$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a633030303a3a2f33362d3336203d3e20313533303837.roa File: 323430343a393763303a633030303a3a2f33362d3336203d3e20313533303837.roa (raw, json) Hash identifier: xSAW0dl9FR+PBDE9FkjYd/HTPHFZDrku8OeFmsZOTOk= Subject key identifier: 5C:BF:29:55:F6:83:D5:6C:D0:60:72:D8:7A:FD:37:78:E0:A0:E8:CA Certificate issuer: /CN=BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6 Certificate serial: 4A41377A604B05B2CE2AE041E3B173CD59D8B9CA Authority key identifier: BB:62:BA:C3:DC:FD:2A:86:CC:6D:24:F4:56:4A:73:D4:BD:D0:4B:C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a633030303a3a2f33362d3336203d3e20313533303837.roa Signing time: Sun 03 May 2026 02:17:56 +0000 ROA not before: Sun 03 May 2026 02:12:56 +0000 ROA not after: Sun 02 May 2027 02:17:56 +0000 asID: 153087 IP address blocks: 2404:97c0:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.crl rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:41:37:7a:60:4b:05:b2:ce:2a:e0:41:e3:b1:73:cd:59:d8:b9:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6 Validity Not Before: May 3 02:12:56 2026 GMT Not After : May 2 02:17:56 2027 GMT Subject: CN=5CBF2955F683D56CD06072D87AFD3778E0A0E8CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:8f:6d:55:c4:3e:70:5c:d9:5c:93:dd:4e:88: 4f:a1:82:20:7f:d6:12:8e:f6:96:4f:ed:8d:35:69: 74:b9:a9:ab:83:d9:37:35:e0:45:7b:4a:9c:0d:bd: 67:42:67:04:2f:d8:12:8e:d4:59:19:dc:de:96:03: e8:45:93:04:59:9d:6a:dc:1f:d5:d8:94:fa:a8:f4: 68:b5:47:42:a8:2a:b4:f5:a9:1f:99:4e:4e:ed:79: ea:ba:3f:a4:22:0e:f9:1f:31:21:b2:83:be:6f:64: e7:18:c2:52:2e:70:b3:df:8c:b0:f8:5d:e4:73:6a: 0e:17:fe:2f:2e:a2:29:3e:d1:f3:ad:c5:fe:c4:3b: f2:b8:7f:09:c2:51:0d:e3:1e:f9:1c:da:a4:59:c7: 74:4b:e0:2c:5b:7a:2a:03:98:a9:46:18:99:b1:9f: 6b:1e:e3:ed:e8:0a:c6:86:76:c2:72:ae:84:38:5f: 4f:8e:4b:02:ab:0d:78:f7:8d:1d:1b:4b:5e:92:da: 35:c4:6f:b0:c4:ad:b1:04:d6:c4:4c:e6:7f:42:b8: e7:64:1c:a2:b6:6f:d7:98:43:b8:b1:c2:cb:58:fd: 47:18:81:34:aa:7d:79:5f:f9:05:82:09:05:3c:5e: 7b:65:20:1f:6a:0c:1a:24:e2:22:25:a4:17:7c:a3: c1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BF:29:55:F6:83:D5:6C:D0:60:72:D8:7A:FD:37:78:E0:A0:E8:CA X509v3 Authority Key Identifier: keyid:BB:62:BA:C3:DC:FD:2A:86:CC:6D:24:F4:56:4A:73:D4:BD:D0:4B:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a633030303a3a2f33362d3336203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:c000::/36 Signature Algorithm: sha256WithRSAEncryption 40:08:4b:48:32:1d:95:43:d8:fc:b4:db:55:f7:ae:05:a0:69: af:e1:d6:a3:41:a8:57:27:d2:71:51:c0:89:2a:4d:29:ce:e9: f8:8d:1a:ad:00:66:da:bc:50:13:84:c6:d7:7c:04:01:a1:82: 7f:5d:3e:2b:6a:dd:11:43:6f:6d:d7:8a:32:bb:b9:42:ad:5b: c6:47:fc:e7:23:4b:60:c7:3d:0d:58:a9:68:0f:ad:9e:15:0a: e5:c6:5c:ed:62:30:45:ee:dd:55:df:87:9c:12:18:47:92:af: 60:06:e4:cb:54:65:ec:d0:d3:2f:5f:79:17:0d:21:d7:d2:04: 6e:41:97:53:17:3e:cc:51:d6:81:30:f7:d7:7d:62:ba:58:43: 7a:7f:3f:61:4c:36:16:1b:4c:e4:20:82:a7:7b:56:59:23:00: 23:f9:44:85:08:55:46:4e:6b:aa:43:c4:59:d5:59:e2:f9:73: ac:64:80:3f:f0:3d:62:ba:be:99:f9:ae:9d:93:10:f2:84:9e: 11:a9:6a:19:c5:4d:14:49:62:ac:7d:74:ba:11:68:05:dc:4d: bd:5d:74:a8:9c:31:b7:11:77:1c:7d:f4:3e:2b:2d:b4:c5:76: e9:53:07:47:b0:d4:fc:97:5b:3a:9d:db:de:45:4c:93:49:af: 5a:bf:2e:31 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUSkE3emBLBbLOKuBB47FzzVnYucowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2MkJBQzNEQ0ZEMkE4NkNDNkQyNEY0NTY0QTczRDRC REQwNEJDNjAeFw0yNjA1MDMwMjEyNTZaFw0yNzA1MDIwMjE3NTZaMDMxMTAvBgNV BAMTKDVDQkYyOTU1RjY4M0Q1NkNEMDYwNzJEODdBRkQzNzc4RTBBMEU4Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqj21VxD5wXNlck91OiE+hgiB/ 1hKO9pZP7Y01aXS5qauD2Tc14EV7SpwNvWdCZwQv2BKO1FkZ3N6WA+hFkwRZnWrc H9XYlPqo9Gi1R0KoKrT1qR+ZTk7teeq6P6QiDvkfMSGyg75vZOcYwlIucLPfjLD4 XeRzag4X/i8uoik+0fOtxf7EO/K4fwnCUQ3jHvkc2qRZx3RL4CxbeioDmKlGGJmx n2se4+3oCsaGdsJyroQ4X0+OSwKrDXj3jR0bS16S2jXEb7DErbEE1sRM5n9CuOdk HKK2b9eYQ7ixwstY/UcYgTSqfXlf+QWCCQU8XntlIB9qDBok4iIlpBd8o8GlAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUXL8pVfaD1WzQYHLYev03eOCg6MowHwYDVR0j BBgwFoAUu2K6w9z9KobMbST0Vkpz1L3QS8YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRlZDU4MTEtYmU1MC00Y2FhLTlmOTYtNjNkMzcyMDMxMWRlLzEvQkI2MkJBQzNE Q0ZEMkE4NkNDNkQyNEY0NTY0QTczRDRCREQwNEJDNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjYyQkFDM0RDRkQyQTg2Q0M2RDI0RjQ1NjRBNzNENEJERDA0 QkM2LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05 Zjk2LTYzZDM3MjAzMTFkZS8xLzMyMzQzMDM0M2EzOTM3NjMzMDNhNjMzMDMwMzAz YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BJfAwDANBgkqhkiG9w0BAQsFAAOCAQEAQAhLSDIdlUPY/LTbVfeuBaBpr+HWo0Go VyfScVHAiSpNKc7p+I0arQBm2rxQE4TG13wEAaGCf10+K2rdEUNvbdeKMru5Qq1b xkf85yNLYMc9DVipaA+tnhUK5cZc7WIwRe7dVd+HnBIYR5KvYAbky1Rl7NDTL195 Fw0h19IEbkGXUxc+zFHWgTD3131iulhDen8/YUw2FhtM5CCCp3tWWSMAI/lEhQhV Rk5rqkPEWdVZ4vlzrGSAP/A9Yrq+mfmunZMQ8oSeEalqGcVNFElirH10uhFoBdxN vV10qJwxtxF3HH30PisttMV26VMHR7DU/JdbOp3b3kVMk0mvWr8uMQ== -----END CERTIFICATE-----Generated at Wed May 13 12:47:03 2026 by rpki-client