$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/0/323430373a623963303a3a2f33322d3438203d3e20313432363136.roa File: 323430373a623963303a3a2f33322d3438203d3e20313432363136.roa (raw, json) Hash identifier: L37ORRE8mzcyclEt2VZ4KNKxfnEZTP+JrK70uSUpoIk= Subject key identifier: D1:E2:DC:BB:70:37:F5:F7:F2:49:81:FD:AD:05:16:69:7C:F9:C9:9B Certificate issuer: /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC Certificate serial: 242E2606A1F02F1AE9015F75E31A21580F47D2F2 Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer Subject info access: rsync://rsync.rp.ki/repo/misakaio/0/323430373a623963303a3a2f33322d3438203d3e20313432363136.roa Signing time: Sun 06 Sep 2026 22:47:56 +0000 ROA not before: Sun 06 Sep 2026 22:42:56 +0000 ROA not after: Sun 05 Sep 2027 22:47:56 +0000 asID: 142616 IP address blocks: 2407:b9c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 19:47:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:2e:26:06:a1:f0:2f:1a:e9:01:5f:75:e3:1a:21:58:0f:47:d2:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121C330000, serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC Validity Not Before: Sep 6 22:42:56 2026 GMT Not After : Sep 5 22:47:56 2027 GMT Subject: CN=D1E2DCBB7037F5F7F24981FDAD0516697CF9C99B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:42:e4:b0:d1:97:c5:82:5e:06:a6:e2:19:12: c5:67:d8:79:f3:38:b7:ab:e6:67:c2:04:0e:49:ff: 52:8b:21:fa:e2:f7:40:4d:8a:73:b3:14:f4:d5:16: 29:67:53:07:9a:f9:e2:48:3f:fc:4b:7d:f6:31:4d: b4:f5:57:54:0a:6a:fe:0f:e0:59:5c:80:0d:f2:c7: 3d:54:2d:63:25:aa:79:86:1f:39:49:fd:30:66:31: b2:be:73:c6:f3:fe:df:e3:59:16:b9:4a:68:04:2a: 81:bb:17:9b:b0:a4:ce:68:43:ef:b3:c7:ba:98:b5: c4:06:de:58:93:24:fb:6e:c0:b4:5e:a2:b1:33:16: 77:a9:d4:78:fb:3e:80:99:04:c9:5f:46:ae:bb:fc: 9b:fb:42:68:42:43:78:d5:0c:91:1d:7e:4c:de:ae: f9:42:2b:46:69:5a:df:56:7d:fa:80:96:44:d9:de: e8:c7:c8:03:1c:0b:25:97:f9:54:e6:97:dd:e3:ce: 93:dd:75:3b:fb:73:73:54:29:05:47:95:04:60:13: 97:cc:6b:72:20:7f:ad:9d:69:63:cb:6b:ba:77:39: db:2c:39:d1:10:72:6d:3b:79:ee:d0:90:43:da:e7: 08:57:dd:fb:67:46:b8:56:d9:98:08:cd:18:5d:85: 2b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E2:DC:BB:70:37:F5:F7:F2:49:81:FD:AD:05:16:69:7C:F9:C9:9B X509v3 Authority Key Identifier: keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/323430373a623963303a3a2f33322d3438203d3e20313432363136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:b9c0::/32 Signature Algorithm: sha256WithRSAEncryption 41:53:e4:e5:b7:08:89:45:10:ac:55:3b:98:6d:cd:aa:80:53: 7d:9d:84:a5:4a:e3:e3:23:ff:c0:81:8c:d8:bf:71:55:f3:4d: c1:62:13:42:4c:c6:2f:b8:b3:5c:7c:44:ce:1e:e7:a8:90:bb: 68:17:39:9d:57:05:0b:ab:9d:56:07:88:19:23:1e:88:16:b4: e8:20:a4:61:1e:e8:94:fe:47:5a:96:94:77:ce:ff:d4:a2:b3: 6f:0a:0e:96:cf:94:2d:3b:69:1c:7a:38:6d:30:57:cc:e3:80: 8a:a7:6c:53:b2:87:d9:2e:37:f2:9c:ab:57:91:92:c6:48:6c: 0f:08:4f:3d:96:ea:5d:a3:fe:af:62:1e:32:50:1a:cf:a7:0e: a4:6b:6c:4e:b9:a7:9a:33:f0:e3:ee:2e:d6:1a:32:d9:ec:24: 77:54:57:a8:2e:a9:94:53:9f:4f:d3:e2:e8:d9:77:93:a3:92: de:74:9e:35:49:84:3a:79:07:be:40:30:9c:bb:0d:7a:fa:23: e8:4c:bb:92:cb:05:99:c9:89:2c:e9:46:8e:23:1c:5c:f0:7c: f7:60:4b:cb:fa:5c:6b:aa:6c:11:9b:41:93:72:dd:8e:08:1d: fa:aa:03:85:ac:cc:b5:31:3e:19:ef:a8:92:d4:b8:6f:46:25: 5e:11:7f:42 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgIUJC4mBqHwLxrpAV914xohWA9H0vIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjFDMzMwMDAwMTEwLwYDVQQFEyg5Q0YwNUU3MDI0 RDRBNDg3RTBCNzlFMkY1NzUyNUJGMzQ1REI1M0VDMB4XDTI2MDkwNjIyNDI1NloX DTI3MDkwNTIyNDc1NlowMzExMC8GA1UEAxMoRDFFMkRDQkI3MDM3RjVGN0YyNDk4 MUZEQUQwNTE2Njk3Q0Y5Qzk5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANtC5LDRl8WCXgam4hkSxWfYefM4t6vmZ8IEDkn/Uosh+uL3QE2Kc7MU9NUW KWdTB5r54kg//Et99jFNtPVXVApq/g/gWVyADfLHPVQtYyWqeYYfOUn9MGYxsr5z xvP+3+NZFrlKaAQqgbsXm7CkzmhD77PHupi1xAbeWJMk+27AtF6isTMWd6nUePs+ gJkEyV9Grrv8m/tCaEJDeNUMkR1+TN6u+UIrRmla31Z9+oCWRNne6MfIAxwLJZf5 VOaX3ePOk911O/tzc1QpBUeVBGATl8xrciB/rZ1pY8trunc52yw50RBybTt57tCQ Q9rnCFfd+2dGuFbZmAjNGF2FK0kCAwEAAaOCAe8wggHrMB0GA1UdDgQWBBTR4ty7 cDf19/JJgf2tBRZpfPnJmzAfBgNVHSMEGDAWgBSc8F5wJNSkh+C3ni9XUlvzRdtT 7DAOBgNVHQ8BAf8EBAMCB4AwYQYDVR0fBFowWDBWoFSgUoZQcnN5bmM6Ly9yc3lu Yy5ycC5raS9yZXBvL21pc2FrYWlvLzAvOUNGMDVFNzAyNEQ0QTQ4N0UwQjc5RTJG NTc1MjVCRjM0NURCNTNFQy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAC hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2 MTFFMkJCNDY4RjdDNzJGRDFGRjIvblBCZWNDVFVwSWZndDU0dlYxSmI4MFhiVS13 LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuGXnJzeW5jOi8vcnN5bmMu cnAua2kvcmVwby9taXNha2Fpby8wLzMyMzQzMDM3M2E2MjM5NjMzMDNhM2EyZjMz MzIyZDM0MzgyMDNkM2UyMDMxMzQzMjM2MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQHucAwDQYJ KoZIhvcNAQELBQADggEBAEFT5OW3CIlFEKxVO5htzaqAU32dhKVK4+Mj/8CBjNi/ cVXzTcFiE0JMxi+4s1x8RM4e56iQu2gXOZ1XBQurnVYHiBkjHogWtOggpGEe6JT+ R1qWlHfO/9Sis28KDpbPlC07aRx6OG0wV8zjgIqnbFOyh9kuN/Kcq1eRksZIbA8I Tz2W6l2j/q9iHjJQGs+nDqRrbE65p5oz8OPuLtYaMtnsJHdUV6guqZRTn0/T4ujZ d5Ojkt50njVJhDp5B75AMJy7DXr6I+hMu5LLBZnJiSzpRo4jHFzwfPdgS8v6XGuq bBGbQZNy3Y4IHfqqA4WszLUxPhnvqJLUuG9GJV4Rf0I= -----END CERTIFICATE-----Generated at Thu Sep 10 20:23:40 2026 by rpki-client