$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a3136323a3a2f34382d3438203d3e20313533303837.roa File: 323430343a393763303a3136323a3a2f34382d3438203d3e20313533303837.roa (raw, json) Hash identifier: GLCqHLZjzdNzX3TXPakzOOEqH7B+8ugxHe0qrnCfBjU= Subject key identifier: 9D:AF:94:B9:4A:D9:AB:4C:1D:85:C1:24:E2:E1:F4:E4:01:3C:73:4D Certificate issuer: /CN=BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6 Certificate serial: 41B25BF56A5172FFE7902589CF7A9996B9A820BD Authority key identifier: BB:62:BA:C3:DC:FD:2A:86:CC:6D:24:F4:56:4A:73:D4:BD:D0:4B:C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a3136323a3a2f34382d3438203d3e20313533303837.roa Signing time: Sun 03 May 2026 02:17:54 +0000 ROA not before: Sun 03 May 2026 02:12:54 +0000 ROA not after: Sun 02 May 2027 02:17:54 +0000 asID: 153087 IP address blocks: 2404:97c0:162::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.crl rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:b2:5b:f5:6a:51:72:ff:e7:90:25:89:cf:7a:99:96:b9:a8:20:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6 Validity Not Before: May 3 02:12:54 2026 GMT Not After : May 2 02:17:54 2027 GMT Subject: CN=9DAF94B94AD9AB4C1D85C124E2E1F4E4013C734D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:56:78:c5:3c:8d:35:6a:bb:6b:9a:69:00:73: c8:c2:f4:8b:23:cd:c1:10:16:37:8d:7f:82:75:4e: 09:b1:45:a6:73:0e:30:50:c8:f6:0b:cd:15:22:90: a8:38:0b:fb:76:8a:49:44:e4:38:53:9e:20:20:41: 04:e7:e3:14:fa:7e:68:41:18:72:0a:5a:f4:fd:10: 74:db:33:f6:3e:f6:d1:ea:4c:ce:33:b9:e9:0b:a9: a5:7d:3d:ae:29:af:8b:09:bf:7c:6e:6f:fc:e9:31: 3c:28:b3:b3:ab:e2:92:03:53:28:48:ba:ee:15:56: 38:1a:7b:b8:eb:ea:a3:24:a2:c9:83:7f:da:90:d1: 9c:ea:71:65:77:1f:7a:d2:21:61:d8:33:f9:26:a0: 06:44:bf:bd:b4:6d:cc:f4:b6:16:f4:fd:c0:bf:94: f0:d3:b9:b5:d4:5d:3a:8a:a4:91:67:93:88:c9:b9: 38:df:dd:55:0d:08:d5:c2:cf:4a:10:5f:72:0e:17: b7:ec:63:b1:ee:5f:61:1d:8d:31:5d:d1:d3:31:09: 92:2f:23:50:3a:f9:ce:86:9a:32:1e:0f:c9:9b:ff: 65:8b:c4:f3:cd:41:cb:3d:80:4c:81:bf:b8:34:63: 45:7c:37:92:aa:62:81:52:4e:9a:7f:25:e2:50:9b: 51:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:AF:94:B9:4A:D9:AB:4C:1D:85:C1:24:E2:E1:F4:E4:01:3C:73:4D X509v3 Authority Key Identifier: keyid:BB:62:BA:C3:DC:FD:2A:86:CC:6D:24:F4:56:4A:73:D4:BD:D0:4B:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a3136323a3a2f34382d3438203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:162::/48 Signature Algorithm: sha256WithRSAEncryption ac:60:37:69:18:1f:f7:2e:53:3f:a6:c7:a6:c5:30:fb:d9:65: 18:b9:45:58:f1:d0:ad:4d:ab:3b:1f:b3:29:22:83:02:a8:a0: 62:74:da:ac:ee:4c:fe:b5:58:15:08:8b:95:de:d5:0c:67:3a: 42:57:27:a8:1c:b7:ed:c8:82:cb:5f:4c:25:07:87:5b:40:32: 65:a5:74:63:05:ef:28:75:8f:ba:03:9c:28:86:5d:c5:eb:11: ab:42:0a:cf:f9:2e:e5:67:da:4a:6a:9b:58:7a:69:b1:3e:f8: 26:37:70:d5:7a:1c:0d:2a:94:4c:94:27:99:4c:9e:2a:84:f4: 03:9d:9c:f5:d8:9b:83:4f:38:fb:61:00:e2:b5:65:2d:5f:86: f1:59:9d:ae:75:f9:cc:3d:ea:0f:06:e7:b1:19:99:5a:da:30: 8d:fa:49:5e:f5:b2:b8:af:fb:77:87:d5:dd:81:3c:6a:21:a3: 65:9b:d8:77:f9:5b:95:92:0d:8b:53:66:7b:b6:27:f5:81:e6: f9:6d:4b:c0:7c:4a:ca:4b:79:8e:0f:e9:c7:9f:7a:05:8d:69: 12:4e:50:e2:21:0b:95:cf:72:3f:e6:ac:11:4f:9d:d2:3e:92: 7b:35:61:1e:38:51:84:7d:75:6f:30:35:af:8b:c3:e6:dd:43: 4f:a5:33:8d -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUQbJb9WpRcv/nkCWJz3qZlrmoIL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2MkJBQzNEQ0ZEMkE4NkNDNkQyNEY0NTY0QTczRDRC REQwNEJDNjAeFw0yNjA1MDMwMjEyNTRaFw0yNzA1MDIwMjE3NTRaMDMxMTAvBgNV BAMTKDlEQUY5NEI5NEFEOUFCNEMxRDg1QzEyNEUyRTFGNEU0MDEzQzczNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLVnjFPI01artrmmkAc8jC9Isj zcEQFjeNf4J1TgmxRaZzDjBQyPYLzRUikKg4C/t2iklE5DhTniAgQQTn4xT6fmhB GHIKWvT9EHTbM/Y+9tHqTM4zuekLqaV9Pa4pr4sJv3xub/zpMTwos7Or4pIDUyhI uu4VVjgae7jr6qMkosmDf9qQ0ZzqcWV3H3rSIWHYM/kmoAZEv720bcz0thb0/cC/ lPDTubXUXTqKpJFnk4jJuTjf3VUNCNXCz0oQX3IOF7fsY7HuX2EdjTFd0dMxCZIv I1A6+c6GmjIeD8mb/2WLxPPNQcs9gEyBv7g0Y0V8N5KqYoFSTpp/JeJQm1ExAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUna+UuUrZq0wdhcEk4uH05AE8c00wHwYDVR0j BBgwFoAUu2K6w9z9KobMbST0Vkpz1L3QS8YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRlZDU4MTEtYmU1MC00Y2FhLTlmOTYtNjNkMzcyMDMxMWRlLzEvQkI2MkJBQzNE Q0ZEMkE4NkNDNkQyNEY0NTY0QTczRDRCREQwNEJDNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjYyQkFDM0RDRkQyQTg2Q0M2RDI0RjQ1NjRBNzNENEJERDA0 QkM2LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05 Zjk2LTYzZDM3MjAzMTFkZS8xLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzEzNjMyM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMzMzAzODM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJASX wAFiMA0GCSqGSIb3DQEBCwUAA4IBAQCsYDdpGB/3LlM/psemxTD72WUYuUVY8dCt Tas7H7MpIoMCqKBidNqs7kz+tVgVCIuV3tUMZzpCVyeoHLftyILLX0wlB4dbQDJl pXRjBe8odY+6A5wohl3F6xGrQgrP+S7lZ9pKaptYemmxPvgmN3DVehwNKpRMlCeZ TJ4qhPQDnZz12JuDTzj7YQDitWUtX4bxWZ2udfnMPeoPBuexGZla2jCN+kle9bK4 r/t3h9XdgTxqIaNlm9h3+VuVkg2LU2Z7tif1geb5bUvAfErKS3mOD+nHn3oFjWkS TlDiIQuVz3I/5qwRT53SPpJ7NWEeOFGEfXVvMDWvi8Pm3UNPpTON -----END CERTIFICATE-----Generated at Wed May 13 12:46:14 2026 by rpki-client