$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a393763303a3a2f34382d3438203d3e20313533303837.roa File: 323430343a393763303a393763303a3a2f34382d3438203d3e20313533303837.roa (raw, json) Hash identifier: lHltk0IklzhaGbNSf+3ag2asl70zSGmHg6vSWrmgMVo= Subject key identifier: 96:7F:14:04:A2:9F:98:31:B4:58:C1:CB:C3:B2:DB:4C:06:B2:91:9B Certificate issuer: /CN=BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6 Certificate serial: 3C618EC09ADE97D5DD1401F40C19A6725C4ED030 Authority key identifier: BB:62:BA:C3:DC:FD:2A:86:CC:6D:24:F4:56:4A:73:D4:BD:D0:4B:C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a393763303a3a2f34382d3438203d3e20313533303837.roa Signing time: Sun 03 May 2026 02:17:49 +0000 ROA not before: Sun 03 May 2026 02:12:49 +0000 ROA not after: Sun 02 May 2027 02:17:49 +0000 asID: 153087 IP address blocks: 2404:97c0:97c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.crl rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:61:8e:c0:9a:de:97:d5:dd:14:01:f4:0c:19:a6:72:5c:4e:d0:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6 Validity Not Before: May 3 02:12:49 2026 GMT Not After : May 2 02:17:49 2027 GMT Subject: CN=967F1404A29F9831B458C1CBC3B2DB4C06B2919B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:32:74:35:c8:f4:27:d7:91:b1:dd:fb:3b:f9: b6:2b:a0:f0:e9:61:5d:21:20:52:60:d6:7e:8b:c8: 15:34:14:03:98:dd:ef:64:e4:54:79:8f:61:29:56: b1:c8:79:35:48:cb:bd:1e:ac:b8:45:04:d6:76:8c: 9d:8f:26:7d:f5:ad:b6:06:61:1e:9a:b4:13:b0:2e: c6:88:2f:84:9a:69:60:bb:51:c3:c4:63:44:29:55: d9:1e:fe:3d:b8:0d:0c:05:7b:14:2e:93:10:38:09: e8:55:a0:9e:69:6c:34:ab:95:d5:b0:99:00:11:90: 2f:cb:e6:45:90:d8:9e:62:fd:dc:7d:f0:c3:a0:4d: 65:3f:49:27:03:0d:69:e5:cc:bb:78:f2:71:c9:72: b3:05:c1:5c:62:53:9d:bd:e9:87:5b:05:1d:bc:67: b3:22:26:e1:4e:63:b9:b7:a0:86:f1:db:52:a0:a5: f7:7d:34:47:70:e9:06:e4:1e:5f:1d:dc:ea:c6:35: 02:0f:5f:39:90:1d:59:d4:46:de:56:3f:e7:1c:c8: 58:75:cb:57:e6:15:7f:91:ee:69:07:85:20:35:42: fd:70:dc:a0:41:71:87:63:d0:50:bc:18:ee:e8:34: e5:ff:0b:11:83:b1:3c:3c:fe:8f:7f:89:a2:1d:d9: 1e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:7F:14:04:A2:9F:98:31:B4:58:C1:CB:C3:B2:DB:4C:06:B2:91:9B X509v3 Authority Key Identifier: keyid:BB:62:BA:C3:DC:FD:2A:86:CC:6D:24:F4:56:4A:73:D4:BD:D0:4B:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a393763303a3a2f34382d3438203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:97c0::/48 Signature Algorithm: sha256WithRSAEncryption 23:64:2b:8e:24:e8:c9:87:e8:f8:c8:47:86:b2:7a:8a:e4:53: b7:1a:23:08:a8:30:87:77:1d:f8:59:0d:74:7a:7a:b7:b4:5b: f4:81:1d:f8:97:1a:9b:11:c7:8d:53:28:91:ce:c6:f8:94:46: dd:b2:2f:04:c5:52:31:eb:01:72:5f:45:3e:9d:a1:75:ce:b9: 45:f8:3e:8b:d2:1a:a3:aa:db:0f:bd:37:77:21:0d:77:b0:84: fc:b8:50:3c:96:31:0a:f8:95:07:87:dc:41:6b:31:7e:4b:11: bf:be:54:e0:ef:1b:81:66:8e:32:94:28:4e:f4:4f:30:77:3c: 5e:73:91:1e:af:3c:19:e5:ac:fc:b5:a5:4b:2c:c1:71:8c:80: 57:40:95:4c:57:a9:e8:28:83:f2:c1:0e:eb:ec:f2:36:92:96: f4:bc:33:38:16:3c:7e:20:2d:21:6c:ee:6a:6a:9d:93:fe:d6: 36:42:20:ca:99:a4:0e:c4:d4:0b:a7:b6:c4:3c:32:94:ff:c1: 0a:fc:b5:fd:2c:d9:24:a0:b5:b4:ed:02:d6:de:e1:36:45:cf: 54:da:2d:d9:03:3f:65:13:cc:43:c9:2e:a5:9a:a9:25:85:e1: 3c:21:00:18:b5:89:e0:49:5a:86:6f:bd:c4:18:77:e8:0b:60: f2:84:f5:b2 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUPGGOwJrel9XdFAH0DBmmclxO0DAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2MkJBQzNEQ0ZEMkE4NkNDNkQyNEY0NTY0QTczRDRC REQwNEJDNjAeFw0yNjA1MDMwMjEyNDlaFw0yNzA1MDIwMjE3NDlaMDMxMTAvBgNV BAMTKDk2N0YxNDA0QTI5Rjk4MzFCNDU4QzFDQkMzQjJEQjRDMDZCMjkxOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiMnQ1yPQn15Gx3fs7+bYroPDp YV0hIFJg1n6LyBU0FAOY3e9k5FR5j2EpVrHIeTVIy70erLhFBNZ2jJ2PJn31rbYG YR6atBOwLsaIL4SaaWC7UcPEY0QpVdke/j24DQwFexQukxA4CehVoJ5pbDSrldWw mQARkC/L5kWQ2J5i/dx98MOgTWU/SScDDWnlzLt48nHJcrMFwVxiU5296YdbBR28 Z7MiJuFOY7m3oIbx21Kgpfd9NEdw6QbkHl8d3OrGNQIPXzmQHVnURt5WP+ccyFh1 y1fmFX+R7mkHhSA1Qv1w3KBBcYdj0FC8GO7oNOX/CxGDsTw8/o9/iaId2R7NAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUln8UBKKfmDG0WMHLw7LbTAaykZswHwYDVR0j BBgwFoAUu2K6w9z9KobMbST0Vkpz1L3QS8YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRlZDU4MTEtYmU1MC00Y2FhLTlmOTYtNjNkMzcyMDMxMWRlLzEvQkI2MkJBQzNE Q0ZEMkE4NkNDNkQyNEY0NTY0QTczRDRCREQwNEJDNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjYyQkFDM0RDRkQyQTg2Q0M2RDI0RjQ1NjRBNzNENEJERDA0 QkM2LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05 Zjk2LTYzZDM3MjAzMTFkZS8xLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzkzNzYzMzAz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BJfAl8AwDQYJKoZIhvcNAQELBQADggEBACNkK44k6MmH6PjIR4ayeorkU7caIwio MId3HfhZDXR6ere0W/SBHfiXGpsRx41TKJHOxviURt2yLwTFUjHrAXJfRT6doXXO uUX4PovSGqOq2w+9N3chDXewhPy4UDyWMQr4lQeH3EFrMX5LEb++VODvG4FmjjKU KE70TzB3PF5zkR6vPBnlrPy1pUsswXGMgFdAlUxXqegog/LBDuvs8jaSlvS8MzgW PH4gLSFs7mpqnZP+1jZCIMqZpA7E1AuntsQ8MpT/wQr8tf0s2SSgtbTtAtbe4TZF z1TaLdkDP2UTzEPJLqWaqSWF4TwhABi1ieBJWoZvvcQYd+gLYPKE9bI= -----END CERTIFICATE-----Generated at Wed May 13 14:25:20 2026 by rpki-client