$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a353030303a3a2f33362d3336203d3e20313533303837.roa File: 323430343a393763303a353030303a3a2f33362d3336203d3e20313533303837.roa (raw, json) Hash identifier: DMTikJab0ae9O4HD2Rj+Ztu7x/UCvKq4uURdfUfpXaI= Subject key identifier: E5:0D:2A:EB:9D:F5:BD:BB:B8:82:08:B3:04:C5:37:01:9D:2A:E6:E5 Certificate issuer: /CN=BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6 Certificate serial: 282D7F63B4F0AA190CDB0E1C14CF24CF6A6133AA Authority key identifier: BB:62:BA:C3:DC:FD:2A:86:CC:6D:24:F4:56:4A:73:D4:BD:D0:4B:C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a353030303a3a2f33362d3336203d3e20313533303837.roa Signing time: Sun 03 May 2026 02:17:50 +0000 ROA not before: Sun 03 May 2026 02:12:50 +0000 ROA not after: Sun 02 May 2027 02:17:50 +0000 asID: 153087 IP address blocks: 2404:97c0:5000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.crl rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:2d:7f:63:b4:f0:aa:19:0c:db:0e:1c:14:cf:24:cf:6a:61:33:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6 Validity Not Before: May 3 02:12:50 2026 GMT Not After : May 2 02:17:50 2027 GMT Subject: CN=E50D2AEB9DF5BDBBB88208B304C537019D2AE6E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3b:5e:3a:4c:7f:b9:12:26:8f:fc:8c:ed:73: 80:d3:5a:f3:04:4f:02:68:a3:a2:1c:ce:80:55:70: 7f:2d:03:64:e1:77:75:e5:70:46:05:99:b2:51:ab: a1:15:10:08:39:3f:58:2a:12:ba:ee:b1:d0:48:2d: 57:93:53:12:bd:13:e1:ef:74:59:e0:ae:a1:0e:a5: 56:e6:0e:48:cb:87:58:32:75:6b:10:97:85:64:f0: 77:04:b1:3a:d2:92:f4:a9:33:32:23:5a:59:15:5d: a2:02:b0:b7:b9:33:88:22:3a:4c:ae:f6:e6:f0:42: a7:67:0d:18:b0:60:c0:51:d3:3b:10:cb:f7:bf:33: 69:e2:94:34:04:fb:ef:a1:94:45:f5:78:92:f0:80: 0a:92:95:57:7b:7e:83:6e:2c:91:32:62:7a:47:51: 36:54:c0:c4:e5:1d:c4:44:27:bc:42:84:81:64:c7: 15:39:34:8e:ea:68:ba:b9:94:1c:d2:2a:1f:75:3e: 15:cc:7d:97:b9:9e:ba:ad:5e:d4:80:2c:e3:0e:f9: b5:09:59:a4:a4:59:d5:f7:5b:95:76:d8:6f:58:1a: b4:e5:b7:1f:8e:63:d8:75:fd:6c:3b:f7:2d:95:c2: ab:81:9e:54:01:ba:c2:8a:8b:4c:71:80:27:47:50: b7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0D:2A:EB:9D:F5:BD:BB:B8:82:08:B3:04:C5:37:01:9D:2A:E6:E5 X509v3 Authority Key Identifier: keyid:BB:62:BA:C3:DC:FD:2A:86:CC:6D:24:F4:56:4A:73:D4:BD:D0:4B:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a353030303a3a2f33362d3336203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:5000::/36 Signature Algorithm: sha256WithRSAEncryption 0d:85:e3:1d:2f:37:f9:80:91:ef:00:ee:f3:ce:73:97:c0:43: 48:cb:82:81:a8:2e:0a:12:46:ba:d8:4b:6d:46:74:86:75:2a: 54:20:39:9f:6d:ed:eb:a8:aa:ce:d4:65:c7:c6:ee:51:d5:80: a7:b5:82:62:6c:3a:06:77:70:40:61:dd:64:65:13:3f:da:27: 5f:c4:49:50:e0:80:1f:17:63:bd:68:1b:d3:6c:58:2d:dc:6f: 0d:3a:d0:d1:2d:bf:bc:d7:d9:92:9c:41:92:3f:54:be:c6:a3: 81:78:3f:cc:e3:2b:7a:5f:c5:24:8b:16:91:90:50:42:ab:4d: a6:b5:ad:37:47:fe:1e:f1:4b:35:e4:75:73:5f:0d:79:7c:58: 7f:da:d4:8d:84:35:a1:cd:07:74:b7:b7:65:ee:16:9a:14:08: 5c:9d:5c:1f:12:73:45:5c:eb:c3:47:3e:79:53:66:68:81:ce: 9d:e2:b0:cb:d3:b6:04:42:95:b9:d7:5d:7e:df:9f:d1:58:ea: 1b:40:2a:fe:64:f3:d9:b8:67:2d:22:22:70:1f:bf:1c:bd:38: f6:2e:5a:15:af:3a:df:80:80:cf:69:f4:6d:4d:64:29:16:36: 5a:2a:d6:d7:ad:1b:99:07:99:88:12:7c:fe:75:be:e4:15:84: 89:56:ab:d7 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUKC1/Y7TwqhkM2w4cFM8kz2phM6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2MkJBQzNEQ0ZEMkE4NkNDNkQyNEY0NTY0QTczRDRC REQwNEJDNjAeFw0yNjA1MDMwMjEyNTBaFw0yNzA1MDIwMjE3NTBaMDMxMTAvBgNV BAMTKEU1MEQyQUVCOURGNUJEQkJCODgyMDhCMzA0QzUzNzAxOUQyQUU2RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFO146TH+5EiaP/Iztc4DTWvME TwJoo6IczoBVcH8tA2Thd3XlcEYFmbJRq6EVEAg5P1gqErrusdBILVeTUxK9E+Hv dFngrqEOpVbmDkjLh1gydWsQl4Vk8HcEsTrSkvSpMzIjWlkVXaICsLe5M4giOkyu 9ubwQqdnDRiwYMBR0zsQy/e/M2nilDQE+++hlEX1eJLwgAqSlVd7foNuLJEyYnpH UTZUwMTlHcREJ7xChIFkxxU5NI7qaLq5lBzSKh91PhXMfZe5nrqtXtSALOMO+bUJ WaSkWdX3W5V22G9YGrTltx+OY9h1/Ww79y2VwquBnlQBusKKi0xxgCdHULfzAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQU5Q0q6531vbu4ggizBMU3AZ0q5uUwHwYDVR0j BBgwFoAUu2K6w9z9KobMbST0Vkpz1L3QS8YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRlZDU4MTEtYmU1MC00Y2FhLTlmOTYtNjNkMzcyMDMxMWRlLzEvQkI2MkJBQzNE Q0ZEMkE4NkNDNkQyNEY0NTY0QTczRDRCREQwNEJDNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjYyQkFDM0RDRkQyQTg2Q0M2RDI0RjQ1NjRBNzNENEJERDA0 QkM2LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05 Zjk2LTYzZDM3MjAzMTFkZS8xLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzUzMDMwMzAz YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BJfAUDANBgkqhkiG9w0BAQsFAAOCAQEADYXjHS83+YCR7wDu885zl8BDSMuCgagu ChJGuthLbUZ0hnUqVCA5n23t66iqztRlx8buUdWAp7WCYmw6BndwQGHdZGUTP9on X8RJUOCAHxdjvWgb02xYLdxvDTrQ0S2/vNfZkpxBkj9UvsajgXg/zOMrel/FJIsW kZBQQqtNprWtN0f+HvFLNeR1c18NeXxYf9rUjYQ1oc0HdLe3Ze4WmhQIXJ1cHxJz RVzrw0c+eVNmaIHOneKwy9O2BEKVudddft+f0VjqG0Aq/mTz2bhnLSIicB+/HL04 9i5aFa8634CAz2n0bU1kKRY2WirW160bmQeZiBJ8/nW+5BWEiVar1w== -----END CERTIFICATE-----Generated at Wed May 13 11:53:00 2026 by rpki-client