$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a3937303a3a2f34342d3434203d3e20313533303837.roa File: 323430343a393763303a3937303a3a2f34342d3434203d3e20313533303837.roa (raw, json) Hash identifier: XxL/w9ox3cGwqcu82UMQyHdLdwmKZ2XYnIXUs8E0QIA= Subject key identifier: 44:99:60:A5:8E:41:77:B5:BC:C3:D4:6C:41:EE:15:F7:F7:04:A5:4A Certificate issuer: /CN=BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6 Certificate serial: 551069A6E3BA16376362B4057B58B6D29303930E Authority key identifier: BB:62:BA:C3:DC:FD:2A:86:CC:6D:24:F4:56:4A:73:D4:BD:D0:4B:C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a3937303a3a2f34342d3434203d3e20313533303837.roa Signing time: Sun 03 May 2026 02:17:49 +0000 ROA not before: Sun 03 May 2026 02:12:49 +0000 ROA not after: Sun 02 May 2027 02:17:49 +0000 asID: 153087 IP address blocks: 2404:97c0:970::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.crl rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:10:69:a6:e3:ba:16:37:63:62:b4:05:7b:58:b6:d2:93:03:93:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6 Validity Not Before: May 3 02:12:49 2026 GMT Not After : May 2 02:17:49 2027 GMT Subject: CN=449960A58E4177B5BCC3D46C41EE15F7F704A54A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:36:82:fb:34:1f:9c:9a:ce:2a:89:53:9d:7d: ce:b6:9e:1b:54:8f:5c:9c:12:39:0a:3d:71:9c:c1: f2:43:77:3b:81:8e:c6:e9:4a:7c:ee:51:0c:a3:b2: 3e:c6:45:80:df:58:6e:ba:77:24:1c:f7:a5:47:33: 15:cf:3a:0d:1a:13:01:f3:50:06:68:62:da:38:20: 25:52:b0:98:5a:0c:6e:cd:b1:ef:c0:b3:9a:7c:0d: ff:d9:e6:3b:75:e4:0c:15:4e:62:92:71:06:a5:e0: ff:e6:da:af:91:8f:57:03:f8:77:be:02:aa:ca:40: f4:05:1a:44:2c:df:03:28:d6:8c:df:46:a0:bc:8b: 3c:c8:58:7c:fd:bb:bb:30:c9:b7:6f:e8:cf:2e:7b: d9:9f:7d:91:dc:9f:e5:1d:55:85:0a:90:31:6c:2b: 7f:a5:f4:6f:b4:e5:82:64:36:79:97:db:56:96:31: 34:7b:b2:a2:7f:f9:56:f5:d1:3d:f6:a7:c0:9f:f2: fa:d2:85:3e:91:fc:d5:6f:51:10:2f:32:29:10:81: 31:71:04:2a:24:51:de:1f:c6:59:99:59:6e:66:65: 02:8e:06:a3:71:a9:a1:7d:b3:29:82:fe:9f:83:cf: 26:1a:38:9d:a2:d1:2b:b7:5c:42:dd:d8:34:b7:81: dd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:99:60:A5:8E:41:77:B5:BC:C3:D4:6C:41:EE:15:F7:F7:04:A5:4A X509v3 Authority Key Identifier: keyid:BB:62:BA:C3:DC:FD:2A:86:CC:6D:24:F4:56:4A:73:D4:BD:D0:4B:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a3937303a3a2f34342d3434203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:970::/44 Signature Algorithm: sha256WithRSAEncryption 37:e9:3d:14:bf:53:b1:dd:59:c5:fc:01:a1:98:60:99:dc:8b: dd:6b:62:16:ee:79:04:f7:04:b4:63:9d:65:27:ab:02:2b:26: 12:b3:ae:60:fe:dc:92:e3:d9:f5:65:b9:89:4d:e9:78:27:56: 94:a2:49:ca:c9:dd:7d:8d:00:3f:d6:72:6f:20:d1:8b:7d:fd: 24:66:14:fd:7a:b5:a0:e8:e7:00:bf:f6:7b:f3:d9:cb:42:6c: dd:38:c2:cc:ce:5c:7b:39:31:d3:a8:6c:d0:92:9c:81:ea:81: c4:b5:7e:d1:4e:0d:44:81:4c:4f:c6:ca:36:75:30:eb:35:bc: d9:0f:6b:90:8d:07:3c:ca:c6:05:56:f9:b2:05:86:d9:a6:f6: d3:39:b2:81:ae:b8:c9:a7:d3:4b:29:d5:0f:29:e1:e7:57:78: e0:4d:46:09:da:90:ce:b8:8e:e8:df:94:53:e8:67:0e:97:40: 4c:10:46:41:65:ba:d2:bb:8a:8e:d7:3d:9f:f8:de:11:b1:93: c9:ae:b6:13:62:34:d1:49:d7:f0:35:9e:a8:24:76:18:28:91: 37:83:77:a4:5f:57:ac:ea:03:25:73:ba:bb:20:e7:eb:49:b3: 02:8c:3e:e5:97:a8:7c:b4:cd:14:45:33:9b:4a:6c:6c:6c:74: 67:8d:12:16 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUVRBppuO6FjdjYrQFe1i20pMDkw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2MkJBQzNEQ0ZEMkE4NkNDNkQyNEY0NTY0QTczRDRC REQwNEJDNjAeFw0yNjA1MDMwMjEyNDlaFw0yNzA1MDIwMjE3NDlaMDMxMTAvBgNV BAMTKDQ0OTk2MEE1OEU0MTc3QjVCQ0MzRDQ2QzQxRUUxNUY3RjcwNEE1NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeNoL7NB+cms4qiVOdfc62nhtU j1ycEjkKPXGcwfJDdzuBjsbpSnzuUQyjsj7GRYDfWG66dyQc96VHMxXPOg0aEwHz UAZoYto4ICVSsJhaDG7Nse/As5p8Df/Z5jt15AwVTmKScQal4P/m2q+Rj1cD+He+ AqrKQPQFGkQs3wMo1ozfRqC8izzIWHz9u7swybdv6M8ue9mffZHcn+UdVYUKkDFs K3+l9G+05YJkNnmX21aWMTR7sqJ/+Vb10T32p8Cf8vrShT6R/NVvURAvMikQgTFx BCokUd4fxlmZWW5mZQKOBqNxqaF9symC/p+DzyYaOJ2i0Su3XELd2DS3gd1FAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQURJlgpY5Bd7W8w9RsQe4V9/cEpUowHwYDVR0j BBgwFoAUu2K6w9z9KobMbST0Vkpz1L3QS8YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRlZDU4MTEtYmU1MC00Y2FhLTlmOTYtNjNkMzcyMDMxMWRlLzEvQkI2MkJBQzNE Q0ZEMkE4NkNDNkQyNEY0NTY0QTczRDRCREQwNEJDNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjYyQkFDM0RDRkQyQTg2Q0M2RDI0RjQ1NjRBNzNENEJERDA0 QkM2LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05 Zjk2LTYzZDM3MjAzMTFkZS8xLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzkzNzMwM2Ez YTJmMzQzNDJkMzQzNDIwM2QzZTIwMzEzNTMzMzAzODM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJASX wAlwMA0GCSqGSIb3DQEBCwUAA4IBAQA36T0Uv1Ox3VnF/AGhmGCZ3Ivda2IW7nkE 9wS0Y51lJ6sCKyYSs65g/tyS49n1ZbmJTel4J1aUoknKyd19jQA/1nJvINGLff0k ZhT9erWg6OcAv/Z789nLQmzdOMLMzlx7OTHTqGzQkpyB6oHEtX7RTg1EgUxPxso2 dTDrNbzZD2uQjQc8ysYFVvmyBYbZpvbTObKBrrjJp9NLKdUPKeHnV3jgTUYJ2pDO uI7o35RT6GcOl0BMEEZBZbrSu4qO1z2f+N4RsZPJrrYTYjTRSdfwNZ6oJHYYKJE3 g3ekX1es6gMlc7q7IOfrSbMCjD7ll6h8tM0URTObSmxsbHRnjRIW -----END CERTIFICATE-----Generated at Wed May 13 12:46:05 2026 by rpki-client