$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a343030303a3a2f33362d3336203d3e20313533303837.roa File: 323430343a393763303a343030303a3a2f33362d3336203d3e20313533303837.roa (raw, json) Hash identifier: fpSm4pDE62K2C3MwDYk0O0zYAOfSn+482jOnkiwjuHI= Subject key identifier: 79:3F:07:13:BC:3D:D5:EB:A2:8B:0A:AF:A0:3F:DE:C6:D7:EA:DA:AA Certificate issuer: /CN=BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6 Certificate serial: 14EA11A6D87B3C050187A6A1959EBB391BBD965E Authority key identifier: BB:62:BA:C3:DC:FD:2A:86:CC:6D:24:F4:56:4A:73:D4:BD:D0:4B:C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a343030303a3a2f33362d3336203d3e20313533303837.roa Signing time: Sun 03 May 2026 02:17:52 +0000 ROA not before: Sun 03 May 2026 02:12:52 +0000 ROA not after: Sun 02 May 2027 02:17:52 +0000 asID: 153087 IP address blocks: 2404:97c0:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.crl rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:ea:11:a6:d8:7b:3c:05:01:87:a6:a1:95:9e:bb:39:1b:bd:96:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6 Validity Not Before: May 3 02:12:52 2026 GMT Not After : May 2 02:17:52 2027 GMT Subject: CN=793F0713BC3DD5EBA28B0AAFA03FDEC6D7EADAAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:55:fb:4e:06:a4:2d:68:ae:9a:df:9e:5b:5a: 07:99:9a:48:70:fb:e6:2e:a7:d3:5e:05:4b:05:74: 37:ef:bf:11:5c:4d:43:29:08:39:c1:42:4c:85:fb: 25:e6:8f:6a:d7:f1:3d:21:21:15:9f:7f:ed:f3:1d: f5:ec:44:a4:6c:10:d2:2c:48:1b:db:4f:c6:e0:e7: a3:c3:09:ce:3c:de:0a:07:3f:1e:6a:bc:7d:15:e0: 0f:fe:2c:85:51:6c:d5:b6:18:8b:8f:68:23:7b:2c: d3:fa:1d:13:24:a2:91:4c:ba:1f:3c:e4:eb:44:80: 2a:4c:48:ee:03:eb:17:17:80:00:42:d0:37:ab:b4: 46:b4:e6:58:98:85:47:df:2f:4f:ad:6c:21:ce:67: b2:d1:07:70:f3:eb:e4:eb:52:a0:c2:2e:ea:51:cc: bd:bc:d5:65:6b:f7:6c:86:65:f3:85:99:65:f6:cb: 6c:4e:31:69:46:27:3c:ce:1b:84:92:e3:0e:3e:ee: 56:11:fb:19:d7:f1:18:ac:00:9f:41:71:dd:bd:8e: 87:9f:35:47:b4:0f:e9:52:0a:04:2e:2a:07:b6:6b: a8:1e:99:2b:a8:94:b1:b1:91:b2:67:dc:bf:ef:4f: 8d:11:bd:cd:d0:b2:55:37:e6:51:76:64:a8:6e:82: 15:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3F:07:13:BC:3D:D5:EB:A2:8B:0A:AF:A0:3F:DE:C6:D7:EA:DA:AA X509v3 Authority Key Identifier: keyid:BB:62:BA:C3:DC:FD:2A:86:CC:6D:24:F4:56:4A:73:D4:BD:D0:4B:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a343030303a3a2f33362d3336203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:4000::/36 Signature Algorithm: sha256WithRSAEncryption 70:79:38:28:81:6d:7b:33:f4:03:f1:7f:fc:fa:6e:e8:4b:d6: d6:3e:aa:ae:7d:f7:b1:7b:00:6a:ae:87:9a:37:49:8f:a1:aa: ab:f6:98:8f:b1:eb:57:79:0d:af:5f:67:93:0b:0f:09:7e:84: b2:38:12:0c:a4:ae:ac:23:24:75:5b:02:fd:27:30:19:04:d3: 5a:4e:a5:72:8e:02:39:4c:15:4f:2e:af:56:45:bc:ec:90:c3: e4:43:01:73:b8:8d:61:e9:3c:53:4c:93:2b:84:c0:6d:59:a7: d3:e0:48:a3:be:04:5c:e5:3d:f0:f3:58:17:85:25:72:30:cf: d3:df:ca:14:e8:4b:38:2a:cf:7d:f6:09:43:5e:b3:4f:cf:a0: 75:84:73:a5:7c:07:c4:ab:31:c4:28:fa:87:7a:c7:9c:1f:63: 80:2a:5c:80:66:ca:76:f0:da:60:34:2b:02:34:46:d9:0d:4a: 06:89:31:68:cb:c1:01:6e:cd:d1:c3:cc:a2:56:fd:bd:99:12: b1:86:84:f4:6c:96:36:b5:a3:01:1c:a9:64:fa:2f:b2:62:fe: f3:dd:de:04:5e:17:57:05:00:14:db:f9:68:77:de:01:46:47: 31:42:be:c8:15:29:3d:b0:5a:b2:e0:e8:3b:8e:11:0d:29:dd: 98:10:05:74 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUFOoRpth7PAUBh6ahlZ67ORu9ll4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2MkJBQzNEQ0ZEMkE4NkNDNkQyNEY0NTY0QTczRDRC REQwNEJDNjAeFw0yNjA1MDMwMjEyNTJaFw0yNzA1MDIwMjE3NTJaMDMxMTAvBgNV BAMTKDc5M0YwNzEzQkMzREQ1RUJBMjhCMEFBRkEwM0ZERUM2RDdFQURBQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsVftOBqQtaK6a355bWgeZmkhw ++Yup9NeBUsFdDfvvxFcTUMpCDnBQkyF+yXmj2rX8T0hIRWff+3zHfXsRKRsENIs SBvbT8bg56PDCc483goHPx5qvH0V4A/+LIVRbNW2GIuPaCN7LNP6HRMkopFMuh88 5OtEgCpMSO4D6xcXgABC0DertEa05liYhUffL0+tbCHOZ7LRB3Dz6+TrUqDCLupR zL281WVr92yGZfOFmWX2y2xOMWlGJzzOG4SS4w4+7lYR+xnX8RisAJ9Bcd29joef NUe0D+lSCgQuKge2a6gemSuolLGxkbJn3L/vT40Rvc3QslU35lF2ZKhughVtAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUeT8HE7w91euiiwqvoD/extfq2qowHwYDVR0j BBgwFoAUu2K6w9z9KobMbST0Vkpz1L3QS8YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRlZDU4MTEtYmU1MC00Y2FhLTlmOTYtNjNkMzcyMDMxMWRlLzEvQkI2MkJBQzNE Q0ZEMkE4NkNDNkQyNEY0NTY0QTczRDRCREQwNEJDNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjYyQkFDM0RDRkQyQTg2Q0M2RDI0RjQ1NjRBNzNENEJERDA0 QkM2LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05 Zjk2LTYzZDM3MjAzMTFkZS8xLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzQzMDMwMzAz YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BJfAQDANBgkqhkiG9w0BAQsFAAOCAQEAcHk4KIFtezP0A/F//Ppu6EvW1j6qrn33 sXsAaq6HmjdJj6Gqq/aYj7HrV3kNr19nkwsPCX6EsjgSDKSurCMkdVsC/ScwGQTT Wk6lco4COUwVTy6vVkW87JDD5EMBc7iNYek8U0yTK4TAbVmn0+BIo74EXOU98PNY F4UlcjDP09/KFOhLOCrPffYJQ16zT8+gdYRzpXwHxKsxxCj6h3rHnB9jgCpcgGbK dvDaYDQrAjRG2Q1KBokxaMvBAW7N0cPMolb9vZkSsYaE9GyWNrWjARypZPovsmL+ 893eBF4XVwUAFNv5aHfeAUZHMUK+yBUpPbBasuDoO44RDSndmBAFdA== -----END CERTIFICATE-----Generated at Wed May 13 12:46:35 2026 by rpki-client