$ rpki-client -vvf rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323233303a3a2f34382d3438203d3e20313533303837.roa File: 323430343a393763303a323233303a3a2f34382d3438203d3e20313533303837.roa (raw, json) Hash identifier: 2oGPpGjksR4jgZHKNtDRKA9Snfq27lXDCtKIDFEQUPs= Subject key identifier: F8:45:B8:F2:8F:88:9B:84:E7:41:D4:85:6B:4C:81:AD:D2:7E:E2:A1 Certificate issuer: /CN=B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B Certificate serial: 2F11FA009C6A24970209CAA482339B4CCB75EFCA Authority key identifier: B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323233303a3a2f34382d3438203d3e20313533303837.roa Signing time: Sun 03 May 2026 02:11:42 +0000 ROA not before: Sun 03 May 2026 02:06:42 +0000 ROA not after: Sun 02 May 2027 02:11:42 +0000 asID: 153087 IP address blocks: 2404:97c0:2230::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.crl rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:11:fa:00:9c:6a:24:97:02:09:ca:a4:82:33:9b:4c:cb:75:ef:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B Validity Not Before: May 3 02:06:42 2026 GMT Not After : May 2 02:11:42 2027 GMT Subject: CN=F845B8F28F889B84E741D4856B4C81ADD27EE2A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:28:db:78:06:bb:92:83:a3:94:5e:df:83:d2: 35:db:96:7f:4d:80:e4:f0:5c:df:3a:2a:a7:20:70: 03:cc:49:07:a4:16:c4:f9:c7:e7:f1:2b:e3:6e:c3: e0:86:40:24:48:c3:ef:e8:cf:8b:aa:e3:b3:ac:19: aa:9e:e2:67:8a:79:19:bc:e2:ac:12:29:06:27:fa: d9:5e:49:31:5f:1e:0f:b5:cb:36:a7:05:55:48:7b: 0a:95:81:82:18:d2:cd:c5:5f:64:c9:b7:15:86:cc: 37:8c:36:6f:00:03:5d:3b:07:dd:30:58:4f:70:d5: c8:df:fe:20:64:00:68:dd:44:59:c7:36:22:5c:9f: dc:7b:32:93:ab:0e:91:d6:1c:b1:32:51:90:76:c1: 42:60:96:39:6b:da:05:28:67:8f:f8:27:8e:57:18: 68:01:d5:a0:94:8e:0a:e0:50:14:f0:91:72:60:68: 8f:39:be:60:bc:ee:d2:36:99:34:a5:90:37:54:b5: b6:5b:62:be:f0:e8:9f:0f:39:64:be:2f:92:05:09: e8:39:e3:04:91:e2:88:ba:96:d5:8e:13:ce:aa:4b: 63:55:bd:fe:e4:a7:4a:cb:e7:94:16:1a:51:0e:9a: 21:1d:31:68:e9:fd:e0:8c:3a:67:bc:ef:c2:75:61: 4d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:45:B8:F2:8F:88:9B:84:E7:41:D4:85:6B:4C:81:AD:D2:7E:E2:A1 X509v3 Authority Key Identifier: keyid:B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323233303a3a2f34382d3438203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:2230::/48 Signature Algorithm: sha256WithRSAEncryption 31:3b:ff:42:0f:94:a7:73:d5:8c:0e:b9:b4:3c:25:34:c8:3a: 4a:e1:67:07:62:6c:b0:4c:23:c8:f0:13:b9:a8:6e:4e:32:d3: 40:bd:79:79:78:a7:1d:3b:4c:09:cb:95:88:36:48:90:fb:b3: 31:63:d2:f3:87:9c:76:42:d3:a1:62:8c:7b:b6:41:3b:0f:b4: b6:dc:1a:13:2a:2c:f8:e7:5c:13:30:2d:f7:f1:25:29:b8:2c: 64:1d:66:70:05:ac:5d:cf:4d:46:00:a5:1b:68:2a:03:ef:d5: 29:7e:a1:e8:76:4f:c2:4c:f3:0c:90:fb:17:3c:3a:1a:17:1f: 7e:69:1f:18:1c:42:68:40:7d:80:14:1b:56:2f:ff:b4:88:e8: 0f:f5:73:90:ba:de:39:0b:c3:ec:58:bd:e1:f9:3f:24:55:0e: 74:c4:32:78:0a:83:19:b8:75:5d:26:22:78:93:7b:cb:86:22: 30:b6:49:01:eb:d5:23:f2:cd:68:6d:fd:71:cd:6d:c1:30:0e: 59:60:7e:2e:e7:1a:4b:7d:27:a6:10:6f:31:f0:1e:77:2b:2c: 25:61:6e:49:04:cb:80:26:83:40:47:11:5c:a8:d2:c1:fb:12: cf:08:62:b9:c3:d7:8a:0a:14:b3:f9:c2:76:1a:49:94:34:20: 72:c3:03:eb -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIULxH6AJxqJJcCCcqkgjObTMt178owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk4MEVGRDY5REE0QzhBQjNGQzcxMzhGNTdCRTNDREFG ODAyMjM4QjAeFw0yNjA1MDMwMjA2NDJaFw0yNzA1MDIwMjExNDJaMDMxMTAvBgNV BAMTKEY4NDVCOEYyOEY4ODlCODRFNzQxRDQ4NTZCNEM4MUFERDI3RUUyQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+KNt4BruSg6OUXt+D0jXbln9N gOTwXN86KqcgcAPMSQekFsT5x+fxK+Nuw+CGQCRIw+/oz4uq47OsGaqe4meKeRm8 4qwSKQYn+tleSTFfHg+1yzanBVVIewqVgYIY0s3FX2TJtxWGzDeMNm8AA107B90w WE9w1cjf/iBkAGjdRFnHNiJcn9x7MpOrDpHWHLEyUZB2wUJgljlr2gUoZ4/4J45X GGgB1aCUjgrgUBTwkXJgaI85vmC87tI2mTSlkDdUtbZbYr7w6J8POWS+L5IFCeg5 4wSR4oi6ltWOE86qS2NVvf7kp0rL55QWGlEOmiEdMWjp/eCMOme878J1YU3JAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU+EW48o+Im4TnQdSFa0yBrdJ+4qEwHwYDVR0j BBgwFoAUuYDv1p2kyKs/xxOPV7482vgCI4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDY1NGE4YzMtMzBjOC00OTU3LTgyOTEtYTBjMWY5YjE4MzllLzAvQjk4MEVGRDY5 REE0QzhBQjNGQzcxMzhGNTdCRTNDREFGODAyMjM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTgwRUZENjlEQTRDOEFCM0ZDNzEzOEY1N0JFM0NEQUY4MDIy MzhCLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA2NTRhOGMzLTMwYzgtNDk1Ny04 MjkxLWEwYzFmOWIxODM5ZS8wLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzIzMjMzMzAz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BJfAIjAwDQYJKoZIhvcNAQELBQADggEBADE7/0IPlKdz1YwOubQ8JTTIOkrhZwdi bLBMI8jwE7mobk4y00C9eXl4px07TAnLlYg2SJD7szFj0vOHnHZC06FijHu2QTsP tLbcGhMqLPjnXBMwLffxJSm4LGQdZnAFrF3PTUYApRtoKgPv1Sl+oeh2T8JM8wyQ +xc8OhoXH35pHxgcQmhAfYAUG1Yv/7SI6A/1c5C63jkLw+xYveH5PyRVDnTEMngK gxm4dV0mIniTe8uGIjC2SQHr1SPyzWht/XHNbcEwDllgfi7nGkt9J6YQbzHwHncr LCVhbkkEy4Amg0BHEVyo0sH7Es8IYrnD14oKFLP5wnYaSZQ0IHLDA+s= -----END CERTIFICATE-----Generated at Wed May 13 14:40:32 2026 by rpki-client