$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a393763303a3a2f34342d3434203d3e20313533303837.roa File: 323430343a393763303a393763303a3a2f34342d3434203d3e20313533303837.roa (raw, json) Hash identifier: RDFItErZLgf15K2OjzSNqV9SV+BAzr6bApV7t0EXTTY= Subject key identifier: 07:FF:6B:BC:6C:44:58:F9:04:62:28:1C:13:C9:3F:FF:18:09:13:C1 Certificate issuer: /CN=BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6 Certificate serial: 5070D9B630E2B22F9C4D7FE7704EC9D867EE0EFD Authority key identifier: BB:62:BA:C3:DC:FD:2A:86:CC:6D:24:F4:56:4A:73:D4:BD:D0:4B:C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a393763303a3a2f34342d3434203d3e20313533303837.roa Signing time: Sun 03 May 2026 02:17:48 +0000 ROA not before: Sun 03 May 2026 02:12:48 +0000 ROA not after: Sun 02 May 2027 02:17:48 +0000 asID: 153087 IP address blocks: 2404:97c0:97c0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.crl rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:70:d9:b6:30:e2:b2:2f:9c:4d:7f:e7:70:4e:c9:d8:67:ee:0e:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6 Validity Not Before: May 3 02:12:48 2026 GMT Not After : May 2 02:17:48 2027 GMT Subject: CN=07FF6BBC6C4458F90462281C13C93FFF180913C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:21:68:19:3c:51:61:56:ca:13:00:5a:44:74: dc:85:64:5b:44:bd:e9:ff:5c:74:17:06:af:84:bf: a1:22:f0:11:9b:04:6c:b9:e8:6b:32:42:e5:10:1f: e6:9d:60:48:1f:81:31:58:5c:57:d6:d1:15:48:93: 00:aa:01:9a:32:9b:7c:26:72:73:4e:dd:49:f5:5e: 24:f3:51:57:0e:99:ab:29:a2:c9:57:ba:c1:6a:41: 26:2a:20:c9:ad:f5:de:bb:af:02:2c:7e:3c:87:fe: 52:df:b5:0f:a2:33:fc:24:b7:a0:4f:d1:53:1f:1b: 25:15:cd:ee:82:f1:02:f0:81:01:8d:62:16:76:95: 14:99:57:ec:2a:97:cc:33:6a:2f:ed:7f:ae:b5:a9: 86:ea:4b:10:e2:0a:1c:dc:53:b1:7b:fb:f6:95:27: 75:9c:b8:a6:7d:d4:c1:e4:03:e5:7f:ae:b8:47:81: 34:a9:81:dc:d2:d7:6c:0f:1b:42:cc:05:73:8d:1b: 71:a6:df:72:03:03:85:92:0a:b4:36:a1:03:2b:5b: 21:c2:51:41:90:32:d6:eb:05:8a:69:08:55:53:aa: 3b:f0:84:de:ae:63:1b:d3:ad:ad:8e:8c:9f:e9:2c: 68:4f:9a:8a:a9:61:bf:7e:50:2e:ce:86:1b:1f:56: 1f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:FF:6B:BC:6C:44:58:F9:04:62:28:1C:13:C9:3F:FF:18:09:13:C1 X509v3 Authority Key Identifier: keyid:BB:62:BA:C3:DC:FD:2A:86:CC:6D:24:F4:56:4A:73:D4:BD:D0:4B:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a393763303a3a2f34342d3434203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:97c0::/44 Signature Algorithm: sha256WithRSAEncryption 17:87:a2:d4:bd:2b:c1:aa:c4:6c:2c:4e:d4:5a:cf:55:70:e0: 86:48:2c:31:99:ff:45:36:c9:22:b5:05:fa:cd:6f:a3:2b:4e: 22:33:e7:c1:8e:bb:23:1a:62:e6:b7:a8:a8:4d:d9:e5:75:98: 5c:fe:49:b0:40:bd:63:b3:f1:00:86:d3:e9:fa:b6:60:c8:58: da:14:f9:0c:0d:b8:42:2d:51:05:14:d2:12:46:7d:9b:9d:62: f1:88:fc:3c:48:68:06:4a:f9:aa:eb:60:d4:1a:18:de:42:76: 38:ee:84:b7:05:75:03:65:30:32:d7:37:66:e7:29:e8:ca:cc: 06:29:8c:a8:b8:18:98:05:1b:ca:a6:e6:e8:a8:57:6c:10:3d: 59:c3:91:17:2b:1c:68:89:b5:ac:65:19:e4:bd:58:be:12:a5: d5:97:43:9c:d9:bb:56:aa:4e:67:fd:23:48:81:d0:40:b7:bb: db:c2:c8:39:a8:3a:fd:4f:f7:59:15:82:be:11:b3:f8:3b:75: d2:c4:b3:8b:78:08:90:ff:40:b6:5c:17:92:97:ed:e3:ea:8a: 27:8b:46:17:f7:1b:12:5c:57:4c:bd:ca:6e:ed:a6:a4:53:bf: c8:0a:f6:45:28:3e:c5:1b:27:f2:0a:28:65:41:4a:18:64:3e: 63:d3:b0:cb -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUUHDZtjDisi+cTX/ncE7J2GfuDv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2MkJBQzNEQ0ZEMkE4NkNDNkQyNEY0NTY0QTczRDRC REQwNEJDNjAeFw0yNjA1MDMwMjEyNDhaFw0yNzA1MDIwMjE3NDhaMDMxMTAvBgNV BAMTKDA3RkY2QkJDNkM0NDU4RjkwNDYyMjgxQzEzQzkzRkZGMTgwOTEzQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPIWgZPFFhVsoTAFpEdNyFZFtE ven/XHQXBq+Ev6Ei8BGbBGy56GsyQuUQH+adYEgfgTFYXFfW0RVIkwCqAZoym3wm cnNO3Un1XiTzUVcOmasposlXusFqQSYqIMmt9d67rwIsfjyH/lLftQ+iM/wkt6BP 0VMfGyUVze6C8QLwgQGNYhZ2lRSZV+wql8wzai/tf661qYbqSxDiChzcU7F7+/aV J3WcuKZ91MHkA+V/rrhHgTSpgdzS12wPG0LMBXONG3Gm33IDA4WSCrQ2oQMrWyHC UUGQMtbrBYppCFVTqjvwhN6uYxvTra2OjJ/pLGhPmoqpYb9+UC7OhhsfVh8JAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUB/9rvGxEWPkEYigcE8k//xgJE8EwHwYDVR0j BBgwFoAUu2K6w9z9KobMbST0Vkpz1L3QS8YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRlZDU4MTEtYmU1MC00Y2FhLTlmOTYtNjNkMzcyMDMxMWRlLzEvQkI2MkJBQzNE Q0ZEMkE4NkNDNkQyNEY0NTY0QTczRDRCREQwNEJDNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjYyQkFDM0RDRkQyQTg2Q0M2RDI0RjQ1NjRBNzNENEJERDA0 QkM2LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05 Zjk2LTYzZDM3MjAzMTFkZS8xLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzkzNzYzMzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk BJfAl8AwDQYJKoZIhvcNAQELBQADggEBABeHotS9K8GqxGwsTtRaz1Vw4IZILDGZ /0U2ySK1BfrNb6MrTiIz58GOuyMaYua3qKhN2eV1mFz+SbBAvWOz8QCG0+n6tmDI WNoU+QwNuEItUQUU0hJGfZudYvGI/DxIaAZK+arrYNQaGN5CdjjuhLcFdQNlMDLX N2bnKejKzAYpjKi4GJgFG8qm5uioV2wQPVnDkRcrHGiJtaxlGeS9WL4SpdWXQ5zZ u1aqTmf9I0iB0EC3u9vCyDmoOv1P91kVgr4Rs/g7ddLEs4t4CJD/QLZcF5KX7ePq iieLRhf3GxJcV0y9ym7tpqRTv8gK9kUoPsUbJ/IKKGVBShhkPmPTsMs= -----END CERTIFICATE-----Generated at Wed May 13 14:16:58 2026 by rpki-client