$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a653030303a3a2f33362d3336203d3e20313533303837.roa File: 323430343a393763303a653030303a3a2f33362d3336203d3e20313533303837.roa (raw, json) Hash identifier: TiLVfKLlOo1Rnu2hsDvAr4lXFjpBFots9w0X5QPPLhQ= Subject key identifier: 64:81:EC:CB:C6:06:93:F6:43:A9:98:8B:E2:4F:6D:1B:0D:40:54:41 Certificate issuer: /CN=BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6 Certificate serial: 40750E01FD6FB8A7B54166DEB58C298DEEF77023 Authority key identifier: BB:62:BA:C3:DC:FD:2A:86:CC:6D:24:F4:56:4A:73:D4:BD:D0:4B:C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a653030303a3a2f33362d3336203d3e20313533303837.roa Signing time: Sun 03 May 2026 02:17:53 +0000 ROA not before: Sun 03 May 2026 02:12:53 +0000 ROA not after: Sun 02 May 2027 02:17:53 +0000 asID: 153087 IP address blocks: 2404:97c0:e000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.crl rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:75:0e:01:fd:6f:b8:a7:b5:41:66:de:b5:8c:29:8d:ee:f7:70:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6 Validity Not Before: May 3 02:12:53 2026 GMT Not After : May 2 02:17:53 2027 GMT Subject: CN=6481ECCBC60693F643A9988BE24F6D1B0D405441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5c:5a:83:9e:45:6b:85:77:a8:5d:80:66:5d: a5:00:c3:14:cb:53:e0:9f:34:04:2b:a5:cb:a5:fa: 39:a3:17:1d:cc:89:af:b7:c6:00:a0:7d:80:cf:74: 1e:65:fa:bf:db:d2:c3:51:46:50:b1:ed:d9:f8:b1: 06:07:4a:b3:17:04:71:42:08:8e:5e:6c:1f:c2:b9: 01:00:9c:32:2c:1c:e4:f3:4b:1e:18:78:1f:88:1b: 55:f9:5c:80:ba:63:7d:c1:5a:3f:52:20:16:09:23: cc:76:37:d7:44:84:97:7c:46:ee:9a:dd:ee:04:c1: 95:ab:a4:d7:11:b6:df:49:2d:c8:4d:41:93:c8:24: 1c:18:3a:a7:95:1f:75:6a:ec:5d:29:f7:93:cd:88: b4:aa:38:7c:14:8a:9a:52:d8:3c:e1:fb:1d:a8:30: 7f:02:f8:b2:91:20:4b:38:e9:e5:b7:cb:70:c2:51: 2d:88:47:35:e6:d6:7d:da:ce:64:7c:28:13:5d:f9: 2c:f9:30:dd:23:f0:c1:f1:c6:95:2e:08:4e:8a:47: 4f:39:1a:56:e8:7d:00:64:f2:89:d7:a3:04:c8:43: 45:98:92:a9:ba:bd:b7:f7:69:00:cf:ca:f8:61:00: 3b:d7:c7:6e:3f:c0:b7:17:e8:68:f5:49:27:53:40: 9c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:81:EC:CB:C6:06:93:F6:43:A9:98:8B:E2:4F:6D:1B:0D:40:54:41 X509v3 Authority Key Identifier: keyid:BB:62:BA:C3:DC:FD:2A:86:CC:6D:24:F4:56:4A:73:D4:BD:D0:4B:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB62BAC3DCFD2A86CC6D24F4564A73D4BDD04BC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a653030303a3a2f33362d3336203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:e000::/36 Signature Algorithm: sha256WithRSAEncryption 14:3a:7c:9f:0d:6b:6f:cf:b8:c3:71:d3:13:ba:0b:bb:a9:b1: 89:97:a2:1a:b9:6f:d4:cc:c8:3e:8c:d4:8d:77:19:a6:56:73: 4e:b9:9e:c3:f1:76:11:0e:96:0c:bf:c5:77:fb:39:92:2d:e2: af:2f:83:ea:ad:8a:31:47:62:c6:5d:d1:60:c3:af:b5:89:ec: a9:06:ba:59:92:4e:4d:9f:15:cc:b1:64:39:ce:e4:ac:f2:05: d8:14:c3:81:93:55:3b:0c:2f:c0:45:0d:43:cc:fb:5e:ff:80: bb:90:22:fa:b6:65:29:d7:0c:23:cd:f2:03:c4:37:67:84:60: 85:0e:ce:44:91:27:d4:16:5f:d5:7b:a4:b8:b5:cb:2f:f3:00: 90:ee:a5:87:9f:5e:a9:7f:fa:53:64:31:33:ce:4f:31:2d:19: e3:8e:5f:70:36:40:42:09:2c:5a:69:d2:d3:f4:f6:c0:df:56: bd:55:b8:d3:16:21:55:ef:8a:af:88:6f:97:35:67:bf:be:21: 77:b5:df:db:2e:de:66:33:ba:68:3f:ab:4b:35:ad:ec:44:69: 7c:ce:09:0a:60:f4:7d:1f:a8:89:2d:9a:a9:a2:9a:14:fc:f2: dc:65:34:f2:54:2a:32:fd:c1:42:e0:9f:6d:84:99:79:11:2c: 41:90:ca:aa -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUQHUOAf1vuKe1QWbetYwpje73cCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2MkJBQzNEQ0ZEMkE4NkNDNkQyNEY0NTY0QTczRDRC REQwNEJDNjAeFw0yNjA1MDMwMjEyNTNaFw0yNzA1MDIwMjE3NTNaMDMxMTAvBgNV BAMTKDY0ODFFQ0NCQzYwNjkzRjY0M0E5OTg4QkUyNEY2RDFCMEQ0MDU0NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8XFqDnkVrhXeoXYBmXaUAwxTL U+CfNAQrpcul+jmjFx3Mia+3xgCgfYDPdB5l+r/b0sNRRlCx7dn4sQYHSrMXBHFC CI5ebB/CuQEAnDIsHOTzSx4YeB+IG1X5XIC6Y33BWj9SIBYJI8x2N9dEhJd8Ru6a 3e4EwZWrpNcRtt9JLchNQZPIJBwYOqeVH3Vq7F0p95PNiLSqOHwUippS2Dzh+x2o MH8C+LKRIEs46eW3y3DCUS2IRzXm1n3azmR8KBNd+Sz5MN0j8MHxxpUuCE6KR085 GlbofQBk8onXowTIQ0WYkqm6vbf3aQDPyvhhADvXx24/wLcX6Gj1SSdTQJwVAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUZIHsy8YGk/ZDqZiL4k9tGw1AVEEwHwYDVR0j BBgwFoAUu2K6w9z9KobMbST0Vkpz1L3QS8YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRlZDU4MTEtYmU1MC00Y2FhLTlmOTYtNjNkMzcyMDMxMWRlLzEvQkI2MkJBQzNE Q0ZEMkE4NkNDNkQyNEY0NTY0QTczRDRCREQwNEJDNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjYyQkFDM0RDRkQyQTg2Q0M2RDI0RjQ1NjRBNzNENEJERDA0 QkM2LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05 Zjk2LTYzZDM3MjAzMTFkZS8xLzMyMzQzMDM0M2EzOTM3NjMzMDNhNjUzMDMwMzAz YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BJfA4DANBgkqhkiG9w0BAQsFAAOCAQEAFDp8nw1rb8+4w3HTE7oLu6mxiZeiGrlv 1MzIPozUjXcZplZzTrmew/F2EQ6WDL/Fd/s5ki3iry+D6q2KMUdixl3RYMOvtYns qQa6WZJOTZ8VzLFkOc7krPIF2BTDgZNVOwwvwEUNQ8z7Xv+Au5Ai+rZlKdcMI83y A8Q3Z4RghQ7ORJEn1BZf1XukuLXLL/MAkO6lh59eqX/6U2QxM85PMS0Z445fcDZA QgksWmnS0/T2wN9WvVW40xYhVe+Kr4hvlzVnv74hd7Xf2y7eZjO6aD+rSzWt7ERp fM4JCmD0fR+oiS2aqaKaFPzy3GU08lQqMv3BQuCfbYSZeREsQZDKqg== -----END CERTIFICATE-----Generated at Wed May 13 14:13:59 2026 by rpki-client