$ rpki-client -vvf rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a333134363a3a2f34382d3438203d3e20313533303837.roa File: 323430343a393763303a333134363a3a2f34382d3438203d3e20313533303837.roa (raw, json) Hash identifier: i4IwF27x+z39/3zXfzuUJq51f/hjBzRHEwD52L+JKDo= Subject key identifier: 31:CF:35:CD:3B:01:FE:5E:51:45:FD:20:2D:60:E4:FE:CA:4D:85:65 Certificate issuer: /CN=B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B Certificate serial: 0D1565FC27E3277DCDE46009CF9B014C090C4842 Authority key identifier: B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a333134363a3a2f34382d3438203d3e20313533303837.roa Signing time: Sun 03 May 2026 02:11:57 +0000 ROA not before: Sun 03 May 2026 02:06:57 +0000 ROA not after: Sun 02 May 2027 02:11:57 +0000 asID: 153087 IP address blocks: 2404:97c0:3146::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.crl rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:15:65:fc:27:e3:27:7d:cd:e4:60:09:cf:9b:01:4c:09:0c:48:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B Validity Not Before: May 3 02:06:57 2026 GMT Not After : May 2 02:11:57 2027 GMT Subject: CN=31CF35CD3B01FE5E5145FD202D60E4FECA4D8565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a5:50:9a:e8:8f:6f:92:2d:96:a0:90:39:9c: 96:01:5f:70:fe:3a:5a:8d:96:3d:17:c9:54:41:72: b6:f0:9e:2b:81:7a:8b:29:0a:18:42:a2:34:a7:e8: 56:ae:55:a7:11:5a:24:eb:9c:a4:8d:8c:53:b9:87: 06:9a:99:17:ea:b5:2e:61:0c:64:65:64:1c:9e:ef: ee:4d:ee:0e:37:8c:97:60:4b:36:91:3d:54:77:9b: d0:6a:54:a1:39:75:10:c0:62:a7:15:8a:41:5d:9a: 95:e4:be:b6:d7:21:ca:a5:db:ad:77:76:c3:7e:85: 48:a4:7a:ac:12:3c:2f:d8:f6:7b:b1:d9:8f:dd:93: dd:4b:43:9d:7c:30:7c:45:ef:8d:b8:36:0e:09:30: 55:a0:bc:67:c7:da:17:ed:75:3b:1c:80:5b:89:41: 16:c9:50:d1:82:ed:3e:f6:57:fe:66:57:0d:28:b1: 5f:33:f1:e6:7d:94:c4:4e:65:85:47:d8:9f:c1:a4: 7d:d6:7a:7c:f4:80:64:69:31:73:0d:fd:eb:47:03: 54:4d:3b:fd:4f:23:a9:60:09:ab:87:fc:d2:b0:77: a6:d9:ca:13:01:86:5a:61:b6:6f:03:42:dc:92:52: f2:bf:06:a5:8f:21:9b:d7:4e:7f:5c:16:0b:d9:f4: f8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:CF:35:CD:3B:01:FE:5E:51:45:FD:20:2D:60:E4:FE:CA:4D:85:65 X509v3 Authority Key Identifier: keyid:B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a333134363a3a2f34382d3438203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:3146::/48 Signature Algorithm: sha256WithRSAEncryption 05:56:2a:d4:f3:87:d5:d6:84:a5:84:63:58:67:0e:6b:56:e0: ef:a0:5f:08:ae:4b:cd:8c:7b:c0:70:f7:d7:17:21:f9:ab:34: d1:24:4f:b7:00:a2:cb:6a:fd:12:a9:d0:c2:71:a2:60:0f:56: 82:f0:ee:af:b4:ba:fe:32:34:3b:5d:66:1a:cc:f2:79:0c:7e: c9:b9:a0:83:b3:33:eb:bb:e9:b0:ad:53:f0:89:25:bb:3d:80: 78:8f:d1:82:b0:83:01:f4:c9:a1:38:22:49:b2:62:da:4a:ae: d9:59:76:75:73:00:1e:46:a1:b5:bd:fa:d6:66:b8:bf:0d:82: 85:27:e8:4a:d0:4f:4d:5c:3a:56:76:f2:90:5c:8a:ec:8c:24: 93:c5:0e:5a:1a:39:e0:b2:6b:df:3d:50:97:7b:3e:ec:05:f5: 48:b3:f4:8c:96:c5:85:be:fd:48:cb:96:4a:f3:89:c2:f8:53: 9d:7e:57:81:4a:c9:d7:1d:50:93:ee:99:f3:6e:93:36:a4:26: 4e:21:3f:ed:11:a5:e8:e5:95:4c:31:9c:01:8b:1b:0b:63:2f: d0:60:99:16:59:35:4f:62:ad:c1:5b:bf:eb:ee:64:90:f2:a1: be:12:35:0c:cd:7e:e5:1d:1a:64:d6:b0:e9:c6:99:d2:43:f4: 52:28:8d:d1 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUDRVl/CfjJ33N5GAJz5sBTAkMSEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk4MEVGRDY5REE0QzhBQjNGQzcxMzhGNTdCRTNDREFG ODAyMjM4QjAeFw0yNjA1MDMwMjA2NTdaFw0yNzA1MDIwMjExNTdaMDMxMTAvBgNV BAMTKDMxQ0YzNUNEM0IwMUZFNUU1MTQ1RkQyMDJENjBFNEZFQ0E0RDg1NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8pVCa6I9vki2WoJA5nJYBX3D+ OlqNlj0XyVRBcrbwniuBeospChhCojSn6FauVacRWiTrnKSNjFO5hwaamRfqtS5h DGRlZBye7+5N7g43jJdgSzaRPVR3m9BqVKE5dRDAYqcVikFdmpXkvrbXIcql2613 dsN+hUikeqwSPC/Y9nux2Y/dk91LQ518MHxF7424Ng4JMFWgvGfH2hftdTscgFuJ QRbJUNGC7T72V/5mVw0osV8z8eZ9lMROZYVH2J/BpH3Wenz0gGRpMXMN/etHA1RN O/1PI6lgCauH/NKwd6bZyhMBhlphtm8DQtySUvK/BqWPIZvXTn9cFgvZ9Ph/AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUMc81zTsB/l5RRf0gLWDk/spNhWUwHwYDVR0j BBgwFoAUuYDv1p2kyKs/xxOPV7482vgCI4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDY1NGE4YzMtMzBjOC00OTU3LTgyOTEtYTBjMWY5YjE4MzllLzAvQjk4MEVGRDY5 REE0QzhBQjNGQzcxMzhGNTdCRTNDREFGODAyMjM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTgwRUZENjlEQTRDOEFCM0ZDNzEzOEY1N0JFM0NEQUY4MDIy MzhCLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA2NTRhOGMzLTMwYzgtNDk1Ny04 MjkxLWEwYzFmOWIxODM5ZS8wLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzMzMTM0MzYz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BJfAMUYwDQYJKoZIhvcNAQELBQADggEBAAVWKtTzh9XWhKWEY1hnDmtW4O+gXwiu S82Me8Bw99cXIfmrNNEkT7cAostq/RKp0MJxomAPVoLw7q+0uv4yNDtdZhrM8nkM fsm5oIOzM+u76bCtU/CJJbs9gHiP0YKwgwH0yaE4IkmyYtpKrtlZdnVzAB5GobW9 +tZmuL8NgoUn6ErQT01cOlZ28pBciuyMJJPFDloaOeCya989UJd7PuwF9Uiz9IyW xYW+/UjLlkrzicL4U51+V4FKydcdUJPumfNukzakJk4hP+0RpejllUwxnAGLGwtj L9BgmRZZNU9ircFbv+vuZJDyob4SNQzNfuUdGmTWsOnGmdJD9FIojdE= -----END CERTIFICATE-----Generated at Wed May 13 13:41:56 2026 by rpki-client