$ rpki-client -vvf rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a333235333a3a2f34382d3438203d3e20313533303837.roa File: 323430343a393763303a333235333a3a2f34382d3438203d3e20313533303837.roa (raw, json) Hash identifier: CIhsl1S1c7C9gF7Z5p+PmlbsWfscVx1/L50AHxxirdA= Subject key identifier: FC:5A:38:55:06:B9:D9:26:36:0F:94:19:B8:6F:37:B1:44:9C:AC:47 Certificate issuer: /CN=B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B Certificate serial: 60F3E0FD6CB6CFEC4439E3929849BC8E37CE1AD2 Authority key identifier: B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a333235333a3a2f34382d3438203d3e20313533303837.roa Signing time: Sun 03 May 2026 02:11:43 +0000 ROA not before: Sun 03 May 2026 02:06:43 +0000 ROA not after: Sun 02 May 2027 02:11:43 +0000 asID: 153087 IP address blocks: 2404:97c0:3253::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.crl rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:f3:e0:fd:6c:b6:cf:ec:44:39:e3:92:98:49:bc:8e:37:ce:1a:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B Validity Not Before: May 3 02:06:43 2026 GMT Not After : May 2 02:11:43 2027 GMT Subject: CN=FC5A385506B9D926360F9419B86F37B1449CAC47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:76:3d:f4:e5:53:68:89:96:79:27:35:d9:83: 0c:81:24:41:8a:65:9f:50:83:c5:03:be:6b:49:81: 84:b6:a0:f7:8c:74:ec:d2:6d:11:dc:97:a3:38:d8: d2:3a:90:7c:ef:6c:b1:8e:b0:73:da:c4:cd:fa:36: ec:b8:e8:76:e6:79:c2:0a:bd:43:51:83:80:da:33: d8:e6:a3:2b:e4:99:78:95:8a:d5:5f:d1:e9:27:e8: b7:08:03:29:67:ba:ab:86:d0:1e:08:85:f6:72:ac: df:0f:44:c7:56:af:15:b5:5a:33:52:ad:3a:cb:2d: e5:c3:a8:fb:0a:1c:6b:2a:03:80:0a:0d:eb:1a:3a: 1c:ac:8e:0e:06:be:52:a6:d6:b7:ec:97:b3:f0:25: 5a:de:a0:7b:e8:1a:a4:cf:6c:e0:4a:6d:e8:08:9c: 0f:e2:a6:49:3d:70:5b:67:31:22:be:c9:ea:61:5c: bd:84:20:76:f3:b2:77:65:76:6d:6d:34:8b:9b:55: ad:49:37:96:4f:b1:ae:02:36:6e:7f:98:e3:ad:34: 54:df:a1:6d:ee:35:0b:37:1d:22:75:28:f2:70:30: cb:c2:76:8e:aa:69:90:6c:ad:bd:a9:49:34:11:4e: 57:9f:60:2b:5a:47:e2:26:3f:44:67:f7:d3:21:24: 3c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5A:38:55:06:B9:D9:26:36:0F:94:19:B8:6F:37:B1:44:9C:AC:47 X509v3 Authority Key Identifier: keyid:B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a333235333a3a2f34382d3438203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:3253::/48 Signature Algorithm: sha256WithRSAEncryption 6f:c9:17:15:e1:84:b5:80:06:d9:93:03:df:fb:d8:dd:e8:3e: f7:c4:b6:6e:35:e8:c2:c1:7a:dc:be:96:35:bd:98:64:0c:24: c6:d4:0b:ee:22:09:7c:e7:02:79:5d:bd:41:28:e2:b1:c2:ff: bb:d5:ed:cb:00:55:ed:84:f5:ef:24:c3:8e:99:88:cb:be:9a: 4d:3f:c4:57:a8:b5:8e:bd:07:4d:9b:8d:89:97:5e:87:16:b0: b9:ce:11:b5:3f:dd:13:6c:8e:67:10:4c:63:d9:9a:b8:0a:6c: 4f:55:bb:26:9f:c6:38:cf:95:88:da:c3:90:1f:58:e3:7d:47: 3d:1b:22:fc:5d:70:33:4d:e2:e2:61:0a:90:5a:d5:62:07:04: 8f:fd:68:b9:7e:0f:3e:46:13:c7:f0:15:ba:08:0d:80:83:25: ca:1e:db:27:8f:0c:9a:43:1c:3e:b0:69:98:a3:5c:d4:17:07: a5:9a:33:f4:a5:c5:19:30:0e:f3:a4:54:1f:08:a6:38:c6:ab: 46:72:cc:3a:53:6d:9b:ad:cc:bd:db:d2:da:26:59:57:0c:e8: ad:d9:bc:da:12:7b:59:0a:e6:8f:3c:5e:63:96:b5:40:96:2d: 54:75:58:43:aa:95:47:36:43:28:bb:bc:34:46:84:a9:14:86: 08:4c:0d:21 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUYPPg/Wy2z+xEOeOSmEm8jjfOGtIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk4MEVGRDY5REE0QzhBQjNGQzcxMzhGNTdCRTNDREFG ODAyMjM4QjAeFw0yNjA1MDMwMjA2NDNaFw0yNzA1MDIwMjExNDNaMDMxMTAvBgNV BAMTKEZDNUEzODU1MDZCOUQ5MjYzNjBGOTQxOUI4NkYzN0IxNDQ5Q0FDNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGdj305VNoiZZ5JzXZgwyBJEGK ZZ9Qg8UDvmtJgYS2oPeMdOzSbRHcl6M42NI6kHzvbLGOsHPaxM36Nuy46HbmecIK vUNRg4DaM9jmoyvkmXiVitVf0ekn6LcIAylnuquG0B4IhfZyrN8PRMdWrxW1WjNS rTrLLeXDqPsKHGsqA4AKDesaOhysjg4GvlKm1rfsl7PwJVreoHvoGqTPbOBKbegI nA/ipkk9cFtnMSK+yephXL2EIHbzsndldm1tNIubVa1JN5ZPsa4CNm5/mOOtNFTf oW3uNQs3HSJ1KPJwMMvCdo6qaZBsrb2pSTQRTlefYCtaR+ImP0Rn99MhJDwhAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU/Fo4VQa52SY2D5QZuG83sUScrEcwHwYDVR0j BBgwFoAUuYDv1p2kyKs/xxOPV7482vgCI4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDY1NGE4YzMtMzBjOC00OTU3LTgyOTEtYTBjMWY5YjE4MzllLzAvQjk4MEVGRDY5 REE0QzhBQjNGQzcxMzhGNTdCRTNDREFGODAyMjM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTgwRUZENjlEQTRDOEFCM0ZDNzEzOEY1N0JFM0NEQUY4MDIy MzhCLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA2NTRhOGMzLTMwYzgtNDk1Ny04 MjkxLWEwYzFmOWIxODM5ZS8wLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzMzMjM1MzMz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BJfAMlMwDQYJKoZIhvcNAQELBQADggEBAG/JFxXhhLWABtmTA9/72N3oPvfEtm41 6MLBety+ljW9mGQMJMbUC+4iCXznAnldvUEo4rHC/7vV7csAVe2E9e8kw46ZiMu+ mk0/xFeotY69B02bjYmXXocWsLnOEbU/3RNsjmcQTGPZmrgKbE9VuyafxjjPlYja w5AfWON9Rz0bIvxdcDNN4uJhCpBa1WIHBI/9aLl+Dz5GE8fwFboIDYCDJcoe2yeP DJpDHD6waZijXNQXB6WaM/SlxRkwDvOkVB8IpjjGq0ZyzDpTbZutzL3b0tomWVcM 6K3ZvNoSe1kK5o88XmOWtUCWLVR1WEOqlUc2Qyi7vDRGhKkUhghMDSE= -----END CERTIFICATE-----Generated at Wed May 13 15:35:52 2026 by rpki-client