$ rpki-client -vvf rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a333132363a3a2f34382d3438203d3e20313533303837.roa File: 323430343a393763303a333132363a3a2f34382d3438203d3e20313533303837.roa (raw, json) Hash identifier: 5nJo0E/Gd1dX8l6G8k7Zkh/3rKTxVXosRKNHKWAFIVE= Subject key identifier: EC:AA:76:47:2D:69:19:B2:5C:6F:71:21:24:72:EF:05:0A:84:25:60 Certificate issuer: /CN=B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B Certificate serial: 356EA86A9871D2BA3FA5B47605569FEA577A0379 Authority key identifier: B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a333132363a3a2f34382d3438203d3e20313533303837.roa Signing time: Sun 03 May 2026 02:11:49 +0000 ROA not before: Sun 03 May 2026 02:06:49 +0000 ROA not after: Sun 02 May 2027 02:11:49 +0000 asID: 153087 IP address blocks: 2404:97c0:3126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.crl rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:6e:a8:6a:98:71:d2:ba:3f:a5:b4:76:05:56:9f:ea:57:7a:03:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B Validity Not Before: May 3 02:06:49 2026 GMT Not After : May 2 02:11:49 2027 GMT Subject: CN=ECAA76472D6919B25C6F71212472EF050A842560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8b:54:c9:3e:7e:dc:9a:95:f7:ec:dd:80:40: 83:aa:01:c3:35:36:56:45:ac:42:3e:b8:f9:39:2a: 90:bd:fe:41:82:87:ea:71:71:59:28:33:c1:fa:1e: 90:7c:42:fb:e2:99:a8:09:ec:0c:9e:d8:f6:78:05: c5:9b:14:90:88:13:7e:67:58:7e:c6:d6:69:07:a1: 09:2e:4c:a5:b7:d9:ba:ff:8a:cc:28:18:7f:e3:2e: 66:d2:94:6a:4d:c4:b9:82:ee:44:ca:47:ba:64:b2: aa:59:21:b3:9d:28:53:2a:7d:31:9e:4e:a0:3e:46: 5a:8f:21:b0:88:ef:c0:0a:aa:9a:96:1b:6d:54:cf: f3:c1:71:5b:a0:bf:0a:5a:60:b4:4b:6c:e1:af:35: 53:32:02:d6:64:b9:74:6e:14:3b:f3:a2:bc:41:37: 12:76:ab:8d:b5:02:e2:0b:c0:ea:d7:71:16:71:ba: 20:98:e4:17:a2:2a:ba:14:e3:92:78:17:25:25:af: c6:d8:cb:2d:07:e2:4f:d0:4c:ca:da:2f:25:2d:db: e1:66:88:56:e5:43:d9:0b:53:4a:52:b7:0d:db:50: e8:5a:77:0b:96:8a:7d:88:5e:7d:45:8b:4a:98:d4: 90:cb:1f:73:b2:bf:42:52:65:1f:56:80:89:10:dc: 04:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:AA:76:47:2D:69:19:B2:5C:6F:71:21:24:72:EF:05:0A:84:25:60 X509v3 Authority Key Identifier: keyid:B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a333132363a3a2f34382d3438203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:3126::/48 Signature Algorithm: sha256WithRSAEncryption 4d:b9:46:6a:71:aa:5d:c2:3a:68:29:c2:dc:d9:f7:0e:37:c2: ef:08:48:d8:4d:c4:4e:20:21:e2:2f:66:9f:49:b3:af:e5:ff: 19:1a:19:46:6a:87:1c:31:bb:21:af:70:e0:ec:74:bd:4a:3a: 29:68:90:7d:06:e1:06:28:4e:ed:0e:2c:0d:97:2d:3c:fa:a1: 34:b4:21:51:e4:11:af:74:11:7e:7a:bc:77:5a:07:49:34:9e: d7:18:4b:5b:19:38:94:0f:0b:d8:37:94:a8:23:79:99:00:8d: d7:2e:f9:5c:bd:6b:5d:dd:e2:19:2e:eb:67:e2:0f:86:4c:90: f0:96:d8:ea:ae:21:7b:48:42:76:e7:18:69:73:66:12:24:48: 48:69:21:b9:3c:7f:bd:90:69:ee:a9:e5:23:7c:6c:7d:9f:b3: ff:15:26:cf:bd:1c:92:ee:f8:7b:47:86:70:49:70:45:b5:d9: 47:93:95:0b:30:ae:55:f8:32:c0:52:ca:31:c1:c2:3b:44:4a: 48:17:cb:21:c1:52:8f:f9:ae:8b:8b:df:af:77:af:d7:8b:58: 9e:78:22:1c:f3:ea:cf:40:fb:c5:a4:b3:ae:e1:8c:dc:9f:6b: 2a:1e:44:77:f1:a9:90:15:47:aa:34:6c:36:78:ac:b1:78:15: f7:c8:d6:75 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUNW6oaphx0ro/pbR2BVaf6ld6A3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk4MEVGRDY5REE0QzhBQjNGQzcxMzhGNTdCRTNDREFG ODAyMjM4QjAeFw0yNjA1MDMwMjA2NDlaFw0yNzA1MDIwMjExNDlaMDMxMTAvBgNV BAMTKEVDQUE3NjQ3MkQ2OTE5QjI1QzZGNzEyMTI0NzJFRjA1MEE4NDI1NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZi1TJPn7cmpX37N2AQIOqAcM1 NlZFrEI+uPk5KpC9/kGCh+pxcVkoM8H6HpB8QvvimagJ7Aye2PZ4BcWbFJCIE35n WH7G1mkHoQkuTKW32br/iswoGH/jLmbSlGpNxLmC7kTKR7pksqpZIbOdKFMqfTGe TqA+RlqPIbCI78AKqpqWG21Uz/PBcVugvwpaYLRLbOGvNVMyAtZkuXRuFDvzorxB NxJ2q421AuILwOrXcRZxuiCY5BeiKroU45J4FyUlr8bYyy0H4k/QTMraLyUt2+Fm iFblQ9kLU0pStw3bUOhadwuWin2IXn1Fi0qY1JDLH3Oyv0JSZR9WgIkQ3AQxAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU7Kp2Ry1pGbJcb3EhJHLvBQqEJWAwHwYDVR0j BBgwFoAUuYDv1p2kyKs/xxOPV7482vgCI4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDY1NGE4YzMtMzBjOC00OTU3LTgyOTEtYTBjMWY5YjE4MzllLzAvQjk4MEVGRDY5 REE0QzhBQjNGQzcxMzhGNTdCRTNDREFGODAyMjM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTgwRUZENjlEQTRDOEFCM0ZDNzEzOEY1N0JFM0NEQUY4MDIy MzhCLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA2NTRhOGMzLTMwYzgtNDk1Ny04 MjkxLWEwYzFmOWIxODM5ZS8wLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzMzMTMyMzYz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BJfAMSYwDQYJKoZIhvcNAQELBQADggEBAE25Rmpxql3COmgpwtzZ9w43wu8ISNhN xE4gIeIvZp9Js6/l/xkaGUZqhxwxuyGvcODsdL1KOilokH0G4QYoTu0OLA2XLTz6 oTS0IVHkEa90EX56vHdaB0k0ntcYS1sZOJQPC9g3lKgjeZkAjdcu+Vy9a13d4hku 62fiD4ZMkPCW2OquIXtIQnbnGGlzZhIkSEhpIbk8f72Qae6p5SN8bH2fs/8VJs+9 HJLu+HtHhnBJcEW12UeTlQswrlX4MsBSyjHBwjtESkgXyyHBUo/5rouL3693r9eL WJ54Ihzz6s9A+8Wks67hjNyfayoeRHfxqZAVR6o0bDZ4rLF4FffI1nU= -----END CERTIFICATE-----Generated at Wed May 13 13:54:14 2026 by rpki-client