$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a3a2f33322d3332203d3e20313533303837.roa File: 323430343a393763303a3a2f33322d3332203d3e20313533303837.roa (raw, json) Hash identifier: 7g9pZFhevC0vJex8GHlI9TjNm54eKRFry7baboSmK7s= Subject key identifier: FC:62:F9:BE:B5:A7:98:CD:36:8A:20:43:BF:80:1A:A8:DC:20:99:9F Certificate issuer: /CN=BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6 Certificate serial: 0B9E97599C2933B2FEF88D6A902072E2FA07A51D Authority key identifier: BB:62:BA:C3:DC:FD:2A:86:CC:6D:24:F4:56:4A:73:D4:BD:D0:4B:C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a3a2f33322d3332203d3e20313533303837.roa Signing time: Sun 03 May 2026 02:17:45 +0000 ROA not before: Sun 03 May 2026 02:12:45 +0000 ROA not after: Sun 02 May 2027 02:17:45 +0000 asID: 153087 IP address blocks: 2404:97c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.crl rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:9e:97:59:9c:29:33:b2:fe:f8:8d:6a:90:20:72:e2:fa:07:a5:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6 Validity Not Before: May 3 02:12:45 2026 GMT Not After : May 2 02:17:45 2027 GMT Subject: CN=FC62F9BEB5A798CD368A2043BF801AA8DC20999F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:85:f8:bc:37:6c:ab:1c:d9:fe:38:7f:90:b6: e2:53:cb:94:bc:3b:df:8c:5d:ae:19:a8:36:93:fc: 44:a6:d9:69:a4:63:c7:57:e5:22:83:b9:55:12:88: 94:35:ee:74:6d:a3:cf:c0:69:79:77:f0:0d:64:94: 14:b5:37:7f:0e:37:56:3e:b6:ba:c3:58:43:fe:0e: 11:8a:57:4d:1e:1b:1d:cc:5e:af:97:42:61:20:cc: b9:30:d3:83:84:d4:bd:fc:68:ae:3e:e5:3f:8f:1f: a8:fd:56:2b:c8:0b:72:fb:1a:dc:00:e9:60:aa:38: 1e:5c:c8:7a:50:44:49:3b:f0:c6:05:8e:25:e6:81: f6:0a:56:88:30:46:a3:ae:5d:d7:f8:78:83:30:8e: 4a:61:be:7d:f4:a5:9d:71:24:8c:4d:df:be:8a:a7: 6d:6f:71:27:5c:90:27:f5:23:47:4b:e3:a5:44:c2: 1f:b9:4b:57:fd:b1:01:59:b0:93:0b:5b:09:57:50: c7:4d:7b:e3:cb:35:4e:e2:20:1b:c5:3b:75:3d:e3: 38:ab:d6:05:32:c3:c6:17:52:78:f5:54:e9:f8:51: 1d:4a:52:d8:20:7e:49:26:1d:1d:81:1f:7f:ee:64: d4:17:d6:b1:1e:4b:ab:4f:6b:b0:78:83:97:35:8f: 6f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:62:F9:BE:B5:A7:98:CD:36:8A:20:43:BF:80:1A:A8:DC:20:99:9F X509v3 Authority Key Identifier: keyid:BB:62:BA:C3:DC:FD:2A:86:CC:6D:24:F4:56:4A:73:D4:BD:D0:4B:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a3a2f33322d3332203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0::/32 Signature Algorithm: sha256WithRSAEncryption c7:77:83:1e:b9:29:a4:cd:f8:b8:1d:82:af:da:2a:13:09:a2: e4:fb:5c:4d:52:a9:97:1f:1e:c4:02:6e:6e:29:c4:fa:0d:46: ab:2e:3e:bb:1f:7c:22:48:5e:c6:0f:05:54:11:c5:f2:38:2d: 08:43:fd:53:09:f5:ec:c0:aa:6c:44:8e:8d:8e:9f:4c:53:b4: 93:35:ee:74:85:85:73:80:a8:02:2e:8e:d1:8f:9a:b1:66:1a: 5d:c1:fb:00:11:4c:0c:c3:f4:9d:a6:e1:3b:da:2a:15:98:db: 31:8c:0f:c1:33:0d:e6:3f:c8:64:77:ba:2b:5e:5e:77:fe:eb: 5e:89:58:2f:75:58:f3:22:c0:fc:8a:24:1b:73:ba:ef:c0:06: 4e:98:5a:7f:ab:6f:59:a1:6b:ba:96:78:30:fd:dc:a9:1f:64: 38:95:46:ec:79:b7:16:f6:a5:e6:3c:3b:c4:5f:f1:d0:91:f4: ab:c6:ee:1e:7a:ad:04:28:1a:6a:4b:61:a3:b0:7c:34:22:85: c3:bc:8f:e5:07:2b:1c:6c:0e:4a:15:14:a9:6a:37:82:a3:11: d9:b0:0b:c0:27:09:8a:ee:da:f6:f1:39:ae:6c:37:ea:e2:2f: 41:93:ca:ba:8a:13:42:17:e3:fa:eb:59:a4:79:63:97:55:b1: fc:6d:43:a0 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUC56XWZwpM7L++I1qkCBy4voHpR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2MkJBQzNEQ0ZEMkE4NkNDNkQyNEY0NTY0QTczRDRC REQwNEJDNjAeFw0yNjA1MDMwMjEyNDVaFw0yNzA1MDIwMjE3NDVaMDMxMTAvBgNV BAMTKEZDNjJGOUJFQjVBNzk4Q0QzNjhBMjA0M0JGODAxQUE4REMyMDk5OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGhfi8N2yrHNn+OH+QtuJTy5S8 O9+MXa4ZqDaT/ESm2WmkY8dX5SKDuVUSiJQ17nRto8/AaXl38A1klBS1N38ON1Y+ trrDWEP+DhGKV00eGx3MXq+XQmEgzLkw04OE1L38aK4+5T+PH6j9VivIC3L7GtwA 6WCqOB5cyHpQREk78MYFjiXmgfYKVogwRqOuXdf4eIMwjkphvn30pZ1xJIxN376K p21vcSdckCf1I0dL46VEwh+5S1f9sQFZsJMLWwlXUMdNe+PLNU7iIBvFO3U94zir 1gUyw8YXUnj1VOn4UR1KUtggfkkmHR2BH3/uZNQX1rEeS6tPa7B4g5c1j28jAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQU/GL5vrWnmM02iiBDv4AaqNwgmZ8wHwYDVR0j BBgwFoAUu2K6w9z9KobMbST0Vkpz1L3QS8YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRlZDU4MTEtYmU1MC00Y2FhLTlmOTYtNjNkMzcyMDMxMWRlLzEvQkI2MkJBQzNE Q0ZEMkE4NkNDNkQyNEY0NTY0QTczRDRCREQwNEJDNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjYyQkFDM0RDRkQyQTg2Q0M2RDI0RjQ1NjRBNzNENEJERDA0 QkM2LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05 Zjk2LTYzZDM3MjAzMTFkZS8xLzMyMzQzMDM0M2EzOTM3NjMzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzUzMzMwMzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQEl8AwDQYJKoZI hvcNAQELBQADggEBAMd3gx65KaTN+Lgdgq/aKhMJouT7XE1SqZcfHsQCbm4pxPoN RqsuPrsffCJIXsYPBVQRxfI4LQhD/VMJ9ezAqmxEjo2On0xTtJM17nSFhXOAqAIu jtGPmrFmGl3B+wARTAzD9J2m4TvaKhWY2zGMD8EzDeY/yGR3uiteXnf+616JWC91 WPMiwPyKJBtzuu/ABk6YWn+rb1mha7qWeDD93KkfZDiVRux5txb2peY8O8Rf8dCR 9KvG7h56rQQoGmpLYaOwfDQihcO8j+UHKxxsDkoVFKlqN4KjEdmwC8AnCYru2vbx Oa5sN+riL0GTyrqKE0IX4/rrWaR5Y5dVsfxtQ6A= -----END CERTIFICATE-----Generated at Wed May 13 12:47:07 2026 by rpki-client