$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/323430303a396338303a3a2f34382d3438203d3e203538333936.roa File: 323430303a396338303a3a2f34382d3438203d3e203538333936.roa (raw, json) Hash identifier: bZNkhO5s5ouIXjJKaQv8PKfJDr/H/AM1kyrDd0wlyM8= Subject key identifier: EB:89:FC:A6:91:1C:B8:42:C0:8E:C8:CE:85:55:C0:F5:E2:F1:62:5F Certificate issuer: /CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32 Certificate serial: 73A11DD24D3627AC425974FC5531B3865E635838 Authority key identifier: B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/323430303a396338303a3a2f34382d3438203d3e203538333936.roa Signing time: Sun 03 May 2026 03:02:37 +0000 ROA not before: Sun 03 May 2026 02:57:37 +0000 ROA not after: Sun 02 May 2027 03:02:37 +0000 asID: 58396 IP address blocks: 2400:9c80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:a1:1d:d2:4d:36:27:ac:42:59:74:fc:55:31:b3:86:5e:63:58:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32 Validity Not Before: May 3 02:57:37 2026 GMT Not After : May 2 03:02:37 2027 GMT Subject: CN=EB89FCA6911CB842C08EC8CE8555C0F5E2F1625F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f7:cd:a3:55:9a:76:a5:e4:24:82:19:16:33: ba:10:48:9c:51:31:4f:cf:9a:0e:ca:76:8f:fe:67: c5:d8:33:fe:49:61:4f:86:0c:e8:6a:aa:63:1e:86: 6e:bb:52:d7:b1:12:6f:15:98:4e:77:d2:b8:13:d8: 8b:df:58:f8:7a:e4:2a:5a:cb:3f:5a:08:2c:c6:74: d9:f8:cd:b4:a2:9d:0b:0d:c1:63:7e:21:d6:ac:33: b1:0d:30:f9:70:9d:6e:f2:96:75:e5:29:37:34:2e: 47:d8:30:13:a9:9d:33:76:43:60:4c:8a:77:c4:1e: 0b:3a:90:f0:4f:b6:e5:dc:e5:3f:41:34:0f:49:f7: 77:c0:ba:f0:84:69:98:64:eb:54:ab:44:0c:27:aa: f1:fd:06:58:e1:27:51:9a:63:3f:34:8b:12:63:d5: d3:18:0b:36:1f:0b:eb:df:68:47:5d:44:c4:36:01: 48:a4:0a:1e:bb:95:72:ca:b4:2e:d1:3b:0c:95:4c: 6d:89:05:e7:9e:0d:3b:e9:62:9f:f1:db:a3:d5:52: 30:92:ad:18:c9:3f:38:0b:6a:26:30:f5:75:bd:3b: db:86:d5:39:56:bc:3a:5f:bb:9a:53:4c:dc:39:62: 57:30:c2:58:7b:8f:ed:05:e4:8a:dd:ab:f9:76:7d: e9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:89:FC:A6:91:1C:B8:42:C0:8E:C8:CE:85:55:C0:F5:E2:F1:62:5F X509v3 Authority Key Identifier: keyid:B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/323430303a396338303a3a2f34382d3438203d3e203538333936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:9c80::/48 Signature Algorithm: sha256WithRSAEncryption 43:c0:87:59:2c:e3:d5:cb:a7:00:10:5b:b3:56:26:9a:85:c5: c5:62:c9:c1:5c:12:bc:53:1a:96:77:7d:bd:bf:19:d7:de:23: 02:af:e7:80:3e:0a:14:c5:4d:8f:59:a9:e7:38:45:67:b1:4e: 89:47:5b:0f:a1:f4:33:30:15:4c:64:6b:99:86:9c:b5:e9:97: 8c:e2:11:1e:ab:06:0a:9a:4e:17:73:d3:c1:bb:4a:be:1d:88: fe:92:15:73:43:e5:90:09:78:09:56:c1:cb:23:7e:fa:37:f3: 6f:b9:41:40:11:22:a3:86:3a:8f:a9:9c:01:95:98:55:7c:5a: 32:d7:53:a9:19:51:e3:8a:d9:45:05:e5:a5:ad:b2:ab:82:41: 0b:9e:85:ec:ce:69:55:18:05:21:4b:b4:2d:9a:a7:be:78:14: 91:e6:7f:bf:db:26:94:fb:fd:af:b8:a3:ff:87:3e:d1:3a:62: 8e:ef:bd:83:4c:f3:7b:c5:18:c4:c3:68:00:bc:cc:82:32:18: 75:ce:c9:e2:23:58:e2:eb:53:87:1a:70:61:d2:20:7d:7a:e3: 33:3f:9f:dd:bc:91:8d:5f:54:a9:dd:55:8f:c7:d7:ab:1f:4b: f0:7c:8c:07:ac:69:94:ba:69:1b:d7:94:16:ee:7c:62:1c:96: 6b:4d:d5:d0 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUc6Ed0k02J6xCWXT8VTGzhl5jWDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg3QUM1QzEwNEQ1MUExNkQxRkVENkFBQkE0MEQ1RjMz NkM3NkUzMjAeFw0yNjA1MDMwMjU3MzdaFw0yNzA1MDIwMzAyMzdaMDMxMTAvBgNV BAMTKEVCODlGQ0E2OTExQ0I4NDJDMDhFQzhDRTg1NTVDMEY1RTJGMTYyNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6982jVZp2peQkghkWM7oQSJxR MU/Pmg7Kdo/+Z8XYM/5JYU+GDOhqqmMehm67UtexEm8VmE530rgT2IvfWPh65Cpa yz9aCCzGdNn4zbSinQsNwWN+IdasM7ENMPlwnW7ylnXlKTc0LkfYMBOpnTN2Q2BM infEHgs6kPBPtuXc5T9BNA9J93fAuvCEaZhk61SrRAwnqvH9BljhJ1GaYz80ixJj 1dMYCzYfC+vfaEddRMQ2AUikCh67lXLKtC7ROwyVTG2JBeeeDTvpYp/x26PVUjCS rRjJPzgLaiYw9XW9O9uG1TlWvDpfu5pTTNw5Ylcwwlh7j+0F5Irdq/l2felJAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQU64n8ppEcuELAjsjOhVXA9eLxYl8wHwYDVR0j BBgwFoAUuHrFwQTVGhbR/taqukDV8zbHbjIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQ1YzQ3MTUtMjgyZS00NTdmLWI4OWUtMDQxYmY5MTEwYWY4LzAvQjg3QUM1QzEw NEQ1MUExNkQxRkVENkFBQkE0MEQ1RjMzNkM3NkUzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODdBQzVDMTA0RDUxQTE2RDFGRUQ2QUFCQTQwRDVGMzM2Qzc2 RTMyLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2JkNWM0NzE1LTI4MmUtNDU3Zi1i ODllLTA0MWJmOTExMGFmOC8wLzMyMzQzMDMwM2EzOTYzMzgzMDNhM2EyZjM0Mzgy ZDM0MzgyMDNkM2UyMDM1MzgzMzM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAJyAAAAwDQYJKoZI hvcNAQELBQADggEBAEPAh1ks49XLpwAQW7NWJpqFxcViycFcErxTGpZ3fb2/Gdfe IwKv54A+ChTFTY9Zqec4RWexTolHWw+h9DMwFUxka5mGnLXpl4ziER6rBgqaThdz 08G7Sr4diP6SFXND5ZAJeAlWwcsjfvo382+5QUARIqOGOo+pnAGVmFV8WjLXU6kZ UeOK2UUF5aWtsquCQQuehezOaVUYBSFLtC2ap754FJHmf7/bJpT7/a+4o/+HPtE6 Yo7vvYNM83vFGMTDaAC8zIIyGHXOyeIjWOLrU4cacGHSIH164zM/n928kY1fVKnd VY/H16sfS/B8jAesaZS6aRvXlBbufGIclmtN1dA= -----END CERTIFICATE-----Generated at Wed May 13 11:56:31 2026 by rpki-client