$ rpki-client -vvf rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a3a2f33322d3332203d3e20313533303837.roa File: 323430343a393763303a3a2f33322d3332203d3e20313533303837.roa (raw, json) Hash identifier: 4o7lOFLnmSF/6AjxGBCM1BmhDQrnloJtVPUJ3Dk7zP8= Subject key identifier: 80:48:33:D3:4E:B0:CB:0F:86:0F:7C:B9:24:26:38:67:D1:4B:31:9E Certificate issuer: /CN=B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B Certificate serial: 3E123C7ECC24EFDAE6CDA59FCE26C533644B2642 Authority key identifier: B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a3a2f33322d3332203d3e20313533303837.roa Signing time: Sun 03 May 2026 02:11:56 +0000 ROA not before: Sun 03 May 2026 02:06:56 +0000 ROA not after: Sun 02 May 2027 02:11:56 +0000 asID: 153087 IP address blocks: 2404:97c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.crl rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:12:3c:7e:cc:24:ef:da:e6:cd:a5:9f:ce:26:c5:33:64:4b:26:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B Validity Not Before: May 3 02:06:56 2026 GMT Not After : May 2 02:11:56 2027 GMT Subject: CN=804833D34EB0CB0F860F7CB924263867D14B319E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2d:a2:f0:b5:e7:b0:a2:ae:89:a4:a6:bc:08: 1b:ac:27:df:c4:e9:2f:c1:cd:3c:7d:4f:2b:2e:ce: 4f:68:33:ce:c8:a7:66:50:0d:ba:79:29:b3:44:15: a7:13:db:21:b9:4a:90:d2:6b:44:90:c1:9b:12:20: f6:f8:92:4a:49:c3:08:fc:7a:4c:06:2e:3b:93:f3: 5f:76:bb:dc:ba:44:d0:ab:6a:97:f3:df:cd:3c:f5: 39:83:f3:09:95:d6:c2:b0:8c:0c:a4:ac:47:e3:b0: 2a:fa:29:00:7c:ce:86:29:76:f9:14:ef:c3:0c:70: ab:e2:d5:9e:b2:28:17:0b:5c:63:f6:f6:e4:70:59: 82:78:ef:1e:cb:cb:60:80:72:16:91:98:15:50:60: 71:40:c5:dd:7e:4a:c6:9c:fb:7a:79:41:10:07:37: 16:b2:24:44:ba:af:d5:02:39:7b:b0:2f:4c:c4:45: ba:26:66:7c:44:7d:4d:11:85:d2:64:11:e0:2b:43: ee:70:62:1d:13:49:50:67:f0:26:7a:c8:62:0c:82: 6d:c3:a2:21:09:32:ff:89:a1:11:b5:b7:80:b9:42: 0e:47:0b:87:49:e1:78:06:e9:17:bf:93:0d:8b:86: a8:cf:62:58:cc:40:4b:83:fd:87:10:67:cd:45:fd: 34:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:48:33:D3:4E:B0:CB:0F:86:0F:7C:B9:24:26:38:67:D1:4B:31:9E X509v3 Authority Key Identifier: keyid:B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a3a2f33322d3332203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0::/32 Signature Algorithm: sha256WithRSAEncryption 8f:87:e7:64:a1:e9:b7:4c:4d:13:bd:ed:07:20:46:04:04:e1: df:ba:ac:e2:3e:68:24:9c:2e:5c:3e:dd:53:c4:dd:4e:89:a7: 1e:9f:bf:8e:8e:92:54:02:95:31:49:8f:e7:a7:77:85:00:7f: 81:eb:5a:6e:29:37:1c:19:0a:5b:a1:b6:c4:6b:8f:dc:56:a1: b4:83:17:c3:13:c1:b6:61:07:9a:7f:2f:f5:ab:83:30:d3:32: 76:0d:e9:89:95:7c:11:bd:27:7d:92:a9:bf:bd:5c:a0:0d:f6: 3d:8f:80:ff:8c:82:30:a8:bf:cf:57:9b:a7:ad:96:7b:e4:56: 5d:16:1c:86:80:0a:b2:48:2d:24:d7:69:06:82:3e:7f:c9:9d: ad:92:2a:70:bc:d4:63:cd:3c:00:9b:90:03:9d:7b:c5:55:83: ca:8f:1c:74:f1:be:56:dc:e7:72:37:30:b1:93:54:40:2e:e5: b4:f5:4f:56:7d:db:58:2b:63:bb:06:e0:ce:05:66:d3:a9:83: 50:d0:38:6b:89:b6:c0:35:88:c2:2d:b8:17:3a:ce:0d:ae:3e: 5b:80:c1:7a:47:9a:f8:50:4b:04:2a:39:b3:de:fb:bf:67:c9: 57:e6:66:5b:93:6f:05:54:49:94:d6:6d:fc:81:c9:ca:3e:bc: 6f:de:ef:70 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUPhI8fswk79rmzaWfzibFM2RLJkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk4MEVGRDY5REE0QzhBQjNGQzcxMzhGNTdCRTNDREFG ODAyMjM4QjAeFw0yNjA1MDMwMjA2NTZaFw0yNzA1MDIwMjExNTZaMDMxMTAvBgNV BAMTKDgwNDgzM0QzNEVCMENCMEY4NjBGN0NCOTI0MjYzODY3RDE0QjMxOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4LaLwteewoq6JpKa8CBusJ9/E 6S/BzTx9Tysuzk9oM87Ip2ZQDbp5KbNEFacT2yG5SpDSa0SQwZsSIPb4kkpJwwj8 ekwGLjuT8192u9y6RNCrapfz38089TmD8wmV1sKwjAykrEfjsCr6KQB8zoYpdvkU 78MMcKvi1Z6yKBcLXGP29uRwWYJ47x7Ly2CAchaRmBVQYHFAxd1+Ssac+3p5QRAH NxayJES6r9UCOXuwL0zERbomZnxEfU0RhdJkEeArQ+5wYh0TSVBn8CZ6yGIMgm3D oiEJMv+JoRG1t4C5Qg5HC4dJ4XgG6Re/kw2LhqjPYljMQEuD/YcQZ81F/TSZAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUgEgz006wyw+GD3y5JCY4Z9FLMZ4wHwYDVR0j BBgwFoAUuYDv1p2kyKs/xxOPV7482vgCI4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDY1NGE4YzMtMzBjOC00OTU3LTgyOTEtYTBjMWY5YjE4MzllLzAvQjk4MEVGRDY5 REE0QzhBQjNGQzcxMzhGNTdCRTNDREFGODAyMjM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTgwRUZENjlEQTRDOEFCM0ZDNzEzOEY1N0JFM0NEQUY4MDIy MzhCLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA2NTRhOGMzLTMwYzgtNDk1Ny04 MjkxLWEwYzFmOWIxODM5ZS8wLzMyMzQzMDM0M2EzOTM3NjMzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzUzMzMwMzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQEl8AwDQYJKoZI hvcNAQELBQADggEBAI+H52Sh6bdMTRO97QcgRgQE4d+6rOI+aCScLlw+3VPE3U6J px6fv46OklQClTFJj+end4UAf4HrWm4pNxwZCluhtsRrj9xWobSDF8MTwbZhB5p/ L/WrgzDTMnYN6YmVfBG9J32Sqb+9XKAN9j2PgP+MgjCov89Xm6etlnvkVl0WHIaA CrJILSTXaQaCPn/Jna2SKnC81GPNPACbkAOde8VVg8qPHHTxvlbc53I3MLGTVEAu 5bT1T1Z921grY7sG4M4FZtOpg1DQOGuJtsA1iMItuBc6zg2uPluAwXpHmvhQSwQq ObPe+79nyVfmZluTbwVUSZTWbfyByco+vG/e73A= -----END CERTIFICATE-----Generated at Wed May 13 14:57:02 2026 by rpki-client