$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a323330303a3a2f34302d3430203d3e20313533303837.roa File: 323430343a393763303a323330303a3a2f34302d3430203d3e20313533303837.roa (raw, json) Hash identifier: zvtMjowrV+4dPWQSw6s00W3ZigrcSHljQ+dcDb+Q1ts= Subject key identifier: C0:5D:BC:36:7E:EA:3D:EF:B1:92:2F:C1:CD:EE:79:89:31:B5:97:BC Certificate issuer: /CN=BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6 Certificate serial: 151D5321BCBC4CC57A83EE37C154C605BD625B19 Authority key identifier: BB:62:BA:C3:DC:FD:2A:86:CC:6D:24:F4:56:4A:73:D4:BD:D0:4B:C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a323330303a3a2f34302d3430203d3e20313533303837.roa Signing time: Sun 03 May 2026 02:17:48 +0000 ROA not before: Sun 03 May 2026 02:12:48 +0000 ROA not after: Sun 02 May 2027 02:17:48 +0000 asID: 153087 IP address blocks: 2404:97c0:2300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.crl rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:1d:53:21:bc:bc:4c:c5:7a:83:ee:37:c1:54:c6:05:bd:62:5b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6 Validity Not Before: May 3 02:12:48 2026 GMT Not After : May 2 02:17:48 2027 GMT Subject: CN=C05DBC367EEA3DEFB1922FC1CDEE798931B597BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:00:65:80:83:9e:fb:d7:81:5e:c9:78:6e:93: e7:bd:58:b9:29:24:ff:62:0a:84:fb:34:7d:8d:ea: 12:4a:e1:82:51:88:6d:0d:7d:14:64:97:28:77:00: 93:9b:a6:57:c6:de:62:97:f7:3c:75:5f:1c:23:ee: 63:1a:38:a4:be:d0:8b:e0:35:31:06:0e:4a:67:95: a6:a0:76:c3:a7:9c:a1:3e:2e:6b:b6:70:90:59:4a: d1:a0:49:f8:34:20:31:11:de:f5:a3:1a:18:2f:a5: 4f:2b:f0:c3:db:c7:97:5e:05:29:cf:98:f9:1e:50: 44:67:ca:c4:8f:04:44:86:90:c0:2d:a7:06:21:56: d3:d2:fd:d5:01:5c:96:ff:bb:13:d5:1f:5b:b5:40: 68:ca:35:1b:1f:48:b0:04:8e:e2:04:60:29:de:c6: 36:41:94:5d:61:31:3f:31:66:61:52:2d:91:d2:46: 30:03:f9:62:4b:c6:fd:db:73:4f:0c:56:d2:18:7b: 00:f7:b2:5d:40:13:02:b5:5e:4a:a7:64:62:21:a6: f2:84:73:bc:d8:30:0c:5b:c4:ad:d2:02:a0:a3:5a: e6:37:54:4a:ae:48:44:34:f6:7c:a4:a2:35:c2:aa: 57:7e:c4:08:36:88:29:ed:10:e2:76:80:51:e1:14: 90:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:5D:BC:36:7E:EA:3D:EF:B1:92:2F:C1:CD:EE:79:89:31:B5:97:BC X509v3 Authority Key Identifier: keyid:BB:62:BA:C3:DC:FD:2A:86:CC:6D:24:F4:56:4A:73:D4:BD:D0:4B:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a323330303a3a2f34302d3430203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:2300::/40 Signature Algorithm: sha256WithRSAEncryption 59:2e:8e:24:c4:63:75:82:50:7f:9f:55:84:0c:40:9d:1c:f8: 5c:11:89:78:47:b6:07:e8:be:bc:4e:79:3e:d5:1b:c0:80:45: 22:f1:0c:4e:5a:02:3e:e1:f0:27:15:d9:1e:f2:b8:a5:55:f7: 74:fb:f0:f2:e2:78:b9:b7:c0:94:84:d2:5d:24:f1:c0:07:ce: fe:e5:b9:ed:6d:2b:ac:46:3d:34:43:44:ea:f5:d2:46:e3:90: b9:1f:79:37:44:09:c3:ef:3f:2d:71:12:f1:38:1a:f7:f0:e1: a9:2e:7e:2d:24:b4:b0:02:b0:a2:bc:86:e3:c2:e2:60:93:1d: 4e:f8:9c:99:b8:8f:20:f2:32:26:49:c6:fe:b2:42:6e:5d:67: 55:71:79:08:4e:8b:3b:70:23:c5:70:ad:1d:9d:ba:97:98:d4: b0:9d:89:e0:16:12:ec:8d:51:0f:be:95:f9:da:e9:1c:3c:e9: 58:1b:8c:87:2e:61:96:36:e1:bc:54:89:25:8f:7d:00:67:e1: de:06:47:fd:c9:48:8f:72:8e:56:e8:45:1e:d0:48:58:36:87: fc:5e:0a:38:58:b4:f0:24:99:9d:06:6e:1c:3f:c7:33:08:54: fc:ad:01:c2:50:4f:ae:17:25:90:9a:6c:a5:bb:41:78:6e:73: 4a:cc:31:60 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUFR1TIby8TMV6g+43wVTGBb1iWxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2MkJBQzNEQ0ZEMkE4NkNDNkQyNEY0NTY0QTczRDRC REQwNEJDNjAeFw0yNjA1MDMwMjEyNDhaFw0yNzA1MDIwMjE3NDhaMDMxMTAvBgNV BAMTKEMwNURCQzM2N0VFQTNERUZCMTkyMkZDMUNERUU3OTg5MzFCNTk3QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0AGWAg57714FeyXhuk+e9WLkp JP9iCoT7NH2N6hJK4YJRiG0NfRRklyh3AJObplfG3mKX9zx1Xxwj7mMaOKS+0Ivg NTEGDkpnlaagdsOnnKE+Lmu2cJBZStGgSfg0IDER3vWjGhgvpU8r8MPbx5deBSnP mPkeUERnysSPBESGkMAtpwYhVtPS/dUBXJb/uxPVH1u1QGjKNRsfSLAEjuIEYCne xjZBlF1hMT8xZmFSLZHSRjAD+WJLxv3bc08MVtIYewD3sl1AEwK1XkqnZGIhpvKE c7zYMAxbxK3SAqCjWuY3VEquSEQ09nykojXCqld+xAg2iCntEOJ2gFHhFJAvAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUwF28Nn7qPe+xki/Bze55iTG1l7wwHwYDVR0j BBgwFoAUu2K6w9z9KobMbST0Vkpz1L3QS8YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRlZDU4MTEtYmU1MC00Y2FhLTlmOTYtNjNkMzcyMDMxMWRlLzEvQkI2MkJBQzNE Q0ZEMkE4NkNDNkQyNEY0NTY0QTczRDRCREQwNEJDNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjYyQkFDM0RDRkQyQTg2Q0M2RDI0RjQ1NjRBNzNENEJERDA0 QkM2LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05 Zjk2LTYzZDM3MjAzMTFkZS8xLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzIzMzMwMzAz YTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAk BJfAIzANBgkqhkiG9w0BAQsFAAOCAQEAWS6OJMRjdYJQf59VhAxAnRz4XBGJeEe2 B+i+vE55PtUbwIBFIvEMTloCPuHwJxXZHvK4pVX3dPvw8uJ4ubfAlITSXSTxwAfO /uW57W0rrEY9NENE6vXSRuOQuR95N0QJw+8/LXES8Tga9/DhqS5+LSS0sAKworyG 48LiYJMdTvicmbiPIPIyJknG/rJCbl1nVXF5CE6LO3AjxXCtHZ26l5jUsJ2J4BYS 7I1RD76V+drpHDzpWBuMhy5hljbhvFSJJY99AGfh3gZH/clIj3KOVuhFHtBIWDaH /F4KOFi08CSZnQZuHD/HMwhU/K0BwlBPrhclkJpspbtBeG5zSswxYA== -----END CERTIFICATE-----Generated at Wed May 13 13:03:30 2026 by rpki-client