$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323430323a656538303a633a3a2f34382d3438203d3e20313332363437.roa File: 323430323a656538303a633a3a2f34382d3438203d3e20313332363437.roa (raw, json) Hash identifier: 3tV7ePWEh+EaJKm0cDZuNy9PmGNGDZkDyBgahcmdLds= Subject key identifier: 01:20:2C:BC:9E:9A:1F:60:68:29:01:2C:C6:CC:BC:85:EB:C1:6D:1E Certificate issuer: /CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6 Certificate serial: 11227AAD1C0C0D66DA19B13250772D6AD25C70AE Authority key identifier: BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323430323a656538303a633a3a2f34382d3438203d3e20313332363437.roa Signing time: Sun 03 May 2026 02:57:00 +0000 ROA not before: Sun 03 May 2026 02:52:00 +0000 ROA not after: Sun 02 May 2027 02:57:00 +0000 asID: 132647 IP address blocks: 2402:ee80:c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:22:7a:ad:1c:0c:0d:66:da:19:b1:32:50:77:2d:6a:d2:5c:70:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6 Validity Not Before: May 3 02:52:00 2026 GMT Not After : May 2 02:57:00 2027 GMT Subject: CN=01202CBC9E9A1F606829012CC6CCBC85EBC16D1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:68:8e:80:fd:a6:97:ba:6c:59:8c:fc:f1:d2: f4:77:e5:1e:70:52:61:4e:1b:c8:30:28:f2:90:a2: 8b:eb:cf:53:78:63:e3:35:52:4d:fc:00:69:9c:bd: 50:6c:cc:56:c5:9f:33:16:08:ab:85:7c:61:85:0a: 72:3c:b9:36:ab:90:5c:d0:10:c8:83:4f:e6:44:e1: 27:23:e7:fc:84:11:9a:80:58:b1:a3:59:8b:d4:b5: 9f:7b:2d:5c:53:e5:a0:1a:34:3f:dd:78:2f:7c:21: 60:64:b1:97:62:fa:45:5b:39:9a:a9:d1:0f:27:0b: 6a:ef:4f:03:24:fa:e0:73:7b:24:1c:1b:fc:35:c4: bc:9f:96:d4:60:6e:d7:0e:a1:4a:90:8a:98:47:d5: 1a:cd:c3:8e:c4:06:00:0f:12:23:35:48:fb:40:d9: 53:e9:6f:84:1a:3f:50:8c:da:78:c0:9d:fc:d5:54: 9f:4d:91:5a:6d:61:6d:dd:46:fd:f6:11:4c:63:1c: c6:12:0b:9b:6f:5d:78:d1:8e:03:14:92:bf:29:93: b9:59:ed:a6:43:fe:de:93:61:ec:f5:3e:bc:8f:47: 1e:4e:55:d7:00:c5:a0:3b:e0:1e:57:2c:ba:07:da: 0f:af:91:01:68:dc:ed:be:99:36:2d:2c:41:2f:b5: 24:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:20:2C:BC:9E:9A:1F:60:68:29:01:2C:C6:CC:BC:85:EB:C1:6D:1E X509v3 Authority Key Identifier: keyid:BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323430323a656538303a633a3a2f34382d3438203d3e20313332363437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:ee80:c::/48 Signature Algorithm: sha256WithRSAEncryption 2d:56:7d:e8:8c:1e:e4:58:e2:ac:a6:ee:ab:72:98:64:ba:d0: 51:b3:9f:b8:13:ba:22:b1:54:37:54:00:0f:d7:fd:5b:de:ee: 35:dd:7e:4a:76:8c:3a:72:b7:1f:f6:27:2f:1e:19:33:61:16: 40:0c:e8:e8:01:e4:7a:b5:83:a3:87:1e:21:5e:05:4c:01:7d: 53:43:b0:77:27:50:21:79:ea:61:9e:d5:5c:86:f1:26:3b:43: a7:51:48:14:98:a3:b6:bb:5d:c3:00:e8:2a:df:95:1b:e6:08: 17:8c:59:f7:26:0f:56:fe:2c:c2:16:46:be:c0:dd:67:49:02: 9a:c7:f5:a8:33:ca:ed:a2:cd:e8:f2:9f:09:e1:95:43:40:f1: d5:53:a9:45:02:70:5d:37:8b:62:45:d7:7a:d4:37:aa:cd:ae: 02:a8:6c:b6:cc:c5:e4:60:e9:f0:cb:e6:4e:51:23:7f:92:53: ac:ce:d8:4d:6a:f1:74:f3:39:c0:e0:45:4d:0a:e2:81:3b:af: 67:77:b2:aa:1f:82:f5:e5:61:c7:35:f4:e4:a8:e8:97:a9:c3: cd:ea:c6:85:ca:a2:29:df:7c:31:3c:e2:d7:5a:ef:c1:90:44: a3:40:be:96:32:e3:e1:3a:3a:d9:19:7c:af:fc:8e:1d:18:ba: 8d:65:12:02 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUESJ6rRwMDWbaGbEyUHctatJccK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI1NzY4MzVFRDhBNDZFMzBGQjhEREY1NjZBQkM0Nzc2 NTUzN0VCNjAeFw0yNjA1MDMwMjUyMDBaFw0yNzA1MDIwMjU3MDBaMDMxMTAvBgNV BAMTKDAxMjAyQ0JDOUU5QTFGNjA2ODI5MDEyQ0M2Q0NCQzg1RUJDMTZEMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChaI6A/aaXumxZjPzx0vR35R5w UmFOG8gwKPKQoovrz1N4Y+M1Uk38AGmcvVBszFbFnzMWCKuFfGGFCnI8uTarkFzQ EMiDT+ZE4Scj5/yEEZqAWLGjWYvUtZ97LVxT5aAaND/deC98IWBksZdi+kVbOZqp 0Q8nC2rvTwMk+uBzeyQcG/w1xLyfltRgbtcOoUqQiphH1RrNw47EBgAPEiM1SPtA 2VPpb4QaP1CM2njAnfzVVJ9NkVptYW3dRv32EUxjHMYSC5tvXXjRjgMUkr8pk7lZ 7aZD/t6TYez1PryPRx5OVdcAxaA74B5XLLoH2g+vkQFo3O2+mTYtLEEvtSTLAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUASAsvJ6aH2BoKQEsxsy8hevBbR4wHwYDVR0j BBgwFoAUu1doNe2KRuMPuN31ZqvEd2VTfrYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY2MTdkOGMtZDE1NC00NjFlLWJjY2EtYjY2ZDI2N2NmZmM3LzAvQkI1NzY4MzVF RDhBNDZFMzBGQjhEREY1NjZBQkM0Nzc2NTUzN0VCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjU3NjgzNUVEOEE0NkUzMEZCOERERjU2NkFCQzQ3NzY1NTM3 RUI2LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E2NjE3ZDhjLWQxNTQtNDYxZS1i Y2NhLWI2NmQyNjdjZmZjNy8wLzMyMzQzMDMyM2E2NTY1MzgzMDNhNjMzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzIzNjM0Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAu6AAAww DQYJKoZIhvcNAQELBQADggEBAC1WfeiMHuRY4qym7qtymGS60FGzn7gTuiKxVDdU AA/X/Vve7jXdfkp2jDpytx/2Jy8eGTNhFkAM6OgB5Hq1g6OHHiFeBUwBfVNDsHcn UCF56mGe1VyG8SY7Q6dRSBSYo7a7XcMA6CrflRvmCBeMWfcmD1b+LMIWRr7A3WdJ AprH9agzyu2izejynwnhlUNA8dVTqUUCcF03i2JF13rUN6rNrgKobLbMxeRg6fDL 5k5RI3+SU6zO2E1q8XTzOcDgRU0K4oE7r2d3sqofgvXlYcc19OSo6Jepw83qxoXK oinffDE84tda78GQRKNAvpYy4+E6OtkZfK/8jh0Yuo1lEgI= -----END CERTIFICATE-----Generated at Wed May 13 05:54:57 2026 by rpki-client