$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a3230303a3a2f34302d3430203d3e20313533303837.roa File: 323430343a393763303a3230303a3a2f34302d3430203d3e20313533303837.roa (raw, json) Hash identifier: 9/QoXwZi+Pyj1T7FozvY9yt2s5Z6BJHX1W+zeI9735Y= Subject key identifier: 7E:4E:AF:88:39:EC:57:37:8C:B2:A6:6F:24:57:B2:27:4D:35:C7:6A Certificate issuer: /CN=BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6 Certificate serial: 2ED35DABBEA5753DC116D6926DE590B7FDE5FCB1 Authority key identifier: BB:62:BA:C3:DC:FD:2A:86:CC:6D:24:F4:56:4A:73:D4:BD:D0:4B:C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a3230303a3a2f34302d3430203d3e20313533303837.roa Signing time: Sun 03 May 2026 02:17:54 +0000 ROA not before: Sun 03 May 2026 02:12:54 +0000 ROA not after: Sun 02 May 2027 02:17:54 +0000 asID: 153087 IP address blocks: 2404:97c0:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.crl rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:d3:5d:ab:be:a5:75:3d:c1:16:d6:92:6d:e5:90:b7:fd:e5:fc:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6 Validity Not Before: May 3 02:12:54 2026 GMT Not After : May 2 02:17:54 2027 GMT Subject: CN=7E4EAF8839EC57378CB2A66F2457B2274D35C76A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bb:89:25:60:01:b9:f1:0b:68:66:4a:86:0d: 22:b4:54:1c:93:33:30:1b:f5:3d:30:4b:bc:cc:3d: 3c:ff:34:f6:23:8d:23:e2:35:f7:95:4e:d6:5f:03: f3:cd:56:7b:65:d5:1d:72:70:53:e6:06:75:1d:fd: 22:50:90:77:cc:78:1a:ef:d4:d5:d1:51:dd:01:fa: 82:21:09:29:8f:75:0b:ab:2e:a9:89:18:7f:42:a7: b0:8c:39:71:c2:f2:3f:75:45:d0:5e:f1:62:5d:c4: cb:d9:fd:d6:0c:12:1e:ec:af:91:bc:ff:0b:52:a5: 75:40:d8:31:52:35:e2:ac:87:73:42:75:86:a9:ae: c2:b8:48:eb:26:c4:04:7c:e7:db:a5:c8:3b:04:9a: 7c:d9:2c:67:69:f6:f5:84:e8:d3:f1:c8:e1:2f:26: f7:69:58:fb:20:e1:dc:e4:53:76:52:5b:41:e2:5a: d7:d6:e3:f3:72:6f:87:63:20:44:fe:d2:4c:ac:51: 5f:99:61:b7:e2:77:46:1e:d6:33:44:a4:11:87:e2: c3:d6:1a:88:e7:88:e5:58:ef:cf:b6:d4:4a:04:c1: 00:af:b0:46:9f:33:83:81:78:d5:d2:e2:e6:0a:14: 02:64:08:39:26:42:eb:07:39:9b:c1:0b:d5:f6:61: ef:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4E:AF:88:39:EC:57:37:8C:B2:A6:6F:24:57:B2:27:4D:35:C7:6A X509v3 Authority Key Identifier: keyid:BB:62:BA:C3:DC:FD:2A:86:CC:6D:24:F4:56:4A:73:D4:BD:D0:4B:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a3230303a3a2f34302d3430203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:200::/40 Signature Algorithm: sha256WithRSAEncryption 4f:95:8c:93:3c:76:11:2e:32:bc:26:34:d9:7e:a2:29:80:07: 63:fc:cc:fa:25:fa:47:6d:65:59:29:fd:56:72:2f:9b:5d:7e: aa:aa:63:24:fc:ee:a0:2a:23:b0:a8:af:ae:ec:cc:58:7a:67: e0:d8:4a:0e:a8:e9:2b:55:89:5b:9a:83:58:0a:21:31:76:93: b4:45:94:e6:34:36:b5:a0:46:99:d7:5f:e5:b2:52:80:b0:90: 4f:2a:d3:36:2a:f3:e5:36:7f:30:57:b6:21:2f:35:10:ab:02: da:a8:cf:37:44:6b:7d:e0:f6:9f:81:62:03:f6:9f:c4:34:ac: b0:57:32:32:e2:d1:c4:e4:30:ea:4b:4b:ee:15:10:91:20:75: 26:59:d2:af:f9:ed:67:b5:e6:05:5b:09:23:32:2f:ab:92:77: 5d:30:e6:08:29:c5:8b:18:6b:a0:e2:19:04:29:07:87:87:69: fd:81:95:c4:8f:29:b3:56:2a:3f:2b:c7:f3:aa:fc:26:63:26: bd:44:4b:3a:5f:c8:dc:53:04:76:21:8e:5b:84:96:65:91:3e: 47:d1:7a:63:e9:4f:fe:7a:a6:5a:ea:0a:14:d8:64:29:22:7c: 7f:26:ce:bb:15:15:24:c4:dc:fd:54:eb:65:3c:03:96:59:dc: ee:14:42:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULtNdq76ldT3BFtaSbeWQt/3l/LEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2MkJBQzNEQ0ZEMkE4NkNDNkQyNEY0NTY0QTczRDRC REQwNEJDNjAeFw0yNjA1MDMwMjEyNTRaFw0yNzA1MDIwMjE3NTRaMDMxMTAvBgNV BAMTKDdFNEVBRjg4MzlFQzU3Mzc4Q0IyQTY2RjI0NTdCMjI3NEQzNUM3NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuu4klYAG58QtoZkqGDSK0VByT MzAb9T0wS7zMPTz/NPYjjSPiNfeVTtZfA/PNVntl1R1ycFPmBnUd/SJQkHfMeBrv 1NXRUd0B+oIhCSmPdQurLqmJGH9Cp7CMOXHC8j91RdBe8WJdxMvZ/dYMEh7sr5G8 /wtSpXVA2DFSNeKsh3NCdYaprsK4SOsmxAR859ulyDsEmnzZLGdp9vWE6NPxyOEv JvdpWPsg4dzkU3ZSW0HiWtfW4/Nyb4djIET+0kysUV+ZYbfid0Ye1jNEpBGH4sPW GojniOVY78+21EoEwQCvsEafM4OBeNXS4uYKFAJkCDkmQusHOZvBC9X2Ye+1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfk6viDnsVzeMsqZvJFeyJ001x2owHwYDVR0j BBgwFoAUu2K6w9z9KobMbST0Vkpz1L3QS8YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRlZDU4MTEtYmU1MC00Y2FhLTlmOTYtNjNkMzcyMDMxMWRlLzEvQkI2MkJBQzNE Q0ZEMkE4NkNDNkQyNEY0NTY0QTczRDRCREQwNEJDNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjYyQkFDM0RDRkQyQTg2Q0M2RDI0RjQ1NjRBNzNENEJERDA0 QkM2LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05 Zjk2LTYzZDM3MjAzMTFkZS8xLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzIzMDMwM2Ez YTJmMzQzMDJkMzQzMDIwM2QzZTIwMzEzNTMzMzAzODM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJASX wAIwDQYJKoZIhvcNAQELBQADggEBAE+VjJM8dhEuMrwmNNl+oimAB2P8zPol+kdt ZVkp/VZyL5tdfqqqYyT87qAqI7Cor67szFh6Z+DYSg6o6StViVuag1gKITF2k7RF lOY0NrWgRpnXX+WyUoCwkE8q0zYq8+U2fzBXtiEvNRCrAtqozzdEa33g9p+BYgP2 n8Q0rLBXMjLi0cTkMOpLS+4VEJEgdSZZ0q/57We15gVbCSMyL6uSd10w5ggpxYsY a6DiGQQpB4eHaf2BlcSPKbNWKj8rx/Oq/CZjJr1ESzpfyNxTBHYhjluElmWRPkfR emPpT/56plrqChTYZCkifH8mzrsVFSTE3P1U62U8A5ZZ3O4UQrM= -----END CERTIFICATE-----Generated at Wed May 13 11:50:23 2026 by rpki-client