$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a613030303a3a2f33362d3336203d3e20313533303837.roa File: 323430343a393763303a613030303a3a2f33362d3336203d3e20313533303837.roa (raw, json) Hash identifier: 4kMSIYrfvXZ+D361OtqkievXqmMkOfuLhORmwINF7Tc= Subject key identifier: 74:31:BD:CF:88:C5:FC:30:7F:C9:75:E1:15:54:29:D9:03:14:C5:87 Certificate issuer: /CN=BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6 Certificate serial: 0835D6DDEBE57B252EB3A4EE3689AF6E49919ED4 Authority key identifier: BB:62:BA:C3:DC:FD:2A:86:CC:6D:24:F4:56:4A:73:D4:BD:D0:4B:C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a613030303a3a2f33362d3336203d3e20313533303837.roa Signing time: Sun 03 May 2026 02:17:47 +0000 ROA not before: Sun 03 May 2026 02:12:47 +0000 ROA not after: Sun 02 May 2027 02:17:47 +0000 asID: 153087 IP address blocks: 2404:97c0:a000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.crl rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:35:d6:dd:eb:e5:7b:25:2e:b3:a4:ee:36:89:af:6e:49:91:9e:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6 Validity Not Before: May 3 02:12:47 2026 GMT Not After : May 2 02:17:47 2027 GMT Subject: CN=7431BDCF88C5FC307FC975E1155429D90314C587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cb:a3:c1:2d:ef:a6:1a:1d:29:99:0e:0f:eb: 5e:03:34:e5:fc:88:ca:f1:ae:03:cd:29:c2:dc:c5: b5:0b:e2:8e:d8:a5:b6:8e:e8:61:c2:47:66:38:7f: c8:ed:e2:c7:a5:ea:6b:85:8b:35:f7:ff:d9:ad:c9: 18:30:f2:fe:53:3e:7b:29:b0:6d:09:4f:11:03:c4: 95:49:22:1d:4e:ad:9f:c8:3f:8b:31:cd:dd:9f:c4: 53:d0:77:c9:07:fb:1b:9d:ee:4e:fc:a3:11:04:fe: bf:f0:d0:cf:10:32:3b:48:21:d4:fa:b1:a1:df:cd: 04:da:9b:c2:2c:b1:b6:78:17:79:39:14:3f:97:87: fc:5c:e5:83:3c:2f:5c:d0:1e:1b:cb:5d:51:4f:dc: e7:5f:38:04:41:41:ae:55:74:35:40:ab:ec:c4:e1: 39:a7:6d:79:02:04:f9:60:62:b6:fa:bd:b1:86:83: 35:16:65:51:b1:f5:ca:4f:2e:84:78:48:83:38:11: 00:6c:f3:2d:13:f5:e7:8a:b6:f5:24:db:b0:3d:b2: fd:c1:ad:3f:b2:5b:7e:e7:4b:06:68:13:c9:ac:67: 59:a7:a3:d4:2c:87:a0:99:23:89:26:d8:26:05:7e: a5:01:47:13:83:72:79:00:98:1a:83:0a:d5:8e:9b: 07:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:31:BD:CF:88:C5:FC:30:7F:C9:75:E1:15:54:29:D9:03:14:C5:87 X509v3 Authority Key Identifier: keyid:BB:62:BA:C3:DC:FD:2A:86:CC:6D:24:F4:56:4A:73:D4:BD:D0:4B:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a613030303a3a2f33362d3336203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:a000::/36 Signature Algorithm: sha256WithRSAEncryption cf:a0:6f:09:d9:bf:d7:bf:61:c8:f5:10:56:94:c2:1a:19:01: 71:7c:9d:ec:77:08:99:7f:38:de:24:d0:f0:e4:1a:8c:dd:65: 0d:cf:c2:b5:fa:c7:d3:64:a9:09:20:59:81:61:63:90:60:dd: 3f:54:9b:4a:75:7d:3e:b9:23:ab:81:81:85:c3:14:52:2c:a3: 46:1e:d2:8f:b4:17:c6:a3:62:36:a9:6e:c7:11:d8:50:4d:75: 88:29:39:dc:65:71:cc:72:9e:f1:45:04:cb:aa:7b:a8:73:48: a3:bc:41:a5:86:ec:eb:4f:b1:3e:ea:4a:61:2c:83:d4:7e:61: 13:d6:20:ce:53:72:08:63:e9:33:15:b2:38:d1:95:70:31:58: 27:cb:c7:66:f5:8f:8d:82:32:df:bf:b3:d2:4b:d0:77:f2:ca: 00:b3:fd:74:7c:e0:35:1a:12:ba:a8:f2:df:e3:be:26:8d:6d: 77:87:bb:4a:4a:62:cc:e8:ec:cc:44:5e:06:25:26:69:3f:15: 5c:b5:fc:bd:ab:6e:11:0e:49:00:f9:a2:bf:d1:85:11:7b:33: 2d:8c:ef:df:c6:b2:e0:4b:52:12:eb:38:64:8b:cf:d4:4e:b3: 09:c6:d9:6e:80:8f:b9:d6:8b:63:81:4d:24:d9:4e:20:2d:7f: 37:5f:c0:76 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUCDXW3evleyUus6TuNomvbkmRntQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2MkJBQzNEQ0ZEMkE4NkNDNkQyNEY0NTY0QTczRDRC REQwNEJDNjAeFw0yNjA1MDMwMjEyNDdaFw0yNzA1MDIwMjE3NDdaMDMxMTAvBgNV BAMTKDc0MzFCRENGODhDNUZDMzA3RkM5NzVFMTE1NTQyOUQ5MDMxNEM1ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6y6PBLe+mGh0pmQ4P614DNOX8 iMrxrgPNKcLcxbUL4o7YpbaO6GHCR2Y4f8jt4sel6muFizX3/9mtyRgw8v5TPnsp sG0JTxEDxJVJIh1OrZ/IP4sxzd2fxFPQd8kH+xud7k78oxEE/r/w0M8QMjtIIdT6 saHfzQTam8IssbZ4F3k5FD+Xh/xc5YM8L1zQHhvLXVFP3OdfOARBQa5VdDVAq+zE 4TmnbXkCBPlgYrb6vbGGgzUWZVGx9cpPLoR4SIM4EQBs8y0T9eeKtvUk27A9sv3B rT+yW37nSwZoE8msZ1mno9Qsh6CZI4km2CYFfqUBRxODcnkAmBqDCtWOmwf1AgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUdDG9z4jF/DB/yXXhFVQp2QMUxYcwHwYDVR0j BBgwFoAUu2K6w9z9KobMbST0Vkpz1L3QS8YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRlZDU4MTEtYmU1MC00Y2FhLTlmOTYtNjNkMzcyMDMxMWRlLzEvQkI2MkJBQzNE Q0ZEMkE4NkNDNkQyNEY0NTY0QTczRDRCREQwNEJDNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjYyQkFDM0RDRkQyQTg2Q0M2RDI0RjQ1NjRBNzNENEJERDA0 QkM2LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05 Zjk2LTYzZDM3MjAzMTFkZS8xLzMyMzQzMDM0M2EzOTM3NjMzMDNhNjEzMDMwMzAz YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BJfAoDANBgkqhkiG9w0BAQsFAAOCAQEAz6BvCdm/179hyPUQVpTCGhkBcXyd7HcI mX843iTQ8OQajN1lDc/CtfrH02SpCSBZgWFjkGDdP1SbSnV9Prkjq4GBhcMUUiyj Rh7Sj7QXxqNiNqluxxHYUE11iCk53GVxzHKe8UUEy6p7qHNIo7xBpYbs60+xPupK YSyD1H5hE9YgzlNyCGPpMxWyONGVcDFYJ8vHZvWPjYIy37+z0kvQd/LKALP9dHzg NRoSuqjy3+O+Jo1td4e7SkpizOjszEReBiUmaT8VXLX8vatuEQ5JAPmiv9GFEXsz LYzv38ay4EtSEus4ZIvP1E6zCcbZboCPudaLY4FNJNlOIC1/N1/Adg== -----END CERTIFICATE-----Generated at Wed May 13 12:46:07 2026 by rpki-client