (raw, json) Hash identifier: AxjgFsJR8Zem+IYp9Ey0gcBUBcIOhuJPy3J3b0DB4Cc= Subject key identifier: 65:4B:C8:07:ED:C6:A4:C5:C8:DF:5A:76:D5:3A:50:14:CF:7C:3C:5B Certificate issuer: /CN=B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B Certificate serial: 3984D489ADD44F1225D408286B49AA50B5B54B54 Authority key identifier: B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323136373a3a2f34382d3438203d3e20313533303837.roa Signing time: Sun 03 May 2026 02:11:54 +0000 ROA not before: Sun 03 May 2026 02:06:54 +0000 ROA not after: Sun 02 May 2027 02:11:54 +0000 asID: 153087 IP address blocks: 2404:97c0:2167::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.crl rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:84:d4:89:ad:d4:4f:12:25:d4:08:28:6b:49:aa:50:b5:b5:4b:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B Validity Not Before: May 3 02:06:54 2026 GMT Not After : May 2 02:11:54 2027 GMT Subject: CN=654BC807EDC6A4C5C8DF5A76D53A5014CF7C3C5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4a:4a:02:d6:7f:77:ba:17:73:12:2e:4a:05: 9e:a4:cd:7c:27:15:3a:dd:0a:da:b8:fb:3f:d2:c7: 89:f3:f5:aa:ca:a7:6b:2c:1f:1f:a5:71:33:38:4d: 71:b2:bc:71:d6:43:35:ae:23:a9:27:5f:9d:ec:04: a6:86:69:68:f7:48:3d:bd:0a:df:4b:61:35:ac:21: 4f:fc:89:49:24:f5:fa:7c:52:54:1b:9c:43:db:ba: 5a:a1:03:14:69:d1:22:0f:21:14:43:06:01:00:5f: 4a:bb:13:bb:13:37:ba:95:d9:ff:a1:70:99:73:d1: 63:e2:23:4b:34:e9:6d:c5:cc:13:ff:3b:1e:a1:13: ab:e9:ed:85:ed:3e:bd:45:1f:92:95:06:dd:6c:0d: 6e:b3:00:95:40:f1:ae:5b:2a:df:d4:73:05:d3:79: 7e:b4:ca:71:a8:7e:86:e9:2d:cb:ac:60:20:32:ce: 2d:95:0b:78:7c:d8:da:40:f0:4a:b3:8b:c9:17:2f: b0:58:a9:87:97:4e:93:7e:47:e3:9c:6c:81:36:69: c4:f4:21:37:18:ee:14:6f:29:fd:8f:0a:4f:26:a9: e9:9d:8b:9a:af:27:43:b6:ff:e1:0a:ff:84:c7:4e: a0:82:32:04:22:63:00:b2:61:f6:45:19:d4:ba:18: ef:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4B:C8:07:ED:C6:A4:C5:C8:DF:5A:76:D5:3A:50:14:CF:7C:3C:5B X509v3 Authority Key Identifier: keyid:B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323136373a3a2f34382d3438203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:2167::/48 Signature Algorithm: sha256WithRSAEncryption 91:20:7c:cc:4d:26:6b:fb:4f:50:c5:f4:bf:74:7a:a6:7f:91: b0:2d:b2:7d:dc:af:48:f3:84:73:0b:62:a5:74:a7:b1:57:ba: 5a:4c:50:6e:85:01:a8:08:5d:b5:95:d2:f7:2d:d8:6c:6a:41: 34:b7:27:f2:21:c5:32:e0:3e:d0:85:c6:6c:ce:46:f8:e6:1e: cf:a5:98:8d:8e:52:34:b1:da:bc:2e:1e:f9:e9:c6:25:48:42: e1:4a:5b:85:c8:09:d0:cb:e3:1e:b5:64:e2:34:00:ff:86:98: c9:88:dd:22:c7:20:e1:fd:69:85:72:b1:03:81:9d:cf:56:a1: 2f:15:6a:81:3a:12:f4:59:80:77:ea:a4:09:b6:e5:e8:d6:eb: d8:52:06:d4:12:bf:79:12:56:a2:61:8a:94:9e:ae:23:18:06: ac:f1:ef:f2:9a:92:85:32:dd:35:09:c7:f9:88:0c:d8:ce:37: 09:71:f8:7e:24:90:79:ba:2f:61:4d:27:81:65:35:7e:d1:e1: c8:00:83:b5:a3:87:2e:f0:83:6b:d8:74:18:1f:4b:8d:71:16: ec:fc:66:9b:60:f0:0d:14:5a:d0:7f:c4:15:f5:49:2f:bf:c7: b2:6b:d6:20:d8:20:69:4c:b4:3f:62:fc:34:0a:ff:aa:51:57: 09:3c:bf:9b -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUOYTUia3UTxIl1Agoa0mqULW1S1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk4MEVGRDY5REE0QzhBQjNGQzcxMzhGNTdCRTNDREFG ODAyMjM4QjAeFw0yNjA1MDMwMjA2NTRaFw0yNzA1MDIwMjExNTRaMDMxMTAvBgNV BAMTKDY1NEJDODA3RURDNkE0QzVDOERGNUE3NkQ1M0E1MDE0Q0Y3QzNDNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7SkoC1n93uhdzEi5KBZ6kzXwn FTrdCtq4+z/Sx4nz9arKp2ssHx+lcTM4TXGyvHHWQzWuI6knX53sBKaGaWj3SD29 Ct9LYTWsIU/8iUkk9fp8UlQbnEPbulqhAxRp0SIPIRRDBgEAX0q7E7sTN7qV2f+h cJlz0WPiI0s06W3FzBP/Ox6hE6vp7YXtPr1FH5KVBt1sDW6zAJVA8a5bKt/UcwXT eX60ynGofobpLcusYCAyzi2VC3h82NpA8Eqzi8kXL7BYqYeXTpN+R+OcbIE2acT0 ITcY7hRvKf2PCk8mqemdi5qvJ0O2/+EK/4THTqCCMgQiYwCyYfZFGdS6GO9TAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUZUvIB+3GpMXI31p21TpQFM98PFswHwYDVR0j BBgwFoAUuYDv1p2kyKs/xxOPV7482vgCI4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDY1NGE4YzMtMzBjOC00OTU3LTgyOTEtYTBjMWY5YjE4MzllLzAvQjk4MEVGRDY5 REE0QzhBQjNGQzcxMzhGNTdCRTNDREFGODAyMjM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTgwRUZENjlEQTRDOEFCM0ZDNzEzOEY1N0JFM0NEQUY4MDIy MzhCLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA2NTRhOGMzLTMwYzgtNDk1Ny04 MjkxLWEwYzFmOWIxODM5ZS8wLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzIzMTM2Mzcz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BJfAIWcwDQYJKoZIhvcNAQELBQADggEBAJEgfMxNJmv7T1DF9L90eqZ/kbAtsn3c r0jzhHMLYqV0p7FXulpMUG6FAagIXbWV0vct2GxqQTS3J/IhxTLgPtCFxmzORvjm Hs+lmI2OUjSx2rwuHvnpxiVIQuFKW4XICdDL4x61ZOI0AP+GmMmI3SLHIOH9aYVy sQOBnc9WoS8VaoE6EvRZgHfqpAm25ejW69hSBtQSv3kSVqJhipSeriMYBqzx7/Ka koUy3TUJx/mIDNjONwlx+H4kkHm6L2FNJ4FlNX7R4cgAg7Wjhy7wg2vYdBgfS41x Fuz8Zptg8A0UWtB/xBX1SS+/x7Jr1iDYIGlMtD9i/DQK/6pRVwk8v5s= -----END CERTIFICATE-----Generated at Wed May 13 13:41:15 2026 by rpki-client